I co-wrote a border search guide for EFF some years ago. I was very interested in finding clever technical approaches but I later ended up feeling that I hadn't given enough thought to the overall threat model questions (even though the guide did address them, perhaps even somewhat usefully).
The big picture problem is that the agents performing the searches have an enormous amount of power in terms of potentially seizing devices and potentially denying entry for non-citizens. I think they should not have this power, but the agents and courts probably don't care that I think that.
The end result (not inherently different from what we wrote in the guide) is that you may have to think both about protecting your data by technical means, and about not angering the agents more than you plan to. I was fascinated by techniques for being unable to comply (which is straightforward to achieve if you want!) but probably didn't think enough about how much this might antagonize border agents in many cases.
I definitely don't know a comprehensive big-picture solution.
> you may have to think both about protecting your data by technical means, and about not angering the agents more than you plan to
That's the same problem with technical solutions to crime.
I come from a very dangerous city and I used to have a car that needed a PIN to work. You could turn then engine on and drive but after a minute if you didn't input the PIN it would turn off without warning and start blasting the alarm. The idea being that if the car was stolen the thief would be stranded not far from home unsure about what's happening. Great technical solution but it ignores that a lot of the time the car is stolen with you in it (in a kidnapping, for example). Having the car shutoff in the middle of a highway next to a panicking guy with a gun and trying to remember a PIN is not a situation you want to be in, so I just had the PIN number written down on the dashboard, which worked very well when I was eventually kidnapped and just pointed at the piece of paper with the number.
Coercion was the reason from start, it's explained in the article.
"A motion filed by his defense argues the interrogation focused on child sexual abuse material as a pretext for investigating his connections to the protest movement."
So the message was simple: don't protest and you will be not harassed.
And there's the problem that if the PIN or worse a biometric version of this becomes remotely well known you've now created an incentive for a car thief to kidnap people even if they only want the car.
Many cars already have internal/cabin view camera. I'd imagine it will sooner or later get detection for potential theft and kidnapping situations, where it can simply detect the driver by face and prevent driving if it doesn't recognize the invidual as one granted driving privileges.
That is a largely incorrect statement that is loosely based on a single incident, not a trend.
The single incident was an individual in Malaysia who added an after-market finger-print based engine immobilizer to his car in 2005. The attackers threatened the individual with machetes, so that he would put his finger on the sensor, and then drove off with him in the car. The attackers later cut off his finger believing it would let them restart it without him present.
Even for Brazil, even for the most dangerous cities, that's still an insane number of kidnappings. They happen enough that you need to be aware and be careful to not be an easy target, but it's still a rare event overall.
I live in Washington DC, and even though carjacking is a problem here, not to a degree that people plan on it happening to them. I would be surprised if OP's situation took place in DC.
Carjackings ramped up in 2021 through 2024. They appear to be headed back down the "low and steady" of the early 00s. Looking at the numbers, DC isn't alone in this trend - Chicago was pretty bad as well.
Gee… A lot of people lost their jobs at once and crime went up? Then when the economy recovered crime went down? It’s almost like keeping people educated and employed actually does work better than more police and longer sentences.
There are 2 cases routine inspections and targeted investigations.
If it's a routine inspection, being uncooperative will probably lead them to escalate. You generally want to keep things routine and boring. If they want to access your device you have to weigh the costs, just log out of everything before you fly and throw away your device after they have had access to it, it's now compromised.
If you are targeted your compliance is irrelevant and only weakens your position, the thing is at the border you don't get all of the protections you get at say a traffic stop they can search everything you have on you without warrants reasonable suspicion or anything.
I am not a lawyer but if you are a citizen they probably can't deny you entry but can probably detain you for an uncomfortable amount of time, and seize whatever they want. Your best defense is to have a burner phone and no other devices nothing they can seize that would hurt you.
For foreign nationals pretty much the same applies except they can deny you entry and ship you off to alligator Alcatraz, just don't fly to America for a few years.
Remember he is not being prosecuted for not handing over his device but for destroying the data they were trying to seize, if he just let them keep the phone he would be Scott free. I.e.the best technical defense is secure encryption with a key thats long enough and not stored on the device.
Actually for the particular case the best technical defense is to not have any data whatsoever on you.
> I am not a lawyer but if you are a citizen they probably can't deny you entry but can probably detain you for an uncomfortable amount of time, and seize whatever they want. Your best defense is to have a burner phone and no other devices nothing they can seize that would hurt you.
Even having a burner phone without any personal information on it can be deemed suspicious. It would be best for your phone to have a recently-reinstalled OS, with a few critical apps like Whatsapp or iMessage set up with a few personal messages sent. You need to be able to set those up without a password manager. Anything else needs to take place on devices that you aren't carrying with you. Fortunately enough people don't update their Facebook these days that just having an account that exists but you don't use will probably work, assuming you don't look like someone that would be obsessed with their socials.
Maybe there are USB thumb drives that operate like a YubiKey unless special setup is performed to access the storage inside? That's one way to carry data with you if you have to.
You can offer the I don't travel with my real phone because it got stolen a bunch of times excuse.
The point is even if they become suspicious all they can do is seize the burner ask you a bunch of questions etc. search you, etc they can't get access to your data. You can't get in real trouble, just majorly inconvenienced.
You "can't get in real trouble" but teh last time I crossed with basically nothing, they wrote a search warrant by literally fabricating almost everything in it. They wrote that an anonymous dog told an unnamed officer I had drugs, then a completely separate HSI officer signed it and a judge signed it based on complete inter-species hearsay two links removed from any named entity to face to question it.
So yeah you can be imprisoned, brought to ERs while they run up private medical bills (they told doctors I had drugs up my ass), have a search warrant executed, and then at the end of the day be chased by debt collectors for the search that turned up nothing.
I refused to sign anything, they billed it to DHS, DHS refused it and put that I was the responsible party, then the hospital sold it to debt collectors under my name.
Granted I've never seen something like this where the chain includes a government agency saying "it's totally on this guy", but normally you can get good results from writing a dispute letter to the debt collection agency telling them to prove that you really owe this debt. The state of the industry normally means that they will not have gotten anything like actual proof from the hospital, just a line item in a spreadsheet... and if they can't prove it they're legally barred from contacting you about it or reporting it to credit bureaus.
(I've never done it, but I suspect you could get rid of a significant percentage of real debts like this, just on the strength of the industry's terrible record keeping practices.)
Suspicious, maybe; but not criminal (like lying to a federal officer in the course of an investigation, or willfully destroying what they’re lawfully trying to search).
Probably even more suspicious if you make sketchy excuses when the truth is fine. I’d go with “I (or %COMPANY%) figure electronic devices get imaged at borders or potentially stolen abroad, so we don’t carry them when we travel.” Blame the other country you’re coming from if you want.
Although I’d just not carry a phone across a border in the first place.
Related, regarding the “hiding a partition on a thumb drive” thing (8 days ago, 287 / 166; project is cool but note that tptacek and others in the comments know what they’re talking about):
I think in these situations your absolute best bet is fawning compliance. Ask precisely how high they want you to jump.
Perhaps your friendly smiling Yes-Sir-No-Sir-3-bags-Full-Sir act might just be enough to let you get on your way without anything else happening apart from a stamp in your passport.
Even the slightest hint of defiance or surliness from you to a border guard/policeman/etc - potentially at the end of a long shift, tired, angry, pissed-off or whatever - and you're straight away hugely more likely to have a bad day.
Finding strategies to "beat the system" will, I think, just be a shortcut to some other punishment/crime/taken-out-of-sight-and-given-a-proper-kicking-oh-they-resisted-and-went-for-my-gun/etc as this person found out the hard way by trying to be difficult.
I genuinely don't think there is a "get out of jail free card" or magic incantation you can say to get out of these situations apart from just smiling and being polite and not being a dick - if you get into a "who can be more annoying" competition, then the border guards/police will always win since they hold all the cards and will happily ruin your day/holiday/meetings etc by detaining you (its their job to do this after all)
There have been cases very recently in the US where the authority figures down dealing with the public are evidently in a very defensive, aggressive "us-vs-them" mindset, with an itchy trigger-finger to go with it. Don't be the person on the receiving end of a cop seeing-red because you're being a jerk.
If someone jumps out at you in a dark alley and they have a weapon and they ask for your wallet, what are you going to do? Swallow your pride and give it to them, or willingly enter into a high-risk and highly-imbalanced scenario where you are at a huge disadvantage against the other person for who this is essentially zero-risk, something they do multiple times a day, and they have nothing to lose from it either way.
Sure it is legally wrong and you can stand up for your legal rights in that situation, but it's a high-risk strategy to take.
Is that particular moment, that exact moment in time, the right time to take a stand for the rule of law? Or perhaps there are other things you can do after the fact?
Up to you.
Someone stabbing you and leaving your corpse in an alley is obviously pretty bad, but getting on a no-fly list for life/prison time/beaten senseless in a backroom in some random airport in a country where you are a foreigner and don't know the language or law/etc because you wanted to prove some point to a border guard at some airport somewhere and were generally being a jerk is no joke either.
Here, the only way this guy could've had a "good attitude" is if he had let the lady do whatever she wants with his service dog. This behavior is very common in situations where people feel entitled to something, but know the counterparty has the absolute right to refuse to cooperate. No matter how politely that information is conveyed, it's "rude" because they're being denied something they want.
The police don't like my attitude when I firmly say "no, sorry, I won't be unlocking my phone. I will only do what I am legally required to do."
People have a hard time understanding this because they are under the impression that they know how to be polite because they do what they think is polite. They are unaware that politeness is subjective and slippery and that people can and do use it to manipulate others into doing things they're uncomfortable with.
[Am in agreement with being conflicted about this advice]
In a normal functioning society with law enforcement that is actually accountable to it's citizens, yes - polite pushback will likely have no horrible consequences.
In a country that is either already in the depths of fascism/authoritarianism - or rapidly heading there, fighting for rights is seen as a "red flag".
See also: "On Tyranny" (Timothy Snyder) and "Do Not Obey in Advance".
It’s weird how few people understand that just being courteous/polite eases most encounters considerably.
Absolutely astonishing seeing people try the “I’m going to be as annoying as humanly possible” to the guy with the gun with the “my YouTube lawyer says I can” defense. You don’t want to have to defend your civil rights in court.
This goes doubly when at immigration where you basically don’t have rights.
This guidance also applies to: bank tellers, call takers, baristas, waiters, other people standing in line with you, the bus driver, your mom, the neighbors upstairs, the raccoon across the street, …
Politeness is the correct behavior on most walks of social life, but on this case it's a bit like the "turn the other cheek" approach, but in this case, it's turn the other butt-cheek because you're being effed in the A.
Also, you do have rights, but don't seem to really care a lot about them since, in the face of unlawful and oppressive demands by overreaching authorities, your suggestion is to be courteous with the oppressors for some reason.
It's best to do that for things they have the right to do. Trying to resist being questioned or having your stuff searched is a fool's errand. They'll make it happen one way or another.
But I'd never unlock my phone for US immigration. That's my whole life on there, and they don't have the right to compel me to unlock it. Even there, be polite. You can say "no" politely.
Where this guy went wrong was actively wiping his phone. That's no good. What you do is put your phone in its most secure state (generally powering it off) before you reach the immigration desk, and then if they seize it, you have to trust its security to keep them from getting into it.
I'm afraid to leave the country precisely because I worry about difficulties upon return. I understand that as a citizen I can't be denied reentry, but I also understand they can make the process extremely difficult or uncomfortable if they want to and I have little or no recourse.
They can still make your life very difficult. They could throw you in jail for "obstructing investigation" or something similar.
Not in US, but had my phone seized by authorities and was asked to unlock it. I'm walking free, but I think what really saved me is that I genuinely complied with investigation and the only place where I drew the line was me giving away my password.
If I used my right to remain silent AND not give away the password, I'd probably be charged with something. I'm sure its very similar in many countries, including US.
It's extremely unlikely they'd jail me for obstruction. They wouldn't have a legal leg to stand on and they know it.
From CBP themselves:
"If a traveler being admitted as a U.S. citizen does not present their device in a condition that allows for examination, the U.S. citizen traveler will not be denied entry into the United States based on CBP’s inability to complete an inspection of their device. However, as noted above, their device may be subject to exclusion, detention, or other appropriate action or disposition."
Worst case would be losing the phone, which is a tradeoff I'm willing to make.
If it helps, the nazis themselves probably asked this very question before they started killing ... whatever the contemporary term for nazis was back than.
We probably need honey pod fake OS systems that boots up if not properly handled displaying some stars & stripes as background image and having the US national anthem playing for any sound the OS is trying to play.
A phone with a backup account, unlocked with duress pin makes sense to me.
How hard would it be to admin-allow some apps to work across barriers. E.g., wallet apps work, airline tickets work, but email/socials do not.
the issue is that when a phone is unlocked, they can just plug in a USB device and scrape everything off it. The TSA agent may not be eyeballing a facebook account so much as plugging in an exfiltration software stack or malware.
> the issue is that when a phone is unlocked, they can just plug in a USB device and scrape everything off it
That's useless if the backup account and the main account use different keys for the home partition.
VeraCrypt (used to?) have this. It was called a hidden volume. One volume, but two keys, two passwords, and two different containers full of data. Technically, the second volume is written into the partition "from the back" using key 2, while the first volume is written "from the front" using key 1.
Fun fact, there's no protection against writing over data in the other volume if volume 1 + volume 2 exceed the size of the partition - and there can't be, otherwise the volume wouldn't be hidden.
Yep, and there is also no way to tell if a hidden volume exists, because a volume without a hidden volume would fill that space with random data indistinguishable from a hidden volume.
Why does the USB port need to even work anyways? It could just be designed to look like a USB port but fry whatever expensive and proprietary phone hacking device they bought from some scuzzy Israeli ‘security’ company when it’s plugged in.
Right, these goons are hand searching through phones specifically to find something, anything, they can use to make your life suck and detain you further.
A pin that boots into a dummy account, full of benign messages, photos, innocent web browsing, etc. is going to get you a pass. They'll flip through everything and get bored after a minute of not finding anything.
Far less likely to aggravate them than wiping your phone
Its such a shame Android's backup/restore is such a mess, even more so in GrapheneOS. I remember the era before Google and manufacturs started cracking down on bootloaders and custom ROMs - I used an app that could do effective, actually full backup and restore in single click.
Don't forget to have the Official Social Media of the President of the United States(tm) installed, with an account following the correct list of truthtellers and rightthinkers.
Yeah, you really can’t outsmart those with physical power and authority over you. Americans have asked for, or tacitly accepted this treatment of their visitors. The only big-picture solution is to stop visiting.
Nobody forgot a word. "Some" is nowhere near an appropriate word to use in that sentence. All Americans share the blame in what is happening right now. All.
Unlikely, because of your priors; you already think we are odious so it isn't like you are looking for the best in (or of) us, and second why would they want to meet you if you assume the worst of them? I don't support this Administration's behavior, but I'd rather meet an American who did and have a discussion with them about it than try to convince some dude who already decided I was an asshole, based on the country I'm from.
I had to look up the word to double-check as a non-native English speaker. A quick definition I'm working with is "Arousing or meriting strong dislike, aversion, or intense displeasure." The synonyms assumed are: evil, cruel, hostile, nasty, wicked (all from Grammarly).
The experience of "you" - Americans - for non-Americans is shaped by cultural exports, personal contacts, and interactions with available American institutions. The last of these is likely to start with the immigration policy and its execution in the form of an embassy visit to apply for a visa and later with the officers at the airport. How confident are you that these interactions cannot be described as "odious" in a significant percentage (maybe even the majority) of cases? I've never experienced it myself, but in my social circle, almost all who tried were pretty bitter about it, even when successful. There were some outright Kafkaesque situations as well. Does it come as a surprise that a completely ruined "first impression" ended up biasing them to some extent?
I think that's rather expected. I'm pretty sure the same is true for a portion of people who want to visit or immigrate to my country. I can hope it's maybe less prevalent - we're not as sure of our greatness here (still better than those others around, obviously! /s) - but I wouldn't count on it to be an entirely positive experience, either. Admitting this and trying to fix it (including, unfortunately, convincing that dude who had to deal with his fair share of assholes to get here that not everybody is an asshole) would probably be a better course of action than isolationism you seem to favor, but to each their own.
If the commenter to whom I was responded made his points about American policy or institutions (rather than all Americans), I'd wholeheartedly agree, but that isn't what was written.
I, personally, don't favor isolationism. I am a US-EU dual citizen, and support strong ties between the two. I think the world is a better place when we work together. But people like me are erased with the dumb comments about "all Americans." Honestly, this feels like one place where modern society is falling apart: the "if you're not with me 100% then you are against me 100%" attitude that social media "engagement" metrics reward.
If one's beliefs align with those who wish to strip civil rights from citizens who are different than one's own, then one is an asshole and doesn't deserve the time of day.
One can cry about being a pariah all they like, but don't be surprised when the rest of the kids don't want to play when one's unmitigated petulance and intolerance is on display.
>If one's beliefs align with those who wish to strip civil rights from citizens who are different than one's own, then one is an asshole and doesn't deserve the time of day.
Who are you talking about here? This isn't even half of voting Americans, who probably represent about 20-25% of the American population. Your argument is analogous to saying that all men are rapists, because many men have committed an act of sexual harassment. It's so shockingly Manichean that it wouldn't pass a middle-school composition assigment.
This seems like an insane thing to have to do for visiting a supposed first world country. If phones had been around during USSR times I imagine you would have had to do the same. Personally I will rather just avoid any travel to the US, and I hope others do the same.
Security concerns you need to think about when visiting the US are absolutely no less than those when visiting China these days. Treat it like a totalitarian dictatorship with more technological means.
Maybe marginally, but I'm still not visiting any county where I would be in trouble if the government/police knew my opinions of them. That's not just the obvious ones like US, Russia and China, but also countries like Thailand, Egypt, UAE, Israel to name a few. I like seeing the world, but not that much.
In China I would expect to be kicked out for having the wrong opinion as long as I didn't cause a big fuss. In the US I'd worry about being imprisoned.
China is known to hold Canadians on the excuse of being spies… spying for them is oftentimes filming without prior approval in non coastal but still civilian regions.
> According to a report by The Globe and Mail in November 2023, Spavor sought a multimillion-dollar settlement against the federal government for involving him in espionage activities without his knowledge. Spavor alleged that he provided Michael Kovrig with intelligence on North Korea, which Kovrig then secretly gave to the Canadian government and its Five Eyes allies without Spavor's permission, leading to their arrest and detention
Americans, too. My understanding is that there are a couple of hundred Americans being detained in China now. Some of these people are expatriates who gave up their PRC citizenship for American but China still claims to have dominion over (for what that's worth), but at least some have no colorable argument at all.
I'm surprised that we don't hear more about this from the American government and media.
I was not impressed when I was sent there on business trip, from what I remember their subways were not as big as in Beijing or other CN places and I hit there my head, obviously anything is better than HK/London. Normally I'm not claustrofobic, but in HK subway...
Something I think is funny is that a lot of Chinese police think of themselves as catching up to the US in terms of surveillance tech. Think about how many internal migrant workers China has coming to the cities for work then back out to the rural areas.
I haven't been to the US since Trump first got elected, but even before that, immigration agents often seemed oddly adversarial, whereas immigration agents in China just don't really seem to give a shit.
From what I read about them (never had the honour and pleasure of interacting with one) it seems for some time they have had too much power with almost zero accountability and consequences.
*Unless you are (well) known dissident/journalisy/politician.
US is much more totalitarian than China. Lived in China for years, had multiple times various visa/residence permit issues with police and guess what, nobody cared about my electronics or was sending me to any detention, all I've got were quie helpful officers trying to find workarounds for me to deal with the situation.
Same thing on my last trin in summer 2025, we didn't stay in hotel, didn't go to register to police as you are supposed to and when crossing province border checkpoint guess what happened - they let us go to our tourist sight and told us to just register after weekend and as usual officers in police station couldn't care less, they just registered us without any issues.
You can complain about plenty things in China, there sure is a lot of bureaucracy but when you actually have to deal with them, they are pretty laidback and trying to be helpful usually.
By these standards and my experiences with registration in police stations in other two EU countries I can tell you China was the friendliest most laidback and convenient experience.
People who claim China is totalitarian dictatorship clearly never been to China and should get off their high horse, China nowadays make less trouble for their own citizens than EU hating them trying to make lives of EU citizens as inconvenient and expensive as possible.
Were you a Caucasian in China? Foreigners, particularly those from powerful Western countries, tend to get much more deferential treatment than locals.
Obviously, if you do your research you will not go as black (partly also brown) person to China/Japan/East Asia unless you have any other option (though I guess students from poor African/*stan countries don't have many options).
I would disagree with different treatment compared to locals vs whites. It's not like whites/foreigners have only benefits, good luck booking ANY hotel (I guess this improved since visa free policy) or renting an apartment as foreigner, which was a shit show or even good price in some markets in past (this was solved by online shopping). But you will get definitely different treatment as white foreigner vs "darker the skin worse the treatment" foreigner.
In the past I've felt the same way in China. At a macro level there may be a lot more restrictions there. But when it comes to day-to-day life, it seemed like people had much fewer regulations bearing down on them.
For example, you'll see farmers on the Shanghai streets come in from the countryside to sell their produce - and doing so with impunity. In, say, NYC there are vendors still, but they've got their wares on a blanket that they can quickly scoop up and get away when the police come by.
There seemed to be a tacit agreement between the people and the Chinese oligarchy: if you let those in power just keep doing what they want, they'll just ignore you.
However, China is a pendulum. It was very much the opposite at the time of Tienanmen Square; from the late 90s into the 10s there was quite a lot of freedom; but now with Xi's power having been consolidated, it's swinging back toward authoritarianism again. I've seen people describing more recent conditions there as the start of Cultural Revolution 2.0.
> In the past I've felt the same way in China. At a macro level there may be a lot more restrictions there. But when it comes to day-to-day life, it seemed like people had much fewer regulations bearing down on them.
in general I would agree (also pretty low taxes for small businesses and employees), but:
> For example, you'll see farmers on the Shanghai streets come in from the countryside to sell their produce - and doing so with impunity. In, say, NYC there are vendors still, but they've got their wares on a blanket that they can quickly scoop up and get away when the police come by.
this is bad example, chengguans are infamous for scaring away street sellers, which is one of the reasons why people operate their business from (electric) tricycles, so they can get away, when you see chengguans are coming they will disappear quickly same as those blanket sellers in the West, alternatively in evening you will see car trunks open with people selling their stuff from there, but it also depends where you are, I'd assume Beijing is the strictest since in BJ suburbs where I was staying last summer this didn't seem to change much over last 10-15 years
I used to work (among others) in Xi'erqi subway station neighborhood (Xiaomi HQ) and what happened around the station is happening all across China - cleaning streets/gentrification, there used to be huge market next to subway station where you could buy all kinds of food and things from street sellers, but when I was leaving they effectively shut it down. Same thing happened at my parents in law town, though it's not so strict in BJ suburbs, people still operate from sidewalk, but there used to be for instance nice bakery market which was shut down, same with small local police station, now everyone needs to go to big central one and many other (small) places shut down, while city keeps growing. So they are clearly cleaning the streets and regulating street sale especially in Beijing. Though when I walked last summer around my other workplace across CCTV in CBD (downtown) there was guy operating from relatively big folding trailer, but I guess he has permit, didn't see any jianbing/jidanguanbing small sellers on sidewalk as I used to frequent on the way to work.
I agree China around 2010 was peak China when it comes development balanced with freedom, I remember how we thought upcoming Xi will open China even more, we couldn't be more wrong... On the bright side at least now you can go 30 days visa free to China, which is a bug positive compared to past, 30 days should be already quite enough even for regular tourist to cover China, those previous 15 visa free days was pretty much useless.
Beijing/Hebei, I've done paperwork/lived long term only in these two regions, worked on business trips in more provinces, but don't have any experiences with bureacracy over there other than HK where you have to go if problem with visa
I wouldn't say you are overreacting at all. I know someone who was detained for months on US soil after a phone search where the only "evidence" against him they found is illegal content sent by someone else to him on a group chat he doesn't even check. Had to get a lawyer and spend time in prison just waiting to be deported back.
Insulting people is a crime in Germany. If you said "Hitler was a poopy head" that'd be illegal. But they wouldn't bother to enforce that. If you say it about a real person, they can press charges.
fyi: insult is a so called "Antragsdelikt". That means authorities can only press charges when the victim files an official complaint. Otherwise they can't do anything.
Which also means they wouldn't be able to do anything about you saying "Hitler was a poopy head".
My dad's eighty+ years old, he was born in the States, though he did give up his citizenship. He brings a "fake" phone when visiting family, he's been doing so for years.
Me; I just change all my tabs and recent history to slightly kinky porn and truth social. They do look hard, but they don't look hard.
The US is first world on a technicality: the first world is defined as countries that were allied with the US during the cold war. If not for that, it'd be classified as developing.
It's common to mix up developing/developed and third/first world because they were largely aligned during the cold war. But there is one first-world developing country.
The biggest economy in the world and the richest country to have ever existed is not a developing country, although it is quite unequal. What you've stated is political rhetoric that you want others to accept as fact.
Many developing countries have extreme inequality. What would it look like if the whole world's reserve currency accidentally ended up being the South African Rand?
The behavior of the us is so stupid and self-destructive I'm constantly amazed that the average trump supporter doesn't see it. But the failure of the political resistance to him is the real surprise. If your buddies have the majority in the house and the senate there nothing you can do?
This is not true. However, because of the massive inequality, I often found it easy to use a sentence I saw somewhere: "the US is a South American country that happened to become successful".
As much as the current situation in the US upsets me, anyone who has spent considerable time within the US and outside of the US cannot believe what you've stated as anything other than a trite delusion. The US isn't just the richest country in the world, it has the second highest purchasing power parity per capita in 2026 and historically the highest. The average person in Mississippi is economically better off than the average person in England.
I used to love visiting the US. I have many friends there, and I really enjoy staying in places like Seattle and SF. But I haven't gone there since Trump 1.
That said, I think protecting your privacy is a good idea in general.
... which by now is a banana republic of the worst kind. Can you interact sanely with an insane counterpart? Avoiding to visit would be my recommendation too.
European citizens can travel in the EU without even noticing that they are crossing borders most of the time. I once got lost on my bike and accidentally ended up in France for example.
And if you're unpopular enough, they can also abuse arrest warrants for political persecution from another country. Case in point, captain Tommy Olsen from Norway, who Greek authorities accused of "human trafficking" for helping boat refugees.
They've deliberately made it very easy to request arrests across borders, so it isn't all rosy. One of the reasons it really sucks for everyone when an EU country starts slipping towards fascism.
Australia has stricter screening for fruit than for people.
don't bring anything organic to Australia unless it's been commercially processed, and even then show it to the border officers so they can make the call. You don't get penalized for showing them something not allowed, you just can't bring it into the country, and they throw it in the bin for incineration. Penalties start when you try to sneak something in anyway.
An Australian sniffer dog was very interested in my rucksack when I visited Australia a while back. Apparently it was due to previously having kept some bananas in there. They really don't mess about with finding and fining people importing anything that could germinate. They are very friendly though and one officer even washed some seashells that my wife found in New Zealand.
Australia has very one sided arrangements with some other places. It is far easier for Aussies to get into the UK than vice versa, for example. They get in visa free, but UK citizens need a visa.
I have an Australian acquaintance who got into trouble recently since he was born in Scotland but moved to Australia as a child. He is about as Aussie sounding as they come and went to school there, but after working in the UK for a year or two, Australian immigration gave him grief when he decided to return.
Australians actually comprise one of the biggest groups of illegal migrants in the UK, but they are more rarely commented on as they are much less visible than certain other groups. Australians with a parent or grandparent from the UK qualify, whereas those who don't, don't. But the ones who don't are rarely deported, and can't be easily distinguished in many cases.
> I have an Australian acquaintance who got into trouble recently since he was born in Scotland but moved to Australia as a child.
He's not a member of ACDC is he? ;)
I think many in the UK don't really regard Aussies or Kiwis as "immigrants" at all. I have various red faced in-laws with political views that are, shall we say, to the right of centre and they see Aussies as just Brits with funny accents.
But yes, if you had someone whose UK ancestor back in the 19th century, or descended from Italians, Greeks or Lebanese, with an Aussie accent, then you're unlikely to be a suspect.
Xiaomi phones have/had a feature where depending on which finger you unlock the phone with, it can hide certain applications/folders on the filesystem.
You need it to look set up enough to do critical communication / tourist activities. It should look like you had to reinstall your OS right before your trip, and only had time to get the basics on there. Most people will prioritize communications, maps, and payments over anything else, with video/music/books/podcasts following that, and signing into the vast universe of social apps later if ever.
The comprehensive solution would be for the supreme Court to say this is unconstitutional. They don't seriously think that smuggling CSAM on phones is how it gets into the country. It's all pretext.
> I think they should not have this power, but the agents and courts probably don't care that I think that.
...
> and about not angering the agents more than you plan to
When I was a teenager (long ago at this point), I got into an argument with a police officer over surfing in a certain area. It was pouring down rain, so he was annoyed he had to sit outside and wait for my friends and me to come to shore. Once we got in, he was telling me that he could take my surfboard and my car, and all other craziness. Being the dumb smart-ass I was at the time, I laughed and told him he was full of shit, among other things. He went to take a swing at me but his partner grabbed him.
We all go to court and the judge immediately dismisses the case against all my friends. I had a lawyer with me that I knew and he went to talk to the cop and when he came back over he goes "I don't know what you did, but that cop hates you." I get up in front the judge and he praises me for understanding the law (and I could still see the cop was visibly pissed), but then says he can't have me disrespecting and being a smart-ass to his cops and gave me community service that once completed whatever the ticket was would go away.
> but then says he can't have me disrespecting and being a smart-ass to his cops
Maybe it's just me, but I am of the exact opposite opinion. Cops have enormous power, and any misuse of it should be pushed back on hard. Cops that misuse their power should not be respected. An informed citizenry is a wonderful asset in making that power imbalance less of a problem.
There's a difference between polite pushback and being straight up disrespectful. It shouldn't matter as the cops shouldn't abuse their power and shouldn't attack people, but we live in the real world. The judge probably didn't want to have to deal with the potential future mess if op didn't learn their lesson and got beat up by a cop.
"Straight up disrespectful" can be made up to mean anything, but in general should refer to things that shouldn't bother police officers doing their job. They can get pissed off about it in their own time.
And then people are surprised and saddened when LEO start acting like robots and default to treating you as threat to be mitigated as much as legally allowed in context.
The parent described a story from a different reality - one where people are people, where communities have basic expectations of conduct, and authority is respected on all sides. The cop was angered and snapped (bad), but was stopped by their partner (good, and it's one of the reasons cops have partners!). The parent was a kid who behaved like an asshole in a moment, by their own admission. Plenty of teenagers act like that, it's an age-old more. The judge did not act as a proxy for the angry cop to retaliate, but instead reacted correctly by both praising the civic attitude (to the chagrin and I imagine further embarrassment of that cop), and addressing the behavior that is not welcome in a civilized community.
You can't have it both ways. You can either have civilization of people, or violent hellhole of laywers and robots. Pick one.
(And if you pick wrong, then don't complain, and by $deity, don't export these attitudes overseas, please.)
People are frequently "straight up disrespectful" to me in my work. I have to maintain professionalism and composure at all times, and if I were to suggest otherwise I'd get laughed at best. I don't see why it's hard to ask for cops to do the same. A real threat that I need to call security for is very easy to distinguish from a person just being an asshole.
> The parent described a story from a different reality - one where people are people, where communities have basic expectations of conduct, and authority is respected on all sides. The cop was angered and snapped (bad), but was stopped by their partner (good, and it's one of the reasons cops have partners!). The parent was a kid who behaved like an asshole in a moment, by their own admission. Plenty of teenagers act like that, it's an age-old more. The judge did not act as a proxy for the angry cop to retaliate, but instead reacted correctly by both praising the civic attitude (to the chagrin and I imagine further embarrassment of that cop), and addressing the behavior that is not welcome in a civilized community.
So why did he not give the cop community service then?
If I swung at someone at my job I'd be fired. If a security guard swung at someone who was not an active threat they'd probably be fired too. We still do our jobs.
> And then people are surprised and saddened when LEO start acting like robots and default to treating you as threat to be mitigated as much as legally allowed in context.
yeah that would be pretty petty, given that most people in their lives are able to perfectly deal with such behaviour, whether it's their job or in personal life, without a judge to slap annoying people on the wrist
what is this prima donna behaviour?
it is them that need to work to deserve their uniform, they need to understand it is an honour they have to keep up, be the better person. if you can't do that, you have no job wearing that uniform.
but I guess their narcissism must feel strengthened by people like you arguing this is perfectly reasonable behaviour for officers of the law
you can have it both ways, you just need to want it
There is a general understanding that police officers deserve implicit respect while on duty, more so than random citizens, as they are representatives of the law. Swearing at a random passerby is rude but legal, swearing at a police officer is against this need for respect and is a misdemeanor in many places around the world.
Police do need authority and respect in order to do their jobs, of course. But at the same time their position of power and their role as maintainers of public peace mean they should have a thicker skin rather than thinner. They should be able to keep their professionalism and composure in the face of adversity better than the average person, and someone being verbally disrespectful towards them is at the lower end of that.
Police officers who think their pride needs to be put first in the name of authority may be common around the world but that doesn't mean reactive cops are a good thing.
It's perfectly legal in the US. In fact it's legal to lean out your window and yell at them. It's protected speech here, and for good reason. Otherwise the cops could just say your speech made them feel disrespected and you could get penalized. The first amendment in the US has been interpreted pretty broadly to protect a lot of speech that in other countries could get you fines or jailtime.
Respect is earned, not given. Police in some communities are (generally) respected, but they are also (generally) professional.
When trust breaks down, it’s up to those who hold power to restore it, not those subject to power. Too often authority demands submission as a substitute for trust, and the results are predictable.
Sure, I agree that we should be polite and respectful to random people, cops included, but that judge decided that it was illegal to be disrespectful to a cop, which is pretty fucked up.
Some people talk about mutual respect, but it's not mutual at all because they use a different definition on each side. They demand you "respect" the power of their position or uniform, or else they won't "respect" you as being human.
If a cop demands your ID when you have no obligation to give it, your answer should be something to the effect of "I hope you get hit by the next passing 18-wheeler".
Malignant authority needs to be treated with maximal hostility. The 'lesson' you want here is completely backwards.
That answer would mean that you’re are on drugs. And your being on drugs means that the cop can request your id.
America is a free country. Everyone can ask you for everything. I can ask you for money. A cop can ask you for an id. No need to rush and provide what you were asked for. But that 18 wheeler thing is extremely counterproductive.
I said demand, not ask. Demand requires reasonable articulable suspicion of a crime.
Many cops arrest people for not providing identification when they're under no obligation to do so. Those cops should be insulted, and deserve consequences.
There’s no legal difference between polite pushback and disrespect. In a just world, the commenter should have had zero consequences, and the cop should have gone to prison for assault and abuse of authority.
> There's a difference between polite pushback and being straight up disrespectful.
That's a distinction without a difference. Cops see any form of noncompliance as disrespectful ("contempt of cop"). You not only legally can, but absolutely should be able to tell a cop "Get fucked" to their face and walk away if they have no legal basis to detain you. The fact that in reality you will have your life ruined is a problem far worse than any "disrespect".
Absolutely. It's not worth it unless you're more principled than anyone I know at least. Instead you're left with a minor punishment and most of your faith in the justice system left behind.
There's a huge difference between misusing their power and not having perfect understanding of what they're allowed and not allowed to do.
I'm sure there are scenarios where the cop can confiscate the surfboard and the car. The distinction is probably somewhat vague even for highly educated lawyers, and cops cannot expected to be that.
He should have stood up for his rights, sure, but laughing in the cop's face and telling them they're full of shit is disrespectful, and at least where I live is a misdemeanor even if the original case is wrong.
As a citizen, when I have an incomplete understanding of what I'm allowed and not allowed to do I have every incentive to stay on the side of things I'm sure I am allowed to do. Just threatening to do things that you are not allowed to do has the annoying tendency of being a crime
And what did this judge think (not much, apparently)? Punishing you will make you respect the cops?! This idiot confuses the fear of punishment with respect. Also, does not understand that respect is not to be forced but to be earned. Forcing it will erode respect and generate lots of pretension and covert hate. This judge basically endangers all cops (and the community) for giving revenge to this one prick lacking self control! It's mind-blowing that someone less mature than a teenager can become a judge!
Too bad you could not bring that judge up on charges of judicial misconduct - if he indeed told you that the charge against you had no merit, but decided to punish you anyway because he did not approve of your demeanor.
... or otherwise, that people in your community could not apply any counter-pressure to such judicial behavior, in the media and public fora.
To be fair to the judge we all had broken an ordinance about surfing in a certain area. It was enacted to protect swimmers in the summer. With that said, there was a storm with wind, rain, and currents that had pushed us into the area. Obviously there were also no swimmers out.
The ordinance was removed a few years later. This cop was also known to hate surfers. All the small beach town BS you hear about.
Me solving technical problems without motivating requirements:
Can you just like have the graphene OS device wipe itself if it knows that it's going through a border and you haven't logged into the device in 24 hours?
Or maybe, Enter into a precipitous one false move mode, where it's just about to wipe itself if the 24 hours elapses, And it does wipe itself if someone doesn't put in a code the next time the device recognizes that is being handled, within like 90 seconds of being picked up?
I worry that at some point, the physical device won't matter. Border authorities will know your email address, and could force you to log into your account on a device they supply. Five years ago, I would have called anyone even bringing up this possibility paranoid, but a lot of things that were completely unimaginable outside of Hollywood political thrillers have already happened.
And then there's the problem that you can't just log in with name and password to your email address. You need your special "authy" style number generator, or a software version on the phone. They know you probably have it on the phone. but what if you bring your other phone that doesn't have it on there - you removed the software before you left so no one could even log in.
All these fancy tricks don't work because the doofus/poor soul at the border doesn't understand the nuances and they don't know if you are lying or not. Even if you wipe your phone and restore it once in the safe usa, that's no doubt suspicion of a crime.
I don't own a cell phone, haven't for years. I fear this alone would be enough to arouse suspicion and I'll be denied access. Not an immediate problem for my family: as a Canadian I have no plans to visit the states for a long time. However, I could see this being suspicious in other countries as well..
What about simply not using a smartphone and accessing your data via internet when you're in the country? You could use Mega (secure file storage) to access your files, for example.
I wonder if border agents could coerce you into giving access to your internet file storage, though.
I believe they can. I believe they can even request your social media credentials, despite that being against the ToS for those sites. It's not against the law to refuse, but they can and will reject entry on that basis.
In other words, 2FA might actively put you in danger. Something to consider before travel and perhaps temporarily lowering your digital security to preserve your physical one.
Remember that the creator of Mega is getting extradited to the USA - again - a country where he's never been, by the way - for basically this crime (using encryption).
Not true. He previously ran a site called MegaUpload which hosted copyright infringing files. This is why he created Mega, which is an end-to-end encrypted cloud storage service similar to OneDrive of Google Drive.
Even if Mega users host illegal or copyright infringing contents he can't be convicted for it.
I'm just amazed that not everyone is using it. People don't seem to know about it and they're not advertising it. They probably made a deal with LEA or politicians not to spread the word in exchange for not being extradited.
There’s more to it than just not antagonizing the guards. I mean if you make them mad by doing something that is legal that’s probably not ideal for you practically speaking, but it’s not the end of the world. Destroying evidence while they are investigating you is not just going to make them mad though. It is illegal (18 USC section 1519).
Where I think people are a little confused here is not realizing that this would be equally illegal in many other countries. At least in the UK and France, border investigators also have the power to demand your PIN. And it is also illegal to wipe your phone during an investigation in those countries.
I wonder if the smarter thing to do would be to quietly nuke it as soon as it becomes clear that you'll be detained, so they can't really know that it wasn't already blank (IE you aren't nuking it in their presence).
With self-hosting, it's possible to easily bootstrap a clean phone with all your data and passwords from scratch, without relying on any third-party cloud services. The only thing you need to bring across the border is your brain (which contains the most basic information on how to set up your password manager) and maybe some kind of 2FA generator. Your password manager then contains all the other information you need to get everything running.
I don't think it ever makes sense to transport actual data across borders if you care about governments gaining access to it.
I'm not sure what you're referring to, but what I basically do is self-host everything that stores relevant data: Vaultwarden, Immich, Notesnook, etc. I only know how to set up Bitwarden and my 2FA generator from scratch, so when I get a new phone, I install Bitwarden and the 2FA app and set them up.
Then everything else is documented inside Bitwarden. It's just a matter of installing the apps and logging in using the credentials stored in Bitwarden and a 2FA token generator.
There's no need for relying on any phone OS features.
This seems to describe a workflow with a small number of apps that store things remotely.
I want to back up my phone and restore it in one step, possibly to different hardware, and have it work like nothing ever happened. I can do that with a PC. I ought to be able to do that with a phone too.
I'll use Signal as my example of an app that's especially annoying to deal with in the border crossing scenario. I want to back up Signal and install it on a clean device without losing messages, changing my safety number, or verifying by SMS with a phone number I may not have access to at my destination. It's not possible, though I'll grant some of that is design choices made by Signal rather than the operating system.
I have to use its built-in backup function to keep my messages; if I just copy the data, it can't decrypt because the keys are in the old device's TPM. Even with the backup and password, I have to use SMS verification. Finally, the safety number seems to be tied to the keys in the old TPM, so I there's no way to do this without changing it and annoying my contacts (or teaching them to ignore safety number changes).
Many countries now assume you have a phone. For example getting UK visa requires a smartphone. I don't think going without a phone is feasible nowadays.
Another question is if going with a burner phone that has just sim card and bank card, sufficient. But then you need appleid/google account on the device, and this again links back to your phone number, and it's not easy in practice to have proper clean device.
You can simply use an Apple account for your primary device and a Google account for your burner (or vice versa). Or set up a secondary Apple or Google account. Or use a device/OS that doesn’t require one of these accounts!
My friends from the German CCC are mostly like (1) do not travel to the US and (2) if you absolutely must, travel with an empty device with decoy data and download all data you need once you're there.
People have been doing this since way back in the TrueCrypt days - IIRC you could configure it to run a whole fake version of Windows if you wanted without easily revealing your actual main volume.
Most hardware crypto wallets also have a "duress wallet" feature where you keep a low balance for the same reason.
Wiping is obviously extremely suspicious and asking for trouble
"Wiping is obviously extremely suspicious and asking for trouble"
It's sad this is the default view. It's his device, his data, his life on that phone. If he had wiped the phone before the interrogation it wouldn't be a problem. How long before? A second before? A week before? But wiping the data a minute later is suddenly asking for trouble.
I don't like it and I wish we had more privacy, but realistically there is no such "right".
If you're going to be in a situation where you're in a room with some goons backed by the full power of the state, it is what it is.
Maybe because I'm not American I don't have any hangups about seeing the US government this way, but my own government is no different - you can (and people have) get stopped at Heathrow, taken to a dimly lit backroom and given a going over for hours
I don't know that there is case law on this but I imagine that "prior to the admissibility inspection" is likely to be treated differently from "during the admissibility inspection" or "during administrative detention or secondary inspection" (or "in response to a request or question by a border agent"!).
Edit: a bigger picture question is the difference between things that may be legally punishable and things that may cause suspicion from CBP agents, which aren't the same thing at all.
it seems to me that if you give them a password to unlock the phone and when it unlocks it has been wiped that will cause problems whether it is the password that causes the wiping or not?
A US citizen has an almost unlimited right to enter the USA. The border search rule permits officials to search for things that are illegal to import. A blank phone is not illegal to import.
A non-citizen who arrives with a blank phone might be denied entry because it seems suspicious.
well OK, luckily my checking of media informs me no citizens have been stopped and held in custody by immigration without due process or any particular grounds, especially recently, so it all sounds good.
We noted in the border search guide that lying to the agents in response to their questions is potentially a crime in its own right (even if it's not done in order to hide anything illegal). We thought that this made hidden volumes quite tricky, particularly if one's intent was to pretend to comply with a question or request while actually not complying.
Sure - but the point is, if you're instructed by the officer to enter a password so they can inspect your device, and you enter a fake password and show them a fake version of your data, that could easily be found later to constitute a lie and lead to serious legal trouble.
They can't compel you, no. However, they can ask you to do so, and if you enter a privacy password that shows them something other than your real device (which is what this thread was about), you can very likely be faced with charges of obstruction of justice or even perjury. The point was that it's better to simply refuse, and accept the consequences of that, rather than trying to use technical means to trick them or to wipe data.
Note that if you're not a citizen of the USA, refusing to comply with a request like this is very likely to have you sent back to your country and denied access to the USA forever. While they can't legally force you to comply, they can absolutely deny you entry for any reason like this, regardless of having a valid visa and everything else in order. This even applies to legal residents.
If you want to gamble on that, that's your prerogative. But if they suspect you did this, computer forensics techniques can easily reveal this, especially if the rest of the data on the device is recoverable to you as well.
Edit to add: beyond forensics, they can also simply ask you to enter the other password, to prove that the account you showed them first was the right one.
Not enough, e.g. when crossing the Russian border (even as a citizen) your phone can be connected via USB to a device that uses exploits and whatnot to download all of the data. Surely US border guard can do something similar.
And using encryption will only make you more suspicious, and may be a reason to get jail time until the situation is "cleared up" one way or another (e.g. by getting even more jail time).
Only a second phone works, if you can make it seem like a device you're actually using (though also not a silver bullet as e.g. a lot of messenger metadata is available to governments and border control can physically coerce you to log in to your real accounts)
Problem is „are you sure you marked for deletion all the correct things” because you could have already deleted it before traveling or moved to other device you don’t travel with.
Selection on border control might be arbitrary, they can hold you or send you back over a photo or something you wouldn’t think should be a problem.
Ideally you would like to have all wiped just in case but then you really stand out…
That's a more risky strategy. What if you added new files since the last time you updated the deletion profile? It's also technically more challenging. You have to think about what might be in RAM, caches, backups, etc.
The good thing about a total wipe is that it's very easy to implement, and it's hard for it to go wrong. You just encrypt the whole drive and, when you want to wipe it, erase the key.
Yes, this also has the advantage of speed perhaps. I can see, deleting specific apps (and their data) as thing #1, and thing #2 would be certain directories. Of course, the problem is, are icons going to be vanishing off the home screen, when the agent is looking at it? Or will the unlock -> screen coming on, be super slow?
Of course the problem there is, many people have an app store installed, and app stores have histories. And logs. And "what you used to have installed" is so easily found under Google Play, for example.
As someone else said in this thread, the law isn't code. It's not if-then statement based. It's also predicated upon intent in many cases. What actions did a person take, and why, when told to (for example) unlock their phone.
The problem here is that if you are asked to unlock your phone, any action you take to thwart that request by "trickery" to get data deleted, could be construed as 'deleting evidence'. So while some methods might make it more difficult for the border agent to realise "something happened", if they're suspicious still, then you're still in hot water.
In the eyes of the law, the court, and likely the jury, you've done a sneaky thing to thwart evidence collection.
The only safe method is a full wipe prior to travel. In this manner, you're not deleting evidence when told to hand it over. It's an entirely different bar. They can be cruel about it, and take your phone for a few months, but you're not going to be in legal hot water.
In as no one will see the phone is wiped until you are compelled to unlock it, there's no greater change of the phone being seized. You're already being investigated. Just be blunt, say "Whenever I travel, I just wipe it", and that's that.
This is why it's a shame that GrapheneOS has no viable backup solution. Its build in method is unreliable, and doesn't work very well, and is gitchy, it's a very well known problem.
And Android and ADB sometimes have issues with large backups of directories, and so you have to manage that with tar + stream and other business, but at least working around that is easy.
But if you could backup individual apps and all their data, you could uninstall all your privacy laden stuff, cross the border, and reinstall in minutes.
That's the true, legal way to travel safely. Especially if the app removal resulted in a 'shred' of the data files instead of delete.
If anyone has ever struggled with large data backup/restore, here's the only real method I've found for copying large swaths of files from/to via adb:
Note that in the USA and a few other jurisdictions, I believe there is now a recognized possibility for the border agents to ask for access to your social media, so even wiping the phone, or even traveling without a phone, is not entirely safe.
As far as facts go I was thinking of this one case:
... where I seemed to recall it was a social media post, but it is unclear whether it's private messaging, public social media, or private messaging under a public social media account.
[EDIT] according to [1] it was on WhatsApp with a U.S national.
My understanding is that refusal to provide social media accounts, or passwords to devices, or passwords to social media accounts, can be considered suspicious in its own right and ground to be held in custody for further exam, and/or denied entry; foreigners do not get to have the same "give password" == "right to not incriminate yourself" that U.S of A. citizen have. In doubt I would assume I don't.
Yes, as a foreigner there is no such thing as a right to enter the USA - the CBP agents can refuse you entry for any reason whatsoever and you have no recourse (they could be breaking various laws of their own and face personal liability for their own actions, of course, such as if they were seeking a bribe from you - but that doesn't give you any right to sue over their refusal to admit you). The only exception is asylum seeking, where there is a legal right for your asylum case to be heard.
> The big picture problem is that the agents performing the searches have an enormous amount of power in terms of potentially seizing devices and potentially denying entry for non-citizens. I think they should not have this power, but the agents and courts probably don't care that I think that.
That's the reason I never traveled to the US and never will, just having IT security in your CV is enough to make the border gamble not worth it
Note that border searches of electronic devices are extremely rare overall. There were some statistics from CBP implying a base rate lower than 1 in 10,000 (I think lower than 1 in 100,000) border crossings.
I do know two people who have experienced them as a result of the government taking a personal interest in them, so it's certainly not impossible. However, it's not a common experience.
I've personally experienced searches of my suitcases about four times in about 100 U.S. border crossings (as a U.S. citizen, but the people performing or directing those searches generally didn't know my citizenship status), and zero electronic device searches.
But why would that be legal? The device is owned by the individual. No judge signed any warrant search for the device. I can do what I want with my device - that is a basic right of property. Imagine if border guards seize money willy-nilly.
Edit: Not on the border, btw. Just people travelling inside US. I guess it was their mistake to carry cash instead of getting a bank check or something.
