►
Description
Visit the https://archive.devcon.org/ to gain access to the entire library of Devcon talks with the ease of filtering, playlists, personalized suggestions, decentralized access on Swarm, IPFS and more.
https://archive.devcon.org/archive/watch/6/how-to-not-be-worth-kidnapping/
Personal physical security, specifically violent kidnapping and compulsion to disclose keys, is often brought up as a concern by cryptocurrency participants. We will quickly present a way of thinking about these threats and a model for not merely protecting from loss of cryptocurrency, but prevention of victimization through violence entirely.
Speaker(s): Ryan Lackey
Track: Security
Keywords: security,violence,kidnapping
Follow us: https://twitter.com/efdevcon, https://twitter.com/ethereum
Learn more about devcon: https://www.devcon.org/
Learn more about ethereum: https://ethereum.org/
Devcon is the Ethereum conference for developers, researchers, thinkers, and makers.
Devcon 6 was held in Bogotá, Colombia on Oct 11 - 14, 2022.
Devcon is organized and presented by the Ethereum Foundation, with the support of our sponsors. To find out more, please visit https://ethereum.foundation/
A
A
Hi
I'm
Ryan
Lackey,
with
evertots
insurance,
we're
going
to
talk
about
a
few
things,
but
what
we're
not
going
to
talk
about
is
how
not
to
be
kidnapped
because
I
mean
it's.
Everyone
has
a
different
threat
profile.
Everyone
has
different
risks,
so
it's
really
hard
to
give
advice.
That's
going
to
be
really
successful
in
your
case
and
the
world's
unpredictable.
A
The
world
changes
the
most
dangerous
time
is
when
you're
going
from
like
one
level
of
assumptions
to
another
level
of
assumptions,
and
also
this
isn't
legal
advice,
I'm,
not
a
lawyer,
but
you
really
would
not
want
to
take
any
security
advice
from
lawyers
generally.
Lawyers
have
this
amazing
habit
of
they
use
magical
legal
privilege
dust
to
protect
like
anything.
So
because
something
is
illegal,
you
can't
do
it.
So,
as
a
result,
no
one
has
to
worry
about
it
so
yeah.
So
the
security
advice,
I
think
security
and
Engineering
is
probably
a
better
approach
there.
A
So
kidnapping
in
general
kidnapping
sucks.
It
happens
like
it's
really
hard
to
get
statistics,
but
it
happens
like
I'd,
say
25
30
000
times
a
year,
and
then
the
number
value
of
Ransom
payments
is
really
hard
to
estimate.
It's
I
mean
I've,
seen
numbers
anywhere
from
like
500
million
dollars
this
year
to
like
five
billion
dollars.
So,
let's
just
say
two
billion
dollars
a
year
in
advance
and
payments.
A
The
real
economic
loss
is
definitely
higher
than
that,
because
the
ransoms
are
only
a
small
portion
of
it,
and
the
rate
of
this
has
increased
a
lot
like
the
the
most
monitored
period.
I
know
about
is
from
2000
to
2010,
I.
Think
a
lot
of
that
increase,
where
it
basically
doubled,
was
due
to
the
Iraq
War
and
a
lot
of
kidnappings
in
that
place.
A
But
it's
really
hard
to
get
incident
reports
because
a
lot
of
the
smaller
scale,
things
people
don't
report
or
they're,
reported
to
local
authorities
and
not
collected
in
any
sort
of
centralized
way.
So
there's
a
lot
of
that
stuff
and
it's
usually
like
certain
industries
and
certain
geographies
are
very,
very
overrepresented
in
those
statistics.
Like
a
software
engineer
in
Palo,
Alto
California
has
a
very
low
risk
of
this.
A
oil
oil
and
gas
executive
working
in
like
Nigeria,
has
a
much
higher
risk.
People
were
working
as
security
contractors
in
dangerous
countries.
A
Unfortunately,
Colombia
has
had
a
history
where
it
did
have
a
relatively
High
rate
of
kidnappings
in
the
past
and
has
had
some
fluctuations
since
so
this
is
really
like
a
not
really
a
uniformly
distributed
risk.
There's
a
lot
of
different
types
of
incidents,
so
jovivo
in
Puerto,
Rico,
pero,
Joe,
hablo,
Poco
espanol,
but
there's
Express,
kidnappings
or
Paseo
million,
not
Mio
nario,
which
is
the
millionaires
ride.
A
So
the
idea
is
able
to
kidnap
you
in
a
car
and
take
you
to
an
ATM
and
say
take
out
all
the
money
you
can
take
out
of
the
ATM
and
usually
let
you
go
and
that's
like
a
pretty
it's
it's
bad,
it's
sort
of
on
the
spectrum
of
someone,
stealing
your
cell
phone
or
a
robbery,
but
it
does
have
the
threat
of
physical
violence
involved.
So
it's
a
little
bit
worse.
A
A
team
of
kidnappings
are
actually
child
custody
like
a
non-custodial
parent,
who's
lost,
custody
of
a
child
will
take
or
retain
the
child
passed
and
approved
monitoring
period
so
that
and
turns
into
a
kidnapping
and
it's
sort
of
crazy
there's
the
custodial
kidnapping
where
they
take
somebody
and
they
hold
them
for
a
period
of
time.
Until
somebody
pays
a
ransom,
that's
one
category.
A
We
can
talk
about,
there's
the
political
kidnappings
where
a
group
is
unhappy
with
the
government
or
with
another
another
entity
and
decides
to
kidnap
people
as
a
way
to
put
pressure
on
that
other
entity.
The
the
external
entity,
like
the
government,
people
that
are
involved
in
illegal
activities
or
certain
violent
Industries,
are
at
a
much
higher
risk
of
kidnapping
than
people
that
are
involved
in
like
normal
things.
