4 ms·

If you are not allowed to talk to your lawyer, then maybe your lawyer should be the one who has the password.

edent 13y ago
That is an epic suggestion :-) Although, given how much lawyers charge by the hour, I'm nt sure I could afford to log in to Twitter any more :-)
fluidcruft 13y ago
This could be easily combined with joshuaellinger's suggestion for a "travel mode". Flip a switch before you leave (analogous to "airplane mode") and then 2FA codes must come from a third party (your lawyer). When you arrive, contact the third party (your lawyer) and re-enable access using your own 2FA.
- tricolon 13y ago
  Sadly, I'm pretty sure a lawyer can be compelled to divulge passwords and tokens.
  - fluidcruft 13y ago
    Extrajudicially?
  - a3n 13y ago
    I think the point here is not that the lawyer could refuse the 2FA token if he detects duress. You have to give up the login credentials if you're able. The point is that you're now able to inform your lawyer that you're in detention. You can work out a protocol with your 3rd party (e.g. lawyer) ahead of time that requires you to state where you are, and there's all sorts of coding available to you for that. He'll give up the token regardless, but might be able to start action on your behalf if he detects that you're not where you should be.
- sehrope 13y ago
  If you can be legally compelled to provide what's in your mind (password) and what's in your pocket (2FA device) then what's to stop them from compelling you to instruct your legal counsel (or whoever else is providing your "login escrow") to comply as well? It sounds like a ludicrous request but it's still in the realm of possibility.
  - jlgreco 13y ago
    Could they compel your lawyer to respond to your (under duress) request? Your lawyer would know, unless they could also make you not inform your lawyer that you were being detained. I hope that is not legally possible.
    - stonemetal 13y ago
      Sounds like part and parcel for a National Security Letter. Do it and don't tell anyone and don't mention the letter.
      - spiritplumber 13y ago
        That's a thing actually. The IEEE code of ethics specifically forbids lying about technology. If I receive a national security letter about a technology issue, do I have to quit the IEEE? Can I explain to them that I have taken an earlier oath and that it takes precedence?
        mcherm 13y ago
        Instead, I would recommend resigning publicly from the IEEE by posting a message where it can be widely seen stating "I am forced to resign from the IEEE because my government has compelled me to violate the IEEE code of ethics. I am forbidden by law from explaining my actions." See, for example, http://mobile.nytimes.com/blogs/bits/2013/08/12/lavabit-founder-says-he-had-obligation-to-shut-service/ http://mobile.nytimes.com/blogs/bits/2013/08/12/lavabit-foun...
        stonemetal 13y ago
joejohnson 13y ago
Start-up idea: legal service/password manager combination.
deleted 13y ago
[deleted]

edent 13y ago

That is an epic suggestion :-) Although, given how much lawyers charge by the hour, I'm nt sure I could afford to log in to Twitter any more :-)

fluidcruft 13y ago

This could be easily combined with joshuaellinger's suggestion for a "travel mode". Flip a switch before you leave (analogous to "airplane mode") and then 2FA codes must come from a third party (your lawyer). When you arrive, contact the third party (your lawyer) and re-enable access using your own 2FA.

tricolon 13y ago
Sadly, I'm pretty sure a lawyer can be compelled to divulge passwords and tokens.
- fluidcruft 13y ago
  Extrajudicially?
- a3n 13y ago
  I think the point here is not that the lawyer could refuse the 2FA token if he detects duress. You have to give up the login credentials if you're able. The point is that you're now able to inform your lawyer that you're in detention. You can work out a protocol with your 3rd party (e.g. lawyer) ahead of time that requires you to state where you are, and there's all sorts of coding available to you for that. He'll give up the token regardless, but might be able to start action on your behalf if he detects that you're not where you should be.
sehrope 13y ago
If you can be legally compelled to provide what's in your mind (password) and what's in your pocket (2FA device) then what's to stop them from compelling you to instruct your legal counsel (or whoever else is providing your "login escrow") to comply as well? It sounds like a ludicrous request but it's still in the realm of possibility.
- jlgreco 13y ago
  Could they compel your lawyer to respond to your (under duress) request? Your lawyer would know, unless they could also make you not inform your lawyer that you were being detained. I hope that is not legally possible.
  - stonemetal 13y ago
    Sounds like part and parcel for a National Security Letter. Do it and don't tell anyone and don't mention the letter.
    - spiritplumber 13y ago
      That's a thing actually. The IEEE code of ethics specifically forbids lying about technology. If I receive a national security letter about a technology issue, do I have to quit the IEEE? Can I explain to them that I have taken an earlier oath and that it takes precedence?
      - mcherm 13y ago
        Instead, I would recommend resigning publicly from the IEEE by posting a message where it can be widely seen stating "I am forced to resign from the IEEE because my government has compelled me to violate the IEEE code of ethics. I am forbidden by law from explaining my actions." See, for example, http://mobile.nytimes.com/blogs/bits/2013/08/12/lavabit-founder-says-he-had-obligation-to-shut-service/ http://mobile.nytimes.com/blogs/bits/2013/08/12/lavabit-foun...
      - stonemetal 13y ago

joejohnson 13y ago

Start-up idea: legal service/password manager combination.

deleted 13y ago

[deleted]