5 ms·

And with a little bit more force they beat the password out of me anyway regardless which system I use...

anigbrowl 5y ago
If you are so easily swayed, you would probably not be in an adversarial situation with a government anyway. But this article is about a system for giving up passwords under duress without necessarily compromising all your security, such that your antagonist has no way of knowing or showing that there's another password concealing more important information.
- ikiris 5y ago
  https://xkcd.com/538/ https://xkcd.com/538/
- bigiain 5y ago
  Pretty sure Guantanamo Bay and “enhances interrogation” has shown us that after your antagonist has used the $5 wrench to beat a working password out of you, they then keep on beating you every day for another few weeks just in case there’s more you should have told them. If “those guys” are your adversary, you were fucked before you started.
- lxgr 5y ago
  > If you are so easily swayed, you would probably not be in an adversarial situation with a government anyway. Complying in the face of threats of physical violence is equivalent to "being easily swayed"? You seem to have a pretty specific threat/defense model that you didn't clarify. I wouldn't generalize from that to "biometrics are bad for all users in all situations".
  - anigbrowl 5y ago
    People who realistically anticipate opponents (the state, kidnappers) using force to get at information on a personally targeted basis are likely willing to deal with a degree of real pressure, as shown by the long-term intransigence of many political prisoners through history. What I'm saying is that if such threats are unacceptable to a person, chances are they are not going to involve themselves in the sort of activities that require keeping secrets in the first place, or are sufficiently disciplined to have weak device security because they don't write anything down.

If you are so easily swayed, you would probably not be in an adversarial situation with a government anyway. But this article is about a system for giving up passwords under duress without necessarily compromising all your security, such that your antagonist has no way of knowing or showing that there's another password concealing more important information.

ikiris 5y ago
https://xkcd.com/538/ https://xkcd.com/538/
bigiain 5y ago
Pretty sure Guantanamo Bay and “enhances interrogation” has shown us that after your antagonist has used the $5 wrench to beat a working password out of you, they then keep on beating you every day for another few weeks just in case there’s more you should have told them. If “those guys” are your adversary, you were fucked before you started.
lxgr 5y ago
> If you are so easily swayed, you would probably not be in an adversarial situation with a government anyway. Complying in the face of threats of physical violence is equivalent to "being easily swayed"? You seem to have a pretty specific threat/defense model that you didn't clarify. I wouldn't generalize from that to "biometrics are bad for all users in all situations".
- anigbrowl 5y ago
  People who realistically anticipate opponents (the state, kidnappers) using force to get at information on a personally targeted basis are likely willing to deal with a degree of real pressure, as shown by the long-term intransigence of many political prisoners through history. What I'm saying is that if such threats are unacceptable to a person, chances are they are not going to involve themselves in the sort of activities that require keeping secrets in the first place, or are sufficiently disciplined to have weak device security because they don't write anything down.