A
A
Oh,
your
wife
has
been
kidnapped,
she's
at
a
conference
and
the
guy
immediately
like
he
loves
his
wife
and
he
pays
the
ransom
immediately
and
then
it
turns
out
his
wife
wasn't
actually
kidnapped
and
it
was
just
all
like
fake
and
he
just
paid
a
bunch
of
money
for
this
and
there's
that.
But
the
thing
that's
maybe
more
relevant
to
us
is
something
that
happened
in
mostly
like
the
1800s
bank
managers,
where
they
had
Banks
back
then
had
huge
amounts
of
gold
in
their
vaults.
A
So,
like
every
little
local
bank
had
huge
amounts
like
multi,
like
very,
very
large
amounts
of
money
stored
in
local
vaults,
and
this
is
very
liquid,
very
stalable
and
they
would
kidnap
a
bank
manager
at
night
when
a
place
are
not
as
in
the
bank's
empty
and
everything
else.
They
would
then
take
the
bank
manager
of
the
branch
and
say
unlock
the
bank
vault
and
then
take
the
money
out
and
that's
not
really
great,
because
it
was
a
very
profitable
thing
and
it
kept
happening
over
and
over
again.
A
So
what
they
did
is
they
invented
the
time
lock
for
safe.
So
the
safe
could
only
open
during
business
hours
when
people
are
going
to
be
in
in
the
bank
and
that's
kind
of
like
kind
of
relevant
to
what
we're
talking
about
here.
So
why
should
we
care,
like
most
of
us,
are
not
like
oil
and
gas
Executives
or
doing
missionary
work
or
anything
like
that?
A
There
is
there's
some
great
talks
that
I've
seen
on
how
you
have
to
launder
the
proceeds
of
crime,
but
that
is
a
very,
very
good
problem
to
have
once
you
have
the
cash
versus
the
problem
of
if
you've
stolen
money
from
a
bank-
and
it
can
just
be
revoked
by
the
we're
still
an
electronic
bank
balance
deposits
and
they
just
get
revoked
by
the
bank.
It's
a
very
large
amount
of
wealth.
A
There's
people
who
have
come
in,
and
also
people
that
are
new
entrants
to
being
wealthy,
that
have
come
in
with
like
more
money
than
they
ever
had
in
the
past
and
very
recently,
and
it's
geographically
distributed
in
places
that
are
very
high
risk
relative
to
a
lot
of
previous
economic
booms
and
a
lot
of
people
have
like
a
lifestyle.
It's
kind
of
hard
to
secure
I
have
a
very
boring
lifestyle.
Like
I
live
in
my
house,
I
go
to
my
office.
My
office
has
24
7
armed
security.
My
apartment
is
very
secure.
A
A
Younger
people
are
not
so
so
it's
kind
of
a
risk
in
the
crypto
industry
there's
some
basic
precautions
that
everyone
can
take
like
normal
physical
security
I
mean
there's
a
lot
of
teams
here
that
have
that
have
come
that
actually
paid
for
our
armed
security.
Armored
cars
driving
around
it's
not
because
of
the
getting
the
phone
snatched
off
the
street,
it's
because
they're
afraid
of
targeted
threats
against
them,
as
as
companies
avoid
risk
and
everything
else.
But
the
crazy
thing
is
this
thing
called
kidnap
and
Ransom
Insurance.
A
The
problem
with
kidnapping
Ransom
insurance
is,
if
you
advertise
that
you
have
kidnap
and
Ransom
Insurance.
That
makes
you
a
Target
because
they
know
they're
going
to
get
a
guaranteed
payout.
So
most
of
these
programs
have
a
program
that
you're
not
allowed
to
actually
advertise
that
you
have
it
because
one
thing
worse
than
being
kidnapped
for
crypto
that
you
do
have
is
being
kidnapped
for
crypto,
that
you
don't
have
there's
all
sorts
of
ways.
You
can
set
up
great
multi-cigs
and
custody
arrangements
and
use
custodians
and
everything
else.
A
So
you
don't
actually
have
access
to
the
crypto
to
steal
but
or
to
make
a
transfer.
But
once
you
do
get
kidnapped,
it
becomes
a
serious
problem.
So
so
the
problem
is,
you
need
to
convince
the
dumbest
possible
kidnapper
in
the
world
that
this
system
is
in
place,
that
you
don't
actually
have
instant
access
to
the
funds
or
access
to
the
funds
alone,
and
that's
pretty
hard,
because
very
few
people
that
are
going
to
be
kidnapping.
People
attend
conferences
like
this
and
learn
about
the
The,
Cutting
Edge
of
custody
arrangements
and
everything
else.
A
So
the
solution,
I
think
is
I
mean
hopefully
the
solution.
I
think
is.
Actually
you
get
this
into
the
mainstream,
so
you
build
something
that
has
a
custody
Arrangement
that
prevents
someone
from
being
Ransom,
successful
or
being
having
keys.
You
successfully
into
mainstream
media
like
a
Hollywood
movie,
find
incidents
where
it's
a
popular
incident
and
basically
have
those
that
mechanism
foil
the
crime
and
have
it
widely
known
and
publicized
into
that.
A
There's
also
some
novel
Insurance
products
and
there's
also
the
government
approach
here,
which
I'm
sure
a
lot
of
people
don't
really
like
government
Government
Solutions,
but
certain
governments,
the
US
Israel
a
few
other
countries
have
a
policy
of
not
paying
ransoms
for
people
they
send
in
people
to
go.
Try
to
rescue
them,
not
always
successful.
Other
countries
have
a
policy
of
paying
ransoms
like
a
lot
of
European
countries
do
and
their
people
get
kidnapped
and
Ransom
successfully
so
sort
of
a
trade-off.
But
thank
you
very
much
yeah.