This part is pretty new. I wonder if my former colleagues have done any FOIA work looking into how travelers' disclosed social media accounts have been reviewed or analyzed!
It's reasonable for a country to want to know if you're likely to abuse your visa.
Eg your socials might show you are a professional paid speaker at conferences. If you applied for a tourist visa that would be reasonable to flag you and ask you if you have paid gigs on the wrong visa.
Europe will also ask the same questions for foreigners. If you're a young woman travelling on your own you can expect questions to challenge if you might be earning money as a nanny on a visitor visa. Checking their phone messages to see if they've been making arrangements to this effect is a very straightforward way to determine intent.
Tell me if I'm wrong but it seems that if you cross borders a lot the solution is straightforward. Have a second set of disposable devices for out of country usage with nothing but a VPN to virtual desktop. Give them the password and your mailing address to return when they are done, or just consider it abandoned?
Can they force you to log into another remote computer in another country to examine it? I'm not discussing politics, simply the solution that you can actually do now side of things.
I don't have any hope of this situation improving globally and my gut says it will get much worse over time. I wonder if in the future you will have to not only give them your computer but have some sort of follow up investigation of your "real" computer if you do this two device method.
This person is a US citizen. What happens if he just said nothing (beyond identifying and answering basic questions) and refused to cooperate? How long could they hold him? As a citizen they have to allow him to enter eventually.
According to the ACLU I think this person would have been better off saying little and not wiping their phone.
And they would have taken his phone, pulled it apart and cloned the memory to get the data. And in a month or three, returned his phone to him in some condition which may or may not include "working".
I've done that and they held me for about a day, strip and cavity searched me, imprisoned me, "diesel therapy" me across the state while taking me to multiple private ER claiming there were drugs up my ass to run up hospital bills in my name. They've also threatened to revoke my passport or deny me entry to the country (both failed).
They also would not allow me access to a lawyer during questioning or imprisonment.
Another woman was at the same port of entry, was raped to "check for drugs", sued, and lost. Apparently raping is a legal way to search for drugs (that were not there).
I'm sharing this experience just to share, not suggesting or making any claims about what people should do with it:
One of the best ways to get through airport CBP quickly without being overly hassled is to be overtly, clearly sick in a gross way. If you're about to vomit or have horrible diarrhea, they do not want you in that line any longer than you have to be. If they're the type to want to take people down a peg, they won't bother with you because they're already miserable, and if they like picking on the weak, they're probably going to go for a solo young female traveler who isn't ill.
Nobody wants to risk getting vomit on their clothes or in their work area, having to close a line and shuffle people around while their coworkers glare daggers, or subject themselves or their coworkers to the very fun smells of human bodily fluids.
At the same time, it isn't purposeful so it's not read as malicious.
This is one of the reasons I also won't ever go to the US again.
While most of my Italian/Polish friends had 0 issues, on a handful of occasions people were stopped and questioned for hours with agents pretending full access to every single device and just overall treating you as criminals.
In one occasion a friend of mine stated that he was quite sure they just enjoyed that kind of sweeping power and it had nothing to do with border security, it was just fun to them.
In another one, the suspicion was on the fact that this person did not have socials, he just disliked them and had nothing except a Google account for Youtube. This fact made them super suspicious and the person was stuck at La Guardia for 3 hours, even his body was inspected. Disgusting.
> ... you may have to think both about protecting your data by technical means, ...
I thought about that. And I came to the conclusion that a phone is a pathetically bad device to both store your data and to access your data. Mediocre screen. Mediocre input methods. Moreover most phones happen to also be spying device.
So if you think about "protecting your data", a reasonable idea is that a lot of data is way better kept on your homelab, with say encrypted backups in a safe at the bank, at a relative's place, on a server you rent, etc., rather than on your phone. And there's really little need to access your data from your phone.
Oh and I'm no luddite: I've got a homelab, I rent servers, I pay three AI subscriptions, etc.
But my phone is boring. There's no app on it besides the stock ones (say Google Maps) and then I added the Google Authenticator app (for stuff still using that kind of 2FA).
If people were to wake up and stop being glued to that mediocre thing, the problem would already be 99% solved.
I’ve seen a lot of people on the internet over the years say things like “the government can’t make x illegal, it’s just y.” For example, the government can’t make wiping your phone at the border illegal, it’s just punching four numbers into your phone, just like a pin, only a different four numbers, which could just have well been your pin.
U.S. law though is highly non-autistic and what you were trying to do is just as important as what you superficially did. Hell there could have been a third set of four numbers that were the nuclear launch codes. It’s not the fact that it was four numbers, it’s what you were trying to make happen when you typed them. Now of course whether they can prove what your intent was when you typed them is another matter, but generally a duress pin should be for when robbers are breaking into your house, and the government will be on your side, and not when the government will be against you.
"U.S. law though is highly non-autistic" hilarious but also another point to emphasize is how truly depressing American courts often are. Take the right to a jury. It sounds noble in theory. But when they say judged by your peers they don't mean your actual peers.
It's people who couldn't get out of jury duty. Prosecutors have high success rates. Federal prosecutor success rate is over > 90%. Studies of jury psychology show how much peer pressure and other factors extrinsic to the law come into play.
Remember what happened to Aaron Swartz. Law is the mask of power. By all means defend and assert your rights, but understand the costs. I find people are under such illusions about how cruel the American justice system is that this leads them to make foolish decisions. Do not underestimate the adversarial nature of the justice system, nor the accompanying incentives agents of the state who are on the other side of you have to lie.
As a convicted felon for the last 25 years without a single incident since I was released. I tell everyone I know to never trust a single thing anyone says if there is any chance you are being looked at for criminal charges. It's "I want a lawyer" and nothing else. Just SHUT THE FUCK UP, don't call me, your parents, someone to bail you out. Call a mother fucking lawyer. Because once you get your sleeve caught up in the gears of the system and you dont rip free fast enough, it's over. Once the system turns on you, your entire life will never be same. It will effect more aspects of your life than you can imagine. The system will chew you up. It never forgets. It's incapable of forgiveness.
This is the most logical comment in the entire thread. The only thing to say is "I want a lawyer". Although in this case, he repeatedly said that and wasn't given one. Which just shows that the state can do whatever they'd like, even if it's "unconstitutional". They have a monopoly on violence.
I've been thrown in immigration jail as US citizen. They will not provide or allow you access to a lawyer and you won't see a judge to determine if they have PC to hold you. You just sit there until they decide to eject you. Nothing else to be done and no one to contact, plus most of the other prisoners cannot speak English.
CBP via a bunch of crazy court cases, basically operates outside constitutional constraints. This is also why DHS has been used as private army by POTUS (snatching up people in unmarked vans in Portland for instance) because they can be ordered essentially directly by POTUS and not have to worry about the constitution.
Federal prosecutors won't even pursue cases unless they think there's a high chance of success. They don't operate like two private parties suing each other to force the court to decide something. If the evidence is there or the charges aren't fully formed, they don't waste resources on it.
This leads to a contradictory set of complaints that the legal system lets too many people go or doesn't have enough teeth.
True, although many prosecutors do also try to put their thumb on the scale when possible.
For comparison, Japan has a 99.9% conviction rate, but defers prosecution in 60% of cases. And police aren’t arresting or even attempting to enforce the law for every crime. Citizens complain that petty crime laws aren’t being enforced enough, leading to a rise in things like graffiti, litter, and traffic violations (the “bosozoku” motorcycle gangs are having a resurgence). But if you do face prosecution, there is enormous pressure to sign a confession and avoid trial, as a conviction at trial may be punished more harshly. Very similar in some respects.
>Federal prosecutors won't even pursue cases unless they think there's a high chance of success.
Given the incarceration rates compared to average western standards, that's a moot point. Even if they selectively pursue, they do pursue a hell of a lot, and they do get a hell of a lot of convictions - relatively. Factor in the severity of the convictions, also much worse compared to average western standards even for the same offenses, and it's an ever worse picture.
I don't think you make anything moot by compounding more regional stats. Some countries have more crime, they underinvest in rehabilitation, addiction treatment, and social diversion programmes. Shock horror: jobless, homeless addicts commit crimes. The US also has a land border with long land borders.
That is all to say, comparing apples and margaritas doesn't do what you think it does.
It's tempting to redefine as "crimes that result in prison sentencing", but the more you pick at these scabs, the more international discrepancies you uncover in law, policing, sentencing and statistics.
In a way that matters here, I don't believe you are correct, but I cede I haven't the time or machinery to hand to prove it.
> Federal prosecutors won't even pursue cases unless they think there's a high chance of success.
The problem with this theory is that it ignores the incentives on the other side in a criminal case. When you get charged with something, the prosecutor offers you a deal and that deal is almost invariably a significantly lower penalty than what happens if you go to court and get convicted. The plea deal is a lesser charge, if you demand a trial then they throw the book at you, stack charges and ask for more severe penalties for each one.
With the result that if someone actually did it, demanding a trial instead of pleading guilty for a lesser sentence has a large negative expected value. Which in turn implies that it doesn't make sense to do unless you think there is a high probability you can win, for example because you know you didn't do it. The coercive force is so large that it can cause innocent people to plead guilty, since even a 10% chance of losing can screw up your whole life when it means a 10x higher penalty.
And yet > 90% of the people who thought their chances of being acquitted were high enough to be worth taking a much large sentence on conviction, still get convicted. Which seems suspicious.
What youre saying is true, but the reality is that the number of people actually affected by it is vanishingly small. Of course its not vanishing if youre that person affected, but as far as the system goes, its negligible.
The reality is that most people who become subject to criminal prosecution are guilty. The reason can often be attributed to overbroad laws, but that still means you are guilty and will likely lose your criminal case. The prevalence of plea deals is just a performance optimization on top of that fact - most people are guilty at that stage and we'll let you off a little easier if you avoid the time and cost of a trial.
Innocent people are coerced to plead guilty, but you also have to realize the number of "innocent people pleading guilty" also contains guilty people who convinced lay people, who never saw or reviewed the evidence, they were innocent. As a prosecutor during a plea negotiation I once almost dismissed a charge against a girl who convinced me that she was innocent until I actually looked a security tape before signing the dismissal. She was 100% guilty. This is another interesting point about how busy prosecutors are - i didnt even bother to review the evidence against her before offering her a plea deal.
All this to say, if you end up coerced into accepting a plea deal despite your innocence, you are not a normal person. Yes, there's at least one normal person out there who was coerced, but they're the exception that proves the rule.
Courts need more funding, laws need to be relaxed and fine tuned, we need to stop the school to prison pipeline, but even with all those problems the system works pretty damn well.
> The reality is that most people who become subject to criminal prosecution are guilty. The reason can often be attributed to overbroad laws, but that still means you are guilty and will likely lose your criminal case.
Let's unpack this.
The first assertion is that most people who get prosecuted are guilty. This is assuming the conclusion -- the whole question is whether the system is getting it wrong. The presence of convictions can't be used to prove the absence of false convictions. The presence of more convictions increases the probability of more false convictions. And if we had a reliable way to know the real truth then none of this would be a problem to begin with.
The second is the implication that they're all guilty because there are so many overbroad laws that actually everybody is guilty. But that's just a description of a mechanism by which the system convicts "innocent people", i.e. ordinary people who never had any intention of committing a crime. Making so many things illegal that following every law is beyond human ability and anyone can be convicted at the government's discretion is the thing people are objecting to.
> The reality is that most people who become subject to criminal prosecution are guilty.
This is not the reality, but your own justifying premise. which is why you instinctively began it with the proclamation "this is the reality."
I personally pled guilty for something that I didn't do, and that no one involved thought I did. I was offered a plea bargain of zero time, zero fine, and it would be expunged from my record in a year if I weren't convicted of anything else - which is evidence that the prosecution knew that I hadn't done anything. This was actually a systemic kindness - the people involved in the system couldn't live with the idea that they were punishing me for nothing.
The alternative was going on trial for a stupid felony called "possession of the instrument of a crime" which not only had nothing to do with the conditions of my initial arrest, but carried something like a 5-15 year sentence. The odds that they would have gotten a conviction on such a bizarre felony (the only reason it existed was to have a lower standard) in the state I lived, and with the race I was, and with a public defender, was around 100% imo. They go hard as a punishment for forcing them to hold a trial - that would be the excuse for those same kind people as before to label me a troublemaker who had turned down their kindness, and now deserved to go to prison for nothing.
You've made a comment with a lot of words, but the only reasoning you have is "the reality is," and you surrounded it with pronouncements and some personal anecdote about one woman. You're talking about a system that convicts 90% of the people (unlike me) who said "I didn't do anything, they know I didn't do anything, they certainly will let me go once they figure it out."
> if you end up coerced into accepting a plea deal despite your innocence, you are not a normal person.
The system is unjust because people like you support it exactly as it is...
> need to stop the school to prison pipeline,
...with lefty sloganistic jargon, playing the part of a good progressive prosecutor. You won't see it until it happens to you or someone you care about, then it will become the most important issue in the world. The fact that the US criminal justice system is hard on black Americans is not "racism" or "white supremacy" but because black Americans are not the friends or loved ones of people in power, and will never be. When you personally are prosecuted for nothing, or even for a crime that your peers deem trivial, the resumes of the people at your protest and your candlelight vigil will force people to pay attention, or risk their own comfort. Most people are not so lucky.
The system is an atrocity. It fails the victims of crimes, the accused of crimes, the perpetrators of crimes, and to protect the safety of the public in the aftermath of crime. It is simply an enrichment device for its participants, and an empty performance to mollify the middle class. It also serves to warehouse the wealthless underclass of the descendants of freed slaves away from view when they are found unfit for menial work.
I don't think it's so much a "misunderstood" statistic as much as a number that people (like the commenter you are replying to) deliberately trot out to use as evidence for their position because they are depending on most people being statistically illiterate.
To be clear, I totally agree with your points, I just think this is more of a case of "lying with statistics" than being a misunderstanding.
No. When it comes to statements by politicians, maybe. But when it comes to what people say in a setting like this thread, being so flippant in discounting people’s earnest-ness is a mistake and gets in the way of actually moving understanding forward.
I think you forgot something even more basic. Federal prosecutors handle federal crimes and the vast majority of those require extensive investigations to gather evidence before you can even initiate a court case.
The most classic case of federal offense is tax fraud. You can't record tax fraud on a camera or believe the witnesses, you actually need to look at the balance sheet and contracts of the company and make sure there is actually a crime to prosecute.
They never pursue court trials, because it's too much work. But they'll pursue plea deals, because there's this gigantic pipeline and everyone in it (including public defenders) is on the same team: Team Make Him Plead.
Because of this, no true justice is possible. Trials don't just try the defendants, it forces the prosecutor to prove that there really was a case and that they weren't just trying to bully someone who felt it was hopeless and would rather get out of pre-trial jail early. It forces the cops to actually make a fucking case, rather than rely on horseshit to lock someone away that can't bond out.
And no reform is possible. If you explain any of this to someone who actually understands it, they panic and say "but the prosecutors wouldn't even be able to bring 1/50th of those cases to trial, the system would overload" as if that were a bad thing that they couldn't. In the same way that you're not caught in a traffic jam but rather you are traffic, you're not caught up in these problems... your apathy, your ignorance, your rejection of boat-rocking, in short you are the problem.
it should be about 50% conviction rate so that juries dont go in with non-evidence that the case is good because the feds thought it should go to court
So prosecutors should bring you to court even if they think there isn’t evidence that you are guilty just to make the conviction rate go down? Today they would let you walk but you would want them to take you to court for a crime the prosecutor don’t even think there is enough evidence?
"When a measure becomes a target, it ceases to be a good measure."
That is, yes, a ~50% conviction rate would be decent evidence that the Justice system is neither over-aggressive or under-aggressive in pursuing protection.
If it were an explicit goal, it could not serve that purpose any longer.
That would be a nice outcome but whose responsibility would you make it to encourage it? Judges and juries should not grade on a curve. Prosecutors shouldn't waste taxpayer money chasing convictions that are out of reach. There's nobody with access to that calibration dimetion.
I've been on jury duty several times and in each time the entire jury pool was dismissed an hour or so into the morning, with "all cases have been settled". As I was leaving, the official said, "see how efficient we are now?". I replied, "The guillotine is efficient, but it's not justice." Look into Aaron Swartz. The % of cases that go to trial is very small, in no small part because plea bargaining is no bargain at all. "Plead guilty and we'll do the minimum (whether you're actually guilty or not), or go to trial and we will seek the maximum sentence, which could be 30 years in prison. What's your answer?"
OP is strongly implying that the 90% success rate for prosecutors is due to the courts being stacked against the defense. IMO that is where the logical fallacy is. Since prosecutors have wide latitude in deciding which cases to charge in the first place, it is very possible that the high success rate is due to prosecutors only charging cases where the accused actually committed the crimes being charged. Indeed, for the ~10% of cases where the accused is not found guilty, about 8% are due to the government dropping the case - only 1% are the jury acquitting the defendant outright. Thus, it would appear from that data that when the prosecution sees they are not likely to win a case, they drop it.
I'm making no argument that the courts or law are "fair", I'm just making the argument that quoting the 90% number is in no way evidence that courts are inherently biased towards the prosecution.
Nullify if necessary, more likely duty to justice as best as I can come to understand it.
We should all know it though!:
It has been commonly used to oppose what jurors perceive as unjust laws, such as those that once penalized runaway slaves under the Fugitive Slave Act, prohibited alcohol during Prohibition, or criminalized draft evasion during the Vietnam War.
I got selected as juror once just hoping to laugh at anything the cops said on the witness stand and let some poor soul go free but it turns out the defendant was just a violent scumbag who stabbed random people in public, and there was a video of it. After we decided he was guilty, they listed other things he had been convicted of and asked if he was a repeat offender... Let's see, shot somebody in the back, robbed liquor stores at gun point (dressed as a clown IIRC) and some other weird shit. That decision didn't take very long.
Honestly we didn't even throw the book at him, prosecutors were charging him with a bunch of offenses and we decided guilty on only two, but the repeat offender bit probably locked him up for a few decades.
The funny thing was that all the jurors thought the victim was a complete douchebag and thought both parties deserved time. As it turns, somebody I knew at the time knew the victim from childhood and he apparently molested his 8 year old cousin.
I just served on a jury and in our case, the cop was a lying scumbag, the prosecutor's expert witnesses were people milking the taxpayers to provide the evaluations that the state wanted to hear for thousands of dollars per hour, the defense's expert witnesses copy-and-pasted an evaluation from another client but didn't bother to proofread before the prosecutor brought up that they had the wrong name in the text, and the defendant raped and molested multiple kids below the age of 8, some still in diapers.
I feel like many court cases are textbook instances of Everyone Sucks Here. I needed therapy after the case because it had so shaken my faith in both the justice system and humanity.
"I feel like many court cases are textbook instances of Everyone Sucks Here. I needed therapy after the case because it had so shaken my faith in both the justice system and humanity."
I really don't think most of the people posting here understand what the professionals working in criminal justice/law see on the average day. They see the worst of the worst on one side, and then the public who they are trying to get a paycheck to defend on the other attacking them.
This in no way excuses bad behavior, but we're all human and these people aren't robots.
I don't understand the jury system. If your server is down you don't grab randos from the street to fix it.
Hell Americans know this too which is why you have a professional judge and lawyers. And you guys don't have a night watch with pitch forks and muskets to police the village anymore.
If your server is down you might ask for advice in an IRC channel, receiving help from whoever is there.
The random selection of juries was supposed to ensure they aren't any special class of people. For instance judges are usually from upper middle class backgrounds and it used to be that your innocence or guilt was decided entirely by the aristocratic nobility. By using random selection, that sort of thing is avoided.
The fundamental idea of a jury, when it comes down to it, is that you're asking 12 random people "was this person's actions reasonable?" given conflicting accounts of what those actions were. The process by which you get there is more convoluted than that (and generally assumes a higher competence by the jury than probably exists), but juries seem to do a very good job of upholding the basic idea of evaluating the reasonableness of actions.
In a jury system, the judge provides instructions to the jury about how they are supposed to weigh the evidence presented against the requirements of the law. They don't need to be technical experts. The theoretical idea of "a jury of one's peers" (while not perfect) is making a fresh decision based on the merits of the singular case, rather than a judge deciding based on prejudices they've built up over hundreds of previous cases.
Exactly. People complain police dont prevent crime, but dont realize that is not their purpose. The police exist to protect the government, not the people.
The police are there to enforce laws, but enforce it by punishment, rather than prevention. The potential deterrence effect still applies, as people do get discouraged from crimes by the mere presence of the police. However, there is zero legal duty for the police to protect someone who is currently under attack from a criminal.
> However, there is zero legal duty for the police to protect someone who is currently under attack from a criminal.
That has to be incorrect, by the time someone is under actual attack from a criminal that criminal will have allready comitted crimes that the police can and have to punish for, i.e. Threat of Force with a Lethal weapon or sth like that.
Legally, the police do not have to swoop in to stop someone who is actively murdering you. They can just wait until later and write a report after you’re dead.
"You see there are people who believe the function of the police is to fight crime,
and that's not true, the function of the police is social control and protection of
property."
The part that is afraid of not getting voted in next election. As long as they make the voting ticket a two party/person race and ensure that their voters believe the opposition is the literal devil, then they don't have to be too afraid
It is not surprising. They just don’t go to court unless they think they have enough evidence for a conviction. In a perfect world the conviction rate would be 100% because in a perfect world the prosecutor would drop the case before if they don’t have enough evidence.
Josh Greenberg from Grooveshark died of unknown cause in 2015 after taking a settlement rather than going to trial. He wiped all the music (did he really need to do that?) and then gave up all the software. The service may well have been seen as a massive cost center during its life and the death was a message or warning. I don't know. Business is war, isn't it? - quite literally.
One person's savior can become another person's scapegoat or witch. Even all three.
Personally, I would be suspicious of any death around a high profile trial - at least as a possibility. Greenberg introduced a 'tipjar' eventually to compensate artists but I think he would've been better off making a swapping service where users can trade their own CD-ripped or purchased files for another person's. Just like swapping physical CDs or LPs. So 1-to-1 personal distribution rather than Grooveshark's 1-to-many public distribution without the required licenses. An escrow service for file-swapping.
Sort of unrelated, though.
To me, litigation may be an incredibly dangerous route to justice. "Winning at all costs" may mean stopping a case going to trial in the first place. Judges can also end up the biggest losers too. Justice always gets served - but whose justice?
If it’s a malicious prosecution by the country/state then Jury is your best best over a Judge.
There is a reason that Elon Musks companies and others put a ‘you agree to not have a jury trial…’ clause in their terms as Judges are easier to influence - when a legal case is filed it’s allocated to a judge and certain cases will go strategically to a Judges with certain bias
> Take the right to a jury. It sounds noble in theory. But when they say judged by your peers they don't mean your actual peers. It's people who couldn't get out of jury duty.
What? A jury system is far from perfect but this is about as intellectually rigorous as “the lottery is a tax on the poor”. Many people are thrilled to do jury duty because they are invested in their community, your nihilism is not a universal truth, jury duty isn’t a burden, it is a civic duty, an honor.
But that's good no? People who got out never would have taken it seriously.
I sat on a jury trial and was highly impressed with how seriously my fellow jurors took it - especially the presumption of innocence. When they started to go down some incorrect logical path, someone would step up and correct it.
Not to mention the public defender ripped apart the DA's case. It was the exact opposite of what I was expecting.
> Prosecutors have high success rates.
You're forgetting that the prosecutors don't bring cases they think they're going to lose to trial, they either drop the charges or try a plea deal. So you'd entirely expect the success rate to be high.
It’s not even just who couldn’t get out of it. It’s filtered for people who answer honestly. I was disqualified for a grand jury because the judge asked me if I would believe the testimony of police officers as truthful and I said it would depend on the police officer.
The system already had their hands forced on accepting that some cops lie with Brady disclosures but the fact that I didn’t just naively accept police testimony meant I was an unscramble juror.
Even if you’re a true believer in the system you won’t be allowed to participate because you didn’t lie.
Yeah, but without a jury O.J. Simpson never would've walked out of court a free man.
For example in Europe when someone dies somebody always has to go to jail, even if they were defending themselves or responding to a potential threat. A jury could show compassion or empathy. Judges are extremely stoic in that regard.
This reference from Germany indicates that self-defense is lawful even if it ends the attacker's life, as long as the violence is not excessive for the situation.
They'll always rule that the violence was excessive. They'll say you could've slapped him in the face or disarmed the attacker.
The only ones getting a free pass are criminals. When they shoot and kill each other judges usually rule that it was self-defense. Ordinary people...no such luck.
Besides in Europe you always have to use physical violence to kill someone because firearms are illegal.
Programmers have trouble seeing color (two identical numbers are the same bits, how can typing '1234' to unlock one phone be legal, and '1234' to unlock another phone be illegal?)
Courts care about color (intent, provenance, permission), even though that color cannot be digitally represented.
An interesting analogue to "What color are your bits" in the tech world, as well as a direct disproof of your "two identical numbers are the same bits" statement (although perhaps only technically so), is the idea of provenance of bits memory in programming languages. Here is an RFC for rust's memory provenance:
An interesting parallel to this is parallel construction, where a side knows X but they know it through illegal/illegitimate means, so how do they create a trail of evidence for X through ordinary and legal means. This applies to legal cases and things like reverse engineering etc.
Like we know X but the colour of the fact is red, and we need some way to figure X out with a colour of green or blue.
This is where 'reasonable doubt' comes in from a jury. Would I believe that someone set up a 'wipe my phone' code, something that would be catastrophic, it was one digit different, and they accidentally typed it, or would I think they were trying to wipe their phone.
Honestly, given what I know here (a full case might be different), I would believe they did it on purpose.
Framing this as whether he can convince you the mistype was accidental gets it backwards, and "would I believe X or would I think Y" is preponderance, not reasonable doubt - entirely different standard. Reasonable doubt doesn't ask which account you find more likely. It asks whether the innocent one is unreasonable.
Take the hypothetical as posed: duress code one digit off, entered while detained after being interrogated for hours, and repeatedly pressured to unlock. The government has to prove beyond a reasonable doubt that he knowingly triggered the wipe and did it for the purpose of impairing the seizure. Nothing about that scenario makes mistyping an unreasonable explanation unless there is more circumstantial evidence that indicates him intentionally providing the wrong PIN.
"Color" absolutely can be represented digitally; C compilers were doing it before we even knew they were doing it. We just like getting away with shit. It's part of the hacker ethos. Probably.
Is a piece of software subject to patents? Is it export controlled?
Both of those can change without the data changing at all. A new patent can be applied for and accepted, at which point all code the patent description matches is potentially encumbered (even if it was written with no knowledge of the patent or before the patent existed, yes our patent system sucks).
Export controlled is also a matter of laws, not an attribute of the data itself, and laws change independent of data.
A lot of engineer types forget that the law is not code, and reductionist arguments almost never actually work in practice because it's a human interpreting the law.
For one example of this, around 10 years ago there was a company called Aereo that tried to act as a "cloud television provider". The idea was that they had thousands of tiny antennas hooked up to servers in a warehouse, and they would lease an antenna to each subscriber. This gave an experience similar to cable TV but without Aereo having to pay broadcasters cable transmission fees. The major broadcasters sued Aereo and ended up getting it shut down for exactly the reason you mention. Despite Aereo technically being a TV antenna leasing service, it functionally acted like a cable TV service so they were violating copyright by not paying transmission fees.
They were accused of "public performance" which doesn't make sense to the spirit of the law to begin with. Avoiding technicality via technicality is fine. They should have been allowed to run their thousands of independent servers.
The reason cable companies have to pay these fees in the first place is a narrow and somewhat pedantic argument that is entirely based on connecting multiple households to the same antenna. Which Aereo doesn't do, no trickery involved.
If there had been a style of "cable" company that used one wire and antenna per house from the start, they could have avoided these fees too. They only didn't exist because cables and antennas are expensive.
Any single person could have legally set up their own server and antenna. But Aereo building these en masse makes them a cable company instead of an antenna-building company because... vibes, basically.
The best evidence that this was a failure of justice is that they pivoted to "okay, we're cable, we'll pay the fees for a mandatory license" and got rejected for not being a cable company.
> A lot of engineer types forget that the law is not code, and reductionist arguments almost never actually work in practice because it's a human interpreting the law.
It's worse than that: a lot of engineer types reason about almost everything as if it were code. It's a manifestation of Engineer's disease.
It reminds me of tax law in many countries. You can follow the letter of the law, but if the vibes are off, you can still be found to be in breach of a vague catch-all provision (e.g. economic substance doctorine in the US, GAAR in Canada/UK, Part IVA in Australia, etc).
UK has systematic tax avoidance IIRC i.e. keep starting and closing businesses to save tax is frowned upon. Australia can treat your capital gains as income if your gains quack like trades. (Maybe now less important since the recent CGT changes).
There is a strong bias by the courts to interpret the law in such a way that it makes sense, and achieves the goals the legislature had when enacting it.
Maybe this is because of the TV dramas where a genius lawyer saves their client through an obscure technicality. It looks exactly like hacking a system using a 0-day exploit.
It's not that there's a human interpreting the law. It's that there is a politically motivated human interpreting the law, or in other words, you are sol if the state wants to get you. The engineer's arguments aren't reductionist, they are idealistic.
In this case, the government was against him due to his activism against a police training campus.
Him deleting his phone was very likely a matter of safety for his fellow activists. Sad that our government does this but it’s not like this guy was a drug dealing or something.
> When interpreting EU law, the CJEU pays particular attention to the aim and purpose of EU law (teleological interpretation), rather than focusing exclusively on the wording of the provisions (linguistic interpretation).
I'm not disagreeing with your overall point, but autistic in that comment is attempting to capture that "literal rhetoric but socially unaware" style of argument people can have when they argue a point too black and white.
"Retarded" does not imply this
I would say the problem with the comment is more in line with how OCD or adhd is used, improperly. Like despite autism being a spectrum with traits that can't be reduced to that one stereotype.
It's being used to invoke a stereotype of neurodivergence. Not as a stand in for general stupidity.
Most of our insults against intelligence come from medical terminology originally. Every word eventually starts being used offensively, and then a new one gets coined and the cycle continues.
I assume you're being sarcastic, but moron, retard, stupid, dumb, idiot, mad, imbecile, mongoloid, spastic, lame, lunatic, maniac and psycho were all used as medical terms before they became stigmatic. Filter out sexual and scatological insults and there is very little left.
It's kind of funny and also kind of insulting. I'd laugh if a friend said it but said seriously by some rando on the Internet, nah, find a better way to put it.
I think you’re trying to ask the person you are replying to not to use medical terminology to make a point in a catchy way but I honestly have no idea what the Michael Scott segue was supposed to mean.
I realised that reference would not be well understood, so edited it out.
FYI it was a reference to fictional character Michael Scott from television production The Office (US). The characters main trait was unintended verbal faux pas, where he meant well but actually caused awkwardness and offense.
Often by stereotyping the traits of specific minorities.
A duress pin is useful if the cost of the government getting mad at you because you wiped your data is less than the cost of letting the government have your data. Whether that holds depends on your situation—for example, whether your phone's data could implicate other people that you want to protect
When talking about costs we should remember who is paying. Maybe overall the cost of the government getting that data is higher than the cost of them getting mad at you, but when a single individual is paying for all of it the equation might change.
ultimately everyone is paying the price of reduced rights and freedoms when the government starts wanting to check your phone for wrong-think and harass unofficial enemies of the state
When I had jury duty it was quite revealing as far as “this is all evidence including people’s testimony, you can believe all or some or none of a given piece of evidence based on your own judgment” goes.
When we met it was interesting how our jurors decided “I don’t believe anything that guy says” and so on when it came to their motives and so on.
The trial itself was very carefully choreographed, almost pre determined and static.
But the decisions and jury activity was very dynamic. There was absolutely no magic legal mechanisms at that point.
I'm waiting to see whether he is convicted before I form a strong opinion around this. I'm leaning toward thinking this case will be dropped or at least severely reduced charges.
Mamy will read this and think that crossing a border with a GrapheneOS device is a bad idea, or just drop using what is a nice security feature entirely.
Just being charged is already a massive pain in the ass (both in terms of stress and costs) to an individual.
It is a massive pain in the ass, but if the case is thrown out, the gov't may be less likely to arrest someone again. Who knows, under the current regime. They seem to go after whoever they want.
If only they could be as non-autistic about the law consistently.
From the article, it looks like warrantless search & seizure and lawyerless detainment over the suspicion of participating in plain old 1st amendment activities.
Would it have been wiser if that person had, as a US citizen, just refused to provide a PIN? At the most they'd just confiscate the phone, and it'd be encrypted anyway. No actual destruction of anything.
On another note, maybe GrapheneOS should add some kind of feature where the phone involuntarily destructs if a correct PIN isn't entered for 48 hours (or whatever the user sets at installation time, and changing the value should not be permitted). That way the trigger for the wipe is the confiscation, not the act of entry of a duress PIN. You could disclose the mechanism to the officials who intend to confiscate, and also say (truthfully) that you have no control over the feature.
Would it have been wiser if that person had, as a US citizen, just refused to provide a PIN?
Purely technically it would also depend on the state of the phone. Phones can be read out/exploited more easily after first unlock (AFU) than before first unlock (BFU). So, a middle path would be putting the phone in BFU. Much harder to use exploits against the phone and biometric authentication doesn't work. One way of fairly reliably doing this is setting the reboot timer to 10 minutes or turning off the phone in critical situations.
It's also relevant to take into account that he wasn't protecting himself by wiping the phone, but fellow activists. So, he may have taken the risk of potential legal issues by wiping the phone to project others.
You can set GrapheneOS to reboot into before-first-unlock state if it hasn't been unlocked within a certain period of time, and BFU is more exploit resistant, and can't be biometrically unlocked. I have it set to 18 hours, but you can set it anywhere from 10 minutes to 72 hours.
So yeah, as a US citizen re-entering the country, you would probably want to set it to 10 minutes, or just shut down. Then hand it over, refuse to unlock, consider the phone lost.
Heck, it could be unconstitutional for the government to make X illegal, but if the courts say 'no actually it isn't', or it never actually gets to that point, then it doesn't really matter much, does it? The text of the law could be simple and straightforward, and a layman's reading of that text could be valid, but all the government or courts needs to do is to find some moon logic to make what they need happen, and unless enough people disagree, then that's all there is to it. The law, in many ways, for better or worse, is just a piece of paper.
I think people are aware that the government can physically do a lot of stuff, e.g. shoot you in the face for no reason. And vice-versa for that matter.
However there are arguments morally, and constitutionally, and logically, about what can be done.
Yes, this is something more people really need to take to heart. As Americans are seeing, a lot of rules are unenforceable and really came down to norms and pressure. I have been thinking about this a lot over the last few years and it is roughly encapsulated in this tweet I saw a while back.
When I was a kid I wanted to be a police officer because I wouldn't have to follow any laws or rules. Then I got a little bit older and realized that wasn't how being a police officer actually worked in practice. Then, I got a little bit older than that, and realized that it actually does work like that.
This has always been true and there has never really been perfect justice. Ultimately, power and violence have always superseded the law. High trust societies with less corruption and a strong justice system try to limit these circumstances.
> When I was a kid I wanted to be a police officer because I wouldn't have to follow any laws or rules. Then I got a little bit older and realized that wasn't how being a police officer actually worked in practice. Then, I got a little bit older than that, and realized that it actually does work like that.
I'm imagining that IQ bell curve meme, just with you at different ages.
> This has always been true and there has never really been perfect justice.
You raise the standard for justice to perfection. There also has never been perfect corruption and anarchy.
> Ultimately, power and violence have always superseded the law.
That's like saying night has always superceded day. Everyone recognizes that recent years have been very unusual or unique in US history. That means for the great bulk of US history, it was different. Why doesn't 99% of US history outweigh the 1% (picking numbers very loosely) in determining what is somehow inevitable to you.
In fact, law is universal among human cultures. We are naturally social and live in groups with rules. Those that violate rules are generally outcasts.
But the most fundamental and significant error is attributing the current situation to some unavoidable system instead of the actions of people, especially those that stand aside and allow these things to happen. Many of them stand aside because they are told - probably messaging ultimately from the lawbreakers - that they are powerless and should despair.
The law wasn't in the state that you ascribe to it for the other 99% of its history if you were, say, African-American. Other less-extremely obvious examples also abound.
Liberal democracy with sometimes-fair application of it is the aberration.
Advance or regression is not the way you probably want to look at it. There isn't a lot of evidence for historical inevitability.
And no, we have not been a liberal democracy for 'a long time'. We have been an illiberal democracy with very limited suffrage and distribution of rights for a very long time.
He didn't type the numbers. The destruction was performed by the border guards recklessly typing in commands to a phone without knowing what it would do.
He should have backed up the phone before travelling then wiped the phone to an innocuous state before getting on the plane.
Want to see a really confused border agent? Travel without a phone. Fedex your phone to your hotel/home. Read a book on the plane. The concept that someone doesn't have a phone/computer drives cops insane.
One of the wikileaks crew pulled this one in NY. Several agencies were a set to grab his devices and detain him until he unlocked them ... But all he had in his carry-on was a magazine. His devices had been wiped and sent by mail. He re-imaged them only once he was home and safe. No devices to unlock, no reason to detain him.
Maybe I should get a thicker skin, but the prevalence of “autistic” as shorthand for “moronically literal-minded” on a place as prudish as hn is a bit surprising.
People somehow think they're the first one to think of a workaround to a law, when in fact it's been happening since the first law was written down. The law adjusted and if people think they can do one thing, then claim they intended another they have a big surprise coming.
I think you're conflating two very different things. You're completely right that the government can make pretty much whatever they want illegal, but things are legal unless expressly made illegal. Erasing your phone wouldn't be illegal because it implies guilt, but because of obstruction/destruction laws explicitly criminalize such things.
The whole case is going to come down to the nuanced and often contradictory interpretations of border law exceptions. I also don't agree that these sort of protections are for e.g. robbers, because of the criminal underground's $5 in-person data hacking tool. [1]
When the judge and officers of the court agree with me, the law is reasonable and just, but when they do not agree with me, the law is arbitrary and capricious. ¯\_(ツ)_/¯
Having the law be whatever it's thought to be by police, prosectors, judges, and others can lead to obvious injustices, but there's been no serious attempt to remove ambiguity in any country's legal code as far as I know.
Look at this week's codeberg drama. They wrote a simple law like "no projects that are mostly AI" and all of HN was like "how dare they be so vague? I need to know what percentage of my characters are allowed to be AI! 49.999% is good, right?"
In general a government can do whatever they can get away with.
The rest (believing they can't do this or that, because it's in some constitutional document, or violates a basic right) is sovereign citizen kind of self-delusion.
If a government operates outside its remit, competing forces (opposition parties, civil society, counter-elites, foreign influences) use that as an opportunity to gain power by calling attention to the violation. “The law” may be a fuzzy illusion, but it’s delineating a real social boundary. Legal processes are a way of processing that conflict symbolically rather than jumping straight to open warfare. But you better believe that open warfare will result if those boundaries are ignored for long enough or if they are violated egregiously.
Yes this is the whole $5-dollar-wrench XKCD thing.
"Ahah! I've won! The data has gone!! MUWAHAHAH! Take THAT border guards".... congrats you're still going to the same prison though.
If you've got something to hide (legitimately or not), don't take it across the border in the US or anywhere. Even then I am sure they'll either compel you to hand over your cloud passwords or again you end up going to the same prison for some other reason.
Ultimately, when you choose to enter a duress PIN that will wipe your device, you have to recognize that choice may have legal consequences. I don't like the amount of power our government has at the national border when it comes to detaining and pressuring citizens, but our Constitution explicitly grants it at least some of the power it now exercises in that context.
If your threat model includes US state actors at the national border, then your security practices need to account for the confiscation of your device at that border without requiring you to willfully wipe the phone and (in the eyes of police and prosecutors) destroy evidence.
That means:
1. Don't travel with anything you can't afford to lose on device. This means setting up travel-specific password managers and hardware keys for a subset of your accounts that you absolutely need to access while abroad, and being prepared to reset those passwords and disable those hardware keys very quickly once home.
2. Review past legal cases against travelers and identify what behaviors the government considers worthy of prosecution or harassment. Your secure setup must function without needing you to engage in those behaviors, even if it is less convenient as a result. This isn't perfect, as the government may decide some new behavior is prosecutable.
3. Consult with a lawyer and review your security procedures from a legal standpoint. All of the above is technical and practical advice, not legal counsel and no substitute for it.
We Americans are fortunate to carry powerful passports and enjoy relatively easy international travel but, for better or worse, that velvet glove covers an iron fist we would be foolish to forget or ignore.
> 1. Don't travel with anything you can't afford to lose on device. This means setting up travel-specific password managers and hardware keys for a subset of your accounts that you absolutely need to access while abroad, and being prepared to reset those passwords and disable those hardware keys very quickly once home.
> 2. Review past legal cases against travelers and identify what behaviors the government considers worthy of prosecution or harassment. Your secure setup must function without needing you to engage in those behaviors, even if it is less convenient as a result. This isn't perfect, as the government may decide some new behavior is prosecutable.
> 3. Consult with a lawyer and review your security procedures from a legal standpoint. All of the above is technical and practical advice, not legal counsel and no substitute for it.
Just don't go to the usa and if it's for professional reason, don't bring your personal phone.
You've left out the important qualifier I put at the outset of those three points:
> If your threat model includes US state actors
It was not advice for everyone, nor even most people. I have plenty of friends abroad, and a few of them have even traveled to my country for the World Cup and had a grand time.
I roll my eyes at this kind of overreaction, the same way I imagine Europeans rolling their eyes to hear Americans worried about migrant crime news stories not wanting to travel to Europe. Or maybe they used to roll their eyes at that... I'm less sure now.
Have the duress PIN on sticker on your phone. Maybe put it backwards and don’t say anything to border patrol. Have them try it out and erase the phone and then you can legitimately say you didn’t do anything and they did it themselves.
But if the prosecutors can make a convincing argument that your intent was exactly that all along, then you may end up convicted anyway.
Intent matters. It might be hard to prove, but it matters.
It may not even be that hard; what other possible explanation is there for someone putting a PIN visible on their phone that wipes it while crossing a border?
Yea, that’s not how it works in practice. If they catch you standing over a dead body holding the murder weapon. Then you can’t just say they can’t prove intent if you keep your mouth shut.
claim your password to be some derivative of the duress PIN, for example: 1234 is password reminder for 2444 (one 2 three 4), the device is erased anyway.
They might be able to convict on that, but that sets a dangerous precedent imo, which is that doing anything preemptively to prevent searches is conviction worthy, including the preparation the OP suggested.
Not saying anything at all is one of the worst things you can do when questioned by law enforcement in the US (though "it would be funny" is a close second). The right way to remain silent is to loudly proclaim "I am exercising my right to remain silent."
Or just make it your birthday. Though I'm not at all sure the agents will try typing random codes in without at least some idea that they may work, given that many OS's will quickly start to punish with tarpitting.
That might have actually been legal. I'm not a lawyer, but it's definitely better for the accused than what happened in reality.
"I told you not to. You're the ones who wiped my phone. You owe me money for destroying my personal property."
I'm not saying you would get a check courtesy of Uncle Sam for your troubles, but the argument that you deceived authorities into destroying evidence is a lot weaker.
I might go with "do not enter 696969" instead because the stranger fiddling with your phone probably expects a your phone to do something funny, like load a shock site.
This is not a "these days" thing. Most rights essentially being abrogated at the border is a thing we've had for many decades now. In particular, no non-citizen has the absolute right of entry, and border agents have discretion bordering on insane when it comes to not admitting people or temporarily detaining them. Worse yet, this being the case, the job attracts the kind of people who relish the petty power trip. I've seen this many times back in 2010-2011 when I was traveling regularly as a non-citizen between US and Canada.
Up in the air. SCOTUS didn't decide on this specific right. They did rule on other constitutional protections though, sometimes granting, sometimes denying them to non-citizens. It also depends if you're just arriving or already are in the US. For example, illegal immigrants who jumped the border fence have more rights than legal immigrants who didn't leave the airport yet.
Why would agents think that a number written on your phone is the PIN? That would only make sense if it was a communally-used device, not a personal one. Also, no one would put sensitive info on a devices that has the PIN affixed to it.
I suppose it's possible someone might enter it without thinking, but the odds seem low. Also seems risky to put a self-destruct PIN on your device, lest a friend (or enemy) enter it by accident or as a prank.
the funny part is he didn't enter the pin he gave it to them and they entered it..., not sure if it makes any difference but there is a certain irony to it that it was the non warrant based search actions (which might be legal at the border) which lead to the erasure of data
Edit for the confused and misinformed: 18 USC 1001. Also, is ≠ ought.
Lying to a federal officer is a crime, IIRC, and if the lie results in destruction of evidence, the person who told the lie is probably accountable for both crimes. This isn't a lie with plausible deniability: you have to set a duress PIN, understanding what it does, and then communicate that PIN instead of the unlock PIN.
A duress PIN to wipe the device don't exist to absolve the owner of liability... It exists for when compromising the device could get people the owner cares about killed or disappeared and the owner considers their own liability, disappearance, or death a preferable outcome.
It is an extreme solution for extreme scenarios. People need to be sober in weighing its use.
> It exists for when compromising the device could get people the owner cares about killed or disappeared and the owner considers their own liability, disappearance, or death a preferable outcome.
Devil’s advocate, it sounds like the accused could be part of some mutual aid networks who could be helping people who are vulnerable against the actions of the current government. People who may die if they’re deported, or returned to their family (gay or trans youth). This person may literally have saved lives by not handing over their phonebook and messages.
> It exists for when compromising the device could get people the owner cares about killed or disappeared and the owner considers their own liability, disappearance, or death a preferable outcome.
Or it's preferable to get caught lying to a federal officer than it is for them to have the evidence on your phone.
but not necessary evidence, as evidence would imply a crime. But when it comes to police harassing activists, or outright mislabeling them as terrorists, there are many fully legal things you still might prefer the police not to have. Lets not forget that boarder police has in the past tried absurd things like trying to seize Attorney-client privilege protected information from a US attorney.
Through most likely many people setting up and using a duress pins never truly think this thought from a legal POV.
They asked for the pin, maybe they should have said "not the duress pin"
>Destroying evidence
How did they know there was any evidence on there?
>it exists for when compromising the device could get people the owner cares about killed or disappeared and the owner considers their own liability, disappearance, or death a preferable outcome.
No, the duress pin is there for when I'm under duress and being forced to unlock my device against my will
> They asked for the pin, maybe they should have said "not the duress pin"
The law doesn't work like that. Unless you're provably at the developmental level of a 5 year old, the court knows you know what was required, and also knows what you intended when you gave the duress pin.
The justice system famously never plays "simon says"...
> They asked for the pin, maybe they should have said "not the duress pin"
This is a Mickey Mouse distinction no court will take seriously.
> Wiping a device I own is extreme?
When the consequences are potential years in prison for lying to the US government or, in another country, torture or death in prison for obstructing an authoritarian government, then yes... Extreme.
All I'm saying is to decide to use a duress PIN at any national border or in any foreign country soberly, with knowledge of the potential or likely consequences.
That's a different discussion. Are you interested in staying out of trouble at the border? Or are you interested in taking down the system (or at least fixing it)?
If you think the system needs fixed or destroyed, you do you, but don't be surprised when that approach gets you in trouble at the border.
It's sad that your perfectly valid previous comment is dead (and that HN even works that way) ... adding is ≠ ought probably doesn't even help for the people who don't grasp that in the first place.
People who think that tricking the cops into wiping your device legally absolves you need to grow up. Also those who argue that LE can't prove any evidence was destroyed since it's been destroyed.
Yeah, but the way HN works is leagues ahead of other, similar platforms. And the top voted comment of a subthread (at that moment) being flagged is its own interesting signal about both the issue at hand and the HN userbase. I'll be grateful if reasonable folks vouch, but I'm not mad about it either way.
In America, the defendant generally has the right not to testify against himself by remaining silent, both in court and when questioned by agents of the state out of court. Not a right to lie. This is why criminal defense attorneys advise everyone to shut up, shut up, SHUT UP without a lawyer present. Police can and will attempt to catch you in a provable lie.
> the most authoritarian places in the world wouldn't charge defendants for "lying"
What on Earth is this second part of your comment supposed to mean?
Do you expect to be able to lie to the government in an authoritarian country? And not be arrested if they catch you in the lie there? And not be charged or worse if they consider the lie serious?
Alright. Most places would investigate crimes and charge you for them before they look at your defense itself, so I had several worries about that
One of which is self indications (even of things that cops didn't know about or couldn't prove) that would allow them to just question anyone into admitting even a parking offense, but I guess you can shut up indeed
I was worried that they could use any crime in a broad area and just force everyone to say with who they were and what they were doing, but you can also shut up
I was also worried than on investigations with no real crime involved, they could just go play jeopardy and ask you what you were doing minute by minute, and get you to talk until something gets inaccurate (while they have cctv but you have no vcr in your brain). But again, you can shut up.
When I'll be in America, I'll remember not to talk to cops.
Not even to 911 as emergency calls are error prone :
You said someone was attacked by a suv and knife when it was a pickup truck and machete, you go to jail
> Not even to 911 as emergency calls are error prone : You said someone was attacked by a suv and knife when it was a pickup truck and machete, you go to jail
Very few states have anything resembling this specific federal statute, and one doesn't typically call 911 to obtain service from federal law enforcement agencies. And in the case of a 911 call specifically, "heat of the moment" and "good faith" do a lot of work.
Unless you obviously intended to mislead an emergency services response, you will not be criminally implicated from good faith statements made during a 911 call regarding some incident you merely observed as a bystander.
> I was worried that they could use any crime in a broad area and just force everyone to say with who they were and what they were doing
In authoritarian countries, that absolutely happens. In America and the West, police are generally expected to have reasonable suspicion of anyone they detain to interrogate, and the length of detention is also limited if no evidence validating suspicion is forthcoming. They could not simply arrest everyone in the proximity of a crime, and geofence warrants are controversial exactly because that was the standard in the analog world.
