4 ms·

What could be more "Hacker News" than a bunch of people thinking they need a secret password in case they are held "under duress"? Because obviously you are Jam

by kats 5y ago

What could be more "Hacker News" than a bunch of people thinking they need a secret password in case they are held "under duress"? Because obviously you are James Bond and to avoid being sawed in half by the villian's laser beam you will give away this secret password at the last moment. Nothing could be worse than if Dr. Evil steals your hard drive, oh god, not that!

dhzhzjsbevs 5y ago
Or maybe you just don't like the idea of the government rifling through your shit. Recent example: https://www.reddit.com/r/australia/comments/s1pvs3/customs_confiscated_and_scanned_our_mobile_phones/ https://www.reddit.com/r/australia/comments/s1pvs3/customs_c... After reading this I'll never travel with out a pre trip factory wipe and throw away accounts for the trip. To be clear, there isn't anything to hide but I don't trust this government one bit and the cost of them scanning my password vault is way too high - it would take weeks to reset and clear old passwords.
jart 5y ago
Well pretty much everyone who works for a corporation has a responsibility to protect confidential information. However it's not really all that James Bond because the problem of international travel is normally solved by having code among other things not stored on laptops.
- PeterisP 5y ago
  The responsibility to protect corporate information does not generally include any resistance to duress, almost every company has to simply accept that the health or life or imprisonment of the responsible employee is more valuable (really, on a whole different scale) than the protection of that information, and they have to instruct their employees to comply with any duress - just as bank tellers are instructed to just hand over cash when threatened, or as happened when duress was applied to employee family members in the https://en.wikipedia.org/wiki/2009_Bank_of_Ireland_robbery https://en.wikipedia.org/wiki/2009_Bank_of_Ireland_robbery - if you're not working in the military or intelligence services where literally lives are at stake, it's exceedingly likely that your threat model should simply not include trying to resist duress, and if you do, you're immorally putting your employees at risk to protect something that's relatively not that important like corporate profits.
  - jart 5y ago
    Yes but there's nothing to protect if there's nothing there. I don't think Apple expects its employees to fall on a sword to prevent customs officers from reading its plans for iPad 11.0. But they certainly expect them not to download such docs to their desktop right before hopping on an international flight.

by kats 5y ago

dhzhzjsbevs 5y ago

Or maybe you just don't like the idea of the government rifling through your shit. Recent example: https://www.reddit.com/r/australia/comments/s1pvs3/customs_confiscated_and_scanned_our_mobile_phones/ https://www.reddit.com/r/australia/comments/s1pvs3/customs_c... After reading this I'll never travel with out a pre trip factory wipe and throw away accounts for the trip. To be clear, there isn't anything to hide but I don't trust this government one bit and the cost of them scanning my password vault is way too high - it would take weeks to reset and clear old passwords.

jart 5y ago

Well pretty much everyone who works for a corporation has a responsibility to protect confidential information. However it's not really all that James Bond because the problem of international travel is normally solved by having code among other things not stored on laptops.

PeterisP 5y ago
The responsibility to protect corporate information does not generally include any resistance to duress, almost every company has to simply accept that the health or life or imprisonment of the responsible employee is more valuable (really, on a whole different scale) than the protection of that information, and they have to instruct their employees to comply with any duress - just as bank tellers are instructed to just hand over cash when threatened, or as happened when duress was applied to employee family members in the https://en.wikipedia.org/wiki/2009_Bank_of_Ireland_robbery https://en.wikipedia.org/wiki/2009_Bank_of_Ireland_robbery - if you're not working in the military or intelligence services where literally lives are at stake, it's exceedingly likely that your threat model should simply not include trying to resist duress, and if you do, you're immorally putting your employees at risk to protect something that's relatively not that important like corporate profits.
- jart 5y ago
  Yes but there's nothing to protect if there's nothing there. I don't think Apple expects its employees to fall on a sword to prevent customs officers from reading its plans for iPad 11.0. But they certainly expect them not to download such docs to their desktop right before hopping on an international flight.