3 ms·
I am imagining an authentication system that doesn't just ask you for a password but beside making sure it's you who made the request, also makes sure that you
by DeathArrow 3y ago
I am imagining an authentication system that doesn't just ask you for a password but beside making sure it's you who made the request, also makes sure that you request the access on your free will without being forced.
A primituve one would be requiring a main password to authenticate every 12 hours. If the main password is not used until that period passes. A second password that you don't memorize can be used to unlock but it is stored in a place that only you can access and only if you are totally free.
- notfed 3y agoSo every 12 hours you'd have to go find your non-memorized password? Sounds incredibly inconvenient. Anyway, a tyrant is simply going to hold and gun to your head and tell you to go get that second password.
- doctor_phil 3y agoI think you read parent-comment wrong. My interpretation: unlock your phone normally at least every 12h. Only if you fail to do that, then the phone locks harder and you need to unlock with the non-memorizable password. Imagine the PIN/PUK system on SIM cards but with a timed lock-out as well. I agree that it sounds inconvenient though. I'm not that familiar with the US law system, but wouldn't a written down password be worse? With a memorized password it's at least possible to claim you have forgotten. Some encryption schemes allow two keys for unlocking, but they would show different content depending on the key. I think I remember trying that on TrueCrypt many years ago.
- DeathArrow 3y agoI would imagine the second password being in a safe in a Swiss bank. It's not practical at all, but there should be possible to build systems that authenticate you only if you are free and doing that on your free will without any compulsion.
- Ikatza 3y agoI sleep longer than 12h most days.
- butlike 3y ago"uhh, the password is freedom123"
- deleted 3y ago[deleted]