Hacker News new | ask | show | jobs
by simonswords82 4450 days ago
This is an idea that has been around in various forms for a number of years. A number of other sites have popped up but like a number of people have already said, I don't trust random third parties with the keys to my online life.
3 comments

Two keys, you put one on memory sticks which you give to friends/family you trust.

In the event anything happens to you the other key is sent to those people allowing them to decrypt it.

Service can't access your data as it only has one and same for trusted person.

I'm sure something like this already exists (and tbh the level of effort required to set it up pretty much makes it unlikely to catch on) but it is theoretically workable.

You don't need any keys. Just say "I wrote how to log into my email on a piece of paper in the safe deposit box. You may have found it already."
But that doesn't have enough points of failure!
For those of us who run FreeBSD, there's gshsec(8):

http://www.freebsd.org/cgi/man.cgi?gshsec

Want to set up a "2 of 3" (or similar) scheme? You could use, for example, a three-disk RAID5 using USB flash drives.

Yet it's a problem to be solved.
True, but probably the solution is not yet another third party who does the same thing as every other third party.

Obviously it's still a problem, but the problem isn't just "I need someone to do this stuff if I die". Rather it's "I need someone I can trust absolutely to this stuff if I die.

By trust absolutely I mean:

  * will not abuse it. 
  * Will not even look at the data I submit and can guarantee this. 
  * will not get hacked and/or can guarantee my data's security if they do get hacked
  * won't get bored with this hobby. Which leads to: 
  * will be there in 1, 10, and 50 years - or can 100% guarantee orderly step down if they don't make it.
More basic short term considerations that also are not addressed by this or any other service:

  * what if  their server is down or under DDoS when I try to confirm my living state? 
  * What if I can't get to a system and miss multiple emails? 
These services are a good idea but there is a lot to be done before they can be considered as solving this problem.
Then make a key from two halves, one of which is physically in your home or similar.

I'd trust a "random" website further than google or similar.