back

by Tomte·12y ago·view on hn ↗
I've recently defined and implemented a new backup scheme for my personal stuff, and ssss plays a role in it:

Aside from my regular backups on Blu-ray (unencrypted), I've got two hard disks that hold the same data (and will be updated infrequently, once a year at most).

This is my disaster fallback: house burning down, me awakening from a coma without remembering any passwords or whatever.

Those hard disks are stored in the houses of two friends. And they are encrypted (BTW, that's not only for my peace of mind, but also for theirs: I wouldn't be comfortable holding personal information of my friends unencrypted).

The password to the encryption is split into n parts, such that very close family and friends get more parts and more remote friends get fewer parts. But noone can recover it without cooperation of at least one other.

Printed onto a sheet of paper, together with a clear description (including actual command line invocations) how those shares were generated and how they can be combined). Distributed to a lot of friends. That description is important and must be abundantly clear. Not necessarily to your grandma, but if she shows it to someone who knows at least a bit about computers, he must be able to make sense of it.

1 comments
In your case, you don't want to protect your data from (illegal) seizure and searching (since you also keep unencrypted BR discs).

But seizing the key-holding devices from your inner circle can be used by law enforcement (or an unfavourable regime) to recover your data without your consent, and you have no way of stopping them.

I don't know a solution to the problem - in the case you lose knowledge of your pass-phrases, external memory is a requirement and such an attack would probably always be possible.

If someone knows a way to have both amnesia- and dictator-proof encrypted storage, I'd love to know about it!

I've read that habits are stored in the memory in different ways than regular memories, and habits are more durable to incidents such as amnesia. (citation needed)

Perhaps by practicing typing the encryption key day after day, you could record it in muscle memory and it would be amnesia proof.

Or perhaps you could invent a unique hand-dance (think hand-jive) and practice it daily, and you could write a program that could decode the sequence into a key.

At least they would need to seize from several people.

And apart from that they can just seize my unencrypted home backup.

Unencrypted, because I want to be able to restore the rest if a bit flips in some file. And my PAR3 tests were really unconvincing.

Unencrypted, because I want to be able to restore the rest if a bit flips in some file.

Is this a realistic concern? Is a bluray disc at risk of flipping its bits?

No, I meant having unreadable parts.

Sorry, I'm thinking too much about flipping bits and soft errors at work...