3 ms·

LastPass seems to have a decent system (thankfully I haven't needed to test it yet): 1) I set an "emergency heir" contact 2) They can request access at any ti

LastPass seems to have a decent system (thankfully I haven't needed to test it yet): 1) I set an "emergency heir" contact 2) They can request access at any time 3) I'm sent an email notifying me of the request 4) If I don't deny the request in X amount of time (custom, I think), they are granted complete access to my account Granted there's a potential for abuse; but that's somewhat mitigated by only allowing 1-2 people to make the request and if someone already has access to my email they can cause all sorts of other trouble without having me declared digitally dead. It shouldn't be hard for Facebook to implement something similar.

jacquesm 8y ago
That's exploitable. Hack the heirs email, wait until you are on a holiday, hit them with a request for access. You won't respond in time because you're climbing Mount Everest or diving in the Marianas Trench (the heir might really be a heir in either of those scenarios) and then access will be granted.
- scrooched_moose 8y ago
  All systems are exploitable given enough time and effort. At that point they may as well just"hack" the actual account owners email. In cases like that you'd set set the time window to be longer than you expect to be off the grid. Granted it is a slightly larger attack surface but it relies on 1) knowing the heir (wife, parent, child, friend) 2) gaining access to their email 3) Relying on the original owner having an inadequate time window 4) the owner going somewhere they are completely cut off from the world. It could happen, but that's a vanishingly small opportunity.
- wepple 8y ago
  You’re going up Everest? Cool, change X to 40 days.
- xirdstl 8y ago
  No, you'd have to hack the heir's LastPass account. Also, as others have mentioned (including the parent), the length of time is customizable as well.
- Verdex_3 8y ago
  Or you could just skip the middle man and hack the target's last pass account. Anything can be exploited if the criteria for exploiting it is somehow breaking into an arbitrarily secured network/facility.
- AdamJacobMuller 8y ago
  I have mine set to 30 days (maximum). Honestly, If I'm in a situation where I'm without internet for 30 days its involuntary and I'm fine with releasing access.

jacquesm 8y ago

That's exploitable. Hack the heirs email, wait until you are on a holiday, hit them with a request for access. You won't respond in time because you're climbing Mount Everest or diving in the Marianas Trench (the heir might really be a heir in either of those scenarios) and then access will be granted.

scrooched_moose 8y ago
All systems are exploitable given enough time and effort. At that point they may as well just"hack" the actual account owners email. In cases like that you'd set set the time window to be longer than you expect to be off the grid. Granted it is a slightly larger attack surface but it relies on 1) knowing the heir (wife, parent, child, friend) 2) gaining access to their email 3) Relying on the original owner having an inadequate time window 4) the owner going somewhere they are completely cut off from the world. It could happen, but that's a vanishingly small opportunity.
wepple 8y ago
You’re going up Everest? Cool, change X to 40 days.
xirdstl 8y ago
No, you'd have to hack the heir's LastPass account. Also, as others have mentioned (including the parent), the length of time is customizable as well.
Verdex_3 8y ago
Or you could just skip the middle man and hack the target's last pass account. Anything can be exploited if the criteria for exploiting it is somehow breaking into an arbitrarily secured network/facility.
AdamJacobMuller 8y ago
I have mine set to 30 days (maximum). Honestly, If I'm in a situation where I'm without internet for 30 days its involuntary and I'm fine with releasing access.