$5 wrench can beat 4096 bit RSA
True crypto-currency story time. This actually just happened here in Portland end of 2023:
According to an indictment, the four [men from Florida] flew to Portland on Nov. 8, 2023, rented an Airbnb in Vancouver and used ride-share car services to get around.
Over the next two days, they watched their target’s downtown Portland apartment and schemed how to carry out the kidnapping, the indictment alleges.
On Nov. 10, some in the group abducted the man, forced him from one car into another and drove him away from his residence while others entered the man’s apartment to try to access his cryptocurrency.
They drove the man to a field in Banks, tied him to a post with duct tape and repeatedly assaulted him before abandoning him, according to the indictment and police records.
Later that day, they ultimately used the man’s password, or so-called “seed phrase,” to transfer digital currency from his cryptocurrency wallet to another location, the indictment says. Prosecutors have not disclosed how much currency was taken.
Extortion and personal data breaches accounted for the most frequent cryptocurrency frauds reported in 2023, according to the FBI
A reminder that security is only as strong as it’s weakest link. And often, that link is you. It only took some rope and a long bout of ‘persuasion’ for this guy to lose his crypto wallet.
This also holds up for things like biometrics where you can be forced to apply a finger or put your face in front of the device. Even worse, some biometrics still work if you’re conscious or not. They could club you and put your finger on the device to unlock it. They may not even need the rest of you if you turn into too much of a hassle. You could just find yourself tied to a post missing a finger, hand, or even your head (face id).