> I was also worried than on investigations with no real crime involved, they could just go play jeopardy and ask you what you were doing minute by minute, and get you to talk until something gets inaccurate
Again, they must have reasonable suspicion to even detain you. You are reasoning about law codes as if they were literalist computer code for a compiler. The law, at least common law in America, is written by and for humans who are expected to exercise good faith as a part of enforcing and interpreting the law.
Do know your right to remain silent, and ask for a translator and consular assistance if detained or arrested. Police departments will provide these things because attorneys in court will question the reliability and admissibility of any testimony in the absence of their provision.
Don't worry too much about police if you're in America to visit. They're ordinary people who mostly want to catch criminals who are hurting their community. Bad apples are rare, and bad apples who harass someone on a tourist visa are rarer still.
> Subsection (a) does not apply to a party to a judicial proceeding, or that party’s counsel, for statements, representations, writings or documents submitted by such party or counsel to a judge or magistrate in that proceeding.
you had answers here. I'm trying to understand why our leaders can get away with lying so much and it being obviously in the public record, with videos on YouTube etc, and there being no recourse or accountability?
Is it true that the law is only selectively applied to some people?
Yes and did you see how Biden issued dozens of pardons before he left office absolving several leaders of their lies and whatever was actually persecuted to the "crime" level?
Seems if crimes are only crimes for normal people, theres rarely actual application of law for everyone. It instead shows itself to the governed as a system of control for them for the benefit of the leadership (since their friends absolve them of crimes, and also participate in the systematic neutering of any other forms of justice opposing their friends privileged behaviors).
Not saying this as a political thing to target one side like Biden/right and say Trump/left is clean. I'm saying I notice this in all levels both left and right.
Generally yes, unfortunately, with very narrow exceptions. Not all countries follow this rule, but the US does, and it’s certainly not alone in this respect.
> President Trump has issued a pardon to his first national security adviser, Michael Flynn. Flynn had pleaded guilty to lying to the FBI and then recanted.
"Rules for thee but not for me" - isn't that beyond obvious now? The folks running things simply do not play by the rules you or I do (assuming you do).
I’ve been arguing against some LLMs about this point for a good hour and there’s a whole lot of linking intent to action where you can be liable if a court can prove it. Not that an LLM is legal gold but it’s the best thing I have to pass ideas around with.
The entire situation is sort of nonsensical and boils down to lots of minutia in law that no normal person would know about.
For example having normal widely known security features like wiping the device after N failed PIN attempts is fine. Even having long standing security practices that can’t be related are fine, like having a timed touch point where if you don’t enter the PIN every… 15 days or whatever the device wipes, perfectly fine if it can’t be connected towards the crime and you’re not compelled to tell officers you have such a security mechanism.
Even if you were to set a trap where you use the same PIN for your bank, your laptop, and some other security devices in repetition then decide to set your duress PIN to that by assuming it would be discovered as a probable option they’d use, you’d be ok but it could be questionable if that was by design…
It’s so obscure really as to how and how you’re not allowed to protect your data, even if you’re not the one performing the action to clear destroy the potential evidence yourself. The entire thing seems pretty absurd a frankly arbitrary to me, and I don’t know how people could know which cases are and aren’t legal. I know not to destroy evidence myself but I wouldn’t know to tell someone to not use the duress pin or that even giving them my duress pin could somehow be my liability. It’s madness if you ask me.
Well I don’t have any legal need to hire a lawyer or anything I would need a lawyer for. It’s a rather fast way to surface legal information and precedent. I don’t see how it’s any more depressing than Google diving on a topic you’re interested in for an hour..
This is my core question as well. At what point do you have to maintain property so the government can use it to testify against yourself?
If I have a dash-cam, and I wipe the SD card, can the government imply that because I erased the card, it must prove that I was speeding? The dash-cam automatically over-writes old footage - perpetually destroying evidence.
Given nebulous cases such as "hacking" a site by looking at the HTML[0], am I destroying evidence of crimes whenever I format my PC? I hope the government requires specific charges and more proof of a crime other than missing evidence. Say I destroy my diary - can the government claim that is the key evidence where I confessed to being the gunman on the grassy knoll?
"At what point do you have to maintain property so the government can use it to testify against yourself?"
For the duration of the border search. This guy is at risk because he caused the data to be deleted during a border search, when CBP asserts they can legally look. He would have been fine if he deleted data on the plane or after leaving the airport.
(This is my understanding of the government's position; personally I don't think this prosecution is constitutional)
Who said it was evidence? Did a judge authorize or issue a warrant to collect said evidence? Absent that, it's just your property, and you can do with it as you please.
"Investigation" is a pretty generous way to label "some thugs working for an authoritarian state want to look for incriminating stuff - including criticism or mockery of them or their leader - on your communications device".
Whatever the American legal system may say, a couple of thugs with no warrant conducting searches and seizures of data is a blatant violation of the Constitution's intent. This is the sort of behavior Americans used to rightfully condemn.
The Border Patrol have been a violent and abusive branch of government since their inception. Their abuses under Republican and Democratic Presidents alike have been reported across the spectrum of America's media for many years. 'Thug' with it's roots in groups of violent organized criminals who preyed on travelers - is an accurate description for them.
I would also like the fourth amendment to apply at the border.
Have you read United States v. Flores-Montano? The border search exception (which I disagree with) is pretty old. Can you find an era in which Americans in general found it objectionable or were united in rejecting its application to data?
To me it’s all quite analogous to walking up to, but not crossing, a border with, say, a fruit that’s legal to possess on the side you’re on, but not on the other side, and either eating or throwing away that fruit before crossing.
“Hey! I saw you holding that Mexican pepper in Mexico, and then you threw it in that Mexican trash can before crossing into Texas!”
But that's not what happened here. Here, you were trying to bring the pepper over, got inspected and somehow got rid of it because you were able to be found out.
Or emptying your bottle of water when the TSA found it on the XRAY. Unlike the pepper he's actually allowed to have that data on his phone both sides of the border.
"Evidence" has never been limited to the subject of a warrant. Destruction of evidence statutes typically include material that is subject to a police investigation.
Reasonable suspicion is required for a terry stop but that does not apply at a border crossing. Everyone can be stopped and questioned and searched at a border crossing.
An ”investigation” is just a fancy word that broadly describes the type of information collection that law enforcement does. Yes, it is typically about things they think are crimes. Because that’s their job. But there’s not some legal hurdle they have to pass here, the word describes their work.
> Who said it was evidence? Did a judge authorize or issue a warrant to collect said evidence? Absent that, it's just your property, and you can do with it as you please.
Why do people go sovereign citizen when reality doesn't work their way? Stop imagining that the way you want things to be is the way things really are.
Cops do not need a judge to authorize the seizing of evidence. Cops do not need judges to decide what evidence is. Tell me, why did you just pretend like these are real requirements? I can understand why you'd want it to be that, but you wanting it to be that doesn't change reality.
It's as if you've just learned about the Fourth Amendment but know nothing about the nuance behind it.
Your system wouldn't even work at all. Let's imagine the cops get a tip that a bald man with a blue tshirt shot a man. They patrol the streets and find a match. By your logic they should not have the ability to search the man and seize his gun as evidence until a judge issues a warrant.
uhh, are you a lawyer with knowledge about how evidence works?
its not just a word, its a specific legal term
cops definitely do need judges to say what evidence is admissible, and they really dont have thr ability to just declare anything they want as evidence and just steal it
Yes this is different than when law enforcement serve a warrant and the defendant wipes his computer before the agents can get a hold of it. In that case the warrant covers what you destroyed as evidence.
Though during traffic stops, if a defendant disposes of his drugs while on the run, that can also carry a charge of destroying evidence even though no warrant was issued.
Hm but the drugs are only evidence because they're illegal? So the phone owner only destroyed evidence if the phone contained something illegal, but innocent until proben guilty?
Evidence is simply a word to describe the artifacts that one wishes to use to support their case. There’s not some gate-kept process to “become evidence”.
After they get it when they are authorized to get it. You cannot point at random things and call them evidence. For instance, I can take a dump and flush it, despite law enforcement's assertion that my stool is evidence in some imaginary crime.
Yes, when they are authorized to make a drug bust. And that's assuming they catch him before he flushes, i.e., get the drugs. Otherwise, what are they going to say? He is a drug dealer because we heard the flush? Or let's say they are doing a missing person's search and hear the flush. What now? We came looking for a missing person, but heard the flush, so there were drugs whose evidence he destroyed?
Of course, tampering with evidence is — itself - a crime. And you need evidence to prove that crime.
But yeah, people tamper with evidence because they think they can get away with it. That doesn’t mean they always succeed in cleanly doing it without creating evidence of the tampering itself.
Yes, absolutely. Something can be evidence if the police haven’t even seen it at all.
For example: the police think you are running a fraud scheme. They knock on your door. You shred a bunch of paper. The police wanted to see what was on the paper. You have violated the US law on tampering with evidence.
The prosecutor can argue that you violated some laws, but they will have to convince a jury beyond a reasonable doubt of that. And they will need a lot more than "I heard the shredder" to convict you. In an overall case, the shredding can be a piece of the puzzle. Shredding, standing alone, is not a crime, nor is shredding as a general matter tampering with evidence.
Yes, if someone wants to bring charges for evidence tampering, they will be required to collect additional evidence to successfully prosecute that crime. That's how it always works. They might collect fragments of the documents themselves, communications regarding the shredding, etc.
It is so sad and worrying when the already oppressed population argue for paranoid practices constraining their own practices considerably and with great efforts, eroding the other thing that constitution was so famous about, freedom, so some officers supposed to serve the population can do things easily to anyone. If they please and want it easy for themselves.
VeraCrypt has a cool function which is a reserved space for a decoy OS.[1] Everything else registers as free space while decrypting to dummy volume. You make the dummy volume look lived in, and forget. provide dummy password, volume decrypts such that only dummy is accessible/readable. give proper password, real OS and FS decrypt and load.
Something like this may need to become the standars over duress pins which should be treated as a fallback or more extreme alternative. Right now, A single choice to reasonably and rightfully protect your privacy reuslts in jail time over something which likely wouldnt have resulted in any issues if superficial compliance was observed.
These goons, even if a branch of a facist regime, are ultimately burocrats with violent options to settle. They aren't doing forensics on your device etc. They have neither means nor knowledge to do so. They just need to tick their boxes. Did the phone unlock? tick. Did our spyware complain? no? tick. Overall appearance of compliance from person? yes? tick. free to go, next!
You just have to find ways to stay safe without agitating their workflow and all is well.
this will likely fail as block devices aren't dumb anymore, the firmware state will out the hidden volume. counting on the laziness/unsophistication of an adversary isn't a great move.
this problem may be solvable by a purpose-built abstraction where every write no matter what address will look identical to the firmware (naively, a randomized key-value map).
Not that shufflecake solves the issue you highlighted, but I found the shufflecake FAQ to be a good intro to the topic for anyone curious. It does a good job explaining the threat vectors and the relevant trade offs, in particular the TRIM and ORAM sections. It’s also just a cool project: https://shufflecake.net/
Modern SSDs are log-structured under the hood. The presentation to the host system as a random access block device is an abstraction on top of that, emulating the semantics of spinning rust. Inspecting the underlying log will reveal the location of the hidden area, even if it looks random when read linearly.
I’m not so sure that log structure would reveal to you VeraCrypt style hidden volumes. It would only tell you about which blocks are allocated but the whole point is that VeraCrypt would allocate the whole space and within it have hidden space. You wouldn’t be able to infer (at least ethically, but you could lie) whether or not a hidden partition exists because you don’t know if the allocated block is present in the filesystem or was just allocated and never trimmed.
what do you imagine allocation is in this context? it's just a set of written blocks that mark address ranges and other metadata for the OS filesystem driver (all encrypted).
firmware metadata will leak the fact that there is churn in the address range where a potential hidden volume lies. the churn will be inconsistent with filesystem activity that would be present in its absence.
it's not just SSDs you need to worry about either, HDD firmware also keeps metadata, some of it could be be proxy to churn by region.
> churn in the address range where a potential hidden volume lies.
You’re assuming separation exists. VeraCrypt specifically and intentionally allocates the hidden partition blocks from the unallocated space within the normal partition. You know, the same thing that would happen if you wrote a file. Even if you had access to the “open” partition, you couldn’t conclude that “there’s allocated blocks but no files, thus hidden partition” - that presumes the filesystem would TRIM immediately, which is indistinguishable from “there’s just a lot of deleted files that haven’t yet been GC’ed”.
Now to be clear, VeraCrypt specifically is believed to be susceptible to SSD side channel attacks, but even still it’s not definitive conclusions. You’re less likely to be betrayed by the firmware than the OS helpfully remembering you opened a file on a hidden partition and saving that history into the unhidden partition.
It would also give you information about the order in which blocks were written, and the historical state of the disk. Because of wear leveling, block allocation isn't just a one-time initial thing; the mappings between logical and physical address space are changing with each write.
SSD/NVMe keep track of what regions are wiped and which contain data that has to be preserved. To hide something in the seemingly-unused space, you have to turn off trim, eat the performance cost, and pretend you had a reason to have turned off trim.
I don't believe having trim disabled even helps here. smart firmware sees the same address being written to and may therefore reassign it to a different cell for wear leveling. it's a de facto trim.
trim lets the firmware know which mappings it can discard without the explicit reuse of the same address.
however I don't believe you can observe this effect from trim command results, it will report the usual size trimmed as if the firmware never realized that you reused the same address range multiple times.
I agree that trying to outcompete seems really hard, but also:
Given what the experience of using a non-rooted phone is like, how very very tight the sandboxing is and how useless it is a General Purpose Computer that will tell you anything: I find it very hard to believe the unlocked phone is going to let you start probing firmware & snooping on hidden volumes.
This post sent my BS detector on high alert. I'm struggling to take it seriously.
you do realize what the threat model behind a hidden volume is right?
no one will be accessing the firmware through the OS, they will access it from the PCB/chip/debug port. there is no point to a hidden volume if you cannot credibly deny its existance.
Even in places where you can’t be compelled to hand over a password, attempting to deceive the cops will get you thrown in prison just as reliably as destroying evidence.
There is a general wisdom: if you invoke "the ends justify the means" you have crossed the border to the Dark Side.
I'm not going to explain my full understanding of this piece of wisdom, it would be a wall of text, I want just mention that this behavior is addictive: it is much easier to start justifying your means than to stop it. And over time those justifications become more and more flexible.
I'm ready to agree that there are situations in which ends justify the means, but if you are not aware of downsides in your particular case, and if it doesn't seem controversial to you, you are most likely mistaken and the ends do not justify the means.
Sometimes it's used to uncover crimes, but very often it's used to invent crimes that never actually happened, or used to deceive a courtroom when they don't actually have evidence.
It’s also a fairly traumatic thing to people through and I can imagine it does a lot of damage to people’s faith in law enforcement. Personal anecdote: when I was a teenager some cops gave me a list of fabricated evidence that I’d committed a crime, not intending to ever show a court; just trying to get me to confess. They said they’d go easy on me if I confessed but if I held out then they would petition the court to have me tried as an adult and sent to “big boy” prison. They also told me my parents were cooperating in the investigation and didn’t tell me. The whole ordeal basically made sure no one in my previously quite pro-cop family would ever trust an LEO again.
My first experience with the police was just as bad. A friend and I were waiting on the porch of another friend (all like 14 years old). We were waiting for him to come home. He knew we were there waiting for him.
His neighbors yelled something to us out of their window. We went to see what they wanted, but they didn't say anything when we got near.
We went back to the porch and waited for maybe 10-15 minutes, but decided to leave as we felt really weird about those neighbors. As we started walking, a police officer pulled up screaming at us, telling us we were under arrest for throwing rocks at the windows of those neighbors. The police officer took us to the police station, put handcuffs on us, as well as shackled our feet to the floor, where we remained for like 2 hours. He made us write a statement, and then told our parents to come get us.
It was truly the most confusing thing I ever experienced. Angers me a bit today thinking about it.
Fabricating evidence in an interrogation to try to get a confession out of someone versus "I'm not a cop" when infiltrating a drug ring, or lying to hide important information
Lying about evidence specifically is illegal in a lot of countries (not the US)
So government officials can lie but citizens must tell the truth all the time? That is insane to me and I don't see how that does anything other than force people into perpetual criminality so that they could be arrested at any time. The average US citizen already commits 3 crimes a day because our justice system is so messed up.
That only applies to federal agents, at least. You can lie to local cops all you want. Though in both cases I think just keeping your trap shut is the better option.
> There’s plenty of empirical evidence of cops lying to lock up innocent people.
And the solution is to correctly prosecute and punish them. A cop is sworn, and we should hold them to a higher standard not a lower one. But changing the underlying rules just because some cops are bad isn't necessarily an improvement.
If that is the case, it should still be prosecuted to find out whether the deception was used to "uncover crime" or a crime in itself. Just because we're okay with cops carrying guns and assume they'll only shoot the "bad guys", that still doesn't mean they can escape accountability and should not be held to objective standards. It would ridiculous to just use a "trust me bro" framework for this and hope for the best.
The best thing to do in such a case is issue the following statement -
"I am in full physical compliance and will not interfere with investigation in any way, but I plead the 5th on answering any questions, and plead the 4th on any personal property", and just sit there silently. Let them break into the phone if they want.
true, but in that scenario you're going to prison either way. If you legitimately use the dummy for daily driving and hidden for sensitive work, then it's better than nothing.
Obviously a good alternative is a dummy device but it carries similar risks, and the best option is to simply not go to authoritarian shitholes like the USA. Thankfully I've been able to avoid/push for US folks visiting us instead, but honestly the alternatives are as bad.
Its a shit situation where most reasonable actions carry real risks, its up to individuals to choose what is acceptable risk to them, but a dummy os you use as a daily driver for inconsequential work is, to me, an ideal midground.
I worry about approaches like this because maybe the forensics tool fills all available space and then clears it, noticing that this particular phone is an anomaly re:
manufacturer published space = allegedly available space + size of known files
If you're hiding something in "empty space" it won't behave like empty space when you try to fill it.
I think we need to be stenographically smarter. Like if there's some mechanism of deduplicating blocks across volumes, then perhaps when given the special key you could temporarily render a volume whose parts are hidden in the data already occupied by the other volume and then just run it in memory so that a reboot clears it.
> If you're hiding something in "empty space" it won't behave like empty space when you try to fill it.
Yes, it will. It will overwrite the hidden data.
When you have a 1 TB drive that you encrypt with VeraCrypt using a hidden volume the following happens:
You have an outer decoy volume. This volume is 1TB in size and works like any other VeraCrypt volume.
You have a smaller, hidden inner volume with a different password. When you unlock this volume the following happens: Veracrypt tries to unlock the normal voume, but fails because the password is incorrect. It now tries to decrypt a secondary volume header at an offset. This header contains the layout for the hidden volume which is positioned inside the free space of the outer volume. So the position of the hidden volume is encrypted.
Now when you want to plant decoy files in the outer volume you actually do the following: While unlocking the volume you enable the option for hidden volumes and now you enter both passwords. So VeraCrypt knows where the inner volume is located and how large it is so it will not overwrite it. VeraCrypt will show the adjusted smaller size for the outer volume.
When you're in a situation where you are forced to give up your password: You tell them your decoy password. They open the outer decoy volume. It appears like any other VeraCrypt volume spanning the whole size of the disk. If they write any files to it that might overwrite parts of the hidden volume.
Notably all standard VeraCrypt volumes principally feature the option of hidden volumes. You cannot proof that a VeraCrypt volume does not have a hidden volume (short of it being full in the first place). The user base of people not using hidden volumes gives the plausible deniability to the people who do. Which is worth knowing as this can get you in trouble in certain scenarios.
There are some issues with this though:
SSD wear leveling and especially TRIM. You must not TRIM the blocks of the hidden volume, which can reveal it as it shall appear as free space that would usually be trimmed. So disable TRIM, which is suspicious in itself. Though TRIM also leaks information about file layout even for normal volumes, so there is some plausibility left. But it's not ideal. This is not an issue with HDDs (maybe with SMR though).
I don't remember exactly, but I think you can do statistical analysis on the layout of files inside the outer volume and deduct the existence of the hidden volume from this under certain circumstances. Essentially, in a normal volume the filesystem would have written this file to these blocks, but it didn't and chose other blocks instead. So there must have been a block layer translation that reroutes blocks from the hidden volume and these free blocks that should not be free must be the hidden volume. I'm not too sure that's really what it was about.
5$ wrench method. I suspect you are hiding certain information in this VeraCrypt volume. I torture you. You give me the password. The information is not in there. Either you do not have the information or you are lying and using a hidden volume. I continue to torture you for the second password on the chance that you're using a hidden volume. This is what I was about earlier when I said VeraCrypt can get you in trouble.
>VeraCrypt has a cool function which is a reserved space for a decoy OS.[1] Everything else registers as free space while decrypting to dummy volume. You make the dummy volume look lived in, and forget. provide dummy password, volume decrypts such that only dummy is accessible/readable. give proper password, real OS and FS decrypt and load.
Implementing it in a convincing way is harder than you think. Moreover if you're under the type of regime that will throw you in jail for not giving up a password, they're probably not going to let you off the hook because they can't definitively prove you have a hidden volume.
I could be wrong, but my understanding is that the dummy OS views the remaining space as legitimate and accessible free space. Using dummy directly is of course dangerous, as you might overwrite sectors with legitimate data, but also, you can access dummy os from secret. so you'd drive dummy from secret to prevent that but can load dummy as main if under duress and it looks fine. Browser, logged into various inconsequential things, random files for inoffensive memes and other human stuff in downloads folder etc. maybe an email account you've signed up to a few newsletters and e-stores that send spam logging in via an email client that auto-launches etc.
Done well, I see no reason it should raise redflags in routine stops, so unless you're being targeted (at which point you've got way bigger problems) it should just seem like you're a run of the mill person who does not use their device to its full capacity, which is the majority of users.
at some point, having any mitigations even present is a problem. At some point being met with a boot password at all is a problem that puts you on a list. I have no solution there other than to not go to those countries or keep dummy hot.
If you read the linked thread, you'd see the reasons are:
1. SSDs (including phones) have TRIM/discard, so you need to disable it, otherwise the hidden volume would get wiped. You going out of your way to disable it is going to be suspicious.
2. Even if the above wasn't an issue, you can't really use the outer os to any meaningful extent, because you run the risk of overwriting the inner volume. That makes your decoy os suspicious. It's not definitive proof you have a hidden volume, but I doubt the authorities would care too much about that.
I last used this feature probably more than a decade ago, but: you provide 2 passwords when decrypting. If the first password is the main volume, the second is attempted as a hidden volume. If both match, the main volume registers the hidden volume as free space but prevents writing to it. If the hidden volume doesn't match, the main volume will clobber the hidden volume.
So the main/hidden volumes really works like a duress: you might destroy your hidden volume while using the main one under duress, but that does not apply when using the main volume while able to additionally unlock the hidden volume.
If you are in a situation to need to worry about any of this, you're probably going to jail for one reason or another, anyways.
>So the main/hidden volumes really works like a duress: you might destroy your hidden volume while using the main one under duress, but that does not apply when using the main volume while able to additionally unlock the hidden volume.
The problem is that if the main volume doesn't have any signs of activity, then that's highly suspicious. Why are you carrying around a laptop that's mostly empty and hasn't been used in months? Why is it that despite seemingly not being used in months, there's physical signs of wear, like scratches or dust accumulation? If you do try to make the main volume seem "used", you run the risk of accidentally overwriting your hidden volume.
This seems like the kind of thing that would put US citizens in way more legal jeopardy than just using a secure phone with a long password, refusing to unlock it, and buying a new one if the officers involved confiscate it out of spite.
This is always been the dumbest thing about "hidden volumes": It relies upon your adversary not knowing about veracrypt's hidden volume. Which BTW, is plainly ADVERTISED on the web site. The second he knows you have veracode, he will ask for the other encrypted volume.
The $5 wrench isn't about breaking encryption. It's about breaking will power. If they achieve their goals great for them. If not they proved the second volume either didn't actually exist or your will power was stronger than the $5 wrench. Either way they're probably way more happy with the outcome than you would be.
As long as the border your crossing doesn't respect the 4th Amendment, the best approach is to not carry anything incriminating across it, nor anything that may make you suspicious.
There is an immediate problem: the device was being searched, and this statute criminalizes destruction of property to prevent seizure, not searches. I don't think this statute applies this situation. Regardless of whether the border agents could lawfully search his phone at the border, they didn't have grounds to seize it. I suspect this prosecution will quietly be dismissed within a few months.
Hmm. It looks like the government asserts that they can seize a device if the owner does not provide a password. This is a good point and answers my search v. seizure objection above.
You say CBP is "empowered" to seize a device if the owner refuses to provide a password but I can't find a statute that authorizes it or precedent squarely saying the 4th Amendment allows this. The scope of the border search exception isn't settled. So the next argument available is that the executive is wrong and CBP does not have the constitutional authority to seize a device merely because the owner refuses to provide a password. That's obviously a much bigger argument and who knows if it would work, though this case sorta feels like it could become a marquee 4A case.
"The ACLU argues that the Fourth Amendment does apply in these situations, at least to electronic devices, because they contain so much private information. But the law is very unsettled, and the Supreme Court has not addressed the issue."
I don't know, that sounds like the kind of "I'm not touching you" defense that I don't think will convince anyone with common sense. It's obvious the wipe turned a search that could potentially find something into a useless search, so I don't see why the two should be treated as equivalent.
common sense is that CBP should not be searching citizens phones in order to pick a kill list for ICE to go killing first amendment protected protestors.
it's ridiculous on the face of it that that guys phone should be searched at all
I would have thought the fourth amendment not having specific geographical boundaries, but rather applying generally would have been common sense too, but here we are with border patrol being able to force you to reveal your PIN code just because you transited a border.
Imagine a safe containing sealed envelopes written in a code that only the owner understands.
The police ask for the combination.
The owner provides a combination that opens the safe, but the safe’s security mechanism first destroys its contents. The police can now inspect the safe but there are no documents left.
Even if the documents had remained, they would still have been written in an indecipherable code unless the police also had the codebook.
This person was complicit with the search: he gave the police access to search the safe.
You're making two arguments here, and I'm not a lawyer, but I don't think any of them would convince a judge.
> The owner provides a combination that opens the safe, but the safe’s security mechanism first destroys its contents. The police can now inspect the safe but there are no documents left.
> This person was complicit with the search: he gave the police access to search the safe.
The problem is that it's very obvious the police didn't want access to the safe because they like opening safes but to get the documents inside. The person denied that intent.
> ... written in a code that only the owner understands.
> Even if the documents had remained, they would still have been written in an indecipherable code unless the police also had the codebook.
This is an orthogonal argument basically saying "if the documents had also been encrypted, then there would have been no difference between destroying the documents and just leaving them encrypted".
First, that's not what was the case in the original situation - there is nothing saying there was secondary encryption on the phone.
Second, obviously, destroying documents and encrypting them is not equivalent because in the second case there is still an option to try and brute-force the code or try to decrypt them in another way.
> there is nothing saying there was secondary encryption on the phone.
A GrapheneOS phone stores its files encrypted. The PIN is not itself the encryption key; it is used, together with a high-entropy secret protected by the Titan M secure element, to derive the material needed to unlock the randomly generated filesystem-encryption keys.
The duress PIN does not overwrite every file. It irreversibly destroys the multiple layers of key material and encryption metadata needed to decrypt the data, making any encrypted remnants effectively unreadable.
A hypothetical, extraordinarily powerful quantum computer could theoretically decrypt the remaining ciphertext by searching for the encryption keys.
The language in the statute of what constitutes "destruction" is very broad and clearly covers IMO giving a self-destruct password to someone who you know will try to enter it.
"Whoever, before, during, or after any search for or seizure of property by any person authorized to make such search or seizure, knowingly destroys, damages, wastes, disposes of, transfers, or otherwise takes any action, or knowingly attempts to destroy, damage, waste, dispose of, transfer, or otherwise take any action, for the purpose of preventing or impairing the Government’s lawful authority to take such property into its custody or control or to continue holding such property under its lawful custody and control, shall be fined under this title or imprisoned not more than 5 years, or both."
But I'm curious what the officer specifically requested. If the officer just asked for "the pin code", without explaining what they were trying to do or which pin code, then it seems he did comply: he gave them a pin code that gives them access to the [cleaned] phone.
It doesn't matter. Providing a PIN that will cause an officer to inadvertently delete data clearly is covered by the statute:
"Whoever, before, during, or after any search for or seizure of property by any person authorized to make such search or seizure .. takes any action ... for the purpose of preventing or impairing the Government’s lawful authority to take such property ..."
This is a (terrible) semantic argument that will never work in any Common Law legal system.
CBP is trying to gain access to the files contained in the system.
The files in question were functionally accessible to an authorized party (the owner, GrayKey or Cellebrite acting with judicial authority, etc)
The actions undertaken by Defendant during this investigation (which Defendant was obviously aware of and participating in) permanently impaired the ability for any party to access these files. Any reasonable person, or more importantly, a sworn technical expert, would agree with this.
Specifics here are irrelevant: feasibility of access doesn't change the intent or effect of the act in question. Files existed in every reasonable characterization, now they don't.
This is functionally the same as artfully convicing the officers to light a bunch of seized documents on fire, or to open a booby trapped container that is known (and intended) to effectuate the destruction of its contents.
If your threat model means you can’t afford for border security to view your device, wipe the damn thing yourself before crossing the border and restore it from an encrypted online backup on the other side.
You’re just carrying a blank phone that you intend to set up and use later, and they can’t force you to install your backup onto a phone.
Now, this is sus as hell, and you’ll probably draw all kinds of extra attention, but if border security wants access to your phone in the first place, you’re already in a weird place.
this isn't even that weird, when I worked in a BigTech it was pretty explicit that there were certain countries where you should not bring your actual work device through the border, and you'll get set up with a different one while in that country.
Half of Europe does, it's just that everyone talks about the US like it's a special case because those searches happen routinely. It's legal to search a phone without reasonable suspicion at airports in the UK under the Terrorism act 2000 (pre-9/11!)
I really hate that these kinds of justifications almost always ends up to serve as a push for acceptance through apathy of the status-quo, as opposed to fueling that outrage that pushes for positive change.
Pff one time when travelling to the US I brought two laptops, macbook and a thinkpad. I just reinstalled the thinkpad and somehow the border patrol was very interested in it. Asked me to ‘show my gallery’… it was a guiless setup and only had a terminal, problem was… somehow my keyboard layout or something was messed up and i could not even login… i spend around 2 hours being questioned by 6 people…they didnt even take a look at the macbook
The french cybersecurity agency (ANSSI) used to share leaflets to tell you to do just that.
The US government wasn't named, but it's part of the ones that like to do some economic intelligence and no euro who read the news would trust it more than a banana republic when it comes to crossing the border.
Now having a corporate device with little data is no longer outstanding. Everything is in the cloud these days.
As for personal devices, you can explain you're taking a dumb cheap laptop for your holiday as you're working on a desktop PC at home. You're not taking your entire house when you're on a trip, just a laptop to check tourism information and post blog posts
I myself bought a crap laptop on ebay to shove it in bags and backpacks and go to conferences and not be sad the day it's broken.
but above all, he's a citizen so shouldn't care about looking "suspect". He has a right, not a privilege, to cross that border. They can explain a judge how he looked sus if they really want to search his home.
> You’re just carrying a blank phone that you intend to set up and use later, and they can’t force you to install your backup onto a phone.
They can just make this illegal too, and ask for the keys to your backup, or detain you until you do. Point is, you can't gain freedom through technology. It was always a political thing.
Question: what does not accepting these things look like? Because voting, protesting, donating, and lawsuits haven't gotten anywhere. What are you suggesting we actually do?
> federal agents had already circulated his name and photo internally, saying he was under investigation for "suspected terrorism activities" because of his alleged association with the movement against Cop City
Of course it’s about that huh. It’s quite scary how far the US will go against anyone who engages in this sort of activism.
This is the most troubling part of the whole episode. Targeted by the government. Its been a long rough slope to get here but they are at the goal line.
For non-graphene users (eg. Boring iPhone people like me).
So there’s a feature called Duress PIN which as explained through some comments means you put a different pin which intentionally wipes the phone.
It’s not auto wipe or wipe after several failed attempts but intentional wipe of device.
(Worth explanation as the current title nor the article doesn't easily explain this was made by the US citizen providing the alternative passcode)
For more technical details:
> GrapheneOS provides users with the ability to set a duress PIN/Password that will irreversibly wipe the device (along with any installed eSIMs) once entered anywhere where the device credentials are requested (on the lockscreen, along with any such prompt in the OS).
This is exactly my setup with GrapheneOS. The default / main profile is patriotic, with a sterilized Telegram account, state-adjacent banks and apps, etc. The second profile (that uses a separate PIN) is not so patriotic: it has foreign bank apps, crypto apps, password manager, 2FA app, personal records, and an alternate Telegram account that I use to discuss any potentially unpatriotic topics with potentially unpatriotic people.
It would be cool if there's a third PIN that can wipe the unpatriotic profile whilst showing the patriotic one.
So you use 1st pin for normal use, 2nd for downloading your flight details on patriot mode, and 3rd for unlocking to patriot mode whilst silently nuking unpatriotic data.
Or a PIN that just nukes the data for certain apps (Signal, Telegram, WhatsApp, E-mail) etc. Feds can read my Slack messages all day.
1. Never ever have Signal installed on the phone during border crossing. The presence of the app itself may trigger them (speaking from first-hand experience).
2. Having an empty Telegram account may look suspicious. My recommendation is to have two separate Telegram accounts, with the "unpatriotic" one in the separate profile only.
3. Never ever use WhatsApp for anything "unpatriotic". It's way of deleting messages leaves traces ("This message has been deleted") which may rise suspicions.
As for email, I just don't have any email clients installed on my "patriotic" profile. They all go to the "unpatriotic" one.
There's no PIN for deleting a particular profile, but you can quickly delete it manually, assuming that you have some private time available – for example, when you are stopped at passport control and told to wait in the waiting area.
It would be cool if there's a third PIN that can wipe the unpatriotic profile whilst showing the patriotic one.
So you use 1st pin for normal use, 2nd for downloading your flight details on patriot mode, and 3rd for unlocking to patriot mode whilst silently nuking unpatriotic data in case of seizure.
Yep, full agreement here. The amount of hoop-jumping is ridiculous. However, I live in Russia so I have to do all that, plus some more (e.g. the work to protect my own self-hosted VPN after Roskomnadzor issued the recommendation for big Russian online services to sniff out and report user's VPN settings).
I spent two weeks thinking about my new setup on Graphene OS and Windows, but it was time well spent. Before that, my checklist for pre-border-crossing cleanup required about 8 hours of work. With the new setup, I can complete the cleanup in about an hour, and restoring takes even less.
This is extremely hard to implement in a non-superficial way that would be hard to detect.
Android switched from block device encryption to filesystem-based encryption (with encryption data and metadata). This provides many security improvements, such as per-file encryption keys and per-profile keys.
However, this also means that the main file system is readable and you could enumerate the available users. If you would encrypt/obscure that information, you could still infer the presence of other profiles from file system block allocations.
(Disclaimer: not an expert, but I read the relevant Android docs at some point.)
I had this on a Xiaomi, maybe 10 years ago? Very cool feature! I hope they still do it. I think the wipe feature is also very cool, but not used in this way.
Ok so what you're saying is Android doesn't have this feature. Xioami does. Type in a different pin and access a second space. Not the same as profiles, obviously
And wipes the main partition in the background at the same time
Also too patriotic is sus. Better to keep some minor offenses (that give you a fine or a week of jail at most) on that partition so they will think that this is the thing that made you so nervous during the search
I believe the old TrueCrypt had two passwords, each revealing a different set of files. You'd put e.g. your tax forms in one, so if forced to decrypt your drive, you could cooperate and do so.
It's not illegal to delete your own vacation photos. So to prove this guy guilty of destruction of evidence, does the government need to prove there was actual evidence in the phone?
Sounds like a feature that under right circumstances can land you in Guantanamo for 5 years where eventually you get cleared once the real terrorist gets caught.
If this happened in an EU country you'd all be wetting yourselves, but for some reason the rooms different today. The professional advice we are given traveling to the US is back up you phone, wipe it, travel and restore once you are comfortable. Sad state of affairs guys
In the US, he could have refused to give the pin and that's protected under the 5th Amendment. They would have nothing because they couldn't get into the encrypted phone.
In many countries other then the US like Ireland, they have key disclosure laws which require you to testify against yourself.
In the UK, police can even require key disclosure without a judge.
> US citizen charged after GrapheneOS phone wipes during airport search
> It's concerning – and sends the message that [GrapheneOS] is criminal by default
What's with this sensationalism? The GrapheneOS phone didn't just wipe itself - the defendant actively took steps to wipe it. The defendant isn't being prosecuted "by default" for having a GrapheneOS phone. He is being prosecuted for what he actively chose to do with that phone.
If your argument is that the search and seizure was unconstitutional, and you're within your rights to wipe your data, then argue that. I'm very sympathetic to such arguments. But stop with this "they prosecuted me for having a GrapheneOS phone" misdirect
How are they going to prove there was evidence of a crime? While destruction of potential evidence does introduce a certain amount of leeway that doesn't allow going from absolutely nothing to "evidence was on the wiped device".
Most previous court cases involving encrypted devices have required substantial proof that the encrypted device contained incriminating evidence. To be clear "you sent this illegal thing from your house" levels of evidence.
It mostly seems inept, if you are going to push to expand your powers you do it on strong cases where you know what happened. Doing it on weak cases like this gives a judge an opportunity to shut down that without giving you a chance of a meaningful conviction and without that you won't get any benefits...
>How are they going to prove there was evidence of a crime?
They don't have to, only that you destroyed evidence. That's why many people get prosecuted with "obstruction of justice" rather than the actual crime.
>While destruction of potential evidence does introduce a certain amount of leeway that doesn't allow going from absolutely nothing to "evidence was on the wiped device".
So if someone was doing insider trading, and the SEC came knocking, then immediately afterwards they start burning every document they have and microwaving their computers, do you think they should get off the hook? Surely you must think, even if the authorities or society can't a priori know you were guilty, the subsequent activity should be illegal? Note this isn't the same as banning burning documents or microwaving computers, only doing so after you're aware there's an ongoing investigation.
They need to prove you destroyed evidence, you have the mens rea component with the deceptive pin code but the defense can simply plainly say they didn't want the police to read their private device.
Your example is fabricated since the justice department didn't even bring forward a specific crime they believe was committed here.
If they charged him with a crime and had evidence his device had evidence of that crime (even if in reality it didn't) that would be a more interesting question.
Destruction or removal of property to prevent seizure.
CBP are empowered to search US citizens devices and, if the citizen refuses to comply, to seize that device. They'll be alleging that by knowingly providing CBP with a duress PIN he destroyed his own property to prevent its seizure.
Notably, they don't need to prove he destroyed evidence of anything.
Not to mention it fails a basic sniff test. You seriously think a judge is going to rule "well even though you deleted all your emails, since those are technically bits stored on a phone, and the phone is still there, you haven't destroyed anything, and you're free to go?"
>with the deceptive pin code but the defense can simply plainly say they didn't want the police to read their private device.
That's as convincing as saying you burned all the documents because you don't want people who break in to read all your financial records. It just happened to start after the SEC came knocking
Except this isn't the SEC actually pursuing a voicable crime. This person was under no suspicion at all. They were simply coming home after being abroad: last I checked that is not a crime. Outside of a crime, "evidence" is just called property. If the TSA can't show "we have provable evidence gathered elsewhere to show that there was possible incriminating data on that phone" all they did was wipe this guys phone. All they had was pre-crime "he was involved in the movement against Cop City so we're gonna search his phone". No "he was meeting with terrorists in the DR". No "we have good reason to believe that when he was in the DR he communicated with terrorists". Just "uhhh we were looking for anything prohibited[1] and we targeted this guy because he was involved in some anti-cop protest group 3 years ago".
If you can't see how insanely thin their argument is, and how easily this will be abused, I don't know what to tell you. We could just as easily say having any passcode on your phone at all is obstruction of justice, since the feds could want to look on your phone for whatever made up reason, and if they can't because its encrypted, well why did you do that? What are you trying to hide? Evidence of a crime!?!?!
1. I had to call out, "looking for anything prohibited" is a direct fucking quote from CBP. They admitted it was a fishing expedition.
>We could just as easily say having any passcode on your phone at all is obstruction of justice, since the feds could want to look on your phone for whatever made up reason, and if they can't because its encrypted, well why did you do that? What are you trying to hide? Evidence of a crime!?!?!
I specifically said this wouldn't be covered, because you set up the pin before you knew any investigation occurred. However, I think it's reasonable if you were pulled aside by CBP while deplaning, and while you're waiting to interview you decided to hastily turn on encryption on your laptop, or eat a bunch of papers you had on you, I'd say that's similar to evidence tampering, not unlike flushing drugs down the toilet when you see a cop pulling up on your driveway.
Drugs are actually illegal. Thats the difference. If what you’re getting rid of is not illegal or evidence of illegal activity, there is no crime. It sure looks suspicious but the point is that if there was no actual evidence, then this is getting rid of regular property.
You cant have evidence tampering when there is no evidence, because there is no crime for there to be evidence of.
> I specifically said this wouldn't be covered, because you set up the pin before you knew any investigation occurred.
But that’s just the thing: no investigation did occur. Being pulled aside by CBP doesn’t amount to an investigation. There can’t be an investigation without suspicion of a crime.
Hmmmm sounds like the government can launch endless bs investigations, wait for their target to throw something (anything, a piece of paper, whatever) in the trash then charge them with destruction of evidence. A infinite guilty-change glitch if you will.
That's what judges are for, so cute hacks like "putting everyone in the US under "investigation" won't work. That said, if I was under investigation, you bet your ass I'd be extra diligent in ensuring I'm not accidentally shredding any documents.
What you're describing is malicious prosecution or abuse of process. It's illegal and it would destroy the prosecution's case. Not only that, but the victim could sue for damages.
You have to prove it is an evidence of a crime to start with, speculation is not a fact. My property, my business, i can smash the phone and no one has anything to do or say unless there’s an undeniable fact that there’s an evidence there and it got destroyed, else, it’s no one’s business.
> So if someone was doing insider trading, and the SEC came knocking, then immediately afterwards they start burning every document they have and microwaving their computers, do you think they should get off the hook?
Apples and oranges. They presumably already have some sort of evidence in order to get a warrant and are under criminal investigation.
According to the article the agents said it was just a normal part of screening.
If they came to ask questions, then they presumably already think I've committed a crime. This is not the same as randomly stopping someone and asking to see their phone.
A trucker passes a weigh station and is signaled to pull in. As he's pulling in, he's seen dumping the contents of a bottle onto the ground. Is this destruction of evidence or obstruction of justice? He's not under any investigation (trucks are regularly weighed at weigh stations as a matter of normal procedure).
A company is engaged in some white collar crime. They're tipped off that the DoJ launched an investigation on them. No warrants/subpoenas have been issued, and no investigators have shown up. The company instructs the IT team to scrub their email servers. Is this destruction of evidence or obstruction of justice?
> Is this destruction of evidence or obstruction of justice?
The investigators can (and have) threatened both as a tactic, but when the charges are files, the specifics are what the prosecution thinks they can get a conviction on. I think it's understood that the law is interpreted, which has given great leeway to narrative.
I'm not a lawyer, but my work domain revolves around data analysis of certain types of crime. Often times the suspects are flagged and under surveillance, so if and when they cross borders or go through check-points where you have a great deal of authority, they'll get searched.
In many countries certain agencies / agents can do searches which normal law enforcement officers can't. Like not needing a search warrant or even probable cause. Not to mention that wiping a device could in itself be a crime, if it is suspected that evidence is being destroyed.
The key point here is that, as I wrote, some agencies have a lot of authority, and have the power to do pretty drastic stuff.
If your legal system depends on the benevolence of prosecutors, you've already lost before it began.
Attorneys are supposed to be adversarial. The system's soundness shouldn't depend on anything more than them trying to win and not doing anything illegal.
Before "prosecutor" became an elected/appointed office, prosecutors were independent contractors, hired for a single case only and serving at the pleasure of the Grand Jury. The Grand Jury's job was to decide how to spend the public prosecution budget. "Indictment" meant exactly that "prosecuting this person is a good use of tax dollars" and nothing more. We should go back to that.
Any system ultimately depends on the benevolence (or at least the decency) of the people in it. The idea that a society can design a perfect system and it will run itself is very dangerous.
One of the GrapheneOS people (I think) suggested keeping a bit of paper in your wallet with the duress pin, perhaps thinly disguised. Then the cops could try it on their own initiative. I suppose they'd become aware of that trick eventually, but then they wouldn't be able to use all those other genuine pins they find.
Today we see someone being arrested because they used a software feature. Next year we'll see someone being arrested because they played a cutesy trick and got the LEO to enter in the self destruct code.
The engineers and techies involved have so far shown themselves to have poor intuition for understanding how the law is going to react. I think it behooves anyone still listening to their advice to also check in with someone who has a good intuition for how the law will react to this new idea.
It's harder for them to argue you were actively destroying evidence; you could say that you had written the wipe pin there for a legitimate use case like both your wallet and your phone get stolen
A far better approach is for the US citizen to simply say "I chose not to provide my PIN".
The officer will say something like "That's your choice, but I will need to seize the device to conduct an analysis. It will be returned once the analysis is complete".
Then you shrug, and they will let you enter the US. The cops will try to get into the phone, fail, and return it to you.
Just bring a phone you don't mind losing for a few months.
This person was under "investigation" for protesting against cop city. The authorities were waiting for him to turn up at a place where the law would give them more power.
They were never going to let him just walk in. Eventually, they'd have to, possibly after lawyers and news would get involved, but it's not like saying "no" was going to end the ordeal right away.
I have said this in multiple occasions both on and off line. The world is converging to China in terms of how and how much the governments want to be totalitarian. China already has decades of experience on this, and is both strong and subtle in doing this; almost elegant. US and Europe just got started. It's just too good to resist. (For the government, that is.)
Grapheneos comment on hidden profiles/veracrypt style plausible deniability:
>It's possible to make a semi-hidden feature but hiding it well enough to avoid detection by software forensic tools requires not basing it around profiles. It would really need to be a nested GrapheneOS in a virtual machine. It could also still be detected at an SSD level
Seems like they’re going to have a struggle proving intent. “I was stressed out and afraid and I got the passwords mixed up” would be the magic words I’d hear as a juror and I wouldn’t be able to vote to convict.
If you get a jury who doesn't think that "strange self-destructing phone" isn't a criminal's tool to begin with. Which I'd guess is probably not likely.
The defense has a chance to educate the jury about it in a trial, and given how widely CBP/DHS is distrusted in 2026 it’s not difficult to see at least one juror having reasonable doubt.
Bonus for the defense: whatever is left of the DOJ, it’s mainly cranks, cronies, and people who can’t find work elsewhere.
'I don't want some sketchy phone mugger to end up with sexy photos of my girlfriend/myself' would seem like a plausible reason to me, if I was a juror.
IANAL, but I think that argument would be stronger if there was a way of a mugger to use the pincode (like putting it on a note inside the case) and law enforcement just used that code.
That sounds sensible to me. But I am likewise NAL.
If you've refused to answer questions and giving them the password, and they don't have a warrant, taking your case off and inputting the mysterious number they found in there seems a lot more like them destroying your (data) property by oafishly trying to force access to a phone they have no business messing with, rather than you ostensibly destroying evidence of a theoretical undiscovered crime.
I'm sure they would still try to mess with you in a dozen ways for annoying them, but at least you'd be on decently solid ground in court as far as that goes.
> federal agents had already circulated his name and photo internally, saying he was under investigation for "suspected terrorism activities" because of his alleged association with the movement against Cop City.
This is practically the only thing I care about here and there are almost no details. What was his alleged involvement? How many others were targeted?
I think if I were headed out of country i would make a full backup of my phone, then wipe it and set it up using my old gmail account that i only use for spam and stuff, fwd my reservations to that account. I would not install my normal accounts on it. I would not install my bitwarden either. I would keep everything minimal, use web UIs where possible. then when i return, it looks like I use my phone and didn't wipe it but I also live a boring life.
Small inconvenience for me, but better than dealing with bullies.
In Catalonia, Spain, police have been profiling people carrying Pixel phones, assuming they have GrapheneOS installed and are drug dealers or gang members.
Why the hell doesn't the "duress PIN" just open up a sanitary profile? Bonus points for letting you set it up with plausible data before designating it as the duress profile that, when opened, wipes your real profile in the background.
> "the screen went blank, flashed several times, and the phone appeared to restart,"
How about flash some red lights and play an airhorn sound effect, too.
Android has had multiple users for many years, though it's a feature most smart phone brands turn off for some reason.
You can switch users just fine, you just cannot hide the primary user from the secondary user. Opening up the device also makes it a lot more vulnerable to attacks to dump the keys and storage.
Having multiple users is quite handy but it's not going to do anything at a border checkpoint that'll save you.
At this point, GrapheneOS must introduce a feature to delete only specific data (apps & files) when the decoy password is entered, and then unlock the phone.
They would like to but it's not possible to make a robust feature like that because of low-level architecture of SSDs. Implementing a detectable solution would give people a false sense of security.
How is it different from smashing your phone on the floor and destroying it when asked to unlock? Just because it's a code that wipes it makes no difference. I'm not saying the agents were right to ask for it, but it seems like if you feel that your rights are violated you should refuse to unlock the phone, not destroy the content in front of them.
I think a wiser approach for crossing a border might be to have another phone with regular Android installed on it, so it doesn't look suspicious, and then connect remotely to your main phone. Before crossing the border, you would just need to remove the remote-connection app, and after crossing, install it again.
What I would like is a setting kind of like the already-existing safety feature on pixel phones. You set a timer and if you fail to end the timer or respond when it goes off, it calls 911.
Instead, I would set a timer before going through customs and if I don't unlock my phone and disable it within a set time, it initiates a wipe. I think that would be a safer way of doing this than a duress PIN.
