Rubber-hose cryptanalysis. How AD can help to defence.

If AD will have a service of lie-passwords? I mean some passwords will inform (man->bandit->AD->police) that a man is under blackmail to help him if needed. If somebody live in a rather criminal country, big money for him can be a big problem. Lie-password should work as simple password, but also to inform local police or interpol etc.

Uhm… relax. Their site is pretty much bulletproof. If your password is not 123456 and you don`t have 5 trojans in your computer and 5 worms, there is no way to hack it.

Else… interpol would say ” We are on it ” and 5 years later, they would still be on ” it “

var it = a$$

Uhm… relax. Their site is pretty much bulletproof. If your password is not 123456 and you don`t have 5 trojans in your computer and 5 worms, there is no way to hack it.

Else… interpol would say ” We are on it ” and 5 years later, they would still be on ” it “

var it = a$$

I don’t think you quite understand the concept of rubber hose cryptanalysis. ... though I do have trouble envisaging thugs trying to beat an Envato password out of some author, no matter how criminal the country .

Oh no!!! What is someone went I ds’s house?

It needs to have plausable deniability, so it looks like the genuine account, but when they try to perform actions on the account, they are unable to, it will come up with something like “server error! Please try again later”

And also all the numbers and statistics should be able to be altered from the “master” account, so they don’t see earnings etc. If that’s what they’re after.

Wow I’m getting carried away here

Unless they know where you live then theres no issue unless they go to the area where you say you live and beat everyone until they find you?

or you could just not log out of your AD account on a public computer.

thats probably far more likely…

or you could just not log out of your AD account on a public computer.

thats probably far more likely…

Or if your laptop gets stolen..

I think it would helpful if there was a “I am on a public computer” checkbox at login and maybe an auto log out after x minutes. The problem is all you have to do to withdraw money is type in your email address.

Thats a pretty good idea… if you leave yourself logged into anything on a public PC it’s harsh but you’ll get what’s coming to you one day…

And maybe having to re-enter your password to withdraw would be a good security feature, thats what my online banking does when I try and send other people money…