Duress code
Channel: all the knowledge of the universe PRINCIPIA
Date: 2022-01-20

Duress code, by Wikipedia https://en.wikipedia.org/wiki?curid=10103412 / CC BY SA 3.0

#Password_authentication
A duress code is a covert distress signal used by an individual who is being coerced by one or more hostile persons.
It is used to warn others that they are being forced to do something against their will.
Typically, the warning is given via some innocuous signal embedded in normal communication, such as a code-word or phrase spoken during conversation to alert other personnel.
Alternatively, the signal may be incorporated into the authentication process itself, typically in the form of a panic password, distress password, or
duress PIN that is distinct from the user's normal password or PIN. These concepts are related to a panic alarm and often achieve the same outcome.
An alarm system with a keypad; entering the duress code and pressing OFF disarms the system normally but notifies police.
Some home and property alarm systems have duress PINs, where the last two digits of the reset code are switched around.
Entering the code when under duress from an assailant can trigger a silent alarm, alerting police or security personnel in a covert manner.
The implementation of this feature has not been without controversy, as it has been claimed to lead to false alarms.
A similar mechanism, SafetyPIN, has been proposed for use in ATMs.
In 2010, the Federal Trade Commission issued a report studying the viability of such mechanisms for ATMs.
They noted duress PINs have never been actually implemented in any ATM, and conclude that the costs of deployment outweighs the likelihood they will actually deter criminal activity.
When a duress PIN is used to trigger a silent alarm, an adversary can always request the PIN in advance and ensure the appropriately modified PIN is entered instead.
If the adversary does not know which PIN is correct, they may choose randomly between the two possible codes allowing them to succeed half of the time.
In scenarios where a panic password...