So in GrapheneOS you enter your regular passcode to unlock it and a secondary passcode will wipe everything? Maybe it needs a third option where it just shows predefined apps/data, so it could just show e.g. WhatsApp, a set off chosen photo albums and some irrelevant office documents. Could also be useful for handing it to children, so they can access some games or whatever but nothing critical
Perhaps a way to avoid this would be to have the duress pin trigger not a device wipe, but a device encryption with a long, pre-set key that you would store in a safe place when setting up the duress pin. Then you haven't destroyed the evidence, but the data is irretrievable without your cooperation. Also, if you don't actually have the key saved, it would in fact be destroyed, but the prosecutor would have to prove that you don't have the key saved somewhere.
This is one of those things the other comment calling the law "non-autistic" is referring to. In the eyes of 99% of people, it's functionally the same thing. "Well teeeecccchhhhnicallyyyyyyyy I still have the data..." isn't going to make the security workers at the airport slap their heads and say "damn, he really got us! Go on through!"
No. They'll arrest you just the same for obstructing their search. Then they'll keep you in detention for a long time while you say "I can unlock it for you! You just have to let me out!"
You can pretend you have leverage and say they need to cooperate with you. But once you're detained, police and prosecutors don't really care about cooperation anymore. Their idea of cooperation is you giving them what they want immediately without question. You're made into an example if you don't abide.
You are incorrect, US border patrol can not arrest you for refusing to decrypt your phone (if you are a citizen). It is not considered obstructing a search to refuse to provide a password. This is not "autistic" speculation about legal technicalities, there are many many examples which support this. The worst they can do is seize the device.
You're free to test them. See what they do when you say "it's not deleted. It's just inaccessible until I cooperate." Because it's identical in their eyes. People who confidently say "the government can't do that" rarely have a good day. They end up sharing a cell with the person in the article this discussion is about.
And we're living in an era where immigration enforcement can shoot Americans without penalty. It just makes the claims that the government can't arrest someone come across as naive.
I have tested them, that's what I'm saying! The belief that the authorities are completely unrestrained in their power serves authoritarianism. Creating this belief is in fact a major priority for the current regime.
This is not to say that things aren't bad, or abuses never happen. But if people fail to exercise the actual power and rights they do have, under a mistaken belief that they have no power and no rights, then that will become a self-fulfilling prophecy.
That's precisely what happens in totalitarian states, which the USA has been for a while now, but the propaganda keeps telling how much freedom there is so people didn't even notice.
The entire point of modern encryption is that the encrypted data should be indistinguishable from noise until you have the key in its entirety. Turning your data into random noise (whether or not there’s a secret code somewhere that can reverse the process) is destruction.
Yes, the only relevant property is the use of a duress PIN. They could have simply stated that he erased his phone with a duress PIN.
But "GrapheneOS! Spain! Profiling Pixel users! Spain equates GrapheneOS to criminals!" sounds far more spectacular and will give more clicks/links. Sadly, it feeds the narrative that GrapheneOS is just for activists/criminals/whatever. An iPhone in BFU state would have been nearly as safe, but nobody makes these implications about iPhones because everybody has iPhones.
If 1% of iPhone users are criminals and 5% of GrapheneOS users are criminals, border search agents are going to be interested in your GrapheneOS mobile.
I am pretty sure criminals are more likely to use a super safe and secure phone that is easy to obtain.
Yeah, the way that this case is being reported on is really irritating.
While he technically did use a special GrapheneOS feature to wipe his phone, the criminal charges would have been the same if he had used the default "reset phone" feature on Android or iOS right before handing the phone over.
The real focus of this case should be on the reason for his detainment and the confiscatation of his phone and multiple refusals to contact his lawyer.
I have a friend who is a peace negotiator in the balkans for 20 years. He has lots of amusing (to my horrifying) stories of cat and mouse interrogations with the FSB etc as he travels between Moscow, Kyiv and the West. He uses threema and signal for most diplomatic conversations, but when he travels he only carries burner phones.
If you don't trust a government, ensure you aren't carrying any information you don't want to give up before entering their borders where you will be under their power.
Amazing that someone could be held in detention without even committing a crime. We are going back to pre magna carta and pre habeas corpus medieval justice. A lot of innocent people died in those times.
After reading more of this thread I'm kind of frustrated that people aren't aware of the border search exception.
I strongly disagree with the border search exception and would like to see it drastically limited or abolished.
It is also something that has clearly existed in caselaw for decades (arguably for centuries) and that the courts have routinely (to my regret) strongly reaffirmed.
The border search doctrine says that border agents do not need a reason to examine you or your possessions when you are entering the country. They do not need to believe that you are doing something wrong or committing a crime. If they suspect you, they don't need proof or a good reason to investigate you.
I find this doctrine very disturbing and I hope it will be changed or narrowed. I also would like people commenting in this thread to understand that border agents are not just imagining things when they claim to have legal authority to inspect people (or, alas, electronic devices or data) at the border, and that this didn't just start under the Trump administration or something.
The legal consequences of providing a duress PIN may not have been tested and this defendant could well prevail in this case. I just wish people commenting here would understand that there is a tremendous amount of history related to border search authority. You can disagree with it (I hope you will!), but you should understand that it's not just something that someone just made up last week or last month or last year.
The article seems to be muddying the water bringing up grapheneOS itself. Or maybe it's the EFF.
>Experts said the legal approach is unusual and may be the first time the law has been aimed at an operating system. "It's concerning – and sends the message that [GrapheneOS] is criminal by default," said Christophe Boutry, a cybersecurity and surveillance expert. Boutry and Bill Buddington, senior staff technologist at the Electronic Frontier Foundation, both said they had not seen a similar case.
Is the actual case about banning the OS? Because it seems pretty clear the case is about the result (the phone being wiped with a special passcode).
The better defense imo would be one of those 'wipe the phone if you get the password wrong x times' and try and claim you forgot under pressure. At least if you wanted to wipe the phone without being accused of destroying evidence during a search.
On the duress pin, they say (read the whole thing though):
> People should carefully consider how to use it in an actual duress situation where there can be physical or legal consequences for wiping the device.
By raising the profile of airport seizures all it means is that serious criminals will wipe their devices prior to travelling and restore afterwards/buy a new device for travel.
The powers of investigators special rights and abilities rely on them being used very rarely. Last thing the terrorism investigators want is media coverage exposing their tactics.
Wiping could be the last resort. Instead how about auto creating a new profile! As far as I remember Android profiles isolate apps, files, and system data and providing a fresh environment without erasing the device. To make it feel more authentic there could also be an option to automatically install a few commonly used apps by default.
Thats it. (assuming the officials don't have time for an thorough inspection)
There are forensic tools that can probably bypass those. I don’t think the agent is just going through your phone by using the phone itself, though maybe it is that stupid, idk.
Why did he do this?
Really, if this is a way to protect your privacy, then it's a bad way because it causes such a scenario. Of course it works well against the stolen phone scenario, but not again "state authorities suspect me". Especially if this is the authority of some authoritarian state, where your rights do not really matter.
Maybe he did this as a protest act?
I'd love a feature where if you enter a specific passcode it unlocks the phone into a different account that has curated things in it. Pictures, some pre-approved apps, etc. So you look like you've cooperated but you haven't really.
And each user's home directory is stored on a separate hidden partition that is encrypted with another PIN so that even if the device is rooted they can't look at the other user's data.
The duress pin deletes the encryption key information used to decode the documents and does not damage the documents themselves.
Not sure why the police and news are saying that he destroyed evidence, since the evidence (as it always has existed before the search began) remains on the disk.
Someone else commented about the law being “non-autistic”, this is a perfect example of that. The technicality of the encryption keys vs the files is irrelevant, the intent was to successfully prevent a search. The border agents will not be even remotely impressed or suddenly decide to release you just because you say “well the files are technically still there”.
> According to court testimony, federal agents had already circulated his name and photo internally, saying he was under investigation for "suspected terrorism activities" because of his alleged association with the movement against Cop City.
> RICO conspiracy indictment
> In September 2023, sixty-one people who had been arrested in the forest or at stop cop city protests were charged with racketeering under Georgia’s RICO law. This indictment is likely the largest criminal conspiracy case ever filed against protestors in the US.
> As of April 2025, the racketeering case was stalled. Defendants in the case maintained their innocence and reported difficulty getting work and other hardships while they awaited trial for more than 20 months. In September, all RICO charges were dropped. Judge Kevin Farmer found that the Georgia Attorney General did not have the authority to bring RICO charges in the case.
From my outside view, it looks like these investigations are nothing more than an attempt to suppress free speech and protests.
For anyone unaware, RICO is both a Federal law and a Georgia state law that stands for: "Racketeer Influenced and Corrupt Organizations". It is used to take down mafia, gangs, organized crime, etc. It is a bit sad to see state prosecutors trying to use this against protesters.
I'm not doing anything the government should be worried about. Nevertheless my pin has for a long time been longer than standard, specifically on the very long-shot possibility someone decides they want to crack it.
Anyone know if this is a viable strategy on iOS, and what the required pin-length is these days?
There are laws against the destruction of evidence, but I'd argue that there's no evidence in this case since they don't have clear-cut knowledge what's on the phone. It's potential evidence at best and it's therefore not clear if the law applies.
If Customs already knew whether the suspect had incriminating files on his/her phone things might be different.
Its best for all of us to figure out how to use phone-as-a-linux-vm with the physical phone just hardware. It will solve many problems: commoditize the phone ecosystem, eventually making them repairable, run our own apps instead of apple/google. Access phone-vm from laptop/desktop ...
Wouldn't it be better from a legal standpoint to power the phone off and refuse to give your pin in such cases? A no-pin cold boot is pretty hard to recover data from with GrapheneOS.
Most likely, at least you are not doing something irreversible. In all these cases, the best answer is "ask a lawyer". Before wiping a device in possession of law enforcement you definitely want to ask a lawyer.
I realize that in this case the person repeatedly asked for a lawyer, but if you are in a borderline authoritarian state, all bets are off.
> The motion also states that Tunick asked four times to speak with a lawyer and was denied each time.
This is the kind of thing that loses cases, even if they were legitimate at first. Seems like the prosecutor is desperate charging for the phone wipe cause they didn't have any evidence of terrorism, child-pornography, etc. The problem they have now is given he was in custody and agents pressured him to provide the passcode that they then incompetently put into the phone, the fact that they denied him a lawyer multiple times means there is a very strong argument that his rights were violated. Typically, courts suppress any evidence when there is a violation like this with someone in custody. So the compelled passcode, the phone's reaction when that passcode was entered, and the agents' testimony describing the supposed wipe would be thrown out by most judges. What's left for the prosecution after this is jack and shit, but jack left town.
A GrapheneOS is most likely completely secure in BFU state [1]. So just switch the phone off or reboot it and don't enter your PIN. It is very unlikely that law enforcement is able to decrypt the phone and it does not put you in murky legal terrain, because even an auto-wipe is intentional (IANAL).
[1] This is in contrast to many other Android phones outside Pixel and Samsung flagships, because they are too cheap to add a secure element, which iPhone has had since 2013 and Google Pixel since 2018.
Sort of feels like he should have wiped it right away, not after they seized it (by giving them the “wipe me” passcode). No idea if that’s how the law works, just my gut reaction.
There was no warrant, nor any court order compelling him to provide the unlock code. They had no probable cause, other than that they had labeled him a "terrorist" because of his political activities. The CSAM pretext was provably just a pretext. If he gets good representation, he should be able to (eventually) beat this rap.
If he had simply refused to provide the unlock PIN, he would have walked away. They may have kept his phone, but they would never have got anything from it anyway.
His mistake was giving a passcode he knew would destroy the data on the phone. Instead leave the destruct passcode written on a scarp of paper inside your phone case.
> During the questioning, agents repeatedly asked Tunick to unlock his phone and warned they would seize it if he refused. When he finally provided a passcode, the phone appeared to restart.
I'm confused to understand if Tunick did anything illegal here. If the authorities want the phone, they should have the warrant and seize it without Tunick's permission.
It appears authorities did not have the warrant which give Tunick all the right to do whatever he desires with his property.
Among other things that CBP does not need a warrant to search or seize anything and everything at a border. Everything is subject to search at the border. To make a seizure all that is needed is reasonable cause that customs law/regs were violated. And there are specific federal laws relating to thwarting such seizures.
If you don’t want something searched do not bring it across the US border. There is very clear constitutional and statutory authority for these searches.
CBP doesn't need a warrant to search at the border, including electronic devices.
However, if Tunick was smart he would have refused to provide the PIN, and let them seize it. He'll get it back eventually, but it was in his right to refuse.
They claimed they were looking for CSAM. There's a border search exception to the fourth amendment that says CBP can search your phone at the border. You aren't required to give them a password (but possibly a fingerprint or facial scan) but they can temporarily sieze it (and do god knows what to it).
I feel like the advice given by IT departments for years was to wipe your device ahead of travel, and restore from backup upon arriving. Or, to take a travel device.
I suspect that this will ultimately be thrown out for a very simple reason which is that the government will have to prove that a duress PIN was actually entered. That is going to be quite difficult unless the person charged openly admitted it.
The reason is because anyone running an os with a duress PIN that has done nothing wrong can be accused of using a duress PIN because the whole point of the duress PIN is that it looks like you just have a normal phone.
Running a normal apple operating system with just stock apps? Boom, you're a criminal because you obviously used a duress PIN and have something to hide! There is no way to prove you didn't use a duress PIN because the phone was "wiped."
Now unfortunately grapheneos probably leaks information so that a duress "unlock" can be differentiated from a standard unlock by some means. If not then kudos. It looks like it is done instantly by keeping everything encrypted and just zapping the keys, but it also needs to actually unlock to something instead of rebooting to prevent leaking the information that a duress pin was used. Not sure how fiesable that would be though.
I'm a GrapheneOS user. The duress passcode feature will reboot the phone to a "corrupted data" screen, so it's pretty obvious that it's been used to render data inaccessible.
It seems to me that this should have been a case of steganography?
Instead of wiping it clean, wipe to innocuous mode. Then the burden on their part is not only to show that I gave a bad pun, but that the innocuous mode is materially different than the previous state.
Rather than wipe the phone to an obvious reset state, this feature should boot into a benign setup with normal contacts etc. after it erases the user's data. Let the user periodically boot into this benign setup to add basic contacts etc.
Maybe also shows that the duress PIN feature could be implemented better. Booting into a completely fresh phone is suspicious. There also shouldn't be any visual or other indicators of that happening.
In the old TrueCrypt containers you could set an optional second password that would decrypt a different volume. The size of the container file was always the same, a decrypted volume always showed the full container size, the portion not occupied by the data in the main volume was filled with noise, and the data on the non-loaded volume was not protected (so you could erase it without warning by storing too much on the loaded volume), making it practically impossible to prove the existence of a second volume either way in a search situation. I guess there was a reason why the project was stopped.
The problem with this feature is that the agents could realize the phone was being wiped. For the duress pin to be 100% effective, it would have to log in normally to a default install.
Obviously you should just write the duress pin on the back of the phone inside the case. If the ask what the PIN is for, stand mute. If they enter it, it is their decision.
It feels like if he triggered a wipe - that is destruction of evidence; but if it auto-wiped he's fine.
If it were a box of drugs and he triggers an incendiary device - he's in trouble . If agents trip a protective boobie trap and destroy the box- he is fine.
Ok, so I'm just angry so take this comment in that light please:
1. What happens if the masses just do this? Today it's just a few folks who know how to do this. Tomorrow it could be 10, a year later 100. What's to stop 1000s from doing this and then what is the government going to do? Ban the OS and block it on Github?
2. What exactly happens after you're charged? This doesn't mean the person is convicted. Just that they now have to show up to court wherever the trial is held and have to retain their own lawyer (or public defender?). And what is the likelihood that the case is thrown out or the person is convicted and receives a stiff penalty?
I ask these questions because as far as I can tell, the person was not suspected or convicted of anything, and it's infuriating me that we are just going to stop random citizens and ask for their private data.
Seems like a good court argument too—no destruction of data was even attempted because I know I have my iCloud or Google backup. Personally, my phone has access credentials to information, but not the information itself. So you need a serious warrant before you can get those access, but the data is there.
I agree that it seems a simple argument for any competent lawyer to make that the phone isn't the "gold copy". The phone is just an ephemeral copy of the real data which is safely stored away in the cloud, and the authorities can request access to with the proper warrants.
Of course this argument will only work if the phone is indeed and a ephemeral copy of your real data.
In fairness to the victim, he did really need to have that phone. What if there had been a restaurant with a QR-code menu? What would he have done then?
So yes, we've created an authoritarian hellhole, but the alternative is even MORE unthinkable: struggling to pay for parking in some areas, needing to visit a website for a menu or (GASP) visiting a different restaurant, or just having a friend order for you.
No, these are too much to ask of anyone. No one can overcome these challenges. The only answer is to weep for the liberty that we have lost.
There’s been a large uptick in immigration from the US to Ireland; almost ten thousand last year. In general, people would do this via employment; software engineers and similar would generally qualify for a critical skills permit. For critical skills, after two years on a stamp 1 visa (tied to a specific employment) you can move to a stamp 4 (not tied to specific employment). After five years working in the country you can apply for citizenship.
As this is Hacker News the focus is on GrapheneOS. I think the background issue of Cop City and the hysterical over reaction of the state of Georgia and now the feds to the protestors deserves discussion as well.
The criminalization of activism (domestic terrorism, really?) does not bode well for freedom of Americans.
#1. The download and restore backup method would work- except it doesn't capture what people would need. Exmaple: I have some thermal cameras that rely on old 32 bit apps that do not run on anything android 12 onwards- If i wipe those old phones, and restore- the apps often wanted to reach out to a server for initial activation- they would fail upon reinstall and i'd be out of the apps that are required to control my cameras and related equipment,which is worth thousands and thousands and thousands. And it'd be all dead weight and rendered useless.
(and competitors today do not compete- for example try finding a 640*480 30 hz or better form factor thermal camera that attaches to phones - they dont exist anymore)
\The solution is imaging- but there isnt a way to fully image phones and restore backups today. There used to be it seems- but not really with the latest.
Veracrypt- The weakness of truecrypt and veracrypt, the hidden OS option only worked if you converted your computer to MBR, which means you can't have a hard drive too large. Making a UEFI hidden OS has not been done yet.
I am aware of Shufflecake attempting to make a solution.
And the Hidden Volume option- isn't 'as' useful, and of course, your OS might make a copy and put it somewhere, you have to be careful. Any time I open a file, using the software tool Everything to search and confirm this- you can easily see Windows makes copies and temp files and whatnot in randomly named locations- that's the sort of behavior that would screw people over
We need fully image-backup capable Phones. I mean fully. Not just backing up some apps- as this refuses to backup apps you have that are no longer on app stores, or that Play Protect doesn't like, etc.
Next- Plausible deniability is a way forward- but you need multiple profiles, that are cryptographically indistinguishable, along with the phone being hardened so GreyKey /Cellebrite won't be able to exploit a way in. This needs to be built this way from the ground up ideally, eventually.
There has been research about making devices that treat all block space the same way so you can't tell if someone has 1, or 50 profiles or partitions, etc- and even stuff that overlaps. But nothing has come out - and especially, for phones.
After all, if you travel to a hostile country, you can tell them you have just one profile, and if they ask, you could theoretically mention a 2nd, and then show it- but you might have 3 more - and they'd all be immune to forensic inspection if the system is built right.(Yes, there's often issues you have to be careful of ,like setting this up so you dont destroy data when in other profiles,)
This is how you solve this problem -make computing devices impossible to analyze
This sends like a more-info-requiered situation. Per this article, the LEOs seemed to be fishing, so they presumably couldn't claim as a matter of fact that evidence had been destroyed. Also, claiming destruction of property seems unreasonable since the phone, the property, still exists as before. If I sell my phone, I'm going to wipe it. I think we all understand that it would be ludicrous for the buyer to claim I was destroying the phone, the property they've been sold, by doing so.
Even if the accelerated executive capture of the judiciary is largely ruled back post Trump (big IF), I fear the government will be unwilling to pay with much of the convenience of rule-by-law that it's been given a taste for.
Instead of a PIN that wipes the device, it would be much better to setup a special PIN that logs the user into a sanitized, completely separate profile with generated content of no practical value. This would create plausible deniability, and be sufficient to allow low-level border agents to look through a phone and pass any checks without raising these kinds of alarms. The wipe PIN should still be an option, but should be separate, and only be for cases where you suspect a forensic imaging or search of the device is to take place and the legal consequences outweigh the risks.
and what part of "search my digital device for words and phrases" is expressly allowed by the fourth amendment that protects against warrantless search and seizure? oh yeah, none of it. that's right. the fact that agents are conducting broadsweeping searches in clear violation of The Constitution is so painful it's almost laughable. it being a "border crossing" applied to digital information and not just the contents of my suitcase is an appalling transgression of the spirit of the law. also why is your device programmed to self-erase? that's also incredibly sus.
smuggling endangered species? bad. okay search a suitcase.
having unrestricted access to all my gmails because i need to catch a plane? absolutely unacceptable.
having your phone autowipe when pressed by authority? quit whatever nefarious shit you're doing, thanks
You wouldn't be surprised if that happened when traveling to China or any other autocratic country.
I think the issue is that people expect the USA to be the "land of freedom" when it's not anymore. It's turning more and more into an oligarchy and we are at the point where it's just as bad as russia or china.
If i was offered a trip to China or russia, i'd go but i would take a burner phone with absolutely nothing important; It's the same for the usa now.
No, as someone who lived in China for years (as foreigner) and visited also last year after many years I WOULD BE SURPRISED if this happened when travelling to China, since China is clearly more free than US/Israel.
China wants tourists and don't care about your stupid social media.
Gotta wonder how it would've gone if the citizen hadn't mentioned GrapheneOS at all and instead tried to sue them for wiping his phone without his permission.
Having just gone through having to give pin to cbp you just need the apps on your phones to have separate pins so when police unlocks it, they cannot unlock WhatsApp afterwards. Faceid or unique pin. Problem is your phone pin overwrites Face ID
What nobody has commented yet here is that the incident is 7 months old but we're only hearing about it now. Imagine the incidents we DON'T hear about at all.
It's his device, so he can do everything he wants to. The USA
is currently re-purposing constitutional protections. A judge
has not signed these warrantless seizures, so why would the
individual be under any obligation to cooperate? Besides, why
would anyone want to incriminate oneself? The onus would be on
the state to prove a guilty state.
I don’t understand why phones can’t just have decoy profiles you can activate via PIN that look like regular harmless user profiles? Especially now with AI you can quickly populate with a bunch of plausible data.
Or better, have PIN for taking you to your criminal/secret profile instead.
> US prosecutors charge Atlanta man after GrapheneOS phone wipes itself during airport search
I really don't like this title. Officers asked him to open the phone, which he pretended to do, but instead wiped the device
> During the questioning, agents repeatedly asked Tunick to unlock his phone and warned they would seize it if he refused. When he finally provided a passcode, the phone appeared to restart. The defense motion states that "the screen went blank, flashed several times, and the phone appeared to restart," resulting in the loss of data.
The title implies the agents maybe entered too many pins by mistake and the device auto-wiped, or that it reset itself with no human intervention, which isn't what happened. This is more like shredding paper when the FBI arrives at your office, which most people would attribute to destroying evidence. I hope he wins the case in principle (I think there's a risk of a slippery slope here) but it wouldn't be a moral tragedy if he lost.
Dude I said 1,2,3-FIVE! jesus did you break my phone?! What the hell did you do?! Man my wife is going to be so mad she didn't even want me to upgrade to a new handset.
feds: "unlock your phone or else"
victim: "um, you're stressing me man. It's either 1234 or 4321, I forget. One of them wipes the phone, the other will unlock it."
Whichever PIN they try, it wipes the phone, but the feds can't claim it was deceitful, just unlucky.
This grapheneOS may be another scheme from the 'deep FBI'/'services' to get intel on the very, VERY, nasty (terrorists, human traffickers, drug cartels, child stuff, etc). If I recall properly, they did that in the past (it seemed to have worked amazingly).
If so, "normal" police would not have the "keys". This would be "the compromise".
If you're paranoid enough to be using GrapheneOS, why would you take it to an airport in the US of all places?
I bought a second hand iPhone for overseas trips, which my daughter promptly stole because she wanted an iPhone, but then i got her old android phone, which was LineageOS-compatible, so that became my travel phone.
How do you manage data between your primary and travel-phone?
I _think_ you would need a fresh iCloud account (thus losing access to purchased apps and subscriptions). You also need to manually create fresh social media accounts, copy over contacts, etc.?
Any advice on how to automate this process or is this just a 2-4 hours exercise you do before your trip?
A couple of hour exercise setting up the minimal amount necessary for the travel beforehand. Then once you're at destination, you can set up everything else if you want.
I don't have a lot of "everything else" anyway, so my device would probably look suspiciously 'clean' even if it was my in-this-moment daily driver. (HN is my news and social media). I don't use banking apps, but the irony is that I would need to whilst overseas.
One of the funny things is, I should be able to re-setup any device with an old gmail account at any time in any place, but with all the extra security these days, you need an old device to authorise the setup of a new device. I'm going away early next year, so I'll need to have a dry-run of the setup...
I was hoping to have to setup a whole new apple account for it. I'm normally Android, but cage across a cheap second hand iphone at an auction - but my daughter wanted it, so it never happened.
It would be easier for me to just go Android, and I do have spare older devices now too.
You mostly don't sync any such data. Prepare some file (or a few files, including an .ics for itinerary or what-not) with information about your trip, a few days in advance, and copy the file(s) to the phone. That's it.
And if you use iCloud or any of that stuff - you've already lost; Apple, and the US government already have access to your files and communications before you ever came to the airport. Sure, maybe it's not the specific border guards who have the access, but still.
- e-sims make it much more difficult to swap sim cards between devices.
- presumably border patrol wants to see his photos, social accounts, and email. A separate device with a copy of the information they want isn't a defense. Creating fresh travel-only accounts is tedious, b/c fresh accounts aren't connected to your friends or network (with whom you'd want to share your trip with).
While I like the idea behind GrapheneOS, I'd rather not place myself in jeopardy of some ridiculous charge like this one. I prefer to travel with a travel device, some inexpensive phone and/or laptop that contains nothing interesting. If they then wish to take it from me because I won't unlock it, then have at it!
That said, the situation with respect to our Bill of Rights at the border has gotten ridiculous.
The "duress PIN that nigh guarantees destruction of evidence charges" functionality is extremely stupid, but otherwise GrapheneOS on a flagship phone is your best bet for an Android phone that can't be cracked by low-effort attempts, government or otherwise.
My bets for the actual story behind this are:
95% a criminal hiding evidence
4.99% an autistic attempt to "keep his privacy" for no reason at all
0.01% a genuine need to keep something away from the government
In all cases just don't cross security checks with evidence you wouldn't want to be seized, its not that hard
To everyone who thinks this is somehow a violation of rights: if you were being questioned by border officers, and were asked 'Sir could you please open your suitcase', and you pressed a button that caused it to burst into flames, there isn't a country in the entire world that wouldn't arrest you on the spot. Why would 'wipe a phone when officer requests it opened' be treated any differently? Suspicious behaviour is treated as suspicious by normal people.
It doesn't sound like this person pressed any buttons. They were pressured to provide a PIN or be delayed and further harassed. They obliged, and agents decided to enter it to attempt a warrantless search of the phone.
It's not stated, but probably we can assume the person didn't ask for his phone to be searched - probably he asked NOT for it to be searched, at least based on his multiple requests to talk to his lawyer.
Considering those factors, I'd say border patrol is more responsible for wiping the phone than the person.
Right, but by that rationale, it’s also suspicious to say “no” when they ask if they can open your suitcase. Or decline to tell them where the key is. Or ask to speak to your lawyer first. Or refuse to tell them what is in the suitcase. Or lock the suitcase in the first place. And I want to live in a society where those behaviors are protected.
(1password has a “traveling” mode that wipes it of sensitive passwords before going across borders. Is that suspicious? Should it be criminalized?)
If they ask to open my suitcase and I say 'no' that is suspicious. I've done a lot of travelling and have been questioned more than once: being candid and transparent has always been prudent.
Are we supposed to live in a world where if I'm crossing a border I must give access to all of my information? That's absurd and more equivalent to a full brain/memory scan than a suitcase search from your example. This is dystopian in every sense of the word.
I co-wrote a border search guide for EFF some years ago. I was very interested in finding clever technical approaches but I later ended up feeling that I hadn't given enough thought to the overall threat model questions (even though the guide did address them, perhaps even somewhat usefully).
The big picture problem is that the agents performing the searches have an enormous amount of power in terms of potentially seizing devices and potentially denying entry for non-citizens. I think they should not have this power, but the agents and courts probably don't care that I think that.
The end result (not inherently different from what we wrote in the guide) is that you may have to think both about protecting your data by technical means, and about not angering the agents more than you plan to. I was fascinated by techniques for being unable to comply (which is straightforward to achieve if you want!) but probably didn't think enough about how much this might antagonize border agents in many cases.
I definitely don't know a comprehensive big-picture solution.
> you may have to think both about protecting your data by technical means, and about not angering the agents more than you plan to
That's the same problem with technical solutions to crime.
I come from a very dangerous city and I used to have a car that needed a PIN to work. You could turn then engine on and drive but after a minute if you didn't input the PIN it would turn off without warning and start blasting the alarm. The idea being that if the car was stolen the thief would be stranded not far from home unsure about what's happening. Great technical solution but it ignores that a lot of the time the car is stolen with you in it (in a kidnapping, for example). Having the car shutoff in the middle of a highway next to a panicking guy with a gun and trying to remember a PIN is not a situation you want to be in, so I just had the PIN number written down on the dashboard, which worked very well when I was eventually kidnapped and just pointed at the piece of paper with the number.
In phone terms, that's the $5 wrench problem. The elaborate tech is not relevant if you can be simply coerced somehow to bypass it.
Again in phone terms, maybe bring a blank phone through that border.
Coercion was the reason from start, it's explained in the article.
"A motion filed by his defense argues the interrogation focused on child sexual abuse material as a pretext for investigating his connections to the protest movement."
So the message was simple: don't protest and you will be not harassed.
And there's the problem that if the PIN or worse a biometric version of this becomes remotely well known you've now created an incentive for a car thief to kidnap people even if they only want the car.
Or anything else you can't easily transfer. I can't help but point at passkeys in particular (or 2FA in general).
A variant of this is the well-known scene from a previous century's movie involving extracting an eye to bypass retinal scanner.
Many cars already have internal/cabin view camera. I'd imagine it will sooner or later get detection for potential theft and kidnapping situations, where it can simply detect the driver by face and prevent driving if it doesn't recognize the invidual as one granted driving privileges.
Like when fingerprint readers were added to car doors in the 90s, and carjackers started cutting fingers off to get away...
That is a largely incorrect statement that is loosely based on a single incident, not a trend.
The single incident was an individual in Malaysia who added an after-market finger-print based engine immobilizer to his car in 2005. The attackers threatened the individual with machetes, so that he would put his finger on the sensor, and then drove off with him in the car. The attackers later cut off his finger believing it would let them restart it without him present.
As one does. Why, six of the eleven times I've had my car stolen, it was a carjacking with myself or my family member in it.
Six of the eleven times...
Crazy.
What city was this, if you don't mind me asking?
Jesus, what country?
Also what decade.
probably South Africa?
That is insane. Where do you live?
Must be Gotham City
Joburg?
What city was this, if you don't mind me asking?
Why are you staying in this place?
(Is this in South Africa?)
Brazil maybe?
Even for Brazil, even for the most dangerous cities, that's still an insane number of kidnappings. They happen enough that you need to be aware and be careful to not be an easy target, but it's still a rare event overall.
Iceland I think
Washington most likely
I live in Washington DC, and even though carjacking is a problem here, not to a degree that people plan on it happening to them. I would be surprised if OP's situation took place in DC.
Carjackings ramped up in 2021 through 2024. They appear to be headed back down the "low and steady" of the early 00s. Looking at the numbers, DC isn't alone in this trend - Chicago was pretty bad as well.
Gee… A lot of people lost their jobs at once and crime went up? Then when the economy recovered crime went down? It’s almost like keeping people educated and employed actually does work better than more police and longer sentences.
Also the rise of stressed delivery drivers leaving their cars running, and the kiaboys social media meme / subculture contributed.
There are 2 cases routine inspections and targeted investigations.
If it's a routine inspection, being uncooperative will probably lead them to escalate. You generally want to keep things routine and boring. If they want to access your device you have to weigh the costs, just log out of everything before you fly and throw away your device after they have had access to it, it's now compromised.
If you are targeted your compliance is irrelevant and only weakens your position, the thing is at the border you don't get all of the protections you get at say a traffic stop they can search everything you have on you without warrants reasonable suspicion or anything.
I am not a lawyer but if you are a citizen they probably can't deny you entry but can probably detain you for an uncomfortable amount of time, and seize whatever they want. Your best defense is to have a burner phone and no other devices nothing they can seize that would hurt you.
For foreign nationals pretty much the same applies except they can deny you entry and ship you off to alligator Alcatraz, just don't fly to America for a few years.
Remember he is not being prosecuted for not handing over his device but for destroying the data they were trying to seize, if he just let them keep the phone he would be Scott free. I.e.the best technical defense is secure encryption with a key thats long enough and not stored on the device.
Actually for the particular case the best technical defense is to not have any data whatsoever on you.
> I am not a lawyer but if you are a citizen they probably can't deny you entry but can probably detain you for an uncomfortable amount of time, and seize whatever they want. Your best defense is to have a burner phone and no other devices nothing they can seize that would hurt you.
Even having a burner phone without any personal information on it can be deemed suspicious. It would be best for your phone to have a recently-reinstalled OS, with a few critical apps like Whatsapp or iMessage set up with a few personal messages sent. You need to be able to set those up without a password manager. Anything else needs to take place on devices that you aren't carrying with you. Fortunately enough people don't update their Facebook these days that just having an account that exists but you don't use will probably work, assuming you don't look like someone that would be obsessed with their socials.
Maybe there are USB thumb drives that operate like a YubiKey unless special setup is performed to access the storage inside? That's one way to carry data with you if you have to.
You can offer the I don't travel with my real phone because it got stolen a bunch of times excuse.
The point is even if they become suspicious all they can do is seize the burner ask you a bunch of questions etc. search you, etc they can't get access to your data. You can't get in real trouble, just majorly inconvenienced.
If you’re traveling with kids, they have all the leverage they need.
You "can't get in real trouble" but teh last time I crossed with basically nothing, they wrote a search warrant by literally fabricating almost everything in it. They wrote that an anonymous dog told an unnamed officer I had drugs, then a completely separate HSI officer signed it and a judge signed it based on complete inter-species hearsay two links removed from any named entity to face to question it.
So yeah you can be imprisoned, brought to ERs while they run up private medical bills (they told doctors I had drugs up my ass), have a search warrant executed, and then at the end of the day be chased by debt collectors for the search that turned up nothing.
How did you get charged money for that? When I go to the hospital, they make me sign a form saying I will be responsible for payment.
I refused to sign anything, they billed it to DHS, DHS refused it and put that I was the responsible party, then the hospital sold it to debt collectors under my name.
Granted I've never seen something like this where the chain includes a government agency saying "it's totally on this guy", but normally you can get good results from writing a dispute letter to the debt collection agency telling them to prove that you really owe this debt. The state of the industry normally means that they will not have gotten anything like actual proof from the hospital, just a line item in a spreadsheet... and if they can't prove it they're legally barred from contacting you about it or reporting it to credit bureaus.
(I've never done it, but I suspect you could get rid of a significant percentage of real debts like this, just on the strength of the industry's terrible record keeping practices.)
Suspicious, maybe; but not criminal (like lying to a federal officer in the course of an investigation, or willfully destroying what they’re lawfully trying to search).
Probably even more suspicious if you make sketchy excuses when the truth is fine. I’d go with “I (or %COMPANY%) figure electronic devices get imaged at borders or potentially stolen abroad, so we don’t carry them when we travel.” Blame the other country you’re coming from if you want.
Although I’d just not carry a phone across a border in the first place.
Related, regarding the “hiding a partition on a thumb drive” thing (8 days ago, 287 / 166; project is cool but note that tptacek and others in the comments know what they’re talking about):
https://news.ycombinator.com/item?id=48974862
And the immortal words of James Mickens come to mind:
https://www.usenix.org/system/files/1401_08-12_mickens.pdf
Unfortunately I agree with James Mickens. If CBP asks me to turn on and unlock my phone, I do it.
It is the same advice that cops give to young black men in “the talk”. Comply, don’t get killed, hire a lawyer and fight injustice in court.
>YOU’RE STILL GONNA BE MOSSAD'ED UPON
Thanks for that, it's been a few years and I'd forgotten about this.
> just log out of everything before you fly and throw away your device after they have had access to it, it's now compromised.
I get what you are saying, but this is incredibly expensive and not really practical for most people.
> not really practical for most people
Evaluate your threat model and the chance that a wipe and reinstall of the OS will be insufficient protection.
If you were targeted, you may have some tough choices. Might as well think about them ahead of time.
I think in these situations your absolute best bet is fawning compliance. Ask precisely how high they want you to jump.
Perhaps your friendly smiling Yes-Sir-No-Sir-3-bags-Full-Sir act might just be enough to let you get on your way without anything else happening apart from a stamp in your passport.
Even the slightest hint of defiance or surliness from you to a border guard/policeman/etc - potentially at the end of a long shift, tired, angry, pissed-off or whatever - and you're straight away hugely more likely to have a bad day.
Finding strategies to "beat the system" will, I think, just be a shortcut to some other punishment/crime/taken-out-of-sight-and-given-a-proper-kicking-oh-they-resisted-and-went-for-my-gun/etc as this person found out the hard way by trying to be difficult.
I genuinely don't think there is a "get out of jail free card" or magic incantation you can say to get out of these situations apart from just smiling and being polite and not being a dick - if you get into a "who can be more annoying" competition, then the border guards/police will always win since they hold all the cards and will happily ruin your day/holiday/meetings etc by detaining you (its their job to do this after all)
There have been cases very recently in the US where the authority figures down dealing with the public are evidently in a very defensive, aggressive "us-vs-them" mindset, with an itchy trigger-finger to go with it. Don't be the person on the receiving end of a cop seeing-red because you're being a jerk.
The house always wins.
This comment irritates me. On one hand, I agree with it. On the other: how is it not just a version of “if you have nothing to hide”?
At some point, you should fight for what you consider basic human rights. Where you draw the line and how you fight is up to you.
It sounds like your attitude is to comply with whatever the authorities want.
It seems like a completely innocent person is the best one to push back on authoritarian overreach.
Am I misunderstanding something here?
There is a time and a place.
If someone jumps out at you in a dark alley and they have a weapon and they ask for your wallet, what are you going to do? Swallow your pride and give it to them, or willingly enter into a high-risk and highly-imbalanced scenario where you are at a huge disadvantage against the other person for who this is essentially zero-risk, something they do multiple times a day, and they have nothing to lose from it either way.
Sure it is legally wrong and you can stand up for your legal rights in that situation, but it's a high-risk strategy to take.
Is that particular moment, that exact moment in time, the right time to take a stand for the rule of law? Or perhaps there are other things you can do after the fact?
Up to you.
Someone stabbing you and leaving your corpse in an alley is obviously pretty bad, but getting on a no-fly list for life/prison time/beaten senseless in a backroom in some random airport in a country where you are a foreigner and don't know the language or law/etc because you wanted to prove some point to a border guard at some airport somewhere and were generally being a jerk is no joke either.
No, you're not.
And idk how people don't understand how "politeness" gets weaponized.
This video is an example
https://youtu.be/amSIcL3V5C4?is=hmlOx2t7dHg5j-lJ
Here, the only way this guy could've had a "good attitude" is if he had let the lady do whatever she wants with his service dog. This behavior is very common in situations where people feel entitled to something, but know the counterparty has the absolute right to refuse to cooperate. No matter how politely that information is conveyed, it's "rude" because they're being denied something they want.
The police don't like my attitude when I firmly say "no, sorry, I won't be unlocking my phone. I will only do what I am legally required to do."
People have a hard time understanding this because they are under the impression that they know how to be polite because they do what they think is polite. They are unaware that politeness is subjective and slippery and that people can and do use it to manipulate others into doing things they're uncomfortable with.
[Am in agreement with being conflicted about this advice]
In a normal functioning society with law enforcement that is actually accountable to it's citizens, yes - polite pushback will likely have no horrible consequences.
In a country that is either already in the depths of fascism/authoritarianism - or rapidly heading there, fighting for rights is seen as a "red flag".
See also: "On Tyranny" (Timothy Snyder) and "Do Not Obey in Advance".
It’s weird how few people understand that just being courteous/polite eases most encounters considerably.
Absolutely astonishing seeing people try the “I’m going to be as annoying as humanly possible” to the guy with the gun with the “my YouTube lawyer says I can” defense. You don’t want to have to defend your civil rights in court.
This goes doubly when at immigration where you basically don’t have rights.
This guidance also applies to: bank tellers, call takers, baristas, waiters, other people standing in line with you, the bus driver, your mom, the neighbors upstairs, the raccoon across the street, …
Politeness is the correct behavior on most walks of social life, but on this case it's a bit like the "turn the other cheek" approach, but in this case, it's turn the other butt-cheek because you're being effed in the A.
Also, you do have rights, but don't seem to really care a lot about them since, in the face of unlawful and oppressive demands by overreaching authorities, your suggestion is to be courteous with the oppressors for some reason.
"Land of the free, home of the brave"
> I genuinely don't think there is a "get out of jail free card" ...
Being rich and politically connected would probably do it.
That's not free. It simply means you can afford to buy the very expensive get-out-of-jail cards.
It's best to do that for things they have the right to do. Trying to resist being questioned or having your stuff searched is a fool's errand. They'll make it happen one way or another.
But I'd never unlock my phone for US immigration. That's my whole life on there, and they don't have the right to compel me to unlock it. Even there, be polite. You can say "no" politely.
Where this guy went wrong was actively wiping his phone. That's no good. What you do is put your phone in its most secure state (generally powering it off) before you reach the immigration desk, and then if they seize it, you have to trust its security to keep them from getting into it.
They can just ask you to unlock it for them.
They can ask, yes. And I can refuse. They can’t detain me more than temporarily, and they can’t prevent me from entering the country.
I'm afraid to leave the country precisely because I worry about difficulties upon return. I understand that as a citizen I can't be denied reentry, but I also understand they can make the process extremely difficult or uncomfortable if they want to and I have little or no recourse.
They can still make your life very difficult. They could throw you in jail for "obstructing investigation" or something similar.
Not in US, but had my phone seized by authorities and was asked to unlock it. I'm walking free, but I think what really saved me is that I genuinely complied with investigation and the only place where I drew the line was me giving away my password.
If I used my right to remain silent AND not give away the password, I'd probably be charged with something. I'm sure its very similar in many countries, including US.
It's extremely unlikely they'd jail me for obstruction. They wouldn't have a legal leg to stand on and they know it.
From CBP themselves:
"If a traveler being admitted as a U.S. citizen does not present their device in a condition that allows for examination, the U.S. citizen traveler will not be denied entry into the United States based on CBP’s inability to complete an inspection of their device. However, as noted above, their device may be subject to exclusion, detention, or other appropriate action or disposition."
Worst case would be losing the phone, which is a tradeoff I'm willing to make.
"If you want a picture of the future, imagine a boot stamping on a human face - for ever"
I will ask this here again:
At what point did the German people find it morally acceptable to start killing Nazis?
At what point will the US stop accepting the boot and act to remove the tyranny stamping on our collective face?
Did they ever?
> At what point did the German people find it morally acceptable to start killing Nazis?
Late 1960s at the very earliest, and it's only been a tiny minority.
It wasn't until over a decade after the war that most Germans started to accept and internalize that the Nazis were bad guys.
There's also another war where the Germans think they're the good guys because it hasn't been a decade yet.
If it helps, the nazis themselves probably asked this very question before they started killing ... whatever the contemporary term for nazis was back than.
I don't think there was a label back then that was used the ways "Nazis" is used today.
We probably need honey pod fake OS systems that boots up if not properly handled displaying some stars & stripes as background image and having the US national anthem playing for any sound the OS is trying to play.
A phone with a backup account, unlocked with duress pin makes sense to me.
How hard would it be to admin-allow some apps to work across barriers. E.g., wallet apps work, airline tickets work, but email/socials do not.
the issue is that when a phone is unlocked, they can just plug in a USB device and scrape everything off it. The TSA agent may not be eyeballing a facebook account so much as plugging in an exfiltration software stack or malware.
> the issue is that when a phone is unlocked, they can just plug in a USB device and scrape everything off it
That's useless if the backup account and the main account use different keys for the home partition.
VeraCrypt (used to?) have this. It was called a hidden volume. One volume, but two keys, two passwords, and two different containers full of data. Technically, the second volume is written into the partition "from the back" using key 2, while the first volume is written "from the front" using key 1.
Fun fact, there's no protection against writing over data in the other volume if volume 1 + volume 2 exceed the size of the partition - and there can't be, otherwise the volume wouldn't be hidden.
Yep, and there is also no way to tell if a hidden volume exists, because a volume without a hidden volume would fill that space with random data indistinguishable from a hidden volume.
For now the courts in the US have set a different barrier for automated extraction and hand searches. For now.
Why does the USB port need to even work anyways? It could just be designed to look like a USB port but fry whatever expensive and proprietary phone hacking device they bought from some scuzzy Israeli ‘security’ company when it’s plugged in.
It has to be a once-only effect tho. If it's repeatable, they've got you for some string of felonies.
I wonder what would happen if it was every time, but you never told them it was a USB port
Of course! It charges my personal taser (which I wisely left at home on this trip out of the country).
This would unironically probably work pretty well. The bullies in airports don't have that much time to investigate a phone which "looks good".
Right, these goons are hand searching through phones specifically to find something, anything, they can use to make your life suck and detain you further.
A pin that boots into a dummy account, full of benign messages, photos, innocent web browsing, etc. is going to get you a pass. They'll flip through everything and get bored after a minute of not finding anything.
Far less likely to aggravate them than wiping your phone
I would prefer to backup and wipe my phone before travelling.
Then have some planned means of restoring the backup when it's safe to do so.
Being caught with a honeypot looks much worse than being caught with a new phone. You can always say you bought a cheap "travel" phone if asked.
It's hard to justify an iPhone Pro Max as a "cheap travel phone" though so you might actually need to buy a cheap travel phone.
Its such a shame Android's backup/restore is such a mess, even more so in GrapheneOS. I remember the era before Google and manufacturs started cracking down on bootloaders and custom ROMs - I used an app that could do effective, actually full backup and restore in single click.
Good times.
Don't forget to have the Official Social Media of the President of the United States(tm) installed, with an account following the correct list of truthtellers and rightthinkers.
Yeah, you really can’t outsmart those with physical power and authority over you. Americans have asked for, or tacitly accepted this treatment of their visitors. The only big-picture solution is to stop visiting.
> Americans have asked for, or tacitly accepted this treatment of their visitors.
Our citizens as well!
The issue is that once you are a person of interest with a real id, you become a target.
The way to outsmart them is to stay maximally anonymous.
>[Some] Americans have asked for, or tacitly accepted this treatment of their visitors.
You forgot a word.
Nobody forgot a word. "Some" is nowhere near an appropriate word to use in that sentence. All Americans share the blame in what is happening right now. All.
This comment is self-caricaturing in its complete absence of logic and unseriousness.
Are all men rapists too?
> [most]
Your word memory is faulty as well
1. "most" is debatable
2. "Some" is a superset that includes "most"
2. Most would not use "some" in such a broad way, though could only quickly find this law school's explanation that many>some (and obviously? most>many) https://law.marquette.edu/facultyblog/2014/07/commonly-confu....
I hope to meet one some day.
Unlikely, because of your priors; you already think we are odious so it isn't like you are looking for the best in (or of) us, and second why would they want to meet you if you assume the worst of them? I don't support this Administration's behavior, but I'd rather meet an American who did and have a discussion with them about it than try to convince some dude who already decided I was an asshole, based on the country I'm from.
> you already think we are odious
I had to look up the word to double-check as a non-native English speaker. A quick definition I'm working with is "Arousing or meriting strong dislike, aversion, or intense displeasure." The synonyms assumed are: evil, cruel, hostile, nasty, wicked (all from Grammarly).
The experience of "you" - Americans - for non-Americans is shaped by cultural exports, personal contacts, and interactions with available American institutions. The last of these is likely to start with the immigration policy and its execution in the form of an embassy visit to apply for a visa and later with the officers at the airport. How confident are you that these interactions cannot be described as "odious" in a significant percentage (maybe even the majority) of cases? I've never experienced it myself, but in my social circle, almost all who tried were pretty bitter about it, even when successful. There were some outright Kafkaesque situations as well. Does it come as a surprise that a completely ruined "first impression" ended up biasing them to some extent?
I think that's rather expected. I'm pretty sure the same is true for a portion of people who want to visit or immigrate to my country. I can hope it's maybe less prevalent - we're not as sure of our greatness here (still better than those others around, obviously! /s) - but I wouldn't count on it to be an entirely positive experience, either. Admitting this and trying to fix it (including, unfortunately, convincing that dude who had to deal with his fair share of assholes to get here that not everybody is an asshole) would probably be a better course of action than isolationism you seem to favor, but to each their own.
If the commenter to whom I was responded made his points about American policy or institutions (rather than all Americans), I'd wholeheartedly agree, but that isn't what was written.
I, personally, don't favor isolationism. I am a US-EU dual citizen, and support strong ties between the two. I think the world is a better place when we work together. But people like me are erased with the dumb comments about "all Americans." Honestly, this feels like one place where modern society is falling apart: the "if you're not with me 100% then you are against me 100%" attitude that social media "engagement" metrics reward.
If one's beliefs align with those who wish to strip civil rights from citizens who are different than one's own, then one is an asshole and doesn't deserve the time of day.
One can cry about being a pariah all they like, but don't be surprised when the rest of the kids don't want to play when one's unmitigated petulance and intolerance is on display.
>If one's beliefs align with those who wish to strip civil rights from citizens who are different than one's own, then one is an asshole and doesn't deserve the time of day.
Who are you talking about here? This isn't even half of voting Americans, who probably represent about 20-25% of the American population. Your argument is analogous to saying that all men are rapists, because many men have committed an act of sexual harassment. It's so shockingly Manichean that it wouldn't pass a middle-school composition assigment.
can you share the link? This?
https://www.eff.org/document/eff-border-search-pocket-guide
----
Seems the better strategy (for iOS) is come in with a plan to say yes to agents without pissing them off (like handing them an empty phone).
better to local back up, encrypt, upload to your home server etc.
