Can digital data be restored even if a sudden lightning strike burns down the house and loses all property?
In the event of a natural disaster such as a fire or lightning, of course, if you have insurance, you will be financially supported to some extent, but your smartphone or PC will be burned down and digital data that cannot be exchanged for money will be lost. increase. Blogger Terrence Eden, a standard geek and tech enthusiast, said, 'A sudden lightning strike burned down my house.' It is explained in the blog assuming 'case'.
I've locked myself out of my digital life – Terence Eden's Blog
First of all, if you want to access various services and clouds to recover your digital data, you need to log in. Eden stores all his ID and password in his password manager, and two-factor authentication is required to log in to this password manager.
However, if you evacuate from your house with your clothes on, it is possible that the smartphone to which the code required for the two-factor authentication was sent was burned down in a fire.
Even if your smartphone burns down, you may be able to access emails and services if you can get back the phone number associated with your SIM card. However, it is not possible if all the ID cards, passwords, and other identification cards required to show that you are the owner of the original SIM card have been burned down.
In preparation for such a situation, Mr. Eden said that information with extremely high importance is exported, encrypted, and stored separately in cloud storage. However, you will need a password and two-factor authentication, or a FIDO2-compliant security key device to access the cloud storage. However, the security key device will have been burned down along with the house.
Of course, depending on the service, you can specify a person who can manage digital data as an emergency contact in an unexpected situation, for example, when the user himself died. Eden had designated his wife. However, if a lightning strike burns down Eden's home, it's natural to assume that Eden's wife has lost all her property, including her smartphone and PC.
Online services with multi-factor authentication may issue a 'recovery code'. This is a one-time passcode that can be used only once in an emergency, allowing you to ignore your security system and access your data in the event of an emergency.
Eden keeps these codes on paper just in case. What's more, all recovery codes are handwritten on a piece of paper and stored in a fireproof safe hidden under the cat's litter box so that the codes cannot be restored from the printer's memory.
However, the fireproof safe is not resistant to lightning strikes, so it is quite possible that the paper inside will be damaged and burned down along with the cat litter box.
'Of course, you should keep the paper with the recovery code in the safe deposit box of your local bank,' Eden said. However, in the UK where Mr. Eden lives, there are few banks that offer safe deposit boxes, and even if they do, it costs £ 240 a year (about 40,000 yen), so to prepare for the rare case of a lightning strike. It's an exaggeration.
If Mr. Eden had a recovery code stored in the safe deposit box, it would be OK if he went to the bank and displayed an ID card indicating that he was a contractor of the safe deposit box. However, if all of your ID has been lost in the fire, you will not be able to retrieve it unless your ID is reissued.
Eden also considered a way to save all recovery codes and recovery keys to a USB drive and have a trusted friend take care of them. However, Eden said, 'Every time I sign up for a new service, I need to save it to a USB drive.' 'A friend or his family may accidentally erase the contents of the USB drive.' 'The friend was also damaged. He points out problems such as 'you may lose your USB drive' and 'you need to put a password on your USB drive so that your friends don't betray you, and you have a problem with what to do with that password.'
Another option is to encrypt and split the recovery code and recovery key data, save it on multiple USB drives and have multiple friends keep it, but Eden said, 'All my friends are plotting against me. You also have to worry about plotting. '
'In a boring analog world, I'm sure I can prove to others who I am and have access to my account. To regain access from a company, I need to bring a trial. There may be, but it's possible, but if your account is protected by a robust algorithm, I can only say you're out of luck. No matter how much you justify, without the correct credentials, That's not allowed. The companies that offer password managers simply set my passwords inaccessible. Code is the discipline to follow. Of course, security is easy. If you can break through, you can break through the bad guys. Whether or not security should be enforced, which is the greater risk? '
Related Posts:
in Mobile, Software, Web Service, Hardware, Security, Posted by log1i_yk