DEF CON 23 - Chris Rock - I Will Kill You
DEFCONConferenceRecommended by 7 HN commenters across 6 months, 2016–2025
talk · general · evergreen · 2016–2025 on HN
A DEF CON 23 talk showing how weak controls in electronic death registration systems let someone virtually kill a person and obtain a real death certificate, with consequences for their identity and life.
HN repeatedly recommends it whenever fake deaths, identity verification or records fraud come up, praising how easy the attack seemed.
Up next
1 mo on HNWhy your 'Carbon Footprint' Is A Lie | Climate Town
Climate Town
Recommended 1× on HN · 2022–2026
1 mo on HNRSA ANIMATE: The Truth About Dishonesty
Royal Society of Arts
Recommended 1× on HN · 2015–2015
6 mo on HN"The Hard Parts of Open Source" by Evan Czaplicki
Strange Loop Conference
Recommended 8× on HN · 2018–2021
8 mo on HNContrepreneurs: The Mikkelsen Twins
Folding Ideas
Recommended 10× on HN · 2022–2026
3 mo on HNJailbreaking the Simulation with George Hotz | SXSW 2019
SXSW
Recommended 3× on HN · 2020–2023
1 mo on HNLamport on writing "Time, Clocks, and the Ordering of Events in a Distributed System"
Turing Awardee Clips
Recommended 1× on HN · 2023–2024
11 mo on HNBehind the Scenes of iOS Security
Black Hat
Recommended 9× on HN · 2016–2026
11 mo on HNWhy Electronic Voting Is Still A Bad Idea
Tom Scott
Recommended 11× on HN · 2020–2026
10 mo on HNUSENIX Security '18-Q: Why Do Keynote Speakers Keep Suggesting That Improving Security Is Possible?
USENIX
Recommended 10× on HN · 2018–2026
10 mo on HNDefcon 18 Changing threats to privacy Moxie Marlinspike Part
killab66661
Recommended 6× on HN · 2012–2019
9 mo on HN28c3: The Science of Insecurity
28c3
Recommended 9× on HN · 2012–2024
8 mo on HNDEF CON 25 - John Sotos - Genetic Diseases to Guide Digital Hacks of the Human Genome
DEFCONConference
Recommended 11× on HN · 2017–2023
10 comments from Hacker News
It is! This video is a bit old now but it's still so unbelievable how easy it was for the speaker to "kill" people (in Australia) ▶ this video
On the subject of people being declared dead, there's a good defcon talk about abusing how easy it is to declare someone dead. "Chris Rock - I Will Kill You" ▶ this video
An alarming amount of societal functionality depends on what effectively amounts to the honor system. This is especially true when it comes to any sort of gatekept specialty profession, like coroners for example. There was a great talk at DefCon about faking death: ▶ this video
Most jurisdictions (US and otherwise) have moved to Electronic Death Registration Systems. There was a fun Defcon talk about "killing" people with them a few years ago - ▶ this video
It's not only Facebook who have this process unsufficiently secured. The process for administering real death is also not really tamperproof. There is a hilarious defcon presentation on virtually killing someone and getting a real death certificate: ▶ this video Improperly reporting someone dead, or misrepresenting someone's will is something "you don't do" so the system is designed to minimize friction/pain.
Reminds me of a DefCon speaker that talked about exploiting a bunch of websites to order death and birth certificates. Really eye opening, and potentially devastating if it's done to you. Edit: ▶ this video
The speaker's previous presentation at a different year of the same conference, about using online records to fabricate your own death or the birth of a made-up baby, is also worth watching: ▶ this video .
Yeah, and Facebook is the least of your concerns. Defcon talk about the security of death certificates, and what happens to your life if you are targeted by this attack. ▶ this video
This reminds me of a Defcon talk.[0] In Australia before a certain date the states/feds didn't keep a record of your face if you got a licence/proof of age card. If you find yourself in this position all that is required is non photo id and a statutory declaration signed by friend to authenticate your identity. [0] ▶ this video
> The United States. I assure you that even though other countries have credit reporting, they do not use SSNs. They use ID cards with at least some features to make forging said ID cards more difficult, unlike the US SSN which is pretty much just a number on a piece of paper. This is mainly an issue of authentification and as long as your credentials remain crappy/easy to guess/easy to forge (like the US SSN system), that long it will stay easy to game the system. Imho this def con talk about birthing and killing virtual babies might also be quite relevant to the issue, tho it's not entirely focused on the US: ▶ this video