Then login to a fresh iCloud account, selectively install apps, photos, and mail accounts. So it doesn't look like you're walking in suspicious.
This seems like an insane thing to have to do for visiting a supposed first world country. If phones had been around during USSR times I imagine you would have had to do the same. Personally I will rather just avoid any travel to the US, and I hope others do the same.
Security concerns you need to think about when visiting the US are absolutely no less than those when visiting China these days. Treat it like a totalitarian dictatorship with more technological means.
Honestly, I personally would be less nervous visiting China.
Maybe marginally, but I'm still not visiting any county where I would be in trouble if the government/police knew my opinions of them. That's not just the obvious ones like US, Russia and China, but also countries like Thailand, Egypt, UAE, Israel to name a few. I like seeing the world, but not that much.
In China I would expect to be kicked out for having the wrong opinion as long as I didn't cause a big fuss. In the US I'd worry about being imprisoned.
China is known to hold Canadians on the excuse of being spies… spying for them is oftentimes filming without prior approval in non coastal but still civilian regions.
But weren't they... spies?
https://en.wikipedia.org/wiki/Detention_of_Michael_Spavor_an...
> According to a report by The Globe and Mail in November 2023, Spavor sought a multimillion-dollar settlement against the federal government for involving him in espionage activities without his knowledge. Spavor alleged that he provided Michael Kovrig with intelligence on North Korea, which Kovrig then secretly gave to the Canadian government and its Five Eyes allies without Spavor's permission, leading to their arrest and detention
The article clearly indicates the gray area. Your comment oversimplifies that dramatically.
Americans, too. My understanding is that there are a couple of hundred Americans being detained in China now. Some of these people are expatriates who gave up their PRC citizenship for American but China still claims to have dominion over (for what that's worth), but at least some have no colorable argument at all.
I'm surprised that we don't hear more about this from the American government and media.
This has become a running joke with a couple of the people in my office who have recently visited China (from the UK).
The next 2 years will be interesting for democracy as a whole.
China actually wants people to visit them and spend money.
And although I don't agree with the CCP ideology the Shanghai subway is ridiculously impressive.
Remember most of the Chinese train infrastructure was built in the time since the Hyperloop.
I was not impressed when I was sent there on business trip, from what I remember their subways were not as big as in Beijing or other CN places and I hit there my head, obviously anything is better than HK/London. Normally I'm not claustrofobic, but in HK subway...
Something I think is funny is that a lot of Chinese police think of themselves as catching up to the US in terms of surveillance tech. Think about how many internal migrant workers China has coming to the cities for work then back out to the rural areas.
this reminds me of the fact that Adolf Hitler learned his craft by trying to emulate how the USA treated native americans
I haven't been to the US since Trump first got elected, but even before that, immigration agents often seemed oddly adversarial, whereas immigration agents in China just don't really seem to give a shit.
From what I read about them (never had the honour and pleasure of interacting with one) it seems for some time they have had too much power with almost zero accountability and consequences.
At this point I'd be less nervous about vising North Korea.
Nobody in China cares about your phone/laptop.*
*Unless you are (well) known dissident/journalisy/politician.
US is much more totalitarian than China. Lived in China for years, had multiple times various visa/residence permit issues with police and guess what, nobody cared about my electronics or was sending me to any detention, all I've got were quie helpful officers trying to find workarounds for me to deal with the situation.
Same thing on my last trin in summer 2025, we didn't stay in hotel, didn't go to register to police as you are supposed to and when crossing province border checkpoint guess what happened - they let us go to our tourist sight and told us to just register after weekend and as usual officers in police station couldn't care less, they just registered us without any issues.
You can complain about plenty things in China, there sure is a lot of bureaucracy but when you actually have to deal with them, they are pretty laidback and trying to be helpful usually.
By these standards and my experiences with registration in police stations in other two EU countries I can tell you China was the friendliest most laidback and convenient experience.
People who claim China is totalitarian dictatorship clearly never been to China and should get off their high horse, China nowadays make less trouble for their own citizens than EU hating them trying to make lives of EU citizens as inconvenient and expensive as possible.
Were you a Caucasian in China? Foreigners, particularly those from powerful Western countries, tend to get much more deferential treatment than locals.
Obviously, if you do your research you will not go as black (partly also brown) person to China/Japan/East Asia unless you have any other option (though I guess students from poor African/*stan countries don't have many options).
I would disagree with different treatment compared to locals vs whites. It's not like whites/foreigners have only benefits, good luck booking ANY hotel (I guess this improved since visa free policy) or renting an apartment as foreigner, which was a shit show or even good price in some markets in past (this was solved by online shopping). But you will get definitely different treatment as white foreigner vs "darker the skin worse the treatment" foreigner.
In the past I've felt the same way in China. At a macro level there may be a lot more restrictions there. But when it comes to day-to-day life, it seemed like people had much fewer regulations bearing down on them.
For example, you'll see farmers on the Shanghai streets come in from the countryside to sell their produce - and doing so with impunity. In, say, NYC there are vendors still, but they've got their wares on a blanket that they can quickly scoop up and get away when the police come by.
There seemed to be a tacit agreement between the people and the Chinese oligarchy: if you let those in power just keep doing what they want, they'll just ignore you.
However, China is a pendulum. It was very much the opposite at the time of Tienanmen Square; from the late 90s into the 10s there was quite a lot of freedom; but now with Xi's power having been consolidated, it's swinging back toward authoritarianism again. I've seen people describing more recent conditions there as the start of Cultural Revolution 2.0.
> In the past I've felt the same way in China. At a macro level there may be a lot more restrictions there. But when it comes to day-to-day life, it seemed like people had much fewer regulations bearing down on them.
in general I would agree (also pretty low taxes for small businesses and employees), but:
> For example, you'll see farmers on the Shanghai streets come in from the countryside to sell their produce - and doing so with impunity. In, say, NYC there are vendors still, but they've got their wares on a blanket that they can quickly scoop up and get away when the police come by.
this is bad example, chengguans are infamous for scaring away street sellers, which is one of the reasons why people operate their business from (electric) tricycles, so they can get away, when you see chengguans are coming they will disappear quickly same as those blanket sellers in the West, alternatively in evening you will see car trunks open with people selling their stuff from there, but it also depends where you are, I'd assume Beijing is the strictest since in BJ suburbs where I was staying last summer this didn't seem to change much over last 10-15 years
I used to work (among others) in Xi'erqi subway station neighborhood (Xiaomi HQ) and what happened around the station is happening all across China - cleaning streets/gentrification, there used to be huge market next to subway station where you could buy all kinds of food and things from street sellers, but when I was leaving they effectively shut it down. Same thing happened at my parents in law town, though it's not so strict in BJ suburbs, people still operate from sidewalk, but there used to be for instance nice bakery market which was shut down, same with small local police station, now everyone needs to go to big central one and many other (small) places shut down, while city keeps growing. So they are clearly cleaning the streets and regulating street sale especially in Beijing. Though when I walked last summer around my other workplace across CCTV in CBD (downtown) there was guy operating from relatively big folding trailer, but I guess he has permit, didn't see any jianbing/jidanguanbing small sellers on sidewalk as I used to frequent on the way to work.
I agree China around 2010 was peak China when it comes development balanced with freedom, I remember how we thought upcoming Xi will open China even more, we couldn't be more wrong... On the bright side at least now you can go 30 days visa free to China, which is a bug positive compared to past, 30 days should be already quite enough even for regular tourist to cover China, those previous 15 visa free days was pretty much useless.
What region of China was that?
Beijing/Hebei, I've done paperwork/lived long term only in these two regions, worked on business trips in more provinces, but don't have any experiences with bureacracy over there other than HK where you have to go if problem with visa
I wouldn't say you are overreacting at all. I know someone who was detained for months on US soil after a phone search where the only "evidence" against him they found is illegal content sent by someone else to him on a group chat he doesn't even check. Had to get a lawyer and spend time in prison just waiting to be deported back.
What is illegal content in this context?
Jokes about Supreme Leader Trump?
(I'm not the person you replied to, I have no idea)
Jokes about Trump are rife in America, as are leader jokes in many Western countries. These are the last places you will need to worry about that.
Isn't Germany an exception to that?
At long as it doesn't involve [multi purpose eggs](https://www.euronews.com/culture/2026/06/06/mehrzweckeier-di...) or calls to violence you should be fine.
I don't know. Can you not make jokes about the chancellor in Germany?
Sure .. just not jokes about how tall they are with a punchline that involves raising an arm to demonstrate.
Insulting people is a crime in Germany. If you said "Hitler was a poopy head" that'd be illegal. But they wouldn't bother to enforce that. If you say it about a real person, they can press charges.
Does defamation laws apply to deceased too?
There's a separate law against insulting a dead person.
fyi: insult is a so called "Antragsdelikt". That means authorities can only press charges when the victim files an official complaint. Otherwise they can't do anything.
Which also means they wouldn't be able to do anything about you saying "Hitler was a poopy head".
You sure about that? https://www.theguardian.com/us-news/2025/mar/19/trump-musk-f...
WhatsApp was especially sketchy considering they used to automatically auto-save images to your photo album.
My dad's eighty+ years old, he was born in the States, though he did give up his citizenship. He brings a "fake" phone when visiting family, he's been doing so for years.
Me; I just change all my tabs and recent history to slightly kinky porn and truth social. They do look hard, but they don't look hard.
The older guys cannot look too hard but the young guys can certainly look quite hard while browsing through your kinky porn.
(Laughs expected here)
The US is first world on a technicality: the first world is defined as countries that were allied with the US during the cold war. If not for that, it'd be classified as developing.
It's common to mix up developing/developed and third/first world because they were largely aligned during the cold war. But there is one first-world developing country.
The biggest economy in the world and the richest country to have ever existed is not a developing country, although it is quite unequal. What you've stated is political rhetoric that you want others to accept as fact.
Many developing countries have extreme inequality. What would it look like if the whole world's reserve currency accidentally ended up being the South African Rand?
The US is not so allied with its long-time allies as it used to be. Allies tend not to threaten to invade and take over other allies.
The behavior of the us is so stupid and self-destructive I'm constantly amazed that the average trump supporter doesn't see it. But the failure of the political resistance to him is the real surprise. If your buddies have the majority in the house and the senate there nothing you can do?
This is not true. However, because of the massive inequality, I often found it easy to use a sentence I saw somewhere: "the US is a South American country that happened to become successful".
Why do yo think the US should be classified as a developing nation?
There’s a definition independent from 1st/2nd/3rd world [0] and the US’ income seems to clearly make it developed.
[0] https://en.wikipedia.org/wiki/Developing_country
Who made them the law? I don't trust the OSI to define open-source, either.
The UK, per capita, is poorer than every single state in the US. https://finance.yahoo.com/economy/articles/gdp-alert-united-...
As much as the current situation in the US upsets me, anyone who has spent considerable time within the US and outside of the US cannot believe what you've stated as anything other than a trite delusion. The US isn't just the richest country in the world, it has the second highest purchasing power parity per capita in 2026 and historically the highest. The average person in Mississippi is economically better off than the average person in England.
In a similar way to Ireland, measurements of the USA's wealth tend to be severely distorted by the financial shell games that countries play.
https://www.ubs.com/global/en/media/display-page-ndp/en-2026...
Seems to substantially disagree that the average person in the U.K. is worse off than the average person in the U.S.
The American poors (10th percentile income in America) are 67th percentile income globally, when calculated via Purchasing Power Parity. [1]
Your description of it as a "developing country" is completely inaccurate.
[1] https://www.foreignaffairs.com/world/great-convergence-equal...
I used to love visiting the US. I have many friends there, and I really enjoy staying in places like Seattle and SF. But I haven't gone there since Trump 1.
That said, I think protecting your privacy is a good idea in general.
Yes, I will probably never go back to the US. But I find it sad that my kids for example, will have to think twice before visiting, if they do.
> for visiting a supposed first world country.
... which by now is a banana republic of the worst kind. Can you interact sanely with an insane counterpart? Avoiding to visit would be my recommendation too.
Just out of curiosity, like what country would you not have to worry about this in?
The US is quite transparent about these rules, and certainly other countries are not necessarily searching peoples phones as publicly
But anytime I transit a country USA or any thing I fully expect to have zero rights
European citizens can travel in the EU without even noticing that they are crossing borders most of the time. I once got lost on my bike and accidentally ended up in France for example.
I drove a friend to an airport in Switzerland, got lost on my way home, and accidentally visited both France and Germany.
And if you're unpopular enough, they can also abuse arrest warrants for political persecution from another country. Case in point, captain Tommy Olsen from Norway, who Greek authorities accused of "human trafficking" for helping boat refugees.
They've deliberately made it very easy to request arrests across borders, so it isn't all rosy. One of the reasons it really sucks for everyone when an EU country starts slipping towards fascism.
>But anytime I transit a country USA or any thing I fully expect to have zero rights
That is so sad, man. How is this normal for you?
Schengen, Nordics, Japan, Canada, in that order.
Trump’s America: when confronted with negative traits of your country, always assume your country is the lesser of all evils.
Australia has stricter screening for fruit than for people.
don't bring anything organic to Australia unless it's been commercially processed, and even then show it to the border officers so they can make the call. You don't get penalized for showing them something not allowed, you just can't bring it into the country, and they throw it in the bin for incineration. Penalties start when you try to sneak something in anyway.
An Australian sniffer dog was very interested in my rucksack when I visited Australia a while back. Apparently it was due to previously having kept some bananas in there. They really don't mess about with finding and fining people importing anything that could germinate. They are very friendly though and one officer even washed some seashells that my wife found in New Zealand.
Australia has very one sided arrangements with some other places. It is far easier for Aussies to get into the UK than vice versa, for example. They get in visa free, but UK citizens need a visa.
I have an Australian acquaintance who got into trouble recently since he was born in Scotland but moved to Australia as a child. He is about as Aussie sounding as they come and went to school there, but after working in the UK for a year or two, Australian immigration gave him grief when he decided to return.
Australians actually comprise one of the biggest groups of illegal migrants in the UK, but they are more rarely commented on as they are much less visible than certain other groups. Australians with a parent or grandparent from the UK qualify, whereas those who don't, don't. But the ones who don't are rarely deported, and can't be easily distinguished in many cases.
> I have an Australian acquaintance who got into trouble recently since he was born in Scotland but moved to Australia as a child.
He's not a member of ACDC is he? ;)
I think many in the UK don't really regard Aussies or Kiwis as "immigrants" at all. I have various red faced in-laws with political views that are, shall we say, to the right of centre and they see Aussies as just Brits with funny accents.
Haha, no he'd wish! He's into that type of music!
But yes, if you had someone whose UK ancestor back in the 19th century, or descended from Italians, Greeks or Lebanese, with an Aussie accent, then you're unlikely to be a suspect.
Here's the full version https://www.eff.org/wp/digital-privacy-us-border-2017
One of the names in the byline matches his HN username so it's likely this.
Xiaomi phones have/had a feature where depending on which finger you unlock the phone with, it can hide certain applications/folders on the filesystem.
who believes an empty phone?
You need it to look set up enough to do critical communication / tourist activities. It should look like you had to reinstall your OS right before your trip, and only had time to get the basics on there. Most people will prioritize communications, maps, and payments over anything else, with video/music/books/podcasts following that, and signing into the vast universe of social apps later if ever.
You're right for non-citizens.
For citizens, no one needs to believe it. You give them your empty phone and they can't download your phone contents and contacts.
Generally, within 100 miles of a border (which includes international airports) there is not a warrant required for a search.
Which is where 99% of people live btw
They can search as much as they’re able to, but they can’t compel a citizen to supply a passcode.
The point is not what they believe, but how to avoid both breaking the law and not giving up your data, isn't it?
As long as that's legal, what they believe doesn't matter.
You are not legally obliged to keep your data on your devices all the time.
What do you mean?
I guess you could just bring a flip phone. But then that could be seen as suspicious these days.
When a government is paranoid, everything is suspicious.
Maybe just don't do anything on your phone but normal capitalist business sht.
The comprehensive solution would be for the supreme Court to say this is unconstitutional. They don't seriously think that smuggling CSAM on phones is how it gets into the country. It's all pretext.
> I think they should not have this power, but the agents and courts probably don't care that I think that. ...
> and about not angering the agents more than you plan to
When I was a teenager (long ago at this point), I got into an argument with a police officer over surfing in a certain area. It was pouring down rain, so he was annoyed he had to sit outside and wait for my friends and me to come to shore. Once we got in, he was telling me that he could take my surfboard and my car, and all other craziness. Being the dumb smart-ass I was at the time, I laughed and told him he was full of shit, among other things. He went to take a swing at me but his partner grabbed him.
We all go to court and the judge immediately dismisses the case against all my friends. I had a lawyer with me that I knew and he went to talk to the cop and when he came back over he goes "I don't know what you did, but that cop hates you." I get up in front the judge and he praises me for understanding the law (and I could still see the cop was visibly pissed), but then says he can't have me disrespecting and being a smart-ass to his cops and gave me community service that once completed whatever the ticket was would go away.
> but then says he can't have me disrespecting and being a smart-ass to his cops
Maybe it's just me, but I am of the exact opposite opinion. Cops have enormous power, and any misuse of it should be pushed back on hard. Cops that misuse their power should not be respected. An informed citizenry is a wonderful asset in making that power imbalance less of a problem.
There's a difference between polite pushback and being straight up disrespectful. It shouldn't matter as the cops shouldn't abuse their power and shouldn't attack people, but we live in the real world. The judge probably didn't want to have to deal with the potential future mess if op didn't learn their lesson and got beat up by a cop.
"Straight up disrespectful" can be made up to mean anything, but in general should refer to things that shouldn't bother police officers doing their job. They can get pissed off about it in their own time.
And then people are surprised and saddened when LEO start acting like robots and default to treating you as threat to be mitigated as much as legally allowed in context.
The parent described a story from a different reality - one where people are people, where communities have basic expectations of conduct, and authority is respected on all sides. The cop was angered and snapped (bad), but was stopped by their partner (good, and it's one of the reasons cops have partners!). The parent was a kid who behaved like an asshole in a moment, by their own admission. Plenty of teenagers act like that, it's an age-old more. The judge did not act as a proxy for the angry cop to retaliate, but instead reacted correctly by both praising the civic attitude (to the chagrin and I imagine further embarrassment of that cop), and addressing the behavior that is not welcome in a civilized community.
You can't have it both ways. You can either have civilization of people, or violent hellhole of laywers and robots. Pick one.
(And if you pick wrong, then don't complain, and by $deity, don't export these attitudes overseas, please.)
People are frequently "straight up disrespectful" to me in my work. I have to maintain professionalism and composure at all times, and if I were to suggest otherwise I'd get laughed at best. I don't see why it's hard to ask for cops to do the same. A real threat that I need to call security for is very easy to distinguish from a person just being an asshole.
> The parent described a story from a different reality - one where people are people, where communities have basic expectations of conduct, and authority is respected on all sides. The cop was angered and snapped (bad), but was stopped by their partner (good, and it's one of the reasons cops have partners!). The parent was a kid who behaved like an asshole in a moment, by their own admission. Plenty of teenagers act like that, it's an age-old more. The judge did not act as a proxy for the angry cop to retaliate, but instead reacted correctly by both praising the civic attitude (to the chagrin and I imagine further embarrassment of that cop), and addressing the behavior that is not welcome in a civilized community.
So why did he not give the cop community service then?
If I swung at someone at my job I'd be fired. If a security guard swung at someone who was not an active threat they'd probably be fired too. We still do our jobs.
I would argue that arbitrary authority inherently deserves no respect, and the second that authority is overstepped there should be consequences.
It's no surprise that there's so much hostility towards police in the US when they routinely abuse their authority.
> And then people are surprised and saddened when LEO start acting like robots and default to treating you as threat to be mitigated as much as legally allowed in context.
yeah that would be pretty petty, given that most people in their lives are able to perfectly deal with such behaviour, whether it's their job or in personal life, without a judge to slap annoying people on the wrist
what is this prima donna behaviour?
it is them that need to work to deserve their uniform, they need to understand it is an honour they have to keep up, be the better person. if you can't do that, you have no job wearing that uniform.
but I guess their narcissism must feel strengthened by people like you arguing this is perfectly reasonable behaviour for officers of the law
you can have it both ways, you just need to want it
There is a general understanding that police officers deserve implicit respect while on duty, more so than random citizens, as they are representatives of the law. Swearing at a random passerby is rude but legal, swearing at a police officer is against this need for respect and is a misdemeanor in many places around the world.
Police do need authority and respect in order to do their jobs, of course. But at the same time their position of power and their role as maintainers of public peace mean they should have a thicker skin rather than thinner. They should be able to keep their professionalism and composure in the face of adversity better than the average person, and someone being verbally disrespectful towards them is at the lower end of that.
Police officers who think their pride needs to be put first in the name of authority may be common around the world but that doesn't mean reactive cops are a good thing.
It's perfectly legal in the US. In fact it's legal to lean out your window and yell at them. It's protected speech here, and for good reason. Otherwise the cops could just say your speech made them feel disrespected and you could get penalized. The first amendment in the US has been interpreted pretty broadly to protect a lot of speech that in other countries could get you fines or jailtime.
Respect has to be earned. They have done the opposite.
> The judge probably didn't want to have to deal with the potential future mess if op didn't learn their lesson and got beat up by a cop.
A judge solving their own problems in this way is clearly abuse of power as well
Respect is earned, not given. Police in some communities are (generally) respected, but they are also (generally) professional.
When trust breaks down, it’s up to those who hold power to restore it, not those subject to power. Too often authority demands submission as a substitute for trust, and the results are predictable.
Sure, I agree that we should be polite and respectful to random people, cops included, but that judge decided that it was illegal to be disrespectful to a cop, which is pretty fucked up.
> disrespectful
To paraphrase a useful distinction I saw once...
Some people talk about mutual respect, but it's not mutual at all because they use a different definition on each side. They demand you "respect" the power of their position or uniform, or else they won't "respect" you as being human.
It's not respect unless it goes both ways.
If a cop demands your ID when you have no obligation to give it, your answer should be something to the effect of "I hope you get hit by the next passing 18-wheeler".
Malignant authority needs to be treated with maximal hostility. The 'lesson' you want here is completely backwards.
That answer would mean that you’re are on drugs. And your being on drugs means that the cop can request your id.
America is a free country. Everyone can ask you for everything. I can ask you for money. A cop can ask you for an id. No need to rush and provide what you were asked for. But that 18 wheeler thing is extremely counterproductive.
I said demand, not ask. Demand requires reasonable articulable suspicion of a crime.
Many cops arrest people for not providing identification when they're under no obligation to do so. Those cops should be insulted, and deserve consequences.
There’s no legal difference between polite pushback and disrespect. In a just world, the commenter should have had zero consequences, and the cop should have gone to prison for assault and abuse of authority.
> There's a difference between polite pushback and being straight up disrespectful.
That's a distinction without a difference. Cops see any form of noncompliance as disrespectful ("contempt of cop"). You not only legally can, but absolutely should be able to tell a cop "Get fucked" to their face and walk away if they have no legal basis to detain you. The fact that in reality you will have your life ruined is a problem far worse than any "disrespect".
Yeah, but go tell that to the judge who’s just about to slap you with a sentence.
Unless you want to fight that all the way up the judicial food chain
Absolutely. It's not worth it unless you're more principled than anyone I know at least. Instead you're left with a minor punishment and most of your faith in the justice system left behind.
There's a huge difference between misusing their power and not having perfect understanding of what they're allowed and not allowed to do.
I'm sure there are scenarios where the cop can confiscate the surfboard and the car. The distinction is probably somewhat vague even for highly educated lawyers, and cops cannot expected to be that.
He should have stood up for his rights, sure, but laughing in the cop's face and telling them they're full of shit is disrespectful, and at least where I live is a misdemeanor even if the original case is wrong.
As a citizen, when I have an incomplete understanding of what I'm allowed and not allowed to do I have every incentive to stay on the side of things I'm sure I am allowed to do. Just threatening to do things that you are not allowed to do has the annoying tendency of being a crime
I'm not sure how this suddenly flips for cops
And what did this judge think (not much, apparently)? Punishing you will make you respect the cops?! This idiot confuses the fear of punishment with respect. Also, does not understand that respect is not to be forced but to be earned. Forcing it will erode respect and generate lots of pretension and covert hate. This judge basically endangers all cops (and the community) for giving revenge to this one prick lacking self control! It's mind-blowing that someone less mature than a teenager can become a judge!
I wonder if the cop learnt his lesson? (rhetorical question)
Too bad you could not bring that judge up on charges of judicial misconduct - if he indeed told you that the charge against you had no merit, but decided to punish you anyway because he did not approve of your demeanor.
... or otherwise, that people in your community could not apply any counter-pressure to such judicial behavior, in the media and public fora.
To be fair to the judge we all had broken an ordinance about surfing in a certain area. It was enacted to protect swimmers in the summer. With that said, there was a storm with wind, rain, and currents that had pushed us into the area. Obviously there were also no swimmers out.
The ordinance was removed a few years later. This cop was also known to hate surfers. All the small beach town BS you hear about.
at some point you just take your lumps.
Most people don’t have boundless time or energy and just want things to go away.
… ironically this fact is used a lot in gaining confessions by police.
Me solving technical problems without motivating requirements:
Can you just like have the graphene OS device wipe itself if it knows that it's going through a border and you haven't logged into the device in 24 hours?
Or maybe, Enter into a precipitous one false move mode, where it's just about to wipe itself if the 24 hours elapses, And it does wipe itself if someone doesn't put in a code the next time the device recognizes that is being handled, within like 90 seconds of being picked up?
I worry that at some point, the physical device won't matter. Border authorities will know your email address, and could force you to log into your account on a device they supply. Five years ago, I would have called anyone even bringing up this possibility paranoid, but a lot of things that were completely unimaginable outside of Hollywood political thrillers have already happened.
And then there's the problem that you can't just log in with name and password to your email address. You need your special "authy" style number generator, or a software version on the phone. They know you probably have it on the phone. but what if you bring your other phone that doesn't have it on there - you removed the software before you left so no one could even log in.
All these fancy tricks don't work because the doofus/poor soul at the border doesn't understand the nuances and they don't know if you are lying or not. Even if you wipe your phone and restore it once in the safe usa, that's no doubt suspicion of a crime.
I don't own a cell phone, haven't for years. I fear this alone would be enough to arouse suspicion and I'll be denied access. Not an immediate problem for my family: as a Canadian I have no plans to visit the states for a long time. However, I could see this being suspicious in other countries as well..
What about simply not using a smartphone and accessing your data via internet when you're in the country? You could use Mega (secure file storage) to access your files, for example.
I wonder if border agents could coerce you into giving access to your internet file storage, though.
I believe they can. I believe they can even request your social media credentials, despite that being against the ToS for those sites. It's not against the law to refuse, but they can and will reject entry on that basis.
That's interesting. I don't even know most of my passwords (thanks to password managers).
Don't worry, they can ask for that password too :D
Yes, but that one has 2FA, and I might not travel with that second factor on me.
Of course, they won't be amused.
In other words, 2FA might actively put you in danger. Something to consider before travel and perhaps temporarily lowering your digital security to preserve your physical one.
Remember that the creator of Mega is getting extradited to the USA - again - a country where he's never been, by the way - for basically this crime (using encryption).
Not true. He previously ran a site called MegaUpload which hosted copyright infringing files. This is why he created Mega, which is an end-to-end encrypted cloud storage service similar to OneDrive of Google Drive.
Even if Mega users host illegal or copyright infringing contents he can't be convicted for it.
I'm just amazed that not everyone is using it. People don't seem to know about it and they're not advertising it. They probably made a deal with LEA or politicians not to spread the word in exchange for not being extradited.
AFAIK in the US their policies do not allow them to access your cloud stored data.
There’s more to it than just not antagonizing the guards. I mean if you make them mad by doing something that is legal that’s probably not ideal for you practically speaking, but it’s not the end of the world. Destroying evidence while they are investigating you is not just going to make them mad though. It is illegal (18 USC section 1519).
Where I think people are a little confused here is not realizing that this would be equally illegal in many other countries. At least in the UK and France, border investigators also have the power to demand your PIN. And it is also illegal to wipe your phone during an investigation in those countries.
I wonder if the smarter thing to do would be to quietly nuke it as soon as it becomes clear that you'll be detained, so they can't really know that it wasn't already blank (IE you aren't nuking it in their presence).
The smarter thing to do is to just wipe your phone of everything you don't want border patrol to see before going to an airport.
With self-hosting, it's possible to easily bootstrap a clean phone with all your data and passwords from scratch, without relying on any third-party cloud services. The only thing you need to bring across the border is your brain (which contains the most basic information on how to set up your password manager) and maybe some kind of 2FA generator. Your password manager then contains all the other information you need to get everything running.
I don't think it ever makes sense to transport actual data across borders if you care about governments gaining access to it.
Possible, yes. Easy, not so much. Phone operating systems don't really place nice with local backup and restore, which I consider a serious flaw.
I'm not sure what you're referring to, but what I basically do is self-host everything that stores relevant data: Vaultwarden, Immich, Notesnook, etc. I only know how to set up Bitwarden and my 2FA generator from scratch, so when I get a new phone, I install Bitwarden and the 2FA app and set them up.
Then everything else is documented inside Bitwarden. It's just a matter of installing the apps and logging in using the credentials stored in Bitwarden and a 2FA token generator.
There's no need for relying on any phone OS features.
This seems to describe a workflow with a small number of apps that store things remotely.
I want to back up my phone and restore it in one step, possibly to different hardware, and have it work like nothing ever happened. I can do that with a PC. I ought to be able to do that with a phone too.
I'll use Signal as my example of an app that's especially annoying to deal with in the border crossing scenario. I want to back up Signal and install it on a clean device without losing messages, changing my safety number, or verifying by SMS with a phone number I may not have access to at my destination. It's not possible, though I'll grant some of that is design choices made by Signal rather than the operating system.
I have to use its built-in backup function to keep my messages; if I just copy the data, it can't decrypt because the keys are in the old device's TPM. Even with the backup and password, I have to use SMS verification. Finally, the safety number seems to be tied to the keys in the old TPM, so I there's no way to do this without changing it and annoying my contacts (or teaching them to ignore safety number changes).
Makes sense, thanks for explaining!
You still have to set all that up.
I don't carry a smartphone, is this likely to be a red flag if I'm stopped?
Many countries now assume you have a phone. For example getting UK visa requires a smartphone. I don't think going without a phone is feasible nowadays.
Another question is if going with a burner phone that has just sim card and bank card, sufficient. But then you need appleid/google account on the device, and this again links back to your phone number, and it's not easy in practice to have proper clean device.
You can simply use an Apple account for your primary device and a Google account for your burner (or vice versa). Or set up a secondary Apple or Google account. Or use a device/OS that doesn’t require one of these accounts!
> UK visa requires a smartphone
I don't think this is accurate.
she's wrong. i did it on the browser on my desktop. the ui definitely doesn't make it easy to find though.
Well, assume your phone number is public knowledge.
You can get more than one.
Sure. Assume the one that's attached to your payment is public.
Threat modelling. France is unlikely to tell USA if two numbers are owned by the same person without a good reason.
Why not have a passcode that boots in to a second “safe for cops to look at” partition?
That partition will always be obviously out of date and obviously not the main partition.
My friends from the German CCC are mostly like (1) do not travel to the US and (2) if you absolutely must, travel with an empty device with decoy data and download all data you need once you're there.
So I guess what you really want is a duress PIN that loads into a fake innocent profile.
Yes I thought this was the standard solution?
People have been doing this since way back in the TrueCrypt days - IIRC you could configure it to run a whole fake version of Windows if you wanted without easily revealing your actual main volume.
Most hardware crypto wallets also have a "duress wallet" feature where you keep a low balance for the same reason.
Wiping is obviously extremely suspicious and asking for trouble
"Wiping is obviously extremely suspicious and asking for trouble"
It's sad this is the default view. It's his device, his data, his life on that phone. If he had wiped the phone before the interrogation it wouldn't be a problem. How long before? A second before? A week before? But wiping the data a minute later is suddenly asking for trouble.
I don't like it and I wish we had more privacy, but realistically there is no such "right".
If you're going to be in a situation where you're in a room with some goons backed by the full power of the state, it is what it is.
Maybe because I'm not American I don't have any hangups about seeing the US government this way, but my own government is no different - you can (and people have) get stopped at Heathrow, taken to a dimly lit backroom and given a going over for hours
I don't know that there is case law on this but I imagine that "prior to the admissibility inspection" is likely to be treated differently from "during the admissibility inspection" or "during administrative detention or secondary inspection" (or "in response to a request or question by a border agent"!).
Edit: a bigger picture question is the difference between things that may be legally punishable and things that may cause suspicion from CBP agents, which aren't the same thing at all.
it seems to me that if you give them a password to unlock the phone and when it unlocks it has been wiped that will cause problems whether it is the password that causes the wiping or not?
A US citizen has an almost unlimited right to enter the USA. The border search rule permits officials to search for things that are illegal to import. A blank phone is not illegal to import.
A non-citizen who arrives with a blank phone might be denied entry because it seems suspicious.
well OK, luckily my checking of media informs me no citizens have been stopped and held in custody by immigration without due process or any particular grounds, especially recently, so it all sounds good.
We noted in the border search guide that lying to the agents in response to their questions is potentially a crime in its own right (even if it's not done in order to hide anything illegal). We thought that this made hidden volumes quite tricky, particularly if one's intent was to pretend to comply with a question or request while actually not complying.
IANAL but I think while lying to some questions might lead to obstruction charges, not answering is simply exercising the right to remain silent.
Sure - but the point is, if you're instructed by the officer to enter a password so they can inspect your device, and you enter a fake password and show them a fake version of your data, that could easily be found later to constitute a lie and lead to serious legal trouble.
I'm pretty sure they can't compel you to enter a password.
They can't compel you, no. However, they can ask you to do so, and if you enter a privacy password that shows them something other than your real device (which is what this thread was about), you can very likely be faced with charges of obstruction of justice or even perjury. The point was that it's better to simply refuse, and accept the consequences of that, rather than trying to use technical means to trick them or to wipe data.
Note that if you're not a citizen of the USA, refusing to comply with a request like this is very likely to have you sent back to your country and denied access to the USA forever. While they can't legally force you to comply, they can absolutely deny you entry for any reason like this, regardless of having a valid visa and everything else in order. This even applies to legal residents.
How would they discover you entered a wrong password?
If you want to gamble on that, that's your prerogative. But if they suspect you did this, computer forensics techniques can easily reveal this, especially if the rest of the data on the device is recoverable to you as well.
Edit to add: beyond forensics, they can also simply ask you to enter the other password, to prove that the account you showed them first was the right one.
They can't, but that will put you in another "suspicious" bucket.
Not enough, e.g. when crossing the Russian border (even as a citizen) your phone can be connected via USB to a device that uses exploits and whatnot to download all of the data. Surely US border guard can do something similar.
And using encryption will only make you more suspicious, and may be a reason to get jail time until the situation is "cleared up" one way or another (e.g. by getting even more jail time).
Only a second phone works, if you can make it seem like a device you're actually using (though also not a silver bullet as e.g. a lot of messenger metadata is available to governments and border control can physically coerce you to log in to your real accounts)
Or that just selectively wipes only stuff you have marked for deletion. That way the profile stays up to date and believable.
Problem is „are you sure you marked for deletion all the correct things” because you could have already deleted it before traveling or moved to other device you don’t travel with.
Selection on border control might be arbitrary, they can hold you or send you back over a photo or something you wouldn’t think should be a problem.
Ideally you would like to have all wiped just in case but then you really stand out…
That's why you do it the other way round: you mark things that you don't want deleted.
That is not really making any difference if you can prepare beforehand
and
you can’t be sure which things can get you in trouble.
It does make a difference: you only mark enough to be kept to make your phone looks like it's in use, as opposed to obviously wiped.
By default, new material will be deleted. So you don't have to prepare again and again.
> you can’t be sure which things can get you in trouble.
When in doubt, don't mark it as keep.
That's a more risky strategy. What if you added new files since the last time you updated the deletion profile? It's also technically more challenging. You have to think about what might be in RAM, caches, backups, etc.
The good thing about a total wipe is that it's very easy to implement, and it's hard for it to go wrong. You just encrypt the whole drive and, when you want to wipe it, erase the key.
Obviously, you'd go the other way round and marks things that you don't want deleted.
Deleted stuff can easily be recovered. I think the full clean will remove the encryption keys hence making it unrecoverable.
Yes, this also has the advantage of speed perhaps. I can see, deleting specific apps (and their data) as thing #1, and thing #2 would be certain directories. Of course, the problem is, are icons going to be vanishing off the home screen, when the agent is looking at it? Or will the unlock -> screen coming on, be super slow?
Of course the problem there is, many people have an app store installed, and app stores have histories. And logs. And "what you used to have installed" is so easily found under Google Play, for example.
As someone else said in this thread, the law isn't code. It's not if-then statement based. It's also predicated upon intent in many cases. What actions did a person take, and why, when told to (for example) unlock their phone.
The problem here is that if you are asked to unlock your phone, any action you take to thwart that request by "trickery" to get data deleted, could be construed as 'deleting evidence'. So while some methods might make it more difficult for the border agent to realise "something happened", if they're suspicious still, then you're still in hot water.
In the eyes of the law, the court, and likely the jury, you've done a sneaky thing to thwart evidence collection.
The only safe method is a full wipe prior to travel. In this manner, you're not deleting evidence when told to hand it over. It's an entirely different bar. They can be cruel about it, and take your phone for a few months, but you're not going to be in legal hot water.
In as no one will see the phone is wiped until you are compelled to unlock it, there's no greater change of the phone being seized. You're already being investigated. Just be blunt, say "Whenever I travel, I just wipe it", and that's that.
This is why it's a shame that GrapheneOS has no viable backup solution. Its build in method is unreliable, and doesn't work very well, and is gitchy, it's a very well known problem.
And Android and ADB sometimes have issues with large backups of directories, and so you have to manage that with tar + stream and other business, but at least working around that is easy.
But if you could backup individual apps and all their data, you could uninstall all your privacy laden stuff, cross the border, and reinstall in minutes.
That's the true, legal way to travel safely. Especially if the app removal resulted in a 'shred' of the data files instead of delete.
If anyone has ever struggled with large data backup/restore, here's the only real method I've found for copying large swaths of files from/to via adb:
and to restore Or something similar.Note that in the USA and a few other jurisdictions, I believe there is now a recognized possibility for the border agents to ask for access to your social media, so even wiping the phone, or even traveling without a phone, is not entirely safe.
As far as facts go I was thinking of this one case:
... where I seemed to recall it was a social media post, but it is unclear whether it's private messaging, public social media, or private messaging under a public social media account.
[EDIT] according to [1] it was on WhatsApp with a U.S national.
My understanding is that refusal to provide social media accounts, or passwords to devices, or passwords to social media accounts, can be considered suspicious in its own right and ground to be held in custody for further exam, and/or denied entry; foreigners do not get to have the same "give password" == "right to not incriminate yourself" that U.S of A. citizen have. In doubt I would assume I don't.
[0]: https://www.lemonde.fr/en/international/article/2025/03/20/f...
[1]: https://www.lemonde.fr/international/article/2025/03/22/le-r...
Yes, as a foreigner there is no such thing as a right to enter the USA - the CBP agents can refuse you entry for any reason whatsoever and you have no recourse (they could be breaking various laws of their own and face personal liability for their own actions, of course, such as if they were seeking a bribe from you - but that doesn't give you any right to sue over their refusal to admit you). The only exception is asylum seeking, where there is a legal right for your asylum case to be heard.
Or travel with a diary containing a post-it note labelled "p4sswd"
[dead]
So burner phone for US visits I guess
> The big picture problem is that the agents performing the searches have an enormous amount of power in terms of potentially seizing devices and potentially denying entry for non-citizens. I think they should not have this power, but the agents and courts probably don't care that I think that.
That's the reason I never traveled to the US and never will, just having IT security in your CV is enough to make the border gamble not worth it
Note that border searches of electronic devices are extremely rare overall. There were some statistics from CBP implying a base rate lower than 1 in 10,000 (I think lower than 1 in 100,000) border crossings.
I do know two people who have experienced them as a result of the government taking a personal interest in them, so it's certainly not impossible. However, it's not a common experience.
I've personally experienced searches of my suitcases about four times in about 100 U.S. border crossings (as a U.S. citizen, but the people performing or directing those searches generally didn't know my citizenship status), and zero electronic device searches.
I'm European and I know plenty, albeit the minority of those I know that went to the US, so I wonder how reliable are CBP stats.
Maybe my anecdotal experience is influenced by me being in IT, but still.
But why would that be legal? The device is owned by the individual. No judge signed any warrant search for the device. I can do what I want with my device - that is a basic right of property. Imagine if border guards seize money willy-nilly.
You are allowed to refuse access to your device, and they are allowed to refuse entry to the country.
Most constitutional rights are suspended within 100 miles of a border or international airport.
Which leaves me wondering - should domestic travel be treated the same as international when it comes to securing your devices?
Worse, almost the entire population of the USA lives within 100 miles of a border or international airport.
> Imagine if border guards seize money willy-nilly.
This jogged my memory, though I couldn't find the example I was thinking of. But here's an item that is pretty similar:
https://en.wikipedia.org/wiki/Tenaha,_Texas_asset_forfeiture...
Edit: Not on the border, btw. Just people travelling inside US. I guess it was their mistake to carry cash instead of getting a bank check or something.
> Imagine if border guards seize money willy-nilly.
no need to imagine
https://en.wikipedia.org/wiki/Civil_forfeiture_in_the_United...
It's also quite surprising that all socials need to be declared. And presumably them AI vetted in time for you to get to the border.
This part is pretty new. I wonder if my former colleagues have done any FOIA work looking into how travelers' disclosed social media accounts have been reviewed or analyzed!
You also have to provide every single email account you have used in the last ten years, all of them, forgetting to declare one is an offense.
There's no chances I can remember them all, especially as I've been contracting and get a new email every 3-4 months or so.
It's reasonable for a country to want to know if you're likely to abuse your visa.
Eg your socials might show you are a professional paid speaker at conferences. If you applied for a tourist visa that would be reasonable to flag you and ask you if you have paid gigs on the wrong visa.
Europe will also ask the same questions for foreigners. If you're a young woman travelling on your own you can expect questions to challenge if you might be earning money as a nanny on a visitor visa. Checking their phone messages to see if they've been making arrangements to this effect is a very straightforward way to determine intent.
Not everything is an evil conspiracy.
Tell me if I'm wrong but it seems that if you cross borders a lot the solution is straightforward. Have a second set of disposable devices for out of country usage with nothing but a VPN to virtual desktop. Give them the password and your mailing address to return when they are done, or just consider it abandoned?
Can they force you to log into another remote computer in another country to examine it? I'm not discussing politics, simply the solution that you can actually do now side of things.
I don't have any hope of this situation improving globally and my gut says it will get much worse over time. I wonder if in the future you will have to not only give them your computer but have some sort of follow up investigation of your "real" computer if you do this two device method.
Just don't travel to the US.
This is an increasingly popular solution. Foreign tourism has crashed.
I love the geography of the US, and it has some truly stunning places to visit.
But they're not so stunning that I need to risk my freedom - risk my freedom - to visit them in person.
This person is a US citizen. What happens if he just said nothing (beyond identifying and answering basic questions) and refused to cooperate? How long could they hold him? As a citizen they have to allow him to enter eventually.
According to the ACLU I think this person would have been better off saying little and not wiping their phone.
https://www.aclu.org/know-your-rights/what-do-when-encounter...
And they would have taken his phone, pulled it apart and cloned the memory to get the data. And in a month or three, returned his phone to him in some condition which may or may not include "working".
Sounds like a better outcome to me.
Plus, unless GrapheneOS gets encryption wrong (which I doubt), cloning the memory to get the data isn't really a thing.
I've done that and they held me for about a day, strip and cavity searched me, imprisoned me, "diesel therapy" me across the state while taking me to multiple private ER claiming there were drugs up my ass to run up hospital bills in my name. They've also threatened to revoke my passport or deny me entry to the country (both failed).
They also would not allow me access to a lawyer during questioning or imprisonment.
Another woman was at the same port of entry, was raped to "check for drugs", sued, and lost. Apparently raping is a legal way to search for drugs (that were not there).
This. If any country won't treat you like a guest, avoid travelling to it.
If it's your own, that's harder to do – time to fight and change the system before it gets worse and will swallow you whole.
I live in the U.S. (as, I think, does the person who is the subject of this article).
Maybe change your location then :P
The US have things like exit taxes etc which make it a pain to leave.
I'm sharing this experience just to share, not suggesting or making any claims about what people should do with it:
One of the best ways to get through airport CBP quickly without being overly hassled is to be overtly, clearly sick in a gross way. If you're about to vomit or have horrible diarrhea, they do not want you in that line any longer than you have to be. If they're the type to want to take people down a peg, they won't bother with you because they're already miserable, and if they like picking on the weak, they're probably going to go for a solo young female traveler who isn't ill.
Nobody wants to risk getting vomit on their clothes or in their work area, having to close a line and shuffle people around while their coworkers glare daggers, or subject themselves or their coworkers to the very fun smells of human bodily fluids.
At the same time, it isn't purposeful so it's not read as malicious.
Sounds like you swallowed balloons containing drugs and one of them burst.
You might need some additional screening or to have a seat on the Drugloo to make sure everything comes out OK.
Maybe the actual solution is traveling with burner devices when you are concerned with border checks?
Like, get a cheap phone, install the bare minimum stuff you need for travel.
For extra safety, before returning home wipe it and just put back the exact apps you need for moving around (e.g.: ride hailing app).
Same thing with laptops, tablets, etc.
This is one of the reasons I also won't ever go to the US again.
While most of my Italian/Polish friends had 0 issues, on a handful of occasions people were stopped and questioned for hours with agents pretending full access to every single device and just overall treating you as criminals.
In one occasion a friend of mine stated that he was quite sure they just enjoyed that kind of sweeping power and it had nothing to do with border security, it was just fun to them.
In another one, the suspicion was on the fact that this person did not have socials, he just disliked them and had nothing except a Google account for Youtube. This fact made them super suspicious and the person was stuck at La Guardia for 3 hours, even his body was inspected. Disgusting.
> ... you may have to think both about protecting your data by technical means, ...
I thought about that. And I came to the conclusion that a phone is a pathetically bad device to both store your data and to access your data. Mediocre screen. Mediocre input methods. Moreover most phones happen to also be spying device.
So if you think about "protecting your data", a reasonable idea is that a lot of data is way better kept on your homelab, with say encrypted backups in a safe at the bank, at a relative's place, on a server you rent, etc., rather than on your phone. And there's really little need to access your data from your phone.
Oh and I'm no luddite: I've got a homelab, I rent servers, I pay three AI subscriptions, etc.
But my phone is boring. There's no app on it besides the stock ones (say Google Maps) and then I added the Google Authenticator app (for stuff still using that kind of 2FA).
If people were to wake up and stop being glued to that mediocre thing, the problem would already be 99% solved.
I’ve seen a lot of people on the internet over the years say things like “the government can’t make x illegal, it’s just y.” For example, the government can’t make wiping your phone at the border illegal, it’s just punching four numbers into your phone, just like a pin, only a different four numbers, which could just have well been your pin.
U.S. law though is highly non-autistic and what you were trying to do is just as important as what you superficially did. Hell there could have been a third set of four numbers that were the nuclear launch codes. It’s not the fact that it was four numbers, it’s what you were trying to make happen when you typed them. Now of course whether they can prove what your intent was when you typed them is another matter, but generally a duress pin should be for when robbers are breaking into your house, and the government will be on your side, and not when the government will be against you.
"U.S. law though is highly non-autistic" hilarious but also another point to emphasize is how truly depressing American courts often are. Take the right to a jury. It sounds noble in theory. But when they say judged by your peers they don't mean your actual peers.
It's people who couldn't get out of jury duty. Prosecutors have high success rates. Federal prosecutor success rate is over > 90%. Studies of jury psychology show how much peer pressure and other factors extrinsic to the law come into play.
Remember what happened to Aaron Swartz. Law is the mask of power. By all means defend and assert your rights, but understand the costs. I find people are under such illusions about how cruel the American justice system is that this leads them to make foolish decisions. Do not underestimate the adversarial nature of the justice system, nor the accompanying incentives agents of the state who are on the other side of you have to lie.
As a convicted felon for the last 25 years without a single incident since I was released. I tell everyone I know to never trust a single thing anyone says if there is any chance you are being looked at for criminal charges. It's "I want a lawyer" and nothing else. Just SHUT THE FUCK UP, don't call me, your parents, someone to bail you out. Call a mother fucking lawyer. Because once you get your sleeve caught up in the gears of the system and you dont rip free fast enough, it's over. Once the system turns on you, your entire life will never be same. It will effect more aspects of your life than you can imagine. The system will chew you up. It never forgets. It's incapable of forgiveness.
This is the most logical comment in the entire thread. The only thing to say is "I want a lawyer". Although in this case, he repeatedly said that and wasn't given one. Which just shows that the state can do whatever they'd like, even if it's "unconstitutional". They have a monopoly on violence.
I've been thrown in immigration jail as US citizen. They will not provide or allow you access to a lawyer and you won't see a judge to determine if they have PC to hold you. You just sit there until they decide to eject you. Nothing else to be done and no one to contact, plus most of the other prisoners cannot speak English.
CBP via a bunch of crazy court cases, basically operates outside constitutional constraints. This is also why DHS has been used as private army by POTUS (snatching up people in unmarked vans in Portland for instance) because they can be ordered essentially directly by POTUS and not have to worry about the constitution.
> Federal prosecutor success rate is over > 90%.
This is a misunderstood statistic.
Federal prosecutors won't even pursue cases unless they think there's a high chance of success. They don't operate like two private parties suing each other to force the court to decide something. If the evidence is there or the charges aren't fully formed, they don't waste resources on it.
This leads to a contradictory set of complaints that the legal system lets too many people go or doesn't have enough teeth.
