Hacker News Reader

The trick is they can just take over maintaining the canary themselves after black-bagging you.

But in general the idea works - in theory.

The point of a canary is that it's cryptographically signed, and it's possible to set up a duress passphrase that will delete the key when entered, so if everything works correctly an unauthorized party can't keep posting signed canaries.

Reply on news.ycombinator.com