0

My passwords for the most part as well as access procedures I could do while inebriated/intoxicated. Be it a simple login/password login to email or VPN and accessing a database.

This might sound weird but what can one do to help prevent access if one was inebriated via their own means or another person's means in order to get them to gain access?

I am not looking for practices and procedures for me (don't set up my intervention just yet!) but practices that could be applied to anyone not in a sound state of mind to prevent compromising a system they have access to.

  • Didn't Google implement math questions for something? – Yuriko Apr 29 '16 at 6:18
  • 1
    Have a policy of no drinking while working and no working while intoxicated. – Lie Ryan May 29 '16 at 2:19
  • What is it you're really trying to protect against? Being drunk or duress access? – atk May 29 '16 at 14:30
1

I don't think there is one good answer but here are some suggestions. You could utilize a captcha with extra visual artifacts or more characters than normal on every login. Perhaps a simple riddle or a bit of javascript that forces a user to click on targets with a time limit like this. I think the most feasible, reliable option would be requiring two-factor identification with a PIN from a phone app that will only be displayed on the phone if the user passes a breathalyzer test. Such devices do exist for Android and at least one option exists for PC although I think a smartphone-based option is superior. Hopefully this helps or at least provides some additional ideas.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.