True, although many prosecutors do also try to put their thumb on the scale when possible.
For comparison, Japan has a 99.9% conviction rate, but defers prosecution in 60% of cases. And police aren’t arresting or even attempting to enforce the law for every crime. Citizens complain that petty crime laws aren’t being enforced enough, leading to a rise in things like graffiti, litter, and traffic violations (the “bosozoku” motorcycle gangs are having a resurgence). But if you do face prosecution, there is enormous pressure to sign a confession and avoid trial, as a conviction at trial may be punished more harshly. Very similar in some respects.
>Federal prosecutors won't even pursue cases unless they think there's a high chance of success.
Given the incarceration rates compared to average western standards, that's a moot point. Even if they selectively pursue, they do pursue a hell of a lot, and they do get a hell of a lot of convictions - relatively. Factor in the severity of the convictions, also much worse compared to average western standards even for the same offenses, and it's an ever worse picture.
> Given the incarceration rates...
I don't think you make anything moot by compounding more regional stats. Some countries have more crime, they underinvest in rehabilitation, addiction treatment, and social diversion programmes. Shock horror: jobless, homeless addicts commit crimes. The US also has a land border with long land borders.
That is all to say, comparing apples and margaritas doesn't do what you think it does.
US does not have that much more crime.
It's tempting to redefine as "crimes that result in prison sentencing", but the more you pick at these scabs, the more international discrepancies you uncover in law, policing, sentencing and statistics.
In a way that matters here, I don't believe you are correct, but I cede I haven't the time or machinery to hand to prove it.
Might as well not leave a comment then
"also much worse …"
Why is convicting and sentencing criminals a bad thing?
> Federal prosecutors won't even pursue cases unless they think there's a high chance of success.
The problem with this theory is that it ignores the incentives on the other side in a criminal case. When you get charged with something, the prosecutor offers you a deal and that deal is almost invariably a significantly lower penalty than what happens if you go to court and get convicted. The plea deal is a lesser charge, if you demand a trial then they throw the book at you, stack charges and ask for more severe penalties for each one.
With the result that if someone actually did it, demanding a trial instead of pleading guilty for a lesser sentence has a large negative expected value. Which in turn implies that it doesn't make sense to do unless you think there is a high probability you can win, for example because you know you didn't do it. The coercive force is so large that it can cause innocent people to plead guilty, since even a 10% chance of losing can screw up your whole life when it means a 10x higher penalty.
And yet > 90% of the people who thought their chances of being acquitted were high enough to be worth taking a much large sentence on conviction, still get convicted. Which seems suspicious.
What youre saying is true, but the reality is that the number of people actually affected by it is vanishingly small. Of course its not vanishing if youre that person affected, but as far as the system goes, its negligible.
The reality is that most people who become subject to criminal prosecution are guilty. The reason can often be attributed to overbroad laws, but that still means you are guilty and will likely lose your criminal case. The prevalence of plea deals is just a performance optimization on top of that fact - most people are guilty at that stage and we'll let you off a little easier if you avoid the time and cost of a trial.
Innocent people are coerced to plead guilty, but you also have to realize the number of "innocent people pleading guilty" also contains guilty people who convinced lay people, who never saw or reviewed the evidence, they were innocent. As a prosecutor during a plea negotiation I once almost dismissed a charge against a girl who convinced me that she was innocent until I actually looked a security tape before signing the dismissal. She was 100% guilty. This is another interesting point about how busy prosecutors are - i didnt even bother to review the evidence against her before offering her a plea deal.
All this to say, if you end up coerced into accepting a plea deal despite your innocence, you are not a normal person. Yes, there's at least one normal person out there who was coerced, but they're the exception that proves the rule.
Courts need more funding, laws need to be relaxed and fine tuned, we need to stop the school to prison pipeline, but even with all those problems the system works pretty damn well.
> The reality is that most people who become subject to criminal prosecution are guilty. The reason can often be attributed to overbroad laws, but that still means you are guilty and will likely lose your criminal case.
Let's unpack this.
The first assertion is that most people who get prosecuted are guilty. This is assuming the conclusion -- the whole question is whether the system is getting it wrong. The presence of convictions can't be used to prove the absence of false convictions. The presence of more convictions increases the probability of more false convictions. And if we had a reliable way to know the real truth then none of this would be a problem to begin with.
The second is the implication that they're all guilty because there are so many overbroad laws that actually everybody is guilty. But that's just a description of a mechanism by which the system convicts "innocent people", i.e. ordinary people who never had any intention of committing a crime. Making so many things illegal that following every law is beyond human ability and anyone can be convicted at the government's discretion is the thing people are objecting to.
> The reality is that most people who become subject to criminal prosecution are guilty.
This is not the reality, but your own justifying premise. which is why you instinctively began it with the proclamation "this is the reality."
I personally pled guilty for something that I didn't do, and that no one involved thought I did. I was offered a plea bargain of zero time, zero fine, and it would be expunged from my record in a year if I weren't convicted of anything else - which is evidence that the prosecution knew that I hadn't done anything. This was actually a systemic kindness - the people involved in the system couldn't live with the idea that they were punishing me for nothing.
The alternative was going on trial for a stupid felony called "possession of the instrument of a crime" which not only had nothing to do with the conditions of my initial arrest, but carried something like a 5-15 year sentence. The odds that they would have gotten a conviction on such a bizarre felony (the only reason it existed was to have a lower standard) in the state I lived, and with the race I was, and with a public defender, was around 100% imo. They go hard as a punishment for forcing them to hold a trial - that would be the excuse for those same kind people as before to label me a troublemaker who had turned down their kindness, and now deserved to go to prison for nothing.
You've made a comment with a lot of words, but the only reasoning you have is "the reality is," and you surrounded it with pronouncements and some personal anecdote about one woman. You're talking about a system that convicts 90% of the people (unlike me) who said "I didn't do anything, they know I didn't do anything, they certainly will let me go once they figure it out."
> if you end up coerced into accepting a plea deal despite your innocence, you are not a normal person.
The system is unjust because people like you support it exactly as it is...
> need to stop the school to prison pipeline,
...with lefty sloganistic jargon, playing the part of a good progressive prosecutor. You won't see it until it happens to you or someone you care about, then it will become the most important issue in the world. The fact that the US criminal justice system is hard on black Americans is not "racism" or "white supremacy" but because black Americans are not the friends or loved ones of people in power, and will never be. When you personally are prosecuted for nothing, or even for a crime that your peers deem trivial, the resumes of the people at your protest and your candlelight vigil will force people to pay attention, or risk their own comfort. Most people are not so lucky.
The system is an atrocity. It fails the victims of crimes, the accused of crimes, the perpetrators of crimes, and to protect the safety of the public in the aftermath of crime. It is simply an enrichment device for its participants, and an empty performance to mollify the middle class. It also serves to warehouse the wealthless underclass of the descendants of freed slaves away from view when they are found unfit for menial work.
I don't think it's so much a "misunderstood" statistic as much as a number that people (like the commenter you are replying to) deliberately trot out to use as evidence for their position because they are depending on most people being statistically illiterate.
To be clear, I totally agree with your points, I just think this is more of a case of "lying with statistics" than being a misunderstanding.
I think in this case Hanlon’s Razor very much applies.
"Never attribute to malice that which is adequately explained by stupidity."
When it comes to political statements everything is opposite day.
No. When it comes to statements by politicians, maybe. But when it comes to what people say in a setting like this thread, being so flippant in discounting people’s earnest-ness is a mistake and gets in the way of actually moving understanding forward.
Thank you for brightening my day. Keep on acing the vibe check!
I think you forgot something even more basic. Federal prosecutors handle federal crimes and the vast majority of those require extensive investigations to gather evidence before you can even initiate a court case.
The most classic case of federal offense is tax fraud. You can't record tax fraud on a camera or believe the witnesses, you actually need to look at the balance sheet and contracts of the company and make sure there is actually a crime to prosecute.
They never pursue court trials, because it's too much work. But they'll pursue plea deals, because there's this gigantic pipeline and everyone in it (including public defenders) is on the same team: Team Make Him Plead.
Because of this, no true justice is possible. Trials don't just try the defendants, it forces the prosecutor to prove that there really was a case and that they weren't just trying to bully someone who felt it was hopeless and would rather get out of pre-trial jail early. It forces the cops to actually make a fucking case, rather than rely on horseshit to lock someone away that can't bond out.
And no reform is possible. If you explain any of this to someone who actually understands it, they panic and say "but the prosecutors wouldn't even be able to bring 1/50th of those cases to trial, the system would overload" as if that were a bad thing that they couldn't. In the same way that you're not caught in a traffic jam but rather you are traffic, you're not caught up in these problems... your apathy, your ignorance, your rejection of boat-rocking, in short you are the problem.
> Federal prosecutor success rate is over > 90%
Prosecutors pick their cases. Defense doesn't. The cases that aren't 90%+ sure aren't charged.
Yes.
Prosecutors will often lower charges to ones where it can be tried without a jury too
And this is as it should be.
no way!
it should be about 50% conviction rate so that juries dont go in with non-evidence that the case is good because the feds thought it should go to court
So prosecutors should bring you to court even if they think there isn’t evidence that you are guilty just to make the conviction rate go down? Today they would let you walk but you would want them to take you to court for a crime the prosecutor don’t even think there is enough evidence?
"When a measure becomes a target, it ceases to be a good measure."
That is, yes, a ~50% conviction rate would be decent evidence that the Justice system is neither over-aggressive or under-aggressive in pursuing protection.
If it were an explicit goal, it could not serve that purpose any longer.
That would be a nice outcome but whose responsibility would you make it to encourage it? Judges and juries should not grade on a curve. Prosecutors shouldn't waste taxpayer money chasing convictions that are out of reach. There's nobody with access to that calibration dimetion.
You do realize that what you're advocating for is for prosecutors to bring more cases to trial that previously they would have dropped.
And you think that benefits defendants how???
Is the high success rate because they are good at winning or good at picking winning cases? Does that 90% include plea bargains?
I've been on jury duty several times and in each time the entire jury pool was dismissed an hour or so into the morning, with "all cases have been settled". As I was leaving, the official said, "see how efficient we are now?". I replied, "The guillotine is efficient, but it's not justice." Look into Aaron Swartz. The % of cases that go to trial is very small, in no small part because plea bargaining is no bargain at all. "Plead guilty and we'll do the minimum (whether you're actually guilty or not), or go to trial and we will seek the maximum sentence, which could be 30 years in prison. What's your answer?"
You're begging OP's question.
How so?
OP is strongly implying that the 90% success rate for prosecutors is due to the courts being stacked against the defense. IMO that is where the logical fallacy is. Since prosecutors have wide latitude in deciding which cases to charge in the first place, it is very possible that the high success rate is due to prosecutors only charging cases where the accused actually committed the crimes being charged. Indeed, for the ~10% of cases where the accused is not found guilty, about 8% are due to the government dropping the case - only 1% are the jury acquitting the defendant outright. Thus, it would appear from that data that when the prosecution sees they are not likely to win a case, they drop it.
I'm making no argument that the courts or law are "fair", I'm just making the argument that quoting the 90% number is in no way evidence that courts are inherently biased towards the prosecution.
The courts are stacked against the defense, but that statistic in itself is not proof of it.
The courts are stacked against the defence as the bigger the fight, the more defence lawyers can bill.
The legal profession is incentivised to not seek to change rules that disadvantage their clients…
I think it’s a valid question as far as what the nature of that success rate is.
Some of us report for jury duty just itching to nullify something. Don't you? Checks and balances...
Nullify if necessary, more likely duty to justice as best as I can come to understand it.
We should all know it though!:
https://en.wikipedia.org/wiki/Jury_nullificationI got selected as juror once just hoping to laugh at anything the cops said on the witness stand and let some poor soul go free but it turns out the defendant was just a violent scumbag who stabbed random people in public, and there was a video of it. After we decided he was guilty, they listed other things he had been convicted of and asked if he was a repeat offender... Let's see, shot somebody in the back, robbed liquor stores at gun point (dressed as a clown IIRC) and some other weird shit. That decision didn't take very long.
Honestly we didn't even throw the book at him, prosecutors were charging him with a bunch of offenses and we decided guilty on only two, but the repeat offender bit probably locked him up for a few decades.
The funny thing was that all the jurors thought the victim was a complete douchebag and thought both parties deserved time. As it turns, somebody I knew at the time knew the victim from childhood and he apparently molested his 8 year old cousin.
I just served on a jury and in our case, the cop was a lying scumbag, the prosecutor's expert witnesses were people milking the taxpayers to provide the evaluations that the state wanted to hear for thousands of dollars per hour, the defense's expert witnesses copy-and-pasted an evaluation from another client but didn't bother to proofread before the prosecutor brought up that they had the wrong name in the text, and the defendant raped and molested multiple kids below the age of 8, some still in diapers.
I feel like many court cases are textbook instances of Everyone Sucks Here. I needed therapy after the case because it had so shaken my faith in both the justice system and humanity.
https://en.wikipedia.org/wiki/James_Grigson
Forensic sciences and experts hired by prosecutors is a big problem.
"I feel like many court cases are textbook instances of Everyone Sucks Here. I needed therapy after the case because it had so shaken my faith in both the justice system and humanity."
I really don't think most of the people posting here understand what the professionals working in criminal justice/law see on the average day. They see the worst of the worst on one side, and then the public who they are trying to get a paycheck to defend on the other attacking them.
This in no way excuses bad behavior, but we're all human and these people aren't robots.
That is horrible but robbing a liquor store dressed as a clown is pretty funny (in my head probably not irl)
Imagine picking the suspect out of the line-up, or drawing up a photo-fit.
Some people suck. Some of the people who suck are poor and physically violent, some are rich and politically and economically violent.
There's a kind of fog of incomprehension over indirect crimes which makes them much easier to get away with.
People still die though.
I don't understand the jury system. If your server is down you don't grab randos from the street to fix it.
Hell Americans know this too which is why you have a professional judge and lawyers. And you guys don't have a night watch with pitch forks and muskets to police the village anymore.
A jury system is an anachronistic relic.
If your server is down you might ask for advice in an IRC channel, receiving help from whoever is there.
The random selection of juries was supposed to ensure they aren't any special class of people. For instance judges are usually from upper middle class backgrounds and it used to be that your innocence or guilt was decided entirely by the aristocratic nobility. By using random selection, that sort of thing is avoided.
[dead]
The fundamental idea of a jury, when it comes down to it, is that you're asking 12 random people "was this person's actions reasonable?" given conflicting accounts of what those actions were. The process by which you get there is more convoluted than that (and generally assumes a higher competence by the jury than probably exists), but juries seem to do a very good job of upholding the basic idea of evaluating the reasonableness of actions.
In a jury system, the judge provides instructions to the jury about how they are supposed to weigh the evidence presented against the requirements of the law. They don't need to be technical experts. The theoretical idea of "a jury of one's peers" (while not perfect) is making a fresh decision based on the merits of the singular case, rather than a judge deciding based on prejudices they've built up over hundreds of previous cases.
I went itching to nullify injustices - I left wanting to reintroduce the death penalty for petty crimes.
Exactly. People complain police dont prevent crime, but dont realize that is not their purpose. The police exist to protect the government, not the people.
The police are there to enforce laws, but enforce it by punishment, rather than prevention. The potential deterrence effect still applies, as people do get discouraged from crimes by the mere presence of the police. However, there is zero legal duty for the police to protect someone who is currently under attack from a criminal.
> However, there is zero legal duty for the police to protect someone who is currently under attack from a criminal.
That has to be incorrect, by the time someone is under actual attack from a criminal that criminal will have allready comitted crimes that the police can and have to punish for, i.e. Threat of Force with a Lethal weapon or sth like that.
Legally, the police do not have to swoop in to stop someone who is actively murdering you. They can just wait until later and write a report after you’re dead.
1981 Warren v. District of Columbia
Police don't prevent crime, they arrest and charge people for committing crime.
Arresting people because they might/could commit a crime would be a bad route to go down.
> The police exist to protect the government, not the people.
The police exist to protect the rule of the land. The military exists to protect the government.
"You see there are people who believe the function of the police is to fight crime, and that's not true, the function of the police is social control and protection of property."
- Michael Parenti
Which part of the government protects the people?
None of it
The part that is afraid of not getting voted in next election. As long as they make the voting ticket a two party/person race and ensure that their voters believe the opposition is the literal devil, then they don't have to be too afraid
Luckily that has never happened /s
It is not surprising. They just don’t go to court unless they think they have enough evidence for a conviction. In a perfect world the conviction rate would be 100% because in a perfect world the prosecutor would drop the case before if they don’t have enough evidence.
> Remember what happened to Aaron Swartz.
Indeed. There are certainly parallels between him and Sam Tunick. But I'm not sure the public is ready for all the parallels.
>Remember what happened to Aaron Swartz
He killed himself before the trial even began. I think he would have won the case if he actually went through it.
Maybe that's why "they" killed him?
Josh Greenberg from Grooveshark died of unknown cause in 2015 after taking a settlement rather than going to trial. He wiped all the music (did he really need to do that?) and then gave up all the software. The service may well have been seen as a massive cost center during its life and the death was a message or warning. I don't know. Business is war, isn't it? - quite literally.
One person's savior can become another person's scapegoat or witch. Even all three.
Personally, I would be suspicious of any death around a high profile trial - at least as a possibility. Greenberg introduced a 'tipjar' eventually to compensate artists but I think he would've been better off making a swapping service where users can trade their own CD-ripped or purchased files for another person's. Just like swapping physical CDs or LPs. So 1-to-1 personal distribution rather than Grooveshark's 1-to-many public distribution without the required licenses. An escrow service for file-swapping.
Sort of unrelated, though.
To me, litigation may be an incredibly dangerous route to justice. "Winning at all costs" may mean stopping a case going to trial in the first place. Judges can also end up the biggest losers too. Justice always gets served - but whose justice?
If it’s a malicious prosecution by the country/state then Jury is your best best over a Judge.
There is a reason that Elon Musks companies and others put a ‘you agree to not have a jury trial…’ clause in their terms as Judges are easier to influence - when a legal case is filed it’s allocated to a judge and certain cases will go strategically to a Judges with certain bias
> Take the right to a jury. It sounds noble in theory. But when they say judged by your peers they don't mean your actual peers. It's people who couldn't get out of jury duty.
What? A jury system is far from perfect but this is about as intellectually rigorous as “the lottery is a tax on the poor”. Many people are thrilled to do jury duty because they are invested in their community, your nihilism is not a universal truth, jury duty isn’t a burden, it is a civic duty, an honor.
> It's people who couldn't get out of jury duty.
But that's good no? People who got out never would have taken it seriously.
I sat on a jury trial and was highly impressed with how seriously my fellow jurors took it - especially the presumption of innocence. When they started to go down some incorrect logical path, someone would step up and correct it.
Not to mention the public defender ripped apart the DA's case. It was the exact opposite of what I was expecting.
> Prosecutors have high success rates.
You're forgetting that the prosecutors don't bring cases they think they're going to lose to trial, they either drop the charges or try a plea deal. So you'd entirely expect the success rate to be high.
There is no law. There is only power, and the will to use it. Remember and internalize this at all times.
> It's people who couldn't get out of jury duty.
It’s not even just who couldn’t get out of it. It’s filtered for people who answer honestly. I was disqualified for a grand jury because the judge asked me if I would believe the testimony of police officers as truthful and I said it would depend on the police officer.
The system already had their hands forced on accepting that some cops lie with Brady disclosures but the fact that I didn’t just naively accept police testimony meant I was an unscramble juror.
Even if you’re a true believer in the system you won’t be allowed to participate because you didn’t lie.
Yeah, but without a jury O.J. Simpson never would've walked out of court a free man.
For example in Europe when someone dies somebody always has to go to jail, even if they were defending themselves or responding to a potential threat. A jury could show compassion or empathy. Judges are extremely stoic in that regard.
This reference from Germany indicates that self-defense is lawful even if it ends the attacker's life, as long as the violence is not excessive for the situation.
https://se-legal.de/services/criminal-defense-lawyer/self-de...
They'll always rule that the violence was excessive. They'll say you could've slapped him in the face or disarmed the attacker.
The only ones getting a free pass are criminals. When they shoot and kill each other judges usually rule that it was self-defense. Ordinary people...no such luck.
Besides in Europe you always have to use physical violence to kill someone because firearms are illegal.
> in Europe when someone dies somebody always has to go to jail
Please cite the european law that states this.
There's no specific law, but a judge will always jail you for manslaughter.
No one went to jail when my grandparents died. Stop spreading lies.
The well-known country of Europe with its single set of laws? That Europe?
Self-defence can be a valid justification for manslaughter, at least in the UK.
This was really well written in "What color are your bits": https://ansuz.sooke.bc.ca/entry/23
Programmers have trouble seeing color (two identical numbers are the same bits, how can typing '1234' to unlock one phone be legal, and '1234' to unlock another phone be illegal?)
Courts care about color (intent, provenance, permission), even though that color cannot be digitally represented.
An interesting analogue to "What color are your bits" in the tech world, as well as a direct disproof of your "two identical numbers are the same bits" statement (although perhaps only technically so), is the idea of provenance of bits memory in programming languages. Here is an RFC for rust's memory provenance:
https://rust-lang.github.io/rfcs/3559-rust-has-provenance.ht...
An interesting parallel to this is parallel construction, where a side knows X but they know it through illegal/illegitimate means, so how do they create a trail of evidence for X through ordinary and legal means. This applies to legal cases and things like reverse engineering etc.
Like we know X but the colour of the fact is red, and we need some way to figure X out with a colour of green or blue.
Indeed, but should he say his real code was one digit swap off, could you prove intent? Color matters, but you can't paint with only one
This is where 'reasonable doubt' comes in from a jury. Would I believe that someone set up a 'wipe my phone' code, something that would be catastrophic, it was one digit different, and they accidentally typed it, or would I think they were trying to wipe their phone.
Honestly, given what I know here (a full case might be different), I would believe they did it on purpose.
Framing this as whether he can convince you the mistype was accidental gets it backwards, and "would I believe X or would I think Y" is preponderance, not reasonable doubt - entirely different standard. Reasonable doubt doesn't ask which account you find more likely. It asks whether the innocent one is unreasonable.
Take the hypothetical as posed: duress code one digit off, entered while detained after being interrogated for hours, and repeatedly pressured to unlock. The government has to prove beyond a reasonable doubt that he knowingly triggered the wipe and did it for the purpose of impairing the seizure. Nothing about that scenario makes mistyping an unreasonable explanation unless there is more circumstantial evidence that indicates him intentionally providing the wrong PIN.
Proving that to a jury looks very hard.
The scenario itself is unreasonable.
"Color" absolutely can be represented digitally; C compilers were doing it before we even knew they were doing it. We just like getting away with shit. It's part of the hacker ethos. Probably.
Not all color can be represented digitally.
Is a piece of software subject to patents? Is it export controlled?
Both of those can change without the data changing at all. A new patent can be applied for and accepted, at which point all code the patent description matches is potentially encumbered (even if it was written with no knowledge of the patent or before the patent existed, yes our patent system sucks).
Export controlled is also a matter of laws, not an attribute of the data itself, and laws change independent of data.
You've just merely exhibited the symptom of being blind to all the colors which cannot be represented, not proven or shown that there are none.
All of a things properties are not contained in or expressed by the thing itself.
A lot of engineer types forget that the law is not code, and reductionist arguments almost never actually work in practice because it's a human interpreting the law.
For one example of this, around 10 years ago there was a company called Aereo that tried to act as a "cloud television provider". The idea was that they had thousands of tiny antennas hooked up to servers in a warehouse, and they would lease an antenna to each subscriber. This gave an experience similar to cable TV but without Aereo having to pay broadcasters cable transmission fees. The major broadcasters sued Aereo and ended up getting it shut down for exactly the reason you mention. Despite Aereo technically being a TV antenna leasing service, it functionally acted like a cable TV service so they were violating copyright by not paying transmission fees.
They were accused of "public performance" which doesn't make sense to the spirit of the law to begin with. Avoiding technicality via technicality is fine. They should have been allowed to run their thousands of independent servers.
The reason cable companies have to pay these fees in the first place is a narrow and somewhat pedantic argument that is entirely based on connecting multiple households to the same antenna. Which Aereo doesn't do, no trickery involved.
If there had been a style of "cable" company that used one wire and antenna per house from the start, they could have avoided these fees too. They only didn't exist because cables and antennas are expensive.
Any single person could have legally set up their own server and antenna. But Aereo building these en masse makes them a cable company instead of an antenna-building company because... vibes, basically.
The best evidence that this was a failure of justice is that they pivoted to "okay, we're cable, we'll pay the fees for a mandatory license" and got rejected for not being a cable company.
This sort of legal workaround can work (see Uber) though.
Uber avoided medallions.
I guess that proves law is not code!
It depends on how much money you have to grease the wheels.
> A lot of engineer types forget that the law is not code, and reductionist arguments almost never actually work in practice because it's a human interpreting the law.
It's worse than that: a lot of engineer types reason about almost everything as if it were code. It's a manifestation of Engineer's disease.
I now see engineers treating people like AI agents. It can always get worse...
It reminds me of tax law in many countries. You can follow the letter of the law, but if the vibes are off, you can still be found to be in breach of a vague catch-all provision (e.g. economic substance doctorine in the US, GAAR in Canada/UK, Part IVA in Australia, etc).
UK has systematic tax avoidance IIRC i.e. keep starting and closing businesses to save tax is frowned upon. Australia can treat your capital gains as income if your gains quack like trades. (Maybe now less important since the recent CGT changes).
To misquote Bismarck, only fools, drunks, and Americans actually believe the rule of law is real.
There is a strong bias by the courts to interpret the law in such a way that it makes sense, and achieves the goals the legislature had when enacting it.
Just read this point in a case revolving around the Oxford comma, stated in simple enough legalese I could understand:
“laws must be construed liberally in order to accomplish their remedial purpose" https://en.wikipedia.org/wiki/Serial_comma#Maine_labor_dispu...
Maybe this is because of the TV dramas where a genius lawyer saves their client through an obscure technicality. It looks exactly like hacking a system using a 0-day exploit.
It's not that there's a human interpreting the law. It's that there is a politically motivated human interpreting the law, or in other words, you are sol if the state wants to get you. The engineer's arguments aren't reductionist, they are idealistic.
Does anyone think law is computer code? I mean any courtroom drama (even if far fetched) shows it is not.
In this case, the government was against him due to his activism against a police training campus.
Him deleting his phone was very likely a matter of safety for his fellow activists. Sad that our government does this but it’s not like this guy was a drug dealing or something.
> U.S. law though is highly non-autistic and what you were trying to do is just as important as what you superficially did.
Love this way of putting it. Stealing for future conversations with fellow software developers.
I favorited the comment for the same reason. It's a perfect way of describing it.
I think it's insulting
Not sure if you mean to software developers, or to those who are autistic, but I'm both.
Same - also thought it was hilarious
What's the less insulting but similarly concise way to make the same substantive point?
The law is teleological. As in:
> When interpreting EU law, the CJEU pays particular attention to the aim and purpose of EU law (teleological interpretation), rather than focusing exclusively on the wording of the provisions (linguistic interpretation).
https://www.europarl.europa.eu/RegData/etudes/BRIE/2017/5993...
https://definitions.lsd.law/teleological-interpretation
Replace autistic with literal.
It is, and autism is just the swap-in vulnerable minority of the day that is socially acceptable to be the butt of the joke.
If you don't understand what I mean, swap out "autistic" for "retarded" and the joke still functions, but a lot more people will be offended by it.
I still laughed though.
I don't think that makes sense.
I'm not disagreeing with your overall point, but autistic in that comment is attempting to capture that "literal rhetoric but socially unaware" style of argument people can have when they argue a point too black and white.
"Retarded" does not imply this
I would say the problem with the comment is more in line with how OCD or adhd is used, improperly. Like despite autism being a spectrum with traits that can't be reduced to that one stereotype.
It's being used to invoke a stereotype of neurodivergence. Not as a stand in for general stupidity.
Yeah, shit's re.... dumb I mean. It's interesting we're still allowed to use dumb this way.
Most of our insults against intelligence come from medical terminology originally. Every word eventually starts being used offensively, and then a new one gets coined and the cycle continues.
yeah like how dipshit used to be a term of endearance
I assume you're being sarcastic, but moron, retard, stupid, dumb, idiot, mad, imbecile, mongoloid, spastic, lame, lunatic, maniac and psycho were all used as medical terms before they became stigmatic. Filter out sexual and scatological insults and there is very little left.
It's kind of funny and also kind of insulting. I'd laugh if a friend said it but said seriously by some rando on the Internet, nah, find a better way to put it.
Why even choose a mental health condition as the linguistic pivot point for a zingy social phrase?
I think you’re trying to ask the person you are replying to not to use medical terminology to make a point in a catchy way but I honestly have no idea what the Michael Scott segue was supposed to mean.
I realised that reference would not be well understood, so edited it out.
FYI it was a reference to fictional character Michael Scott from television production The Office (US). The characters main trait was unintended verbal faux pas, where he meant well but actually caused awkwardness and offense.
Often by stereotyping the traits of specific minorities.
now i have to watch it again, haven't binged the office in a couple of years now.
it is time
A duress pin is useful if the cost of the government getting mad at you because you wiped your data is less than the cost of letting the government have your data. Whether that holds depends on your situation—for example, whether your phone's data could implicate other people that you want to protect
When talking about costs we should remember who is paying. Maybe overall the cost of the government getting that data is higher than the cost of them getting mad at you, but when a single individual is paying for all of it the equation might change.
ultimately everyone is paying the price of reduced rights and freedoms when the government starts wanting to check your phone for wrong-think and harass unofficial enemies of the state
I think it's a matter of personal privacy. You shouldn't show it to other people.
When I had jury duty it was quite revealing as far as “this is all evidence including people’s testimony, you can believe all or some or none of a given piece of evidence based on your own judgment” goes.
When we met it was interesting how our jurors decided “I don’t believe anything that guy says” and so on when it came to their motives and so on.
The trial itself was very carefully choreographed, almost pre determined and static.
But the decisions and jury activity was very dynamic. There was absolutely no magic legal mechanisms at that point.
I'm waiting to see whether he is convicted before I form a strong opinion around this. I'm leaning toward thinking this case will be dropped or at least severely reduced charges.
There's a chilling effect from even just the arrest.
Oh this. Poor people lose their job because of an arrest. Arrest = homeless = dead sooner.
Best outcome is he successfully sues for the violations.
If you're against an academia for further police militarization you're a terrorist apparently.
And people are still convinced that's the land of the free, when it's a distorted non-representative democracy on top of a police state.
US is closer to South American banana republics than Iceland or Japan.
It doesn't matter.
Mamy will read this and think that crossing a border with a GrapheneOS device is a bad idea, or just drop using what is a nice security feature entirely.
Just being charged is already a massive pain in the ass (both in terms of stress and costs) to an individual.
It is a massive pain in the ass, but if the case is thrown out, the gov't may be less likely to arrest someone again. Who knows, under the current regime. They seem to go after whoever they want.
If only they could be as non-autistic about the law consistently.
From the article, it looks like warrantless search & seizure and lawyerless detainment over the suspicion of participating in plain old 1st amendment activities.
Would it have been wiser if that person had, as a US citizen, just refused to provide a PIN? At the most they'd just confiscate the phone, and it'd be encrypted anyway. No actual destruction of anything.
On another note, maybe GrapheneOS should add some kind of feature where the phone involuntarily destructs if a correct PIN isn't entered for 48 hours (or whatever the user sets at installation time, and changing the value should not be permitted). That way the trigger for the wipe is the confiscation, not the act of entry of a duress PIN. You could disclose the mechanism to the officials who intend to confiscate, and also say (truthfully) that you have no control over the feature.
Would it have been wiser if that person had, as a US citizen, just refused to provide a PIN?
Purely technically it would also depend on the state of the phone. Phones can be read out/exploited more easily after first unlock (AFU) than before first unlock (BFU). So, a middle path would be putting the phone in BFU. Much harder to use exploits against the phone and biometric authentication doesn't work. One way of fairly reliably doing this is setting the reboot timer to 10 minutes or turning off the phone in critical situations.
It's also relevant to take into account that he wasn't protecting himself by wiping the phone, but fellow activists. So, he may have taken the risk of potential legal issues by wiping the phone to project others.
You can set GrapheneOS to reboot into before-first-unlock state if it hasn't been unlocked within a certain period of time, and BFU is more exploit resistant, and can't be biometrically unlocked. I have it set to 18 hours, but you can set it anywhere from 10 minutes to 72 hours.
So yeah, as a US citizen re-entering the country, you would probably want to set it to 10 minutes, or just shut down. Then hand it over, refuse to unlock, consider the phone lost.
This is a form of legal evasion similar to warrant canaries imho : https://en.wikipedia.org/wiki/Warrant_canary
i m not sure how legal a protection it is, and whether the courts would interpret your choice of OS as complicit in evidence destruction.
there already is an app for that. https://f-droid.org/packages/net.oblivion.wipe/
Heck, it could be unconstitutional for the government to make X illegal, but if the courts say 'no actually it isn't', or it never actually gets to that point, then it doesn't really matter much, does it? The text of the law could be simple and straightforward, and a layman's reading of that text could be valid, but all the government or courts needs to do is to find some moon logic to make what they need happen, and unless enough people disagree, then that's all there is to it. The law, in many ways, for better or worse, is just a piece of paper.
I think people are aware that the government can physically do a lot of stuff, e.g. shoot you in the face for no reason. And vice-versa for that matter.
However there are arguments morally, and constitutionally, and logically, about what can be done.
And all of those arguments are entirely academic, and subject to change depending on economic status, skin color, or nationality.
Law is effectively a weak gentleman’s agreement we tolerate because the alternative is violence.
(Well, law is enforced with violence too, I suppose.)
Yes, this is something more people really need to take to heart. As Americans are seeing, a lot of rules are unenforceable and really came down to norms and pressure. I have been thinking about this a lot over the last few years and it is roughly encapsulated in this tweet I saw a while back.
When I was a kid I wanted to be a police officer because I wouldn't have to follow any laws or rules. Then I got a little bit older and realized that wasn't how being a police officer actually worked in practice. Then, I got a little bit older than that, and realized that it actually does work like that.
This has always been true and there has never really been perfect justice. Ultimately, power and violence have always superseded the law. High trust societies with less corruption and a strong justice system try to limit these circumstances.
> When I was a kid I wanted to be a police officer because I wouldn't have to follow any laws or rules. Then I got a little bit older and realized that wasn't how being a police officer actually worked in practice. Then, I got a little bit older than that, and realized that it actually does work like that.
I'm imagining that IQ bell curve meme, just with you at different ages.
> This has always been true and there has never really been perfect justice.
You raise the standard for justice to perfection. There also has never been perfect corruption and anarchy.
> Ultimately, power and violence have always superseded the law.
That's like saying night has always superceded day. Everyone recognizes that recent years have been very unusual or unique in US history. That means for the great bulk of US history, it was different. Why doesn't 99% of US history outweigh the 1% (picking numbers very loosely) in determining what is somehow inevitable to you.
In fact, law is universal among human cultures. We are naturally social and live in groups with rules. Those that violate rules are generally outcasts.
But the most fundamental and significant error is attributing the current situation to some unavoidable system instead of the actions of people, especially those that stand aside and allow these things to happen. Many of them stand aside because they are told - probably messaging ultimately from the lawbreakers - that they are powerless and should despair.
> Everyone recognizes that recent years have been very unusual or unique in US history.
i dont?
this is how the US has always been. its who americans are. the odd time was the obama years
The law wasn't in the state that you ascribe to it for the other 99% of its history if you were, say, African-American. Other less-extremely obvious examples also abound.
Liberal democracy with sometimes-fair application of it is the aberration.
By that reasoning any advance is an aberration and thus hopeless, but we've had liberal democracy for a long time. Again, certainly not perfect.
Advance or regression is not the way you probably want to look at it. There isn't a lot of evidence for historical inevitability.
And no, we have not been a liberal democracy for 'a long time'. We have been an illiberal democracy with very limited suffrage and distribution of rights for a very long time.
There is an excellent monologue in the middle of The Hateful Eight on this subject.
> Law is effectively a weak gentleman’s agreement we tolerate
Not all of us do. To be honest, the older I am, the less sense many laws make to me, and the more I'm willing to help people break them.
well, the status quo is also violence, just directed at some people and not others
Well, you need to be eating a burrito or something
He didn't type the numbers. The destruction was performed by the border guards recklessly typing in commands to a phone without knowing what it would do.
He should have backed up the phone before travelling then wiped the phone to an innocuous state before getting on the plane.
Want to see a really confused border agent? Travel without a phone. Fedex your phone to your hotel/home. Read a book on the plane. The concept that someone doesn't have a phone/computer drives cops insane.
One of the wikileaks crew pulled this one in NY. Several agencies were a set to grab his devices and detain him until he unlocked them ... But all he had in his carry-on was a magazine. His devices had been wiped and sent by mail. He re-imaged them only once he was home and safe. No devices to unlock, no reason to detain him.
Maybe I should get a thicker skin, but the prevalence of “autistic” as shorthand for “moronically literal-minded” on a place as prudish as hn is a bit surprising.
Yes, I had the duress codes but entered them by mistake. I wanted to enter the real one but
Please elaborate on how US law isn't "autistic".
>U.S. law though is highly non-autistic
LOL, that made me chuckle.
People somehow think they're the first one to think of a workaround to a law, when in fact it's been happening since the first law was written down. The law adjusted and if people think they can do one thing, then claim they intended another they have a big surprise coming.
I think you're conflating two very different things. You're completely right that the government can make pretty much whatever they want illegal, but things are legal unless expressly made illegal. Erasing your phone wouldn't be illegal because it implies guilt, but because of obstruction/destruction laws explicitly criminalize such things.
The whole case is going to come down to the nuanced and often contradictory interpretations of border law exceptions. I also don't agree that these sort of protections are for e.g. robbers, because of the criminal underground's $5 in-person data hacking tool. [1]
[1] - https://xkcd.com/538/
Mens rea
> U.S. law though is highly non-autistic
When the judge and officers of the court agree with me, the law is reasonable and just, but when they do not agree with me, the law is arbitrary and capricious. ¯\_(ツ)_/¯
Having the law be whatever it's thought to be by police, prosectors, judges, and others can lead to obvious injustices, but there's been no serious attempt to remove ambiguity in any country's legal code as far as I know.
It’s impossible to remove (even just nearly) all ambiguity.
People already complain that there are too many laws on the books.
If there were fewer laws, there would be less to disambiguate.
Look at this week's codeberg drama. They wrote a simple law like "no projects that are mostly AI" and all of HN was like "how dare they be so vague? I need to know what percentage of my characters are allowed to be AI! 49.999% is good, right?"
In general a government can do whatever they can get away with.
The rest (believing they can't do this or that, because it's in some constitutional document, or violates a basic right) is sovereign citizen kind of self-delusion.
If a government operates outside its remit, competing forces (opposition parties, civil society, counter-elites, foreign influences) use that as an opportunity to gain power by calling attention to the violation. “The law” may be a fuzzy illusion, but it’s delineating a real social boundary. Legal processes are a way of processing that conflict symbolically rather than jumping straight to open warfare. But you better believe that open warfare will result if those boundaries are ignored for long enough or if they are violated egregiously.
> U.S. law though is highly non-autistic
This is the thing that people should be reminded over and over here - and to be fair it tends to be more autistic than elsewhere
(Regardless if you are on the defendant or the prosecution side - or might potentially be)
Yes this is the whole $5-dollar-wrench XKCD thing.
"Ahah! I've won! The data has gone!! MUWAHAHAH! Take THAT border guards".... congrats you're still going to the same prison though.
If you've got something to hide (legitimately or not), don't take it across the border in the US or anywhere. Even then I am sure they'll either compel you to hand over your cloud passwords or again you end up going to the same prison for some other reason.
Good luck proving in a court what he was trying to do though.
Well he told them. He said something like: haha that wiped my phone, now you can't get the data
He gave them the unlock code, now it’s unlocked.
Ultimately, when you choose to enter a duress PIN that will wipe your device, you have to recognize that choice may have legal consequences. I don't like the amount of power our government has at the national border when it comes to detaining and pressuring citizens, but our Constitution explicitly grants it at least some of the power it now exercises in that context.
If your threat model includes US state actors at the national border, then your security practices need to account for the confiscation of your device at that border without requiring you to willfully wipe the phone and (in the eyes of police and prosecutors) destroy evidence.
That means:
1. Don't travel with anything you can't afford to lose on device. This means setting up travel-specific password managers and hardware keys for a subset of your accounts that you absolutely need to access while abroad, and being prepared to reset those passwords and disable those hardware keys very quickly once home.
2. Review past legal cases against travelers and identify what behaviors the government considers worthy of prosecution or harassment. Your secure setup must function without needing you to engage in those behaviors, even if it is less convenient as a result. This isn't perfect, as the government may decide some new behavior is prosecutable.
3. Consult with a lawyer and review your security procedures from a legal standpoint. All of the above is technical and practical advice, not legal counsel and no substitute for it.
We Americans are fortunate to carry powerful passports and enjoy relatively easy international travel but, for better or worse, that velvet glove covers an iron fist we would be foolish to forget or ignore.
> 1. Don't travel with anything you can't afford to lose on device. This means setting up travel-specific password managers and hardware keys for a subset of your accounts that you absolutely need to access while abroad, and being prepared to reset those passwords and disable those hardware keys very quickly once home.
> 2. Review past legal cases against travelers and identify what behaviors the government considers worthy of prosecution or harassment. Your secure setup must function without needing you to engage in those behaviors, even if it is less convenient as a result. This isn't perfect, as the government may decide some new behavior is prosecutable.
> 3. Consult with a lawyer and review your security procedures from a legal standpoint. All of the above is technical and practical advice, not legal counsel and no substitute for it.
Just don't go to the usa and if it's for professional reason, don't bring your personal phone.
> Just don't go to the usa
As a Canadian. I won't be going there for a long time
Canadian border control has the legal authority to search your phone and you are obligated to provide a password.
You've left out the important qualifier I put at the outset of those three points:
> If your threat model includes US state actors
It was not advice for everyone, nor even most people. I have plenty of friends abroad, and a few of them have even traveled to my country for the World Cup and had a grand time.
I roll my eyes at this kind of overreaction, the same way I imagine Europeans rolling their eyes to hear Americans worried about migrant crime news stories not wanting to travel to Europe. Or maybe they used to roll their eyes at that... I'm less sure now.
Have the duress PIN on sticker on your phone. Maybe put it backwards and don’t say anything to border patrol. Have them try it out and erase the phone and then you can legitimately say you didn’t do anything and they did it themselves.
But if the prosecutors can make a convincing argument that your intent was exactly that all along, then you may end up convicted anyway.
Intent matters. It might be hard to prove, but it matters.
It may not even be that hard; what other possible explanation is there for someone putting a PIN visible on their phone that wipes it while crossing a border?
> what other possible explanation is there for someone putting a PIN visible on their phone that wipes it while crossing a border?
Two obvious answers:
1. It's for the general case of lost/stolen phone.
2. It's for the owner. I can't remember numbers I don't type in, might as well keep it visible on the device.
>what other possible explanation is there for someone putting a PIN visible on their phone that wipes it while crossing a border?
For thieves, obviously.
There’s no way to prove intent if you keep your mouth shut and don’t answer anything.
Yea, that’s not how it works in practice. If they catch you standing over a dead body holding the murder weapon. Then you can’t just say they can’t prove intent if you keep your mouth shut.
Yea but that's where "reasonable suspicion" comes in a court of law. If you are standing next to a dead body, with a bloody knife in your hand.
That’s good advice to not talk, but it won’t necessarily save you.
claim your password to be some derivative of the duress PIN, for example: 1234 is password reminder for 2444 (one 2 three 4), the device is erased anyway.
For if someone steals the phone?
if the cops do that, they're breaking the law with that search already
theyll have a hard time showing that you intended for the government to break the law. first the government would have to admit breaking the law
Unfortunately I think they have pretty wide latitude to perform searches at border crossings.
They might be able to convict on that, but that sets a dangerous precedent imo, which is that doing anything preemptively to prevent searches is conviction worthy, including the preparation the OP suggested.
"it would be funny if the border police typed it in to my phone"
I think you should read the other reply about not saying anything at all.
Not saying anything at all is one of the worst things you can do when questioned by law enforcement in the US (though "it would be funny" is a close second). The right way to remain silent is to loudly proclaim "I am exercising my right to remain silent."
As a speech.
Or just make it your birthday. Though I'm not at all sure the agents will try typing random codes in without at least some idea that they may work, given that many OS's will quickly start to punish with tarpitting.
Be funnier if you even write “do not enter 123456”.
That might have actually been legal. I'm not a lawyer, but it's definitely better for the accused than what happened in reality.
"I told you not to. You're the ones who wiped my phone. You owe me money for destroying my personal property."
I'm not saying you would get a check courtesy of Uncle Sam for your troubles, but the argument that you deceived authorities into destroying evidence is a lot weaker.
I might go with "do not enter 696969" instead because the stranger fiddling with your phone probably expects a your phone to do something funny, like load a shock site.
I wouldn't write it down, I would just make it 1234. They're bound to try that. Then they have absolutely no case against you.
That's the combination on my luggage!
The police will ask you if the PIN unlocks the phone before using it.
Refusing to answer questions IS one of the rights that the US government mostly honors.
Well, these days especially at border police don't care about "rights"
That's missing in this entire conversation. This all sounds like it's 2016 or something
This is not a "these days" thing. Most rights essentially being abrogated at the border is a thing we've had for many decades now. In particular, no non-citizen has the absolute right of entry, and border agents have discretion bordering on insane when it comes to not admitting people or temporarily detaining them. Worse yet, this being the case, the job attracts the kind of people who relish the petty power trip. I've seen this many times back in 2010-2011 when I was traveling regularly as a non-citizen between US and Canada.
I don't think denying entry to non-citizens abrogates anyone's rights.
Under US law, you have a nearly absolute right to not answer police questions.
Yes of course. But their use of the PIN will likely only occur if you answer, which many people will. This is a common setup in interrogations.
the utah cops definitely would, based on whats been released from the rwckless ben bodycam footage
I belive this only applies if you are a US citizen and not a visitor.
Up in the air. SCOTUS didn't decide on this specific right. They did rule on other constitutional protections though, sometimes granting, sometimes denying them to non-citizens. It also depends if you're just arriving or already are in the US. For example, illegal immigrants who jumped the border fence have more rights than legal immigrants who didn't leave the airport yet.
It unlocks the phone.
Why would agents think that a number written on your phone is the PIN? That would only make sense if it was a communally-used device, not a personal one. Also, no one would put sensitive info on a devices that has the PIN affixed to it.
I suppose it's possible someone might enter it without thinking, but the odds seem low. Also seems risky to put a self-destruct PIN on your device, lest a friend (or enemy) enter it by accident or as a prank.
I've worked with fleets of company phones and mobile devices, people absolutely do this.
They do this with devices that have sensitive information that would be of interest to federal agents?
with this sort of configuration, you either trust your backups or you don’t ;)
the funny part is he didn't enter the pin he gave it to them and they entered it..., not sure if it makes any difference but there is a certain irony to it that it was the non warrant based search actions (which might be legal at the border) which lead to the erasure of data
Edit for the confused and misinformed: 18 USC 1001. Also, is ≠ ought.
Lying to a federal officer is a crime, IIRC, and if the lie results in destruction of evidence, the person who told the lie is probably accountable for both crimes. This isn't a lie with plausible deniability: you have to set a duress PIN, understanding what it does, and then communicate that PIN instead of the unlock PIN.
A duress PIN to wipe the device don't exist to absolve the owner of liability... It exists for when compromising the device could get people the owner cares about killed or disappeared and the owner considers their own liability, disappearance, or death a preferable outcome.
It is an extreme solution for extreme scenarios. People need to be sober in weighing its use.
> It exists for when compromising the device could get people the owner cares about killed or disappeared and the owner considers their own liability, disappearance, or death a preferable outcome.
Devil’s advocate, it sounds like the accused could be part of some mutual aid networks who could be helping people who are vulnerable against the actions of the current government. People who may die if they’re deported, or returned to their family (gay or trans youth). This person may literally have saved lives by not handing over their phonebook and messages.
> It exists for when compromising the device could get people the owner cares about killed or disappeared and the owner considers their own liability, disappearance, or death a preferable outcome.
Or it's preferable to get caught lying to a federal officer than it is for them to have the evidence on your phone.
possible
but not necessary evidence, as evidence would imply a crime. But when it comes to police harassing activists, or outright mislabeling them as terrorists, there are many fully legal things you still might prefer the police not to have. Lets not forget that boarder police has in the past tried absurd things like trying to seize Attorney-client privilege protected information from a US attorney.
Through most likely many people setting up and using a duress pins never truly think this thought from a legal POV.
>Lying to a fed
They asked for the pin, maybe they should have said "not the duress pin"
>Destroying evidence
How did they know there was any evidence on there?
>it exists for when compromising the device could get people the owner cares about killed or disappeared and the owner considers their own liability, disappearance, or death a preferable outcome.
No, the duress pin is there for when I'm under duress and being forced to unlock my device against my will
>It is an extreme solution for extreme scenarios
Wiping a device I own is extreme?
> >Lying to a fed
> They asked for the pin, maybe they should have said "not the duress pin"
The law doesn't work like that. Unless you're provably at the developmental level of a 5 year old, the court knows you know what was required, and also knows what you intended when you gave the duress pin.
The justice system famously never plays "simon says"...
> They asked for the pin, maybe they should have said "not the duress pin"
This is a Mickey Mouse distinction no court will take seriously.
> Wiping a device I own is extreme?
When the consequences are potential years in prison for lying to the US government or, in another country, torture or death in prison for obstructing an authoritarian government, then yes... Extreme.
All I'm saying is to decide to use a duress PIN at any national border or in any foreign country soberly, with knowledge of the potential or likely consequences.
Just submit citizen. Nothing to hide, right?
That's a different discussion. Are you interested in staying out of trouble at the border? Or are you interested in taking down the system (or at least fixing it)?
If you think the system needs fixed or destroyed, you do you, but don't be surprised when that approach gets you in trouble at the border.
