4 ms·

If you are wondering what this is about and figure it out from the website, they basically want to sell you a dead man's switch as an app. It would be clearer

If you are wondering what this is about and figure it out from the website, they basically want to sell you a dead man's switch as an app. It would be clearer if they'd replace confidential information with the word kompromat.

rmoon 5y ago
Sorry you take that impression at first view, although I do understand it living in the world we live. This is not a dead man, I am really alive -ironic just in case :P, it is only me behind this idea, not they. If you want to know anything about how data flows, have a look, please, if you did not https://www.zoldyapp.com/legal-info#privacy https://www.zoldyapp.com/legal-info#privacy. This is how it is, none in the middle, you and the machine.
- InGoodFaith 5y ago
  > This is not a dead man, I am really alive Hi there! Just a friendly note since it appears that there might be a slight misunderstanding (perhaps ESL?) The "deadman's switch" [1] is not in reference to you (the creator) being a literal dead person, but rather to the definition of your service being built to operate in the event something (like being kidnapped/killed/incapacitated) happens to the user. Hope that helps clear up the confusion. 1: https://en.wikipedia.org/wiki/Dead_man%27s_switch https://en.wikipedia.org/wiki/Dead_man%27s_switch
  - rmoon 5y ago
    Hey there :), I tried to joke about it and I did it really badly, sorry, thats why I said I am really alive, trying to say that there is no switch for me, not yet. Thank you!
bierjunge 5y ago
Yeah, a dead man switch which you can't control if your battery dies or you have no reception. It's way too unreliable for serious use.
- rmoon 5y ago
  If your battery dies or you have no reception there wont be any app working for you, at least not internet based, if this happens and you have activated the Notifications Service in your Zoldy you wont be able of replying back to those Notifications and with 3 consecutive times Zoldy will run your settings sending emails, the same if you uninstall the app with this activated. Sorry you have this perception.
  - bierjunge 5y ago
    I'm not saying the app is useless, I'm only saying that it's not as easy as the website states. I personally wouldn't use a mobile app for that, because it's too risky in my opinion. Let's say we have a scenario where someone has confident information incriminating one of my theoretical adversaries and configured Zoldy with the data. What if I hire a thug to steal and destroy the phone? Will the owner be able to stop the messages which he does not want to be sent? Can the app be restored to a functional state on a different device? If yes, then a malicious third party would be able to get access to the Google/Apple account and restore it gaining control of the sensitive information. The website states, the data is stored in Firebase. But how does the app access it? Is there a gateway server you control? If yes, I wouldn't even bother with the previous scenarios, but attack that server and get ALL the data. Not only from one target, but from all, which would be pretty much a disaster (for you, the app and all the customers).
    - vorpalhex 5y ago
      Yeah, a smartphone based deadman is not great for the reasons listed. Ideally you would have key escrow running in a few places ala Shamir and then already have the data widely distributed (bittorrent, ipfs) but encrypted. You can still handle check-in via device but you need a 2nd factor of something only you know, with false values that will trigger a dispersal.
      - rmoon 5y ago
        I guess we are all rightly used to seeing the dangers first, there is no deadman, there is one very important reason for me that made me see how difficult it is for some people to defend themselves when all you have is information.

rmoon 5y ago

Sorry you take that impression at first view, although I do understand it living in the world we live. This is not a dead man, I am really alive -ironic just in case :P, it is only me behind this idea, not they. If you want to know anything about how data flows, have a look, please, if you did not https://www.zoldyapp.com/legal-info#privacy https://www.zoldyapp.com/legal-info#privacy. This is how it is, none in the middle, you and the machine.

InGoodFaith 5y ago
> This is not a dead man, I am really alive Hi there! Just a friendly note since it appears that there might be a slight misunderstanding (perhaps ESL?) The "deadman's switch" [1] is not in reference to you (the creator) being a literal dead person, but rather to the definition of your service being built to operate in the event something (like being kidnapped/killed/incapacitated) happens to the user. Hope that helps clear up the confusion. 1: https://en.wikipedia.org/wiki/Dead_man%27s_switch https://en.wikipedia.org/wiki/Dead_man%27s_switch
- rmoon 5y ago
  Hey there :), I tried to joke about it and I did it really badly, sorry, thats why I said I am really alive, trying to say that there is no switch for me, not yet. Thank you!

bierjunge 5y ago

Yeah, a dead man switch which you can't control if your battery dies or you have no reception. It's way too unreliable for serious use.

rmoon 5y ago
If your battery dies or you have no reception there wont be any app working for you, at least not internet based, if this happens and you have activated the Notifications Service in your Zoldy you wont be able of replying back to those Notifications and with 3 consecutive times Zoldy will run your settings sending emails, the same if you uninstall the app with this activated. Sorry you have this perception.
- bierjunge 5y ago
  I'm not saying the app is useless, I'm only saying that it's not as easy as the website states. I personally wouldn't use a mobile app for that, because it's too risky in my opinion. Let's say we have a scenario where someone has confident information incriminating one of my theoretical adversaries and configured Zoldy with the data. What if I hire a thug to steal and destroy the phone? Will the owner be able to stop the messages which he does not want to be sent? Can the app be restored to a functional state on a different device? If yes, then a malicious third party would be able to get access to the Google/Apple account and restore it gaining control of the sensitive information. The website states, the data is stored in Firebase. But how does the app access it? Is there a gateway server you control? If yes, I wouldn't even bother with the previous scenarios, but attack that server and get ALL the data. Not only from one target, but from all, which would be pretty much a disaster (for you, the app and all the customers).
  - vorpalhex 5y ago
    Yeah, a smartphone based deadman is not great for the reasons listed. Ideally you would have key escrow running in a few places ala Shamir and then already have the data widely distributed (bittorrent, ipfs) but encrypted. You can still handle check-in via device but you need a 2nd factor of something only you know, with false values that will trigger a dispersal.
    - rmoon 5y ago
      I guess we are all rightly used to seeing the dangers first, there is no deadman, there is one very important reason for me that made me see how difficult it is for some people to defend themselves when all you have is information.