Dooms Day Button? reddit / selfhosted ---------------------------------------------------------------------- SawkeeReemo · 2023-11-13 19:45 I was just talking about this with a friend since people around us seem to be dropping like flies. What happens to our personal servers and home labs when the worst happens? I personally don’t care who sees what; compared to most I’m sure I’m vanilla af. 🤣 Enjoy my 20 year music collection, alive people? 😜 But it got me thinking: It would be a great self-hosted front end or something where on a login in screen (maybe at auth level like with Authelia), you had an “emergency” option where in we could predetermine what to immediately nuke, and what to either move to a shared cloud folder, offload to a local external drive, or just make available like local file hosting; something like that. Does anything exist like this? If not, what ideas do you folks have in this regard, or what do you currently do? I feel like this could be a really useful service if done correctly. ---------------------------------------------------------------------- sadhgurukilledmywife · 2023-11-13 20:06 Not exactly what you asked, but [this](https://github.com/potatoqualitee/eol-dr) might interest you.. ---------------------------------------------------------------------- thekrautboy · 2023-11-13 20:18 But if youre dead, then who would use that "emergency button"? ---------------------------------------------------------------------- CharkDocolate · 2023-11-13 20:23 gotta set up webhooks connected to my heart’s electrical field ---------------------------------------------------------------------- waeking · 2023-11-13 20:54 Vaultwarden can send a link to a person of your choosing with all your passwords if you do not login within a certain amount of time. This is key.... Mortgage, banks, wifi, email, utilities, credit cards..... This list goes on. Had a friend pass and his wife could not cancel some things without a death certificate, even then she had a hard time. ---------------------------------------------------------------------- ElevenNotes · 2023-11-13 21:43 I made my own dead mans switch to do everything and inform everyone proper, just in case. It checks if my account was not used within 30D, and if so it tries to contact me for three days and after that it contacts my wife and kids and asks if I'm gone. It uses multiple channels to reach you (email, sms, signal, voice call). If I'm dead it takes care of crypto, servers and credentials automatically. ---------------------------------------------------------------------- SawkeeReemo · 2023-11-14 00:11 Are you the only person you know? ---------------------------------------------------------------------- SawkeeReemo · 2023-11-14 00:12 No kidding? That's pretty cool. Is it something you can share? Or just some scripts you put together yourself? (I don't understand why I'm being downvoted on this post, I thought it was a pretty cool idea. haha) ---------------------------------------------------------------------- thekrautboy · 2023-11-14 00:20 Thankfully, yes! ---------------------------------------------------------------------- 21stCenturyRetard · 2023-11-14 02:38 Because people don't want to think of the inevitable ---------------------------------------------------------------------- ElevenNotes · 2023-11-14 03:41 Not really, its baked into my cloud management solution and relies on services provided by it. ---------------------------------------------------------------------- FoxxMD · 2023-11-14 04:14 You might be interested in https://github.com/ItalyPaleAle/hereditas It's a deadman switch that houses your docs/data, encrypted, on a static website. ---------------------------------------------------------------------- MasterChiefmas · 2023-11-14 04:34 >what to immediately nuke This scenario is the one that you have to approach differently than the others. The only way to approach with this scenario and be reasonable sure it'll go the way you want, is to have the default state be inaccessible. i.e. everything that you want to be "nuked" has to be *already* in an encrypted state that only you are able to access. This way, the nuked state is the default state if you aren't around to grant access. ---------------------------------------------------------------------- SawkeeReemo · 2023-11-14 06:22 Jealous. ---------------------------------------------------------------------- amarao_san · 2023-11-14 08:03 Yes, we done this in 1985, using state-of-art 40-bits encryption. ---------------------------------------------------------------------- Idenwen · 2023-11-14 09:04 If you mix up the timing it's dead....alive....dead...alive....dead...alive... 😁 ---------------------------------------------------------------------- MasterChiefmas · 2023-11-14 13:18 Did you have a point you were making? ---------------------------------------------------------------------- Chandlarr · 2023-11-14 13:38 This sounds great, thank you for this gem of a tip ---------------------------------------------------------------------- amarao_san · 2023-11-14 13:39 > This way, the nuked state is the default state I'm saying, that assuming that encryption == nuked is false. Today's bleeding edge in encryption is yet another 'rainbow tables' in 20 years, e.g. will be decrypted. Therefore, the 'nuke' option is not the same as 'keep encrypted without the key'. ---------------------------------------------------------------------- Useful_Radish_117 · 2023-11-14 13:49 Ma man, bot spamming the family even after he's gone! (Ngl that looks like a very clean solution) ---------------------------------------------------------------------- omeguito · 2023-11-14 14:54 Most drives nowadays are SED enabled, you could just set a random password and lock them ---------------------------------------------------------------------- MasterChiefmas · 2023-11-14 16:05 >I'm saying, that assuming that encryption == nuked is false. T I mean, ok, it's not erased. But for the OPs question, this is as close is as practically useful. Otherwise your arguement amounts to there is no point in bothering with encryption \_ever\_. ​ >today's bleeding edge in encryption is yet another 'rainbow tables' in 20 years, e.g. will be decrypted. That's your opinion. It could be correct, but holding up 40-bit DES as an example doesn't prove it. The landscape for security has changed a lot since the 80s. Your argument is just plain irresponsible, and I hope you don't give that kind of advice to most people. ---------------------------------------------------------------------- Chandlarr · 2023-11-14 16:22 I think the right name for this kind of thing would be dead man switch ---------------------------------------------------------------------- Chandlarr · 2023-11-14 16:23 I think the right name for this kind of thing would be dead man switch ---------------------------------------------------------------------- Simon-RedditAccount · 2023-11-14 16:38 I don't hold a degree in cryptography, but from what I've heard, modern 256 bit systems are really good, just from the point of energy required to bruteforce it. Even after quantum computers arrive (thus effectively reducing 256 bit strength to 128), this would be still [impossible to bruteforce](https://crypto.stackexchange.com/a/1160). ---------------------------------------------------------------------- m1ndfuck · 2023-11-14 19:23 I recently thought about as well and I will probably code something myself. Current idea is to give 2 ubikeys to my wife and my mother. Together they have a pw which can be used to decrypt a gpg backup with all documents and the master pw to my vault warden instance. Also, take a look at this: https://github.com/potatoqualitee/eol-dr ---------------------------------------------------------------------- falcorns_balls · 2023-11-15 05:22 I misunderstood this feature. For some reason the way it was worded, I thought it was more of an "I'm about to die, let me establish this other user with access to my vault" ---------------------------------------------------------------------- ElevenNotes · 2023-11-15 06:02 It’s the solution I came up with. I have a big family, so it’s easy that at least someone will confirm that I’m gone and without that system they would lose access to very important information, because since I’m gone, they have to cancel subscriptions, transfer crypto and so on. I don’t want that my wife has to deal with all of this on top of my death which is devastating enough.