> or, in another country, torture or death in prison for obstructing an authoritarian government
Also happens in the US
It's sad that your perfectly valid previous comment is dead (and that HN even works that way) ... adding is ≠ ought probably doesn't even help for the people who don't grasp that in the first place.
People who think that tricking the cops into wiping your device legally absolves you need to grow up. Also those who argue that LE can't prove any evidence was destroyed since it's been destroyed.
Yeah, but the way HN works is leagues ahead of other, similar platforms. And the top voted comment of a subthread (at that moment) being flagged is its own interesting signal about both the issue at hand and the HN userbase. I'll be grateful if reasonable folks vouch, but I'm not mad about it either way.
It's now undead.
I’m quite unfamiliar with this notion. What law says it’s illegal to lie when you’re not under oath during a court proceeding?
18 U.S. Code § 1001 [1]
[1]: https://www.law.cornell.edu/uscode/text/18/1001
does this apply to defendant ?
the most authoritarian places in the world wouldn't charge defendants for "lying"
In America, the defendant generally has the right not to testify against himself by remaining silent, both in court and when questioned by agents of the state out of court. Not a right to lie. This is why criminal defense attorneys advise everyone to shut up, shut up, SHUT UP without a lawyer present. Police can and will attempt to catch you in a provable lie.
> the most authoritarian places in the world wouldn't charge defendants for "lying"
What on Earth is this second part of your comment supposed to mean?
Do you expect to be able to lie to the government in an authoritarian country? And not be arrested if they catch you in the lie there? And not be charged or worse if they consider the lie serious?
Alright. Most places would investigate crimes and charge you for them before they look at your defense itself, so I had several worries about that
One of which is self indications (even of things that cops didn't know about or couldn't prove) that would allow them to just question anyone into admitting even a parking offense, but I guess you can shut up indeed
I was worried that they could use any crime in a broad area and just force everyone to say with who they were and what they were doing, but you can also shut up
I was also worried than on investigations with no real crime involved, they could just go play jeopardy and ask you what you were doing minute by minute, and get you to talk until something gets inaccurate (while they have cctv but you have no vcr in your brain). But again, you can shut up.
When I'll be in America, I'll remember not to talk to cops.
Not even to 911 as emergency calls are error prone : You said someone was attacked by a suv and knife when it was a pickup truck and machete, you go to jail
> Not even to 911 as emergency calls are error prone : You said someone was attacked by a suv and knife when it was a pickup truck and machete, you go to jail
Very few states have anything resembling this specific federal statute, and one doesn't typically call 911 to obtain service from federal law enforcement agencies. And in the case of a 911 call specifically, "heat of the moment" and "good faith" do a lot of work.
Unless you obviously intended to mislead an emergency services response, you will not be criminally implicated from good faith statements made during a 911 call regarding some incident you merely observed as a bystander.
> I was worried that they could use any crime in a broad area and just force everyone to say with who they were and what they were doing
In authoritarian countries, that absolutely happens. In America and the West, police are generally expected to have reasonable suspicion of anyone they detain to interrogate, and the length of detention is also limited if no evidence validating suspicion is forthcoming. They could not simply arrest everyone in the proximity of a crime, and geofence warrants are controversial exactly because that was the standard in the analog world.
> I was also worried than on investigations with no real crime involved, they could just go play jeopardy and ask you what you were doing minute by minute, and get you to talk until something gets inaccurate
Again, they must have reasonable suspicion to even detain you. You are reasoning about law codes as if they were literalist computer code for a compiler. The law, at least common law in America, is written by and for humans who are expected to exercise good faith as a part of enforcing and interpreting the law.
Do know your right to remain silent, and ask for a translator and consular assistance if detained or arrested. Police departments will provide these things because attorneys in court will question the reliability and admissibility of any testimony in the absence of their provision.
Don't worry too much about police if you're in America to visit. They're ordinary people who mostly want to catch criminals who are hurting their community. Bad apples are rare, and bad apples who harass someone on a tourist visa are rarer still.
From the cited statute:
> Subsection (a) does not apply to a party to a judicial proceeding, or that party’s counsel, for statements, representations, writings or documents submitted by such party or counsel to a judge or magistrate in that proceeding.
Famously, 18 USC 1001
https://www.law.cornell.edu/uscode/text/18/1001
Here's one: https://codes.findlaw.com/tx/penal-code/penal-sect-37-08/
you had answers here. I'm trying to understand why our leaders can get away with lying so much and it being obviously in the public record, with videos on YouTube etc, and there being no recourse or accountability?
Is it true that the law is only selectively applied to some people?
if you follow the links theres a lot of carve outs for the government to be allowed to lie
"Our leaders" also are sometimes persecuted for lying to a federal officer; the past few years there have been more than one high-profile case.
Yes and did you see how Biden issued dozens of pardons before he left office absolving several leaders of their lies and whatever was actually persecuted to the "crime" level?
Seems if crimes are only crimes for normal people, theres rarely actual application of law for everyone. It instead shows itself to the governed as a system of control for them for the benefit of the leadership (since their friends absolve them of crimes, and also participate in the systematic neutering of any other forms of justice opposing their friends privileged behaviors).
Not saying this as a political thing to target one side like Biden/right and say Trump/left is clean. I'm saying I notice this in all levels both left and right.
> Lying to a federal officer is a crime
That doesn’t pass the sniff test
Double check your nose.
18 U.S. Code § 1001 [1]
[1]: https://www.law.cornell.edu/uscode/text/18/1001
but it is perfectly legal when federal officers lie themselves?
Generally yes, unfortunately, with very narrow exceptions. Not all countries follow this rule, but the US does, and it’s certainly not alone in this respect.
If you ask me, this law ought to be removed completely.
https://www.npr.org/2020/11/25/939064270/trump-pardons-forme...
> President Trump has issued a pardon to his first national security adviser, Michael Flynn. Flynn had pleaded guilty to lying to the FBI and then recanted.
Rules for thee but not for me.
"Rules for thee but not for me" - isn't that beyond obvious now? The folks running things simply do not play by the rules you or I do (assuming you do).
a pardon is still within the rules
make sure to give trump a payout and you too can loe to the fbi
I’ve been arguing against some LLMs about this point for a good hour and there’s a whole lot of linking intent to action where you can be liable if a court can prove it. Not that an LLM is legal gold but it’s the best thing I have to pass ideas around with.
The entire situation is sort of nonsensical and boils down to lots of minutia in law that no normal person would know about.
For example having normal widely known security features like wiping the device after N failed PIN attempts is fine. Even having long standing security practices that can’t be related are fine, like having a timed touch point where if you don’t enter the PIN every… 15 days or whatever the device wipes, perfectly fine if it can’t be connected towards the crime and you’re not compelled to tell officers you have such a security mechanism.
Even if you were to set a trap where you use the same PIN for your bank, your laptop, and some other security devices in repetition then decide to set your duress PIN to that by assuming it would be discovered as a probable option they’d use, you’d be ok but it could be questionable if that was by design…
It’s so obscure really as to how and how you’re not allowed to protect your data, even if you’re not the one performing the action to clear destroy the potential evidence yourself. The entire thing seems pretty absurd a frankly arbitrary to me, and I don’t know how people could know which cases are and aren’t legal. I know not to destroy evidence myself but I wouldn’t know to tell someone to not use the duress pin or that even giving them my duress pin could somehow be my liability. It’s madness if you ask me.
> I’ve been arguing against some LLMs about this point for a good hour
One of the most depressing things I've read on here
Well I don’t have any legal need to hire a lawyer or anything I would need a lawyer for. It’s a rather fast way to surface legal information and precedent. I don’t see how it’s any more depressing than Google diving on a topic you’re interested in for an hour..
Welcome to moltnews. Everyone here is addicted.
Not a lawyer, but destruction of evidence would only be valid if there was first some reasonable suspicion of a crime? Is that right?
This is my core question as well. At what point do you have to maintain property so the government can use it to testify against yourself?
If I have a dash-cam, and I wipe the SD card, can the government imply that because I erased the card, it must prove that I was speeding? The dash-cam automatically over-writes old footage - perpetually destroying evidence.
Given nebulous cases such as "hacking" a site by looking at the HTML[0], am I destroying evidence of crimes whenever I format my PC? I hope the government requires specific charges and more proof of a crime other than missing evidence. Say I destroy my diary - can the government claim that is the key evidence where I confessed to being the gunman on the grassy knoll?
[0] https://news.ycombinator.com/item?id=28992667
"At what point do you have to maintain property so the government can use it to testify against yourself?"
For the duration of the border search. This guy is at risk because he caused the data to be deleted during a border search, when CBP asserts they can legally look. He would have been fine if he deleted data on the plane or after leaving the airport.
(This is my understanding of the government's position; personally I don't think this prosecution is constitutional)
> If I have a dash-cam, and I wipe the SD card, can the government imply that because I erased the card, it must prove that I was speeding?
If the erasure was a non-automated result of them asking you, and you alone, what conclusion do you think is possible? Probable?
the government might not, but your insurance company definitely will
Also, can they proof that there was evidence on the phone?
Well I prefer simply to stay out of countries that haven't got their ducks in a row when it comes to freedom. Saves a lot of hassle.
this means: put a good government in charge of the border that respects your rights
>destroy evidence
Who said it was evidence? Did a judge authorize or issue a warrant to collect said evidence? Absent that, it's just your property, and you can do with it as you please.
You’re way off about when it’s illegal to start destroying your property that the police want to seize during an investigation.
"Investigation" is a pretty generous way to label "some thugs working for an authoritarian state want to look for incriminating stuff - including criticism or mockery of them or their leader - on your communications device".
Whatever the American legal system may say, a couple of thugs with no warrant conducting searches and seizures of data is a blatant violation of the Constitution's intent. This is the sort of behavior Americans used to rightfully condemn.
Calling border patrol "thugs" doesn't really bolster your argument to anyone except people who already agree with you.
I find that choice of words more likely to cause people who already disagree with them to fixate on it rather than the substance of their comment.
Check my last submission on this site -- same news story (different site). I agree with them, and it's distracting and damaging to the cause.
You're also essentially saying the same thing I did, because I'd argue most people already have a non-neutral stance on the subject.
it just makes those people dismiss it. doesn't really do any good.
I'm all for privacy and find this seizure stuff really wrong but to me it just looks like another form of "orange man bad"
The Border Patrol have been a violent and abusive branch of government since their inception. Their abuses under Republican and Democratic Presidents alike have been reported across the spectrum of America's media for many years. 'Thug' with it's roots in groups of violent organized criminals who preyed on travelers - is an accurate description for them.
I would also like the fourth amendment to apply at the border.
Have you read United States v. Flores-Montano? The border search exception (which I disagree with) is pretty old. Can you find an era in which Americans in general found it objectionable or were united in rejecting its application to data?
To me it’s all quite analogous to walking up to, but not crossing, a border with, say, a fruit that’s legal to possess on the side you’re on, but not on the other side, and either eating or throwing away that fruit before crossing.
“Hey! I saw you holding that Mexican pepper in Mexico, and then you threw it in that Mexican trash can before crossing into Texas!”
“Yeah, so?”
But that's not what happened here. Here, you were trying to bring the pepper over, got inspected and somehow got rid of it because you were able to be found out.
This is more like bringing the pepper across and then quickly swallowing it when they ask you to look at it.
Or emptying your bottle of water when the TSA found it on the XRAY. Unlike the pepper he's actually allowed to have that data on his phone both sides of the border.
which also would be fine?
Hit and miss, depending on the security guy. Some had me pour it out.
"Evidence" has never been limited to the subject of a warrant. Destruction of evidence statutes typically include material that is subject to a police investigation.
But are not investigations typically under some reasonable suspicion that a crime had occurred?
Reasonable suspicion is required for a terry stop but that does not apply at a border crossing. Everyone can be stopped and questioned and searched at a border crossing.
An ”investigation” is just a fancy word that broadly describes the type of information collection that law enforcement does. Yes, it is typically about things they think are crimes. Because that’s their job. But there’s not some legal hurdle they have to pass here, the word describes their work.
they of course arent police and arent investigating anything
instead they are harassing
It is illegal to destroy evidence even if you weren’t guilty of the crime that was allegedly being investigated.
If someone accuses you of a crime, committing a different crime is probably not a good move, in any situation.
> Who said it was evidence? Did a judge authorize or issue a warrant to collect said evidence? Absent that, it's just your property, and you can do with it as you please.
Why do people go sovereign citizen when reality doesn't work their way? Stop imagining that the way you want things to be is the way things really are.
Cops do not need a judge to authorize the seizing of evidence. Cops do not need judges to decide what evidence is. Tell me, why did you just pretend like these are real requirements? I can understand why you'd want it to be that, but you wanting it to be that doesn't change reality.
It's as if you've just learned about the Fourth Amendment but know nothing about the nuance behind it.
Your system wouldn't even work at all. Let's imagine the cops get a tip that a bald man with a blue tshirt shot a man. They patrol the streets and find a match. By your logic they should not have the ability to search the man and seize his gun as evidence until a judge issues a warrant.
How about, is there reasonable suspicion that a crime has occurred?
Not required at an airport, for whatever reason.
The constitution doesn't disappear at the airport. The man is a US citizen. He could have remained silent, and they would eventually have let him in.
Relevant reading for you: https://www.aclu.org/documents/constitution-100-mile-border-...
And no, they wouldn’t have denied him entry, but they would have seized his device.
I enjoy the funny implication it creates, that then perhaps if you're entering US in 2026 it means there's something wrong with you.
The reason is anti-immigration
uhh, are you a lawyer with knowledge about how evidence works?
its not just a word, its a specific legal term
cops definitely do need judges to say what evidence is admissible, and they really dont have thr ability to just declare anything they want as evidence and just steal it
Yes this is different than when law enforcement serve a warrant and the defendant wipes his computer before the agents can get a hold of it. In that case the warrant covers what you destroyed as evidence.
Though during traffic stops, if a defendant disposes of his drugs while on the run, that can also carry a charge of destroying evidence even though no warrant was issued.
IANAL
Hm but the drugs are only evidence because they're illegal? So the phone owner only destroyed evidence if the phone contained something illegal, but innocent until proben guilty?
No, destroying evidence is a crime even if possession of that evidence is legal.
Who decided that it's evidence?
Evidence is simply a word to describe the artifacts that one wishes to use to support their case. There’s not some gate-kept process to “become evidence”.
Law enforcement. That's like, their job.
After they get it when they are authorized to get it. You cannot point at random things and call them evidence. For instance, I can take a dump and flush it, despite law enforcement's assertion that my stool is evidence in some imaginary crime.
It doesn’t have to be something the police have already collected. It could be something that they have yet to collect.
The textbook tampering with evidence example is: drug dealer tries to flush the drugs when the police knock on the door.
Yes, when they are authorized to make a drug bust. And that's assuming they catch him before he flushes, i.e., get the drugs. Otherwise, what are they going to say? He is a drug dealer because we heard the flush? Or let's say they are doing a missing person's search and hear the flush. What now? We came looking for a missing person, but heard the flush, so there were drugs whose evidence he destroyed?
Of course, tampering with evidence is — itself - a crime. And you need evidence to prove that crime.
But yeah, people tamper with evidence because they think they can get away with it. That doesn’t mean they always succeed in cleanly doing it without creating evidence of the tampering itself.
Without even looking if it's worthy of evidence or not?
Yes, absolutely. Something can be evidence if the police haven’t even seen it at all.
For example: the police think you are running a fraud scheme. They knock on your door. You shred a bunch of paper. The police wanted to see what was on the paper. You have violated the US law on tampering with evidence.
The prosecutor can argue that you violated some laws, but they will have to convince a jury beyond a reasonable doubt of that. And they will need a lot more than "I heard the shredder" to convict you. In an overall case, the shredding can be a piece of the puzzle. Shredding, standing alone, is not a crime, nor is shredding as a general matter tampering with evidence.
Yes, if someone wants to bring charges for evidence tampering, they will be required to collect additional evidence to successfully prosecute that crime. That's how it always works. They might collect fragments of the documents themselves, communications regarding the shredding, etc.
Destroying evidence is a crime, regardless of any warrant.
https://www.law.cornell.edu/uscode/text/18/1519
It is so sad and worrying when the already oppressed population argue for paranoid practices constraining their own practices considerably and with great efforts, eroding the other thing that constitution was so famous about, freedom, so some officers supposed to serve the population can do things easily to anyone. If they please and want it easy for themselves.
VeraCrypt has a cool function which is a reserved space for a decoy OS.[1] Everything else registers as free space while decrypting to dummy volume. You make the dummy volume look lived in, and forget. provide dummy password, volume decrypts such that only dummy is accessible/readable. give proper password, real OS and FS decrypt and load.
Something like this may need to become the standars over duress pins which should be treated as a fallback or more extreme alternative. Right now, A single choice to reasonably and rightfully protect your privacy reuslts in jail time over something which likely wouldnt have resulted in any issues if superficial compliance was observed.
These goons, even if a branch of a facist regime, are ultimately burocrats with violent options to settle. They aren't doing forensics on your device etc. They have neither means nor knowledge to do so. They just need to tick their boxes. Did the phone unlock? tick. Did our spyware complain? no? tick. Overall appearance of compliance from person? yes? tick. free to go, next!
You just have to find ways to stay safe without agitating their workflow and all is well.
- [1] https://veracrypt.io/en/VeraCrypt%20Hidden%20Operating%20Sys...
this will likely fail as block devices aren't dumb anymore, the firmware state will out the hidden volume. counting on the laziness/unsophistication of an adversary isn't a great move.
this problem may be solvable by a purpose-built abstraction where every write no matter what address will look identical to the firmware (naively, a randomized key-value map).
I largly agree, hence why the prudent move is not visiting shitholes like the (current) USA with anything important on your person.
However, if you must do it, there are better options than duress pins that wipe a device.
Not that shufflecake solves the issue you highlighted, but I found the shufflecake FAQ to be a good intro to the topic for anyone curious. It does a good job explaining the threat vectors and the relevant trade offs, in particular the TRIM and ORAM sections. It’s also just a cool project: https://shufflecake.net/
What does “block devices aren’t dumb anymore” mean?
Modern SSDs are log-structured under the hood. The presentation to the host system as a random access block device is an abstraction on top of that, emulating the semantics of spinning rust. Inspecting the underlying log will reveal the location of the hidden area, even if it looks random when read linearly.
I’m not so sure that log structure would reveal to you VeraCrypt style hidden volumes. It would only tell you about which blocks are allocated but the whole point is that VeraCrypt would allocate the whole space and within it have hidden space. You wouldn’t be able to infer (at least ethically, but you could lie) whether or not a hidden partition exists because you don’t know if the allocated block is present in the filesystem or was just allocated and never trimmed.
> allocate the whole space
what do you imagine allocation is in this context? it's just a set of written blocks that mark address ranges and other metadata for the OS filesystem driver (all encrypted).
firmware metadata will leak the fact that there is churn in the address range where a potential hidden volume lies. the churn will be inconsistent with filesystem activity that would be present in its absence.
it's not just SSDs you need to worry about either, HDD firmware also keeps metadata, some of it could be be proxy to churn by region.
> churn in the address range where a potential hidden volume lies.
You’re assuming separation exists. VeraCrypt specifically and intentionally allocates the hidden partition blocks from the unallocated space within the normal partition. You know, the same thing that would happen if you wrote a file. Even if you had access to the “open” partition, you couldn’t conclude that “there’s allocated blocks but no files, thus hidden partition” - that presumes the filesystem would TRIM immediately, which is indistinguishable from “there’s just a lot of deleted files that haven’t yet been GC’ed”.
Now to be clear, VeraCrypt specifically is believed to be susceptible to SSD side channel attacks, but even still it’s not definitive conclusions. You’re less likely to be betrayed by the firmware than the OS helpfully remembering you opened a file on a hidden partition and saving that history into the unhidden partition.
It would also give you information about the order in which blocks were written, and the historical state of the disk. Because of wear leveling, block allocation isn't just a one-time initial thing; the mappings between logical and physical address space are changing with each write.
That still doesn’t tell you anything about the existence of partitions within the filesystem UNLESS you discover a side channel attack.
If you have access to the SSD, you can just see the partitions anyway. I assume the threat model here is simply safely showing the agents "your phone"
SSD/NVMe keep track of what regions are wiped and which contain data that has to be preserved. To hide something in the seemingly-unused space, you have to turn off trim, eat the performance cost, and pretend you had a reason to have turned off trim.
I don't believe having trim disabled even helps here. smart firmware sees the same address being written to and may therefore reassign it to a different cell for wear leveling. it's a de facto trim.
trim lets the firmware know which mappings it can discard without the explicit reuse of the same address.
however I don't believe you can observe this effect from trim command results, it will report the usual size trimmed as if the firmware never realized that you reused the same address range multiple times.
Data recovery providers can probably get access to firmware-internal metadata.
I agree that trying to outcompete seems really hard, but also:
Given what the experience of using a non-rooted phone is like, how very very tight the sandboxing is and how useless it is a General Purpose Computer that will tell you anything: I find it very hard to believe the unlocked phone is going to let you start probing firmware & snooping on hidden volumes.
This post sent my BS detector on high alert. I'm struggling to take it seriously.
you do realize what the threat model behind a hidden volume is right?
no one will be accessing the firmware through the OS, they will access it from the PCB/chip/debug port. there is no point to a hidden volume if you cannot credibly deny its existance.
Even in places where you can’t be compelled to hand over a password, attempting to deceive the cops will get you thrown in prison just as reliably as destroying evidence.
Meanwhile cops can and do regularly deceive and lie to citizen and not only don't face any consequences but actively benefit from it.
I don't really see a problem with this assuming the deception is used to uncover crimes.
There is a general wisdom: if you invoke "the ends justify the means" you have crossed the border to the Dark Side.
I'm not going to explain my full understanding of this piece of wisdom, it would be a wall of text, I want just mention that this behavior is addictive: it is much easier to start justifying your means than to stop it. And over time those justifications become more and more flexible.
I'm ready to agree that there are situations in which ends justify the means, but if you are not aware of downsides in your particular case, and if it doesn't seem controversial to you, you are most likely mistaken and the ends do not justify the means.
Sometimes it's used to uncover crimes, but very often it's used to invent crimes that never actually happened, or used to deceive a courtroom when they don't actually have evidence.
It’s also a fairly traumatic thing to people through and I can imagine it does a lot of damage to people’s faith in law enforcement. Personal anecdote: when I was a teenager some cops gave me a list of fabricated evidence that I’d committed a crime, not intending to ever show a court; just trying to get me to confess. They said they’d go easy on me if I confessed but if I held out then they would petition the court to have me tried as an adult and sent to “big boy” prison. They also told me my parents were cooperating in the investigation and didn’t tell me. The whole ordeal basically made sure no one in my previously quite pro-cop family would ever trust an LEO again.
My first experience with the police was just as bad. A friend and I were waiting on the porch of another friend (all like 14 years old). We were waiting for him to come home. He knew we were there waiting for him.
His neighbors yelled something to us out of their window. We went to see what they wanted, but they didn't say anything when we got near.
We went back to the porch and waited for maybe 10-15 minutes, but decided to leave as we felt really weird about those neighbors. As we started walking, a police officer pulled up screaming at us, telling us we were under arrest for throwing rocks at the windows of those neighbors. The police officer took us to the police station, put handcuffs on us, as well as shackled our feet to the floor, where we remained for like 2 hours. He made us write a statement, and then told our parents to come get us.
It was truly the most confusing thing I ever experienced. Angers me a bit today thinking about it.
Feels like there needs to be some nuance here
Fabricating evidence in an interrogation to try to get a confession out of someone versus "I'm not a cop" when infiltrating a drug ring, or lying to hide important information
Lying about evidence specifically is illegal in a lot of countries (not the US)
So government officials can lie but citizens must tell the truth all the time? That is insane to me and I don't see how that does anything other than force people into perpetual criminality so that they could be arrested at any time. The average US citizen already commits 3 crimes a day because our justice system is so messed up.
> citizens must tell the truth all the time
That only applies to federal agents, at least. You can lie to local cops all you want. Though in both cases I think just keeping your trap shut is the better option.
> You can lie to local cops all you want.
The legality of that varies.
The government can throw people in jail too but if you kidnap someone and lock them in your basement that's a crime. This is no different.
Will the problem is that we’ve seen it’s not only used to uncover crimes.
There’s plenty of empirical evidence of cops lying to lock up innocent people.
One truly absurd case was lying to convince a man he killed his father, and extracted a murder confession for a victim who they knew wasn’t dead.
https://people.com/thomas-perez-jr-murder-interrogation-1186...
> There’s plenty of empirical evidence of cops lying to lock up innocent people.
And the solution is to correctly prosecute and punish them. A cop is sworn, and we should hold them to a higher standard not a lower one. But changing the underlying rules just because some cops are bad isn't necessarily an improvement.
If that is the case, it should still be prosecuted to find out whether the deception was used to "uncover crime" or a crime in itself. Just because we're okay with cops carrying guns and assume they'll only shoot the "bad guys", that still doesn't mean they can escape accountability and should not be held to objective standards. It would ridiculous to just use a "trust me bro" framework for this and hope for the best.
The best thing to do in such a case is issue the following statement -
"I am in full physical compliance and will not interfere with investigation in any way, but I plead the 5th on answering any questions, and plead the 4th on any personal property", and just sit there silently. Let them break into the phone if they want.
true, but in that scenario you're going to prison either way. If you legitimately use the dummy for daily driving and hidden for sensitive work, then it's better than nothing.
Obviously a good alternative is a dummy device but it carries similar risks, and the best option is to simply not go to authoritarian shitholes like the USA. Thankfully I've been able to avoid/push for US folks visiting us instead, but honestly the alternatives are as bad.
Its a shit situation where most reasonable actions carry real risks, its up to individuals to choose what is acceptable risk to them, but a dummy os you use as a daily driver for inconsequential work is, to me, an ideal midground.
No, you're being very dramatic. Lying to cops is very often your best strategy.
I doubt this person will be found guilty. They will be able to prove he wiped his phone, but it will be hard to prove he destroyed evidence.
I worry about approaches like this because maybe the forensics tool fills all available space and then clears it, noticing that this particular phone is an anomaly re:
If you're hiding something in "empty space" it won't behave like empty space when you try to fill it.I think we need to be stenographically smarter. Like if there's some mechanism of deduplicating blocks across volumes, then perhaps when given the special key you could temporarily render a volume whose parts are hidden in the data already occupied by the other volume and then just run it in memory so that a reboot clears it.
That's not how VeraCrypt hidden volumes work.
> If you're hiding something in "empty space" it won't behave like empty space when you try to fill it.
Yes, it will. It will overwrite the hidden data.
When you have a 1 TB drive that you encrypt with VeraCrypt using a hidden volume the following happens:
You have an outer decoy volume. This volume is 1TB in size and works like any other VeraCrypt volume.
You have a smaller, hidden inner volume with a different password. When you unlock this volume the following happens: Veracrypt tries to unlock the normal voume, but fails because the password is incorrect. It now tries to decrypt a secondary volume header at an offset. This header contains the layout for the hidden volume which is positioned inside the free space of the outer volume. So the position of the hidden volume is encrypted.
Now when you want to plant decoy files in the outer volume you actually do the following: While unlocking the volume you enable the option for hidden volumes and now you enter both passwords. So VeraCrypt knows where the inner volume is located and how large it is so it will not overwrite it. VeraCrypt will show the adjusted smaller size for the outer volume.
When you're in a situation where you are forced to give up your password: You tell them your decoy password. They open the outer decoy volume. It appears like any other VeraCrypt volume spanning the whole size of the disk. If they write any files to it that might overwrite parts of the hidden volume.
Notably all standard VeraCrypt volumes principally feature the option of hidden volumes. You cannot proof that a VeraCrypt volume does not have a hidden volume (short of it being full in the first place). The user base of people not using hidden volumes gives the plausible deniability to the people who do. Which is worth knowing as this can get you in trouble in certain scenarios.
There are some issues with this though:
SSD wear leveling and especially TRIM. You must not TRIM the blocks of the hidden volume, which can reveal it as it shall appear as free space that would usually be trimmed. So disable TRIM, which is suspicious in itself. Though TRIM also leaks information about file layout even for normal volumes, so there is some plausibility left. But it's not ideal. This is not an issue with HDDs (maybe with SMR though).
I don't remember exactly, but I think you can do statistical analysis on the layout of files inside the outer volume and deduct the existence of the hidden volume from this under certain circumstances. Essentially, in a normal volume the filesystem would have written this file to these blocks, but it didn't and chose other blocks instead. So there must have been a block layer translation that reroutes blocks from the hidden volume and these free blocks that should not be free must be the hidden volume. I'm not too sure that's really what it was about.
5$ wrench method. I suspect you are hiding certain information in this VeraCrypt volume. I torture you. You give me the password. The information is not in there. Either you do not have the information or you are lying and using a hidden volume. I continue to torture you for the second password on the chance that you're using a hidden volume. This is what I was about earlier when I said VeraCrypt can get you in trouble.
>VeraCrypt has a cool function which is a reserved space for a decoy OS.[1] Everything else registers as free space while decrypting to dummy volume. You make the dummy volume look lived in, and forget. provide dummy password, volume decrypts such that only dummy is accessible/readable. give proper password, real OS and FS decrypt and load.
See: https://news.ycombinator.com/item?id=49057812
Implementing it in a convincing way is harder than you think. Moreover if you're under the type of regime that will throw you in jail for not giving up a password, they're probably not going to let you off the hook because they can't definitively prove you have a hidden volume.
I could be wrong, but my understanding is that the dummy OS views the remaining space as legitimate and accessible free space. Using dummy directly is of course dangerous, as you might overwrite sectors with legitimate data, but also, you can access dummy os from secret. so you'd drive dummy from secret to prevent that but can load dummy as main if under duress and it looks fine. Browser, logged into various inconsequential things, random files for inoffensive memes and other human stuff in downloads folder etc. maybe an email account you've signed up to a few newsletters and e-stores that send spam logging in via an email client that auto-launches etc.
Done well, I see no reason it should raise redflags in routine stops, so unless you're being targeted (at which point you've got way bigger problems) it should just seem like you're a run of the mill person who does not use their device to its full capacity, which is the majority of users.
at some point, having any mitigations even present is a problem. At some point being met with a boot password at all is a problem that puts you on a list. I have no solution there other than to not go to those countries or keep dummy hot.
If you read the linked thread, you'd see the reasons are:
1. SSDs (including phones) have TRIM/discard, so you need to disable it, otherwise the hidden volume would get wiped. You going out of your way to disable it is going to be suspicious.
2. Even if the above wasn't an issue, you can't really use the outer os to any meaningful extent, because you run the risk of overwriting the inner volume. That makes your decoy os suspicious. It's not definitive proof you have a hidden volume, but I doubt the authorities would care too much about that.
I last used this feature probably more than a decade ago, but: you provide 2 passwords when decrypting. If the first password is the main volume, the second is attempted as a hidden volume. If both match, the main volume registers the hidden volume as free space but prevents writing to it. If the hidden volume doesn't match, the main volume will clobber the hidden volume.
So the main/hidden volumes really works like a duress: you might destroy your hidden volume while using the main one under duress, but that does not apply when using the main volume while able to additionally unlock the hidden volume.
If you are in a situation to need to worry about any of this, you're probably going to jail for one reason or another, anyways.
>So the main/hidden volumes really works like a duress: you might destroy your hidden volume while using the main one under duress, but that does not apply when using the main volume while able to additionally unlock the hidden volume.
The problem is that if the main volume doesn't have any signs of activity, then that's highly suspicious. Why are you carrying around a laptop that's mostly empty and hasn't been used in months? Why is it that despite seemingly not being used in months, there's physical signs of wear, like scratches or dust accumulation? If you do try to make the main volume seem "used", you run the risk of accidentally overwriting your hidden volume.
By using Veracrypt you're already proving there could be a hidden volume - and it won't TRIM anything, for that reason.
It's not possible afaict on phones because they use flash memory.
https://veracrypt.io/en/Wear-Leveling.html
https://veracrypt.io/en/Trim%20Operation.html
This seems like the kind of thing that would put US citizens in way more legal jeopardy than just using a secure phone with a long password, refusing to unlock it, and buying a new one if the officers involved confiscate it out of spite.
This is always been the dumbest thing about "hidden volumes": It relies upon your adversary not knowing about veracrypt's hidden volume. Which BTW, is plainly ADVERTISED on the web site. The second he knows you have veracode, he will ask for the other encrypted volume.
See also relevant XKCD:
https://xkcd.com/538/
But Veracrypt can be used for encryption of a volume, without creating a hidden volume. I assume it would often be used this way.
The $5 wrench decryption technique would be even more unpleasant if you hadn’t created a hidden volume, as there would be no way to prove you hadn’t.
Should people be sure to never use Veracrypt volume encryption unless they create a hidden volume? I have trouble even thinking this way!
The $5 wrench isn't about breaking encryption. It's about breaking will power. If they achieve their goals great for them. If not they proved the second volume either didn't actually exist or your will power was stronger than the $5 wrench. Either way they're probably way more happy with the outcome than you would be.
As long as the border your crossing doesn't respect the 4th Amendment, the best approach is to not carry anything incriminating across it, nor anything that may make you suspicious.
Here is the indictment: https://www.documentcloud.org/documents/28513012-samuel-tuni...
Here is the statute Tunick is indicted under: https://www.law.cornell.edu/uscode/text/18/2232
There is an immediate problem: the device was being searched, and this statute criminalizes destruction of property to prevent seizure, not searches. I don't think this statute applies this situation. Regardless of whether the border agents could lawfully search his phone at the border, they didn't have grounds to seize it. I suspect this prosecution will quietly be dismissed within a few months.
OR the US administration could drag out the case hope it gets to the Supreme Court for another roll of the dice on weakening the Bill of Rights.
As usual, government should have obtained a warrant if they wanted to search a US citizen.
CBP are empowered to seize devices if the owner refuses a search.
Hmm. It looks like the government asserts that they can seize a device if the owner does not provide a password. This is a good point and answers my search v. seizure objection above.
You say CBP is "empowered" to seize a device if the owner refuses to provide a password but I can't find a statute that authorizes it or precedent squarely saying the 4th Amendment allows this. The scope of the border search exception isn't settled. So the next argument available is that the executive is wrong and CBP does not have the constitutional authority to seize a device merely because the owner refuses to provide a password. That's obviously a much bigger argument and who knows if it would work, though this case sorta feels like it could become a marquee 4A case.
"The ACLU argues that the Fourth Amendment does apply in these situations, at least to electronic devices, because they contain so much private information. But the law is very unsettled, and the Supreme Court has not addressed the issue."
https://www.aclumaine.org/know-your-rights/electronic-device...
Just being silly. Owner gave permission (and the pin code) that will give them access to an empty phone. No search refused.
I don't know, that sounds like the kind of "I'm not touching you" defense that I don't think will convince anyone with common sense. It's obvious the wipe turned a search that could potentially find something into a useless search, so I don't see why the two should be treated as equivalent.
common sense is that CBP should not be searching citizens phones in order to pick a kill list for ICE to go killing first amendment protected protestors.
it's ridiculous on the face of it that that guys phone should be searched at all
This is an absurd statement. A “kill list”? Please.
I would have thought the fourth amendment not having specific geographical boundaries, but rather applying generally would have been common sense too, but here we are with border patrol being able to force you to reveal your PIN code just because you transited a border.
Imagine a safe containing sealed envelopes written in a code that only the owner understands.
The police ask for the combination.
The owner provides a combination that opens the safe, but the safe’s security mechanism first destroys its contents. The police can now inspect the safe but there are no documents left.
Even if the documents had remained, they would still have been written in an indecipherable code unless the police also had the codebook.
This person was complicit with the search: he gave the police access to search the safe.
You're making two arguments here, and I'm not a lawyer, but I don't think any of them would convince a judge.
> The owner provides a combination that opens the safe, but the safe’s security mechanism first destroys its contents. The police can now inspect the safe but there are no documents left.
> This person was complicit with the search: he gave the police access to search the safe.
The problem is that it's very obvious the police didn't want access to the safe because they like opening safes but to get the documents inside. The person denied that intent.
> ... written in a code that only the owner understands.
> Even if the documents had remained, they would still have been written in an indecipherable code unless the police also had the codebook.
This is an orthogonal argument basically saying "if the documents had also been encrypted, then there would have been no difference between destroying the documents and just leaving them encrypted".
First, that's not what was the case in the original situation - there is nothing saying there was secondary encryption on the phone.
Second, obviously, destroying documents and encrypting them is not equivalent because in the second case there is still an option to try and brute-force the code or try to decrypt them in another way.
> there is nothing saying there was secondary encryption on the phone.
A GrapheneOS phone stores its files encrypted. The PIN is not itself the encryption key; it is used, together with a high-entropy secret protected by the Titan M secure element, to derive the material needed to unlock the randomly generated filesystem-encryption keys.
The duress PIN does not overwrite every file. It irreversibly destroys the multiple layers of key material and encryption metadata needed to decrypt the data, making any encrypted remnants effectively unreadable.
A hypothetical, extraordinarily powerful quantum computer could theoretically decrypt the remaining ciphertext by searching for the encryption keys.
The language in the statute of what constitutes "destruction" is very broad and clearly covers IMO giving a self-destruct password to someone who you know will try to enter it.
"Whoever, before, during, or after any search for or seizure of property by any person authorized to make such search or seizure, knowingly destroys, damages, wastes, disposes of, transfers, or otherwise takes any action, or knowingly attempts to destroy, damage, waste, dispose of, transfer, or otherwise take any action, for the purpose of preventing or impairing the Government’s lawful authority to take such property into its custody or control or to continue holding such property under its lawful custody and control, shall be fined under this title or imprisoned not more than 5 years, or both."
I know intent is a thing in law.
But I'm curious what the officer specifically requested. If the officer just asked for "the pin code", without explaining what they were trying to do or which pin code, then it seems he did comply: he gave them a pin code that gives them access to the [cleaned] phone.
Then the officer destroyed the property...
It doesn't matter. Providing a PIN that will cause an officer to inadvertently delete data clearly is covered by the statute:
"Whoever, before, during, or after any search for or seizure of property by any person authorized to make such search or seizure .. takes any action ... for the purpose of preventing or impairing the Government’s lawful authority to take such property ..."
My understanding is the duress pin deletes encryption keys, but leaves the property untouched.
This is a (terrible) semantic argument that will never work in any Common Law legal system.
CBP is trying to gain access to the files contained in the system.
The files in question were functionally accessible to an authorized party (the owner, GrayKey or Cellebrite acting with judicial authority, etc)
The actions undertaken by Defendant during this investigation (which Defendant was obviously aware of and participating in) permanently impaired the ability for any party to access these files. Any reasonable person, or more importantly, a sworn technical expert, would agree with this.
Specifics here are irrelevant: feasibility of access doesn't change the intent or effect of the act in question. Files existed in every reasonable characterization, now they don't.
This is functionally the same as artfully convicing the officers to light a bunch of seized documents on fire, or to open a booby trapped container that is known (and intended) to effectuate the destruction of its contents.
IMO people are better off knowing their actual rights in a US airport than trying to outsmart the US government.
If your threat model means you can’t afford for border security to view your device, wipe the damn thing yourself before crossing the border and restore it from an encrypted online backup on the other side.
You’re just carrying a blank phone that you intend to set up and use later, and they can’t force you to install your backup onto a phone.
Now, this is sus as hell, and you’ll probably draw all kinds of extra attention, but if border security wants access to your phone in the first place, you’re already in a weird place.
this isn't even that weird, when I worked in a BigTech it was pretty explicit that there were certain countries where you should not bring your actual work device through the border, and you'll get set up with a different one while in that country.
It's a shame that the US appears on that list now.
Half of Europe does, it's just that everyone talks about the US like it's a special case because those searches happen routinely. It's legal to search a phone without reasonable suspicion at airports in the UK under the Terrorism act 2000 (pre-9/11!)
I really hate that these kinds of justifications almost always ends up to serve as a push for acceptance through apathy of the status-quo, as opposed to fueling that outrage that pushes for positive change.
Those who thought that a duress pin was a good idea for border crossing are probably going to choose this alternative.
It doesn't have to be blank - just clean.
Unless you are an activist who is being targeted by a government. A "clean" OS can still have incriminating "evidence" planted on it.
Pff one time when travelling to the US I brought two laptops, macbook and a thinkpad. I just reinstalled the thinkpad and somehow the border patrol was very interested in it. Asked me to ‘show my gallery’… it was a guiless setup and only had a terminal, problem was… somehow my keyboard layout or something was messed up and i could not even login… i spend around 2 hours being questioned by 6 people…they didnt even take a look at the macbook
The french cybersecurity agency (ANSSI) used to share leaflets to tell you to do just that. The US government wasn't named, but it's part of the ones that like to do some economic intelligence and no euro who read the news would trust it more than a banana republic when it comes to crossing the border.
Now having a corporate device with little data is no longer outstanding. Everything is in the cloud these days.
As for personal devices, you can explain you're taking a dumb cheap laptop for your holiday as you're working on a desktop PC at home. You're not taking your entire house when you're on a trip, just a laptop to check tourism information and post blog posts
I myself bought a crap laptop on ebay to shove it in bags and backpacks and go to conferences and not be sad the day it's broken.
but above all, he's a citizen so shouldn't care about looking "suspect". He has a right, not a privilege, to cross that border. They can explain a judge how he looked sus if they really want to search his home.
> You’re just carrying a blank phone that you intend to set up and use later, and they can’t force you to install your backup onto a phone.
They can just make this illegal too, and ask for the keys to your backup, or detain you until you do. Point is, you can't gain freedom through technology. It was always a political thing.
You can hide a backup very well. Make a Proton account for drive over Tor and memorize the credentials.
You can gain freedom though technology but if someone wants to torture you or a regime wants to put you in prison they can always do that.
You could also gain freedom by being anonymous preventing getting caught, though technology.
What is sus as hell is the US government. It is incredible how people here are accepting things that was outrageous a few years back.
> people here are accepting things
Question: what does not accepting these things look like? Because voting, protesting, donating, and lawsuits haven't gotten anywhere. What are you suggesting we actually do?
They've been boiling that frog for 25 years now. Its flesh has long detached from the bones, it's the bones themselves that are now dissolving.
> federal agents had already circulated his name and photo internally, saying he was under investigation for "suspected terrorism activities" because of his alleged association with the movement against Cop City
Of course it’s about that huh. It’s quite scary how far the US will go against anyone who engages in this sort of activism.
This is the most troubling part of the whole episode. Targeted by the government. Its been a long rough slope to get here but they are at the goal line.
An earlier story alluded to csam
Wonder if it’s just a fishing expedition
For non-graphene users (eg. Boring iPhone people like me).
So there’s a feature called Duress PIN which as explained through some comments means you put a different pin which intentionally wipes the phone. It’s not auto wipe or wipe after several failed attempts but intentional wipe of device. (Worth explanation as the current title nor the article doesn't easily explain this was made by the US citizen providing the alternative passcode)
For more technical details:
> GrapheneOS provides users with the ability to set a duress PIN/Password that will irreversibly wipe the device (along with any installed eSIMs) once entered anywhere where the device credentials are requested (on the lockscreen, along with any such prompt in the OS).
https://grapheneos.org/features#duress
PIN to wipe seems suspicious. How about a PIN where it login to a patriotic profile and phone looks like normal android.
This is exactly my setup with GrapheneOS. The default / main profile is patriotic, with a sterilized Telegram account, state-adjacent banks and apps, etc. The second profile (that uses a separate PIN) is not so patriotic: it has foreign bank apps, crypto apps, password manager, 2FA app, personal records, and an alternate Telegram account that I use to discuss any potentially unpatriotic topics with potentially unpatriotic people.
It would be cool if there's a third PIN that can wipe the unpatriotic profile whilst showing the patriotic one.
So you use 1st pin for normal use, 2nd for downloading your flight details on patriot mode, and 3rd for unlocking to patriot mode whilst silently nuking unpatriotic data.
Or a PIN that just nukes the data for certain apps (Signal, Telegram, WhatsApp, E-mail) etc. Feds can read my Slack messages all day.
Regarding Signal, Telegram, and WhatApp:
1. Never ever have Signal installed on the phone during border crossing. The presence of the app itself may trigger them (speaking from first-hand experience).
2. Having an empty Telegram account may look suspicious. My recommendation is to have two separate Telegram accounts, with the "unpatriotic" one in the separate profile only.
3. Never ever use WhatsApp for anything "unpatriotic". It's way of deleting messages leaves traces ("This message has been deleted") which may rise suspicions.
As for email, I just don't have any email clients installed on my "patriotic" profile. They all go to the "unpatriotic" one.
There's no PIN for deleting a particular profile, but you can quickly delete it manually, assuming that you have some private time available – for example, when you are stopped at passport control and told to wait in the waiting area.
It would be cool if there's a third PIN that can wipe the unpatriotic profile whilst showing the patriotic one.
So you use 1st pin for normal use, 2nd for downloading your flight details on patriot mode, and 3rd for unlocking to patriot mode whilst silently nuking unpatriotic data in case of seizure.
It's absurd that you have to do this and/or be so careful. But if you live in Russia, China, or another dictatorship, then I understand.
Yep, full agreement here. The amount of hoop-jumping is ridiculous. However, I live in Russia so I have to do all that, plus some more (e.g. the work to protect my own self-hosted VPN after Roskomnadzor issued the recommendation for big Russian online services to sniff out and report user's VPN settings).
I spent two weeks thinking about my new setup on Graphene OS and Windows, but it was time well spent. Before that, my checklist for pre-border-crossing cleanup required about 8 hours of work. With the new setup, I can complete the cleanup in about an hour, and restoring takes even less.
This is extremely hard to implement in a non-superficial way that would be hard to detect.
Android switched from block device encryption to filesystem-based encryption (with encryption data and metadata). This provides many security improvements, such as per-file encryption keys and per-profile keys.
However, this also means that the main file system is readable and you could enumerate the available users. If you would encrypt/obscure that information, you could still infer the presence of other profiles from file system block allocations.
(Disclaimer: not an expert, but I read the relevant Android docs at some point.)
I had this on a Xiaomi, maybe 10 years ago? Very cool feature! I hope they still do it. I think the wipe feature is also very cool, but not used in this way.
Fascinating. It seems the feature is called "Second Space"
https://www.mi.com/global/support/faq/details/KA-492586/
Profiles are a standard Android feature, nothing special to Xiaomi. GrapheneOS even extends and improves them in a lot of ways.
It's just not possible to hide them in a good way that would faze knowledgeable people or software.
Ok so what you're saying is Android doesn't have this feature. Xioami does. Type in a different pin and access a second space. Not the same as profiles, obviously
not accessible just by typing another pin on stock Android though.
And wipes the main partition in the background at the same time
Also too patriotic is sus. Better to keep some minor offenses (that give you a fine or a week of jail at most) on that partition so they will think that this is the thing that made you so nervous during the search
Impossible to implement securely, so they chose not to
That's a nice feature, every OS should have that.
I believe the old TrueCrypt had two passwords, each revealing a different set of files. You'd put e.g. your tax forms in one, so if forced to decrypt your drive, you could cooperate and do so.
It's not illegal to delete your own vacation photos. So to prove this guy guilty of destruction of evidence, does the government need to prove there was actual evidence in the phone?
It zeroes out the vault where the volume key is stored.
leaving the actual evidence files untouched...
Sounds like a feature that under right circumstances can land you in Guantanamo for 5 years where eventually you get cleared once the real terrorist gets caught.
The real terrorist were the cops.
Then you stay in Guantanamo indefinitely
If this happened in an EU country you'd all be wetting yourselves, but for some reason the rooms different today. The professional advice we are given traveling to the US is back up you phone, wipe it, travel and restore once you are comfortable. Sad state of affairs guys
In the US, he could have refused to give the pin and that's protected under the 5th Amendment. They would have nothing because they couldn't get into the encrypted phone.
In many countries other then the US like Ireland, they have key disclosure laws which require you to testify against yourself.
In the UK, police can even require key disclosure without a judge.
Wait 'till you hear about the special criminal court...
> US citizen charged after GrapheneOS phone wipes during airport search
> It's concerning – and sends the message that [GrapheneOS] is criminal by default
What's with this sensationalism? The GrapheneOS phone didn't just wipe itself - the defendant actively took steps to wipe it. The defendant isn't being prosecuted "by default" for having a GrapheneOS phone. He is being prosecuted for what he actively chose to do with that phone.
If your argument is that the search and seizure was unconstitutional, and you're within your rights to wipe your data, then argue that. I'm very sympathetic to such arguments. But stop with this "they prosecuted me for having a GrapheneOS phone" misdirect
Doesn't matter, increasingly law enforcement is treating nicher secure OSs as a sign of illegal activity.
How are they going to prove there was evidence of a crime? While destruction of potential evidence does introduce a certain amount of leeway that doesn't allow going from absolutely nothing to "evidence was on the wiped device".
Most previous court cases involving encrypted devices have required substantial proof that the encrypted device contained incriminating evidence. To be clear "you sent this illegal thing from your house" levels of evidence.
It mostly seems inept, if you are going to push to expand your powers you do it on strong cases where you know what happened. Doing it on weak cases like this gives a judge an opportunity to shut down that without giving you a chance of a meaningful conviction and without that you won't get any benefits...
>How are they going to prove there was evidence of a crime?
They don't have to, only that you destroyed evidence. That's why many people get prosecuted with "obstruction of justice" rather than the actual crime.
>While destruction of potential evidence does introduce a certain amount of leeway that doesn't allow going from absolutely nothing to "evidence was on the wiped device".
So if someone was doing insider trading, and the SEC came knocking, then immediately afterwards they start burning every document they have and microwaving their computers, do you think they should get off the hook? Surely you must think, even if the authorities or society can't a priori know you were guilty, the subsequent activity should be illegal? Note this isn't the same as banning burning documents or microwaving computers, only doing so after you're aware there's an ongoing investigation.
They need to prove you destroyed evidence, you have the mens rea component with the deceptive pin code but the defense can simply plainly say they didn't want the police to read their private device.
Your example is fabricated since the justice department didn't even bring forward a specific crime they believe was committed here.
If they charged him with a crime and had evidence his device had evidence of that crime (even if in reality it didn't) that would be a more interesting question.
But again where is the crime?
