Hacker News Reader

> I wish it were possible to make a service that lets you upload encrypted notes that will be made public after your death. But those two requirements conflict.

Don't people do this using a lawyer / testament?

If you don't want the lawyer to know the contents either, encrypt it and give the key to another lawyer.

Asking people to trust lawyers might strike some as being a bit optimistic, but I haven't come across problems with people who are privileged to my information yet. Doctors, lawyers, accountants.

You might worry about the guy's infosec, but then I counter a lawyer is more likely to use a safe or other non-digital tech than most people.

I wish it were possible to make a service that lets you upload encrypted notes that will be made public after your death.

That sounds like an awesome startup idea. Except that the startup will run out of money after two years and sell your secrets to the highest bidder. Or they will become big enough to be bought by one of the Internet majors who will just shut down the servers and keep the developers.

I believe there is already a startup attempting to fill a similar niche called "Dead Mans Switch"[1]

[1] https://www.deadmansswitch.net/help/

> How well would any of us have done in that situation? It's tempting to think that we'd have said no, don't launch. But picture yourself as a military commander, raised in that lifestyle. Then add the natural inclination to freeze up and make bad choices under pressure.

Worse. Much worse. Imagine 1 further thought at the back of your head: Even if I get this absolutely right and avert WW3, there's an 80% chance I get shot and my family ends up in Siberia. My only way out of this is lucking out about the mood of my whole chain of command, up to and including the paranoid tyrant on top, who may worry I am creating precedent for not following orders to the letter. This may be how my life ends, and that's if I successfully avoid a nuclear holocaust.

Not exactly that service -- too much uncertainty about when quantum computers will get cheap enough -- but https://defuse.ca/quantum-computer-time-capsule.htm

>I wish it were possible to make a service that lets you upload encrypted notes that will be made public after your death. But those two requirements conflict.

That's a very interesting idea. What do you mean by the "requirements conflict"?

Couldn't it be implemented with a dead man's switch where one would check in every year or so. Of course there would need to be some verification methods baked in to thwart pranksters.

https://www.deadmansswitch.net/

I don't know if that's what he meant by "conflict", but it does provide an incentive for one's death

> What do you mean by the "requirements conflict"?

Possibly that such a dead man's switch would require the keys to be outside of your control to some extent - after all, if you die the day after resetting the switch, any infrastructure owned, maintained, or paid for by you might not exist for the switch to fire. If you give the keys to a third-party, you have to trust they aren't reading the contents and that their security measures are sufficient.

It could be done on an ad-hoc basis if you have a trusted third-party (close friend, for instance), but it's difficult to see how it could be scaled into a service. Perhaps it could be split into two parties - you upload the encrypted notes to the service, but they don't get the keys. You pass the keys to a trusted third-party (i.e. the close friend), who can make the notes public by giving the keys to the notes holder, who (ideally) would verify the death via public records. This avoids giving the secrets directly to the friend (in case of disagreements etc.), and you can reverse the decision whilst you are still alive (by deleting the notes).

Also, depending on the nature of the secrets, it does provide an incentive for death.

You could make a time triggered death man switch that needs to be reset every year. Else your secret is decrypted

But if the system can decrypt itself in your absence it must have access to the decryption keys. So you can't guarantee that the subsequent maintainer of the system won't release the keys after your death. I suppose you could hide the system somewhere (anonymous VPS) but then the encryption isn't actually buying you anything over what the anonymity is getting you.

You could use public key system to your advantage. Devise a cryptosystem that takes x time to crack, write a program to crack it, let it roll. If you're alive at the time of vulnerability being found, you can adjust or change the key.

Likewise it would be a good case for a proof of work system with specialized single machine input. You have to prove x amount of work every so often to keep the data encrypted.

There are no keys to launch infrastructure in Russian military. The few things amounting to that are the key codes stored in sealed containers that open code locks on control panels with physical launch buttons. The steel plate that cover the launch panel at Topol TEL can be easily cut open with a power tool.

Topol missiles have literally only 5 control inputs available to the launch crew:

1. raise the launch tower, 2. lower the launch tower, 3. arm the missile, 4. disarm the missile, 5. launch the missile

All missiles are programmed at the factory. Precise start coordinates are held by a separate navigation receiver at the missile TEL, and if the receiver fails, there are multiple redundant fallbacks.

The only way a crew can mess up the launch is to override the start coordinates with manual input.

If the notes are encrypted, you hold the keys. If the service held the keys, no one would use it. But that means the notes can't be decrypted upon your death, since the keys would need to be uploaded at that point.

Simple solution: subcutaneous key implant. Someone has to physically cut you open to decrypt your notes.

Hopefully your attackers are not too determined... but then again, any system where your death results in decryption has that particular flaw. A bigger problem is if you die in such a way that your body can't be recovered.

> How many secrets are you sitting on, bound by your NDAs

Zero. I don't sign NDA's.

Oh?

I feel like that only works while you're young and in demand. Give it a decade or so. But I'm curious about your strategy.

There are many contexts that you simply can't work for someone if you won't sign an NDA. It'd be interesting to know the areas where that isn't true.

I work in cloud infrastructure, and I cannot recall anyone here signing an NDA. Instead, our senior architects are giving talks about our network design etc. at prestigious conferences to earn street cred for the company.

deadmann.com