4 ms·
Here is how you enable 2FA (assuming the service provider doesn't provide these directly to the bad guys). SMS can fall to bad guys hands easily: 1. Install OA
by meapix 13y ago
Here is how you enable 2FA (assuming the service provider doesn't provide these directly to the bad guys). SMS can fall to bad guys hands easily:
1. Install OATH Toolkit.
2. Encrypt Swap space using eCryptFS.
3. Create a TrueCrypt file system with your 2FA keys in it.
4. Every time you need the code, mount (3), run(1), umount(3)
Again, this assumes the service provider doesn't provide the access directly to the bad guy.
- edent 13y agoPerhaps I'm missing something, but what's to stop the security services demanding you reveal the password to your TrueCrypt partition?
- meapix 13y agoIt depends how far you want to go with torture.
- tpetry 13y agoTorture? They affair at the london airport has shown, that you do not need any torture: You have to tell them your passwords or you get in trouble.
- meapix 13y ago"You get in trouble" is what I meant. How much torture you can handle before releasing the password for the truecrypt volume.
- Phlarp 13y agoNine hour detention in a foreign airport is perhaps a far cry from torture; the implicit threat of a protracted prison sentence is getting a little bit closer though. In America, prison might as well be synonymous with rape, which is generally considered a form of torture in most civilized countries. I'm not trying to invoke the literally worse than Hitler meme, because it isn't, but there was a notable geek activist who committed suicide recently under the threat of such. Certainly quite ominous.
- etherael 13y agoHidden volumes?