> But again where is the crime?
Destruction or removal of property to prevent seizure.
CBP are empowered to search US citizens devices and, if the citizen refuses to comply, to seize that device. They'll be alleging that by knowingly providing CBP with a duress PIN he destroyed his own property to prevent its seizure.
Notably, they don't need to prove he destroyed evidence of anything.
Property was not destroyed or removed and can still be seized. Slam dunk for the defendant
Digital property is property.
Is that what the law says? Does it say that digital copies of photos are property? Does it say browsing history is property?
https://en.wikipedia.org/wiki/Intellectual_property
Not to mention it fails a basic sniff test. You seriously think a judge is going to rule "well even though you deleted all your emails, since those are technically bits stored on a phone, and the phone is still there, you haven't destroyed anything, and you're free to go?"
>with the deceptive pin code but the defense can simply plainly say they didn't want the police to read their private device.
That's as convincing as saying you burned all the documents because you don't want people who break in to read all your financial records. It just happened to start after the SEC came knocking
Except this isn't the SEC actually pursuing a voicable crime. This person was under no suspicion at all. They were simply coming home after being abroad: last I checked that is not a crime. Outside of a crime, "evidence" is just called property. If the TSA can't show "we have provable evidence gathered elsewhere to show that there was possible incriminating data on that phone" all they did was wipe this guys phone. All they had was pre-crime "he was involved in the movement against Cop City so we're gonna search his phone". No "he was meeting with terrorists in the DR". No "we have good reason to believe that when he was in the DR he communicated with terrorists". Just "uhhh we were looking for anything prohibited[1] and we targeted this guy because he was involved in some anti-cop protest group 3 years ago".
If you can't see how insanely thin their argument is, and how easily this will be abused, I don't know what to tell you. We could just as easily say having any passcode on your phone at all is obstruction of justice, since the feds could want to look on your phone for whatever made up reason, and if they can't because its encrypted, well why did you do that? What are you trying to hide? Evidence of a crime!?!?!
1. I had to call out, "looking for anything prohibited" is a direct fucking quote from CBP. They admitted it was a fishing expedition.
>We could just as easily say having any passcode on your phone at all is obstruction of justice, since the feds could want to look on your phone for whatever made up reason, and if they can't because its encrypted, well why did you do that? What are you trying to hide? Evidence of a crime!?!?!
I specifically said this wouldn't be covered, because you set up the pin before you knew any investigation occurred. However, I think it's reasonable if you were pulled aside by CBP while deplaning, and while you're waiting to interview you decided to hastily turn on encryption on your laptop, or eat a bunch of papers you had on you, I'd say that's similar to evidence tampering, not unlike flushing drugs down the toilet when you see a cop pulling up on your driveway.
Drugs are actually illegal. Thats the difference. If what you’re getting rid of is not illegal or evidence of illegal activity, there is no crime. It sure looks suspicious but the point is that if there was no actual evidence, then this is getting rid of regular property.
You cant have evidence tampering when there is no evidence, because there is no crime for there to be evidence of.
> I specifically said this wouldn't be covered, because you set up the pin before you knew any investigation occurred.
But that’s just the thing: no investigation did occur. Being pulled aside by CBP doesn’t amount to an investigation. There can’t be an investigation without suspicion of a crime.
What if you knew you were on a terrorist watchlist, so you put a PIN on your phone?
It is evidence. Something can be evidence even if the evidence does not prove any crime.
Destroyed evidence of what?
Destroyed materials that might be relevant to an investigation that you know exists.
Hmmmm sounds like the government can launch endless bs investigations, wait for their target to throw something (anything, a piece of paper, whatever) in the trash then charge them with destruction of evidence. A infinite guilty-change glitch if you will.
That's what judges are for, so cute hacks like "putting everyone in the US under "investigation" won't work. That said, if I was under investigation, you bet your ass I'd be extra diligent in ensuring I'm not accidentally shredding any documents.
What you're describing is malicious prosecution or abuse of process. It's illegal and it would destroy the prosecution's case. Not only that, but the victim could sue for damages.
Sort of like deliberately targeting somebody for his alleged association with the movement against Cop City?
To quote the article: suspected terrorism activities because of his alleged association with the movement against Cop City
Complete horseshit on many levels, but presumably a legally valid investigation.
Seems like they could have had a warrant in that case.
You have to prove it is an evidence of a crime to start with, speculation is not a fact. My property, my business, i can smash the phone and no one has anything to do or say unless there’s an undeniable fact that there’s an evidence there and it got destroyed, else, it’s no one’s business.
>Note this isn't the same as banning burning documents or microwaving computers, only doing so after you're aware there's an ongoing investigation.
> So if someone was doing insider trading, and the SEC came knocking, then immediately afterwards they start burning every document they have and microwaving their computers, do you think they should get off the hook?
Apples and oranges. They presumably already have some sort of evidence in order to get a warrant and are under criminal investigation.
According to the article the agents said it was just a normal part of screening.
>They presumably already have some sort of evidence in order to get a warrant and are under criminal investigation.
What if there was no warrant, and the SEC just came to ask questions?
If they came to ask questions, then they presumably already think I've committed a crime. This is not the same as randomly stopping someone and asking to see their phone.
A trucker passes a weigh station and is signaled to pull in. As he's pulling in, he's seen dumping the contents of a bottle onto the ground. Is this destruction of evidence or obstruction of justice? He's not under any investigation (trucks are regularly weighed at weigh stations as a matter of normal procedure).
A company is engaged in some white collar crime. They're tipped off that the DoJ launched an investigation on them. No warrants/subpoenas have been issued, and no investigators have shown up. The company instructs the IT team to scrub their email servers. Is this destruction of evidence or obstruction of justice?
> Is this destruction of evidence or obstruction of justice?
The investigators can (and have) threatened both as a tactic, but when the charges are files, the specifics are what the prosecution thinks they can get a conviction on. I think it's understood that the law is interpreted, which has given great leeway to narrative.
Well, good luck to them. If I'm on the jury and he argues "I got my passcodes confused" that's reasonable doubt for me.
I'm not a lawyer, but my work domain revolves around data analysis of certain types of crime. Often times the suspects are flagged and under surveillance, so if and when they cross borders or go through check-points where you have a great deal of authority, they'll get searched.
In many countries certain agencies / agents can do searches which normal law enforcement officers can't. Like not needing a search warrant or even probable cause. Not to mention that wiping a device could in itself be a crime, if it is suspected that evidence is being destroyed.
The key point here is that, as I wrote, some agencies have a lot of authority, and have the power to do pretty drastic stuff.
The career prosecutors at the DoJ are not the same as a couple years ago. I hope this case ends the same way as the sub sandwich assault.
They are not sending their finest to court it seems.
If your legal system depends on the benevolence of prosecutors, you've already lost before it began.
Attorneys are supposed to be adversarial. The system's soundness shouldn't depend on anything more than them trying to win and not doing anything illegal.
Before "prosecutor" became an elected/appointed office, prosecutors were independent contractors, hired for a single case only and serving at the pleasure of the Grand Jury. The Grand Jury's job was to decide how to spend the public prosecution budget. "Indictment" meant exactly that "prosecuting this person is a good use of tax dollars" and nothing more. We should go back to that.
Any system ultimately depends on the benevolence (or at least the decency) of the people in it. The idea that a society can design a perfect system and it will run itself is very dangerous.
The comment you're replying to was focused on prosecutorial incompetence, not benevolence.
Whether to prosecute or not is not an objective question of competence.
A trained chimp could have gotten prosecuted the sandwich.
Note: The HN headline says "US citizen charged" but the article's headline and content do not mention his status at all.
One of the GrapheneOS people (I think) suggested keeping a bit of paper in your wallet with the duress pin, perhaps thinly disguised. Then the cops could try it on their own initiative. I suppose they'd become aware of that trick eventually, but then they wouldn't be able to use all those other genuine pins they find.
This is an interesting idea, but was that GrapheneOS person a lawyer giving legal advice?
No, he wasn't, what is your point?
Today we see someone being arrested because they used a software feature. Next year we'll see someone being arrested because they played a cutesy trick and got the LEO to enter in the self destruct code.
The engineers and techies involved have so far shown themselves to have poor intuition for understanding how the law is going to react. I think it behooves anyone still listening to their advice to also check in with someone who has a good intuition for how the law will react to this new idea.
It's possible that could be destruction of evidence as well. Why should it matter whose meat sticks type in the decoy pin?
Because one is a clear intent to mislead while the other has plausible deniability. "It was there in case of robbery."
The prosecution would argue that you ought to have warned officers about the duress pin since this wasn't a robbery scenario.
It's harder for them to argue you were actively destroying evidence; you could say that you had written the wipe pin there for a legitimate use case like both your wallet and your phone get stolen
Makes sense, since you aren't using that pin every day and it would be easy to forget.
A far better approach is for the US citizen to simply say "I chose not to provide my PIN".
The officer will say something like "That's your choice, but I will need to seize the device to conduct an analysis. It will be returned once the analysis is complete".
Then you shrug, and they will let you enter the US. The cops will try to get into the phone, fail, and return it to you.
Just bring a phone you don't mind losing for a few months.
This person was under "investigation" for protesting against cop city. The authorities were waiting for him to turn up at a place where the law would give them more power.
They were never going to let him just walk in. Eventually, they'd have to, possibly after lawyers and news would get involved, but it's not like saying "no" was going to end the ordeal right away.
Maybe, but being detained for a couple hours is better than committing a felony, no?
It depends on how "native" you look perhaps, but you can be detained for more than a week and a half if the border authorities don't like you: https://www.theguardian.com/us-news/2025/apr/20/us-citizen-j...
Of course they shouldn't do that to US citizens, but they also shouldn't be targetting protestors they have a personal gripe with.
I mean the guy didn’t have proper documentation and admitted to illegally entering the US (not at a crossing I assume).
It’s a completely different situation.
A couple of hours sounds like you don't have any knowledge of how these things go.
As someone who immigrated to the US and has been detained in secondary inspection I can assure you I do have knowledge in this area.
You shouldn't count on the phone ever being returned to you, at least not in working order. Otherwise, yeah.
I have said this in multiple occasions both on and off line. The world is converging to China in terms of how and how much the governments want to be totalitarian. China already has decades of experience on this, and is both strong and subtle in doing this; almost elegant. US and Europe just got started. It's just too good to resist. (For the government, that is.)
Grapheneos comment on hidden profiles/veracrypt style plausible deniability:
>It's possible to make a semi-hidden feature but hiding it well enough to avoid detection by software forensic tools requires not basing it around profiles. It would really need to be a nested GrapheneOS in a virtual machine. It could also still be detected at an SSD level
https://nitter.net/GrapheneOS/status/2081471477174456340#m
Here's some info from veracrypt on the SSD level.
https://veracrypt.io/en/Wear-Leveling.html
https://veracrypt.io/en/Trim%20Operation.html
Seems like they’re going to have a struggle proving intent. “I was stressed out and afraid and I got the passwords mixed up” would be the magic words I’d hear as a juror and I wouldn’t be able to vote to convict.
If you get a jury who doesn't think that "strange self-destructing phone" isn't a criminal's tool to begin with. Which I'd guess is probably not likely.
The defense has a chance to educate the jury about it in a trial, and given how widely CBP/DHS is distrusted in 2026 it’s not difficult to see at least one juror having reasonable doubt.
Bonus for the defense: whatever is left of the DOJ, it’s mainly cranks, cronies, and people who can’t find work elsewhere.
Surely they'll just dig into as to why he set up the feature originally?
'I don't want some sketchy phone mugger to end up with sexy photos of my girlfriend/myself' would seem like a plausible reason to me, if I was a juror.
IANAL, but I think that argument would be stronger if there was a way of a mugger to use the pincode (like putting it on a note inside the case) and law enforcement just used that code.
That sounds sensible to me. But I am likewise NAL.
If you've refused to answer questions and giving them the password, and they don't have a warrant, taking your case off and inputting the mysterious number they found in there seems a lot more like them destroying your (data) property by oafishly trying to force access to a phone they have no business messing with, rather than you ostensibly destroying evidence of a theoretical undiscovered crime.
I'm sure they would still try to mess with you in a dozen ways for annoying them, but at least you'd be on decently solid ground in court as far as that goes.
Nice national parks, but no way in hell i m visiting this decade
Might take longer I assume. This has been building up since at least 2001 and I don't believe it will be faster they get healthy again.
> this decade
Do you think things are going to improve in our lifetime?
Maybe, with the help of measles, screwworms and explosive diarrhea...
> federal agents had already circulated his name and photo internally, saying he was under investigation for "suspected terrorism activities" because of his alleged association with the movement against Cop City.
This is practically the only thing I care about here and there are almost no details. What was his alleged involvement? How many others were targeted?
I think if I were headed out of country i would make a full backup of my phone, then wipe it and set it up using my old gmail account that i only use for spam and stuff, fwd my reservations to that account. I would not install my normal accounts on it. I would not install my bitwarden either. I would keep everything minimal, use web UIs where possible. then when i return, it looks like I use my phone and didn't wipe it but I also live a boring life.
Small inconvenience for me, but better than dealing with bullies.
In Catalonia, Spain, police have been profiling people carrying Pixel phones, assuming they have GrapheneOS installed and are drug dealers or gang members.
WTF.
Why the hell doesn't the "duress PIN" just open up a sanitary profile? Bonus points for letting you set it up with plausible data before designating it as the duress profile that, when opened, wipes your real profile in the background.
> "the screen went blank, flashed several times, and the phone appeared to restart,"
How about flash some red lights and play an airhorn sound effect, too.
Just a guess… but they would just go back and ask him for the real pin if they saw the profile was empty.
My understanding is phone’s security model aren’t designed for multiple user accounts
Android has had multiple users for many years, though it's a feature most smart phone brands turn off for some reason.
You can switch users just fine, you just cannot hide the primary user from the secondary user. Opening up the device also makes it a lot more vulnerable to attacks to dump the keys and storage.
Having multiple users is quite handy but it's not going to do anything at a border checkpoint that'll save you.
Recent Android releases have a Private Space feature, where you can hide not just files, but entire apps, their data, notifications, etc.
https://support.google.com/android/answer/15341885?hl=en
I wish ATMs had distress PINs, too.
The money comes out, but the cops show up.
At this point, GrapheneOS must introduce a feature to delete only specific data (apps & files) when the decoy password is entered, and then unlock the phone.
They would like to but it's not possible to make a robust feature like that because of low-level architecture of SSDs. Implementing a detectable solution would give people a false sense of security.
https://nitter.net/GrapheneOS/status/2081471477174456340#m
How is it different from smashing your phone on the floor and destroying it when asked to unlock? Just because it's a code that wipes it makes no difference. I'm not saying the agents were right to ask for it, but it seems like if you feel that your rights are violated you should refuse to unlock the phone, not destroy the content in front of them.
I think a wiser approach for crossing a border might be to have another phone with regular Android installed on it, so it doesn't look suspicious, and then connect remotely to your main phone. Before crossing the border, you would just need to remove the remote-connection app, and after crossing, install it again.
What I would like is a setting kind of like the already-existing safety feature on pixel phones. You set a timer and if you fail to end the timer or respond when it goes off, it calls 911.
Instead, I would set a timer before going through customs and if I don't unlock my phone and disable it within a set time, it initiates a wipe. I think that would be a safer way of doing this than a duress PIN.
So in GrapheneOS you enter your regular passcode to unlock it and a secondary passcode will wipe everything? Maybe it needs a third option where it just shows predefined apps/data, so it could just show e.g. WhatsApp, a set off chosen photo albums and some irrelevant office documents. Could also be useful for handing it to children, so they can access some games or whatever but nothing critical
Reading the comments here makes me think that even US citizens might be better off not trying to enter the US.
Perhaps a way to avoid this would be to have the duress pin trigger not a device wipe, but a device encryption with a long, pre-set key that you would store in a safe place when setting up the duress pin. Then you haven't destroyed the evidence, but the data is irretrievable without your cooperation. Also, if you don't actually have the key saved, it would in fact be destroyed, but the prosecutor would have to prove that you don't have the key saved somewhere.
This is one of those things the other comment calling the law "non-autistic" is referring to. In the eyes of 99% of people, it's functionally the same thing. "Well teeeecccchhhhnicallyyyyyyyy I still have the data..." isn't going to make the security workers at the airport slap their heads and say "damn, he really got us! Go on through!"
No. They'll arrest you just the same for obstructing their search. Then they'll keep you in detention for a long time while you say "I can unlock it for you! You just have to let me out!"
You can pretend you have leverage and say they need to cooperate with you. But once you're detained, police and prosecutors don't really care about cooperation anymore. Their idea of cooperation is you giving them what they want immediately without question. You're made into an example if you don't abide.
You are incorrect, US border patrol can not arrest you for refusing to decrypt your phone (if you are a citizen). It is not considered obstructing a search to refuse to provide a password. This is not "autistic" speculation about legal technicalities, there are many many examples which support this. The worst they can do is seize the device.
You're free to test them. See what they do when you say "it's not deleted. It's just inaccessible until I cooperate." Because it's identical in their eyes. People who confidently say "the government can't do that" rarely have a good day. They end up sharing a cell with the person in the article this discussion is about.
And we're living in an era where immigration enforcement can shoot Americans without penalty. It just makes the claims that the government can't arrest someone come across as naive.
I have tested them, that's what I'm saying! The belief that the authorities are completely unrestrained in their power serves authoritarianism. Creating this belief is in fact a major priority for the current regime.
This is not to say that things aren't bad, or abuses never happen. But if people fail to exercise the actual power and rights they do have, under a mistaken belief that they have no power and no rights, then that will become a self-fulfilling prophecy.
That's precisely what happens in totalitarian states, which the USA has been for a while now, but the propaganda keeps telling how much freedom there is so people didn't even notice.
The entire point of modern encryption is that the encrypted data should be indistinguishable from noise until you have the key in its entirety. Turning your data into random noise (whether or not there’s a secret code somewhere that can reverse the process) is destruction.
Why is the headline blaming the OS for what the user chose to do?
This is like saying it's my car's fault if I decided to drive onto the sidewalk or something.
Yes, the only relevant property is the use of a duress PIN. They could have simply stated that he erased his phone with a duress PIN.
But "GrapheneOS! Spain! Profiling Pixel users! Spain equates GrapheneOS to criminals!" sounds far more spectacular and will give more clicks/links. Sadly, it feeds the narrative that GrapheneOS is just for activists/criminals/whatever. An iPhone in BFU state would have been nearly as safe, but nobody makes these implications about iPhones because everybody has iPhones.
I mean, yes?
If 1% of iPhone users are criminals and 5% of GrapheneOS users are criminals, border search agents are going to be interested in your GrapheneOS mobile.
I am pretty sure criminals are more likely to use a super safe and secure phone that is easy to obtain.
Yeah, the way that this case is being reported on is really irritating.
While he technically did use a special GrapheneOS feature to wipe his phone, the criminal charges would have been the same if he had used the default "reset phone" feature on Android or iOS right before handing the phone over.
The real focus of this case should be on the reason for his detainment and the confiscatation of his phone and multiple refusals to contact his lawyer.
I have a friend who is a peace negotiator in the balkans for 20 years. He has lots of amusing (to my horrifying) stories of cat and mouse interrogations with the FSB etc as he travels between Moscow, Kyiv and the West. He uses threema and signal for most diplomatic conversations, but when he travels he only carries burner phones.
If you don't trust a government, ensure you aren't carrying any information you don't want to give up before entering their borders where you will be under their power.
Amazing that someone could be held in detention without even committing a crime. We are going back to pre magna carta and pre habeas corpus medieval justice. A lot of innocent people died in those times.
After reading more of this thread I'm kind of frustrated that people aren't aware of the border search exception.
I strongly disagree with the border search exception and would like to see it drastically limited or abolished.
It is also something that has clearly existed in caselaw for decades (arguably for centuries) and that the courts have routinely (to my regret) strongly reaffirmed.
The border search doctrine says that border agents do not need a reason to examine you or your possessions when you are entering the country. They do not need to believe that you are doing something wrong or committing a crime. If they suspect you, they don't need proof or a good reason to investigate you.
I find this doctrine very disturbing and I hope it will be changed or narrowed. I also would like people commenting in this thread to understand that border agents are not just imagining things when they claim to have legal authority to inspect people (or, alas, electronic devices or data) at the border, and that this didn't just start under the Trump administration or something.
The legal consequences of providing a duress PIN may not have been tested and this defendant could well prevail in this case. I just wish people commenting here would understand that there is a tremendous amount of history related to border search authority. You can disagree with it (I hope you will!), but you should understand that it's not just something that someone just made up last week or last month or last year.
As a citizen the safest way is to just refuse. They can’t refuse entry. Not the same for LPRs.
Also not a good idea if you are a citizen with non-citizen family. I assume at this point that anything on my record will come back to haunt them.
The article seems to be muddying the water bringing up grapheneOS itself. Or maybe it's the EFF.
>Experts said the legal approach is unusual and may be the first time the law has been aimed at an operating system. "It's concerning – and sends the message that [GrapheneOS] is criminal by default," said Christophe Boutry, a cybersecurity and surveillance expert. Boutry and Bill Buddington, senior staff technologist at the Electronic Frontier Foundation, both said they had not seen a similar case.
Is the actual case about banning the OS? Because it seems pretty clear the case is about the result (the phone being wiped with a special passcode).
The better defense imo would be one of those 'wipe the phone if you get the password wrong x times' and try and claim you forgot under pressure. At least if you wanted to wipe the phone without being accused of destroying evidence during a search.
Probably wiser to have travel-only devices that are clean by default
Following this being in the news, GrapheneOS wrote this post summarizing the data extraction defense: https://discuss.grapheneos.org/d/40700-grapheneos-protection...
On the duress pin, they say (read the whole thing though):
> People should carefully consider how to use it in an actual duress situation where there can be physical or legal consequences for wiping the device.
So let them just sieze your device. Don't unlock. You'll get it back in a few months.
maybe write down the duress pin somewhere in your wallet. let them make their own assumptions and erase the alleged evidence on their own.
By raising the profile of airport seizures all it means is that serious criminals will wipe their devices prior to travelling and restore afterwards/buy a new device for travel.
The powers of investigators special rights and abilities rely on them being used very rarely. Last thing the terrorism investigators want is media coverage exposing their tactics.
Wiping could be the last resort. Instead how about auto creating a new profile! As far as I remember Android profiles isolate apps, files, and system data and providing a fresh environment without erasing the device. To make it feel more authentic there could also be an option to automatically install a few commonly used apps by default. Thats it. (assuming the officials don't have time for an thorough inspection)
There are forensic tools that can probably bypass those. I don’t think the agent is just going through your phone by using the phone itself, though maybe it is that stupid, idk.
Why did he do this? Really, if this is a way to protect your privacy, then it's a bad way because it causes such a scenario. Of course it works well against the stolen phone scenario, but not again "state authorities suspect me". Especially if this is the authority of some authoritarian state, where your rights do not really matter. Maybe he did this as a protest act?
I'd love a feature where if you enter a specific passcode it unlocks the phone into a different account that has curated things in it. Pictures, some pre-approved apps, etc. So you look like you've cooperated but you haven't really.
And each user's home directory is stored on a separate hidden partition that is encrypted with another PIN so that even if the device is rooted they can't look at the other user's data.
The duress pin deletes the encryption key information used to decode the documents and does not damage the documents themselves.
Not sure why the police and news are saying that he destroyed evidence, since the evidence (as it always has existed before the search began) remains on the disk.
Someone else commented about the law being “non-autistic”, this is a perfect example of that. The technicality of the encryption keys vs the files is irrelevant, the intent was to successfully prevent a search. The border agents will not be even remotely impressed or suddenly decide to release you just because you say “well the files are technically still there”.
What they should really do is make the decryption key backupable.
Then you can keep it at home, and you can genuinely say that you don't remember it because it's like 128 digits.
And you're not "destroying evidence" in the jurisdiction in question because the phone is already locked. And you can't unlock it on demand.
Perhaps a defence to this is ensure that a copy of the encryption key exists in a location outside the jurisdiction of the state.
From the article, I saw this:
I didn't know about Cop City, but I found this on Wiki: https://en.wikipedia.org/wiki/Cop_CityThis part is interesting to me:
From my outside view, it looks like these investigations are nothing more than an attempt to suppress free speech and protests.For anyone unaware, RICO is both a Federal law and a Georgia state law that stands for: "Racketeer Influenced and Corrupt Organizations". It is used to take down mafia, gangs, organized crime, etc. It is a bit sad to see state prosecutors trying to use this against protesters.
I'm not doing anything the government should be worried about. Nevertheless my pin has for a long time been longer than standard, specifically on the very long-shot possibility someone decides they want to crack it.
Anyone know if this is a viable strategy on iOS, and what the required pin-length is these days?
There are laws against the destruction of evidence, but I'd argue that there's no evidence in this case since they don't have clear-cut knowledge what's on the phone. It's potential evidence at best and it's therefore not clear if the law applies.
If Customs already knew whether the suspect had incriminating files on his/her phone things might be different.
> if customs knew...
Even then, they'd have to produce such in court. ?
Its best for all of us to figure out how to use phone-as-a-linux-vm with the physical phone just hardware. It will solve many problems: commoditize the phone ecosystem, eventually making them repairable, run our own apps instead of apple/google. Access phone-vm from laptop/desktop ...
Wouldn't it be better from a legal standpoint to power the phone off and refuse to give your pin in such cases? A no-pin cold boot is pretty hard to recover data from with GrapheneOS.
Most likely, at least you are not doing something irreversible. In all these cases, the best answer is "ask a lawyer". Before wiping a device in possession of law enforcement you definitely want to ask a lawyer.
I realize that in this case the person repeatedly asked for a lawyer, but if you are in a borderline authoritarian state, all bets are off.
> The motion also states that Tunick asked four times to speak with a lawyer and was denied each time.
This is the kind of thing that loses cases, even if they were legitimate at first. Seems like the prosecutor is desperate charging for the phone wipe cause they didn't have any evidence of terrorism, child-pornography, etc. The problem they have now is given he was in custody and agents pressured him to provide the passcode that they then incompetently put into the phone, the fact that they denied him a lawyer multiple times means there is a very strong argument that his rights were violated. Typically, courts suppress any evidence when there is a violation like this with someone in custody. So the compelled passcode, the phone's reaction when that passcode was entered, and the agents' testimony describing the supposed wipe would be thrown out by most judges. What's left for the prosecution after this is jack and shit, but jack left town.
They violated his rights and he pulled a prank on them. They need to chill out.
Perhaps we need the following feature:
Before entering the airport you set your device to auto-wipe after x hours.
Once you are sitting in the airplane and flying, you cancel the scheduled automatic wipe.
A GrapheneOS is most likely completely secure in BFU state [1]. So just switch the phone off or reboot it and don't enter your PIN. It is very unlikely that law enforcement is able to decrypt the phone and it does not put you in murky legal terrain, because even an auto-wipe is intentional (IANAL).
[1] This is in contrast to many other Android phones outside Pixel and Samsung flagships, because they are too cheap to add a secure element, which iPhone has had since 2013 and Google Pixel since 2018.
Nothing is completely secure. Your data is less likely to be accessed if your device wipes it.
> even an auto-wipe is intentional (IANAL)
It's also something that's very hard to prove.
Sort of feels like he should have wiped it right away, not after they seized it (by giving them the “wipe me” passcode). No idea if that’s how the law works, just my gut reaction.
There was no warrant, nor any court order compelling him to provide the unlock code. They had no probable cause, other than that they had labeled him a "terrorist" because of his political activities. The CSAM pretext was provably just a pretext. If he gets good representation, he should be able to (eventually) beat this rap.
If he had simply refused to provide the unlock PIN, he would have walked away. They may have kept his phone, but they would never have got anything from it anyway.
His mistake was giving a passcode he knew would destroy the data on the phone. Instead leave the destruct passcode written on a scarp of paper inside your phone case.
> During the questioning, agents repeatedly asked Tunick to unlock his phone and warned they would seize it if he refused. When he finally provided a passcode, the phone appeared to restart.
I'm confused to understand if Tunick did anything illegal here. If the authorities want the phone, they should have the warrant and seize it without Tunick's permission.
It appears authorities did not have the warrant which give Tunick all the right to do whatever he desires with his property.
What am I missing here?
They don't need a warrant to seize the phone at the border. They were after the pin code, he should have just refused to give the pin. That's the 5th.
What they got him on, is that supposedly he destroyed evidence.
Among other things that CBP does not need a warrant to search or seize anything and everything at a border. Everything is subject to search at the border. To make a seizure all that is needed is reasonable cause that customs law/regs were violated. And there are specific federal laws relating to thwarting such seizures.
If you don’t want something searched do not bring it across the US border. There is very clear constitutional and statutory authority for these searches.
> To make a seizure all that is needed is reasonable cause that customs law/regs were violated.
What would be the reasonable suspicion that a USC bringing their personal phone on a trip with them would be a customs violation?
That doesn't sound at all reasonable.
In fact, the only "suspicion" they had was that he was someone who didn't like LE or Trump which is still not a crime, nor a customs violation.
No idea if its true, but one rumor mentioned was he was suspected of possessing CSAM
It appears to be illegal to destroy property to prevent seizure. I don't know the details; if you search that phrase you can find more info yourself.
Did he actually destroy any property, though?
I guess the jury will decide.
Where will they find 12 GrapheneOS users?
(The peers)
CBP doesn't need a warrant to search at the border, including electronic devices.
However, if Tunick was smart he would have refused to provide the PIN, and let them seize it. He'll get it back eventually, but it was in his right to refuse.
Never piss off the minions of the Supreme Leader.
If they were searching for evidence of a crime, what crime was it?
They claimed they were looking for CSAM. There's a border search exception to the fourth amendment that says CBP can search your phone at the border. You aren't required to give them a password (but possibly a fingerprint or facial scan) but they can temporarily sieze it (and do god knows what to it).
The crime of disagreeing with the President.
The downvotes you get on this website for being completely correct never cease to astonish me.
I'd like some filter where if a comment is downvoted by IP addresses located in USA, they are considered as upvotes.
That isn't a crime in the US thanks to the first amendment.
> That isn't a crime in the US thanks to the first amendment.
Technically correct is not the same as practically correct.
Doesn't mean they won't still dump your phone and detain you as long as they can if they see a meme they don't like.
They can detain you for days if you're not white. (Kavanaugh Stop)
I feel like the advice given by IT departments for years was to wipe your device ahead of travel, and restore from backup upon arriving. Or, to take a travel device.
So much for innocent until proven guilty.
I suspect that this will ultimately be thrown out for a very simple reason which is that the government will have to prove that a duress PIN was actually entered. That is going to be quite difficult unless the person charged openly admitted it.
The reason is because anyone running an os with a duress PIN that has done nothing wrong can be accused of using a duress PIN because the whole point of the duress PIN is that it looks like you just have a normal phone.
Running a normal apple operating system with just stock apps? Boom, you're a criminal because you obviously used a duress PIN and have something to hide! There is no way to prove you didn't use a duress PIN because the phone was "wiped."
Now unfortunately grapheneos probably leaks information so that a duress "unlock" can be differentiated from a standard unlock by some means. If not then kudos. It looks like it is done instantly by keeping everything encrypted and just zapping the keys, but it also needs to actually unlock to something instead of rebooting to prevent leaking the information that a duress pin was used. Not sure how fiesable that would be though.
I'm a GrapheneOS user. The duress passcode feature will reboot the phone to a "corrupted data" screen, so it's pretty obvious that it's been used to render data inaccessible.
So having a Casio F-91W and a Pixel 9a at an airport in US basically sends me to Guantanamo?
Its the new brown skin.
It seems to me that this should have been a case of steganography?
Instead of wiping it clean, wipe to innocuous mode. Then the burden on their part is not only to show that I gave a bad pun, but that the innocuous mode is materially different than the previous state.
creating a convincing and actually safe innocuous mode is probably harder than it sounds in practice
Rather than wipe the phone to an obvious reset state, this feature should boot into a benign setup with normal contacts etc. after it erases the user's data. Let the user periodically boot into this benign setup to add basic contacts etc.
Maybe also shows that the duress PIN feature could be implemented better. Booting into a completely fresh phone is suspicious. There also shouldn't be any visual or other indicators of that happening.
In the old TrueCrypt containers you could set an optional second password that would decrypt a different volume. The size of the container file was always the same, a decrypted volume always showed the full container size, the portion not occupied by the data in the main volume was filled with noise, and the data on the non-loaded volume was not protected (so you could erase it without warning by storing too much on the loaded volume), making it practically impossible to prove the existence of a second volume either way in a search situation. I guess there was a reason why the project was stopped.
The problem with this feature is that the agents could realize the phone was being wiped. For the duress pin to be 100% effective, it would have to log in normally to a default install.
They have absolutely no idea if evidence was destroyed, and the only thing he is charged with is the possibility that it was.
One clean implementation of this is to wipe everything on the 2nd password failure.
Why didn't the device shadow-ban the user instead of wiping the device upon entering the wrong PIN?
Of course TSA agents become angry when they enter the PIN and see a message "wiping device".
Charged is not convicted. Anyone can be charged with anything if the prosecution is vindictive.
Obviously you should just write the duress pin on the back of the phone inside the case. If the ask what the PIN is for, stand mute. If they enter it, it is their decision.
AFAIK border agents can even clone your device if they deem it necessary.
The only safe thing to do is to backup your phone. Wipe it and go through the border. And then restore the phone.
Privacy and security are important, but there should also be clear legal guidelines for such situations.
Clear legal guidelines for which country? Or, better yet, for which subdivision within said country?
anyone would think that wiping entire device than giving sneak peak about what is in the phone is 100% sus as hell
why would you need to carry incriminating data with you when travelling? An encrypted blob stuck 'somewhere' would be fine, no?
Duress pin should unlock a benign version with ai generated chats to ai generated friends about the latest benign topics.
In the Age of LLMs we could generate a fake digital existence as fast as we can delete a real one.
The goal is to appear like you complying without any evidence you are not. Graphene — build this feature!
It feels like if he triggered a wipe - that is destruction of evidence; but if it auto-wiped he's fine.
If it were a box of drugs and he triggers an incendiary device - he's in trouble . If agents trip a protective boobie trap and destroy the box- he is fine.
Don't know why but this feels correct to me.
Ok, so I'm just angry so take this comment in that light please:
1. What happens if the masses just do this? Today it's just a few folks who know how to do this. Tomorrow it could be 10, a year later 100. What's to stop 1000s from doing this and then what is the government going to do? Ban the OS and block it on Github?
2. What exactly happens after you're charged? This doesn't mean the person is convicted. Just that they now have to show up to court wherever the trial is held and have to retain their own lawyer (or public defender?). And what is the likelihood that the case is thrown out or the person is convicted and receives a stiff penalty?
I ask these questions because as far as I can tell, the person was not suspected or convicted of anything, and it's infuriating me that we are just going to stop random citizens and ask for their private data.
There needs to be a simple feature to wipe your phone and then restore to a point and time. That’d be really convenient.
Seems like a good court argument too—no destruction of data was even attempted because I know I have my iCloud or Google backup. Personally, my phone has access credentials to information, but not the information itself. So you need a serious warrant before you can get those access, but the data is there.
I agree that it seems a simple argument for any competent lawyer to make that the phone isn't the "gold copy". The phone is just an ephemeral copy of the real data which is safely stored away in the cloud, and the authorities can request access to with the proper warrants.
Of course this argument will only work if the phone is indeed and a ephemeral copy of your real data.
Honest question: Does a wipe just wipe what's on the phone, or does it also tell the cloud to delete stuff?
This case will only help make more criminals aware of this possibility.
In fairness to the victim, he did really need to have that phone. What if there had been a restaurant with a QR-code menu? What would he have done then?
So yes, we've created an authoritarian hellhole, but the alternative is even MORE unthinkable: struggling to pay for parking in some areas, needing to visit a website for a menu or (GASP) visiting a different restaurant, or just having a friend order for you.
No, these are too much to ask of anyone. No one can overcome these challenges. The only answer is to weep for the liberty that we have lost.
Every day I thank the lord that I left the US for good and never went back
I would be very interested in how you did this / where you ended up. Feels like an impossible task every time I consider it.
There’s been a large uptick in immigration from the US to Ireland; almost ten thousand last year. In general, people would do this via employment; software engineers and similar would generally qualify for a critical skills permit. For critical skills, after two years on a stamp 1 visa (tied to a specific employment) you can move to a stamp 4 (not tied to specific employment). After five years working in the country you can apply for citizenship.
Other countries are worse legally than USA, including uk
As this is Hacker News the focus is on GrapheneOS. I think the background issue of Cop City and the hysterical over reaction of the state of Georgia and now the feds to the protestors deserves discussion as well.
The criminalization of activism (domestic terrorism, really?) does not bode well for freedom of Americans.
https://prismreports.org/2023/06/07/escalating-tactics-again...
A few things:
#1. The download and restore backup method would work- except it doesn't capture what people would need. Exmaple: I have some thermal cameras that rely on old 32 bit apps that do not run on anything android 12 onwards- If i wipe those old phones, and restore- the apps often wanted to reach out to a server for initial activation- they would fail upon reinstall and i'd be out of the apps that are required to control my cameras and related equipment,which is worth thousands and thousands and thousands. And it'd be all dead weight and rendered useless.
(and competitors today do not compete- for example try finding a 640*480 30 hz or better form factor thermal camera that attaches to phones - they dont exist anymore)
\The solution is imaging- but there isnt a way to fully image phones and restore backups today. There used to be it seems- but not really with the latest.
Veracrypt- The weakness of truecrypt and veracrypt, the hidden OS option only worked if you converted your computer to MBR, which means you can't have a hard drive too large. Making a UEFI hidden OS has not been done yet.
I am aware of Shufflecake attempting to make a solution.
And the Hidden Volume option- isn't 'as' useful, and of course, your OS might make a copy and put it somewhere, you have to be careful. Any time I open a file, using the software tool Everything to search and confirm this- you can easily see Windows makes copies and temp files and whatnot in randomly named locations- that's the sort of behavior that would screw people over
We need fully image-backup capable Phones. I mean fully. Not just backing up some apps- as this refuses to backup apps you have that are no longer on app stores, or that Play Protect doesn't like, etc.
Next- Plausible deniability is a way forward- but you need multiple profiles, that are cryptographically indistinguishable, along with the phone being hardened so GreyKey /Cellebrite won't be able to exploit a way in. This needs to be built this way from the ground up ideally, eventually.
There has been research about making devices that treat all block space the same way so you can't tell if someone has 1, or 50 profiles or partitions, etc- and even stuff that overlaps. But nothing has come out - and especially, for phones.
After all, if you travel to a hostile country, you can tell them you have just one profile, and if they ask, you could theoretically mention a 2nd, and then show it- but you might have 3 more - and they'd all be immune to forensic inspection if the system is built right.(Yes, there's often issues you have to be careful of ,like setting this up so you dont destroy data when in other profiles,)
This is how you solve this problem -make computing devices impossible to analyze
This sends like a more-info-requiered situation. Per this article, the LEOs seemed to be fishing, so they presumably couldn't claim as a matter of fact that evidence had been destroyed. Also, claiming destruction of property seems unreasonable since the phone, the property, still exists as before. If I sell my phone, I'm going to wipe it. I think we all understand that it would be ludicrous for the buyer to claim I was destroying the phone, the property they've been sold, by doing so.
Even if the accelerated executive capture of the judiciary is largely ruled back post Trump (big IF), I fear the government will be unwilling to pay with much of the convenience of rule-by-law that it's been given a taste for.
Instead of a PIN that wipes the device, it would be much better to setup a special PIN that logs the user into a sanitized, completely separate profile with generated content of no practical value. This would create plausible deniability, and be sufficient to allow low-level border agents to look through a phone and pass any checks without raising these kinds of alarms. The wipe PIN should still be an option, but should be separate, and only be for cases where you suspect a forensic imaging or search of the device is to take place and the legal consequences outweigh the risks.
This. Aka a Qubes style isolated image.
and what part of "search my digital device for words and phrases" is expressly allowed by the fourth amendment that protects against warrantless search and seizure? oh yeah, none of it. that's right. the fact that agents are conducting broadsweeping searches in clear violation of The Constitution is so painful it's almost laughable. it being a "border crossing" applied to digital information and not just the contents of my suitcase is an appalling transgression of the spirit of the law. also why is your device programmed to self-erase? that's also incredibly sus.
smuggling endangered species? bad. okay search a suitcase.
having unrestricted access to all my gmails because i need to catch a plane? absolutely unacceptable.
having your phone autowipe when pressed by authority? quit whatever nefarious shit you're doing, thanks
Is this an ads for GrepheneOS?
You wouldn't be surprised if that happened when traveling to China or any other autocratic country.
I think the issue is that people expect the USA to be the "land of freedom" when it's not anymore. It's turning more and more into an oligarchy and we are at the point where it's just as bad as russia or china.
If i was offered a trip to China or russia, i'd go but i would take a burner phone with absolutely nothing important; It's the same for the usa now.
No, as someone who lived in China for years (as foreigner) and visited also last year after many years I WOULD BE SURPRISED if this happened when travelling to China, since China is clearly more free than US/Israel.
China wants tourists and don't care about your stupid social media.
Gotta wonder how it would've gone if the citizen hadn't mentioned GrapheneOS at all and instead tried to sue them for wiping his phone without his permission.
Having just gone through having to give pin to cbp you just need the apps on your phones to have separate pins so when police unlocks it, they cannot unlock WhatsApp afterwards. Faceid or unique pin. Problem is your phone pin overwrites Face ID
What nobody has commented yet here is that the incident is 7 months old but we're only hearing about it now. Imagine the incidents we DON'T hear about at all.
maybe have the default behavior for the phone to reset if it doesn't get the right pin every so many hours
"Prosecutors say the OS erased evidence"
It's his device, so he can do everything he wants to. The USA is currently re-purposing constitutional protections. A judge has not signed these warrantless seizures, so why would the individual be under any obligation to cooperate? Besides, why would anyone want to incriminate oneself? The onus would be on the state to prove a guilty state.
it's a bug: the wipe should only apply to a see secure enclave, and the phone should restart `normally`
How dare he outwit a bunch of nincompoops. If the United State was a nation of laws this suit should be tossed with prejudice.
It has always fascinated me, the degree to which airport staff feel so important, as if the world would stop revolving without them.
Related, There was a local guy who was held 'in contempt' for 4 years for refusing to turn over his password/encryption key
https://arstechnica.com/tech-policy/2020/02/man-who-refused-...
I don’t understand why phones can’t just have decoy profiles you can activate via PIN that look like regular harmless user profiles? Especially now with AI you can quickly populate with a bunch of plausible data.
Or better, have PIN for taking you to your criminal/secret profile instead.
How would it work? Isn't it easy for the authorities to check the list of users on the device?
The PIN you enter determines what profile opens up, and they are not connected to each other at all, they are isolated.
Anyone else running box for local ai on android ?
www.github.com/jegly/box
In Russia? In China? In Iran?
Nope, in the US.
Dystopian reality. Sounds like Russia.
> US prosecutors charge Atlanta man after GrapheneOS phone wipes itself during airport search
I really don't like this title. Officers asked him to open the phone, which he pretended to do, but instead wiped the device
> During the questioning, agents repeatedly asked Tunick to unlock his phone and warned they would seize it if he refused. When he finally provided a passcode, the phone appeared to restart. The defense motion states that "the screen went blank, flashed several times, and the phone appeared to restart," resulting in the loss of data.
The title implies the agents maybe entered too many pins by mistake and the device auto-wiped, or that it reset itself with no human intervention, which isn't what happened. This is more like shredding paper when the FBI arrives at your office, which most people would attribute to destroying evidence. I hope he wins the case in principle (I think there's a risk of a slippery slope here) but it wouldn't be a moral tragedy if he lost.
Dude I said 1,2,3-FIVE! jesus did you break my phone?! What the hell did you do?! Man my wife is going to be so mad she didn't even want me to upgrade to a new handset.
[dupe] Discussion: https://news.ycombinator.com/item?id=49024436
could graphene support multiple duress PINs?
feds: "unlock your phone or else" victim: "um, you're stressing me man. It's either 1234 or 4321, I forget. One of them wipes the phone, the other will unlock it."
Whichever PIN they try, it wipes the phone, but the feds can't claim it was deceitful, just unlucky.
This grapheneOS may be another scheme from the 'deep FBI'/'services' to get intel on the very, VERY, nasty (terrorists, human traffickers, drug cartels, child stuff, etc). If I recall properly, they did that in the past (it seemed to have worked amazingly).
If so, "normal" police would not have the "keys". This would be "the compromise".
why not just have a separate device for traveling ?
Yeah, that's my position.
If you're paranoid enough to be using GrapheneOS, why would you take it to an airport in the US of all places?
I bought a second hand iPhone for overseas trips, which my daughter promptly stole because she wanted an iPhone, but then i got her old android phone, which was LineageOS-compatible, so that became my travel phone.
How do you manage data between your primary and travel-phone?
I _think_ you would need a fresh iCloud account (thus losing access to purchased apps and subscriptions). You also need to manually create fresh social media accounts, copy over contacts, etc.?
Any advice on how to automate this process or is this just a 2-4 hours exercise you do before your trip?
A couple of hour exercise setting up the minimal amount necessary for the travel beforehand. Then once you're at destination, you can set up everything else if you want.
I don't have a lot of "everything else" anyway, so my device would probably look suspiciously 'clean' even if it was my in-this-moment daily driver. (HN is my news and social media). I don't use banking apps, but the irony is that I would need to whilst overseas.
One of the funny things is, I should be able to re-setup any device with an old gmail account at any time in any place, but with all the extra security these days, you need an old device to authorise the setup of a new device. I'm going away early next year, so I'll need to have a dry-run of the setup...
Do you have separate iCloud accounts? Keychain syncing kills me...
Definitely dry-run. I didn't do that and it was a huge pain to recover everything.
I was hoping to have to setup a whole new apple account for it. I'm normally Android, but cage across a cheap second hand iphone at an auction - but my daughter wanted it, so it never happened.
It would be easier for me to just go Android, and I do have spare older devices now too.
You mostly don't sync any such data. Prepare some file (or a few files, including an .ics for itinerary or what-not) with information about your trip, a few days in advance, and copy the file(s) to the phone. That's it.
And if you use iCloud or any of that stuff - you've already lost; Apple, and the US government already have access to your files and communications before you ever came to the airport. Sure, maybe it's not the specific border guards who have the access, but still.
GrapheneOS is excellent but seems like it just brings unwanted attention at this stage.
Another plus is if you do lose the device the damage is minimal, its a bit of a hassle but nothing beats peace of mind
The US is known for it's freedoms and protections. It's one of the safest place to take a personal phone.
Welcome to 2026, you have a lot to catch up on. Maybe sit down for this.
Apparently not
- e-sims make it much more difficult to swap sim cards between devices.
- presumably border patrol wants to see his photos, social accounts, and email. A separate device with a copy of the information they want isn't a defense. Creating fresh travel-only accounts is tedious, b/c fresh accounts aren't connected to your friends or network (with whom you'd want to share your trip with).
you could login to your stuff after but the point is to minimize damage when you do lose your device abroad
laziness isn't an excuse and if you do want access to your phone or device at home you could setup that as well
TIL about cop city... Wtf?
he doesn't need to do this if all he doing is legal
[dead]
[dead]
[flagged]
[dead]
I just wouldn't want my dick pics to get out.
My airport phone is full to the brim with them - I want to watch the officer to check every single one.
Wouldn't be surprised if they charge you with exposing yourself.
While I like the idea behind GrapheneOS, I'd rather not place myself in jeopardy of some ridiculous charge like this one. I prefer to travel with a travel device, some inexpensive phone and/or laptop that contains nothing interesting. If they then wish to take it from me because I won't unlock it, then have at it! That said, the situation with respect to our Bill of Rights at the border has gotten ridiculous.
The "duress PIN that nigh guarantees destruction of evidence charges" functionality is extremely stupid, but otherwise GrapheneOS on a flagship phone is your best bet for an Android phone that can't be cracked by low-effort attempts, government or otherwise.
My bets for the actual story behind this are: 95% a criminal hiding evidence 4.99% an autistic attempt to "keep his privacy" for no reason at all 0.01% a genuine need to keep something away from the government
In all cases just don't cross security checks with evidence you wouldn't want to be seized, its not that hard
Wrote someone who's got a CCTV camera installed inside his toilet bowl, no less! Right?
The Bentham business is alive and kicking.
To everyone who thinks this is somehow a violation of rights: if you were being questioned by border officers, and were asked 'Sir could you please open your suitcase', and you pressed a button that caused it to burst into flames, there isn't a country in the entire world that wouldn't arrest you on the spot. Why would 'wipe a phone when officer requests it opened' be treated any differently? Suspicious behaviour is treated as suspicious by normal people.
It doesn't sound like this person pressed any buttons. They were pressured to provide a PIN or be delayed and further harassed. They obliged, and agents decided to enter it to attempt a warrantless search of the phone.
It's not stated, but probably we can assume the person didn't ask for his phone to be searched - probably he asked NOT for it to be searched, at least based on his multiple requests to talk to his lawyer.
Considering those factors, I'd say border patrol is more responsible for wiping the phone than the person.
Right, but by that rationale, it’s also suspicious to say “no” when they ask if they can open your suitcase. Or decline to tell them where the key is. Or ask to speak to your lawyer first. Or refuse to tell them what is in the suitcase. Or lock the suitcase in the first place. And I want to live in a society where those behaviors are protected.
(1password has a “traveling” mode that wipes it of sensitive passwords before going across borders. Is that suspicious? Should it be criminalized?)
If they ask to open my suitcase and I say 'no' that is suspicious. I've done a lot of travelling and have been questioned more than once: being candid and transparent has always been prudent.
Yes, they would be rightfully arrested for setting off an explosive device in an airport. This analogy ... isn't great.
material =/= information.
Are we supposed to live in a world where if I'm crossing a border I must give access to all of my information? That's absurd and more equivalent to a full brain/memory scan than a suitcase search from your example. This is dystopian in every sense of the word.
The Overton window of this fucking prison planet went so far that there's little to no discussion on how absurd and dystopian it is.
And rest assured, when it gets to actual full brain scans, the corresponding threads will be chock full of scum tasked to normalize that.