That's the same problem with technical solutions to crime.
I come from a very dangerous city and I used to have a car that needed a PIN to work. You could turn then engine on and drive but after a minute if you didn't input the PIN it would turn off without warning and start blasting the alarm. The idea being that if the car was stolen the thief would be stranded not far from home unsure about what's happening. Great technical solution but it ignores that a lot of the time the car is stolen with you in it (in a kidnapping, for example). Having the car shutoff in the middle of a highway next to a panicking guy with a gun and trying to remember a PIN is not a situation you want to be in, so I just had the PIN number written down on the dashboard, which worked very well when I was eventually kidnapped and just pointed at the piece of paper with the number.
(Is this in South Africa?)
https://en.wikipedia.org/wiki/Express_kidnapping
"This type of kidnapping does not require much experience or preparation and is suspected of being committed by inexperienced criminals more often than not."
https://www.eff.org/document/eff-border-search-pocket-guide
----
Seems the better strategy (for iOS) is come in with a plan to say yes to agents without pissing them off (like handing them an empty phone).
better to local back up, encrypt, upload to your home server etc.
Then login to a fresh iCloud account, selectively install apps, photos, and mail accounts. So it doesn't look like you're walking in suspicious.
*Unless you are (well) known dissident/journalisy/politician.
US is much more totalitarian than China. Lived in China for years, had multiple times various visa/residence permit issues with police and guess what, nobody cared about my electronics or was sending me to any detention, all I've got were quie helpful officers trying to find workarounds for me to deal with the situation.
Same thing on my last trin in summer 2025, we didn't stay in hotel, didn't go to register to police as you are supposed to and when crossing province border checkpoint guess what happened - they let us go to our tourist sight and told us to just register after weekend and as usual officers in police station couldn't care less, they just registered us without any issues.
You can complain about plenty things in China, there sure is a lot of bureaucracy but when you actually have to deal with them, they are pretty laidback and trying to be helpful usually.
By these standards and my experiences with registration in police stations in other two EU countries I can tell you China was the friendliest most laidback and convenient experience.
People who claim China is totalitarian dictatorship clearly never been to China and should get off their high horse, China nowadays make less trouble for their own citizens than EU hating them trying to make lives of EU citizens as inconvenient and expensive as possible.
The next 2 years will be interesting for democracy as a whole.
And although I don't agree with the CCP ideology the Shanghai subway is ridiculously impressive.
It's common to mix up developing/developed and third/first world because they were largely aligned during the cold war. But there is one first-world developing country.
(I'm not the person you replied to, I have no idea)
That said, I think protecting your privacy is a good idea in general.
... which by now is a banana republic of the worst kind. Can you interact sanely with an insane counterpart? Avoiding to visit would be my recommendation too.
The US is quite transparent about these rules, and certainly other countries are not necessarily searching peoples phones as publicly
But anytime I transit a country USA or any thing I fully expect to have zero rights
They've deliberately made it very easy to request arrests across borders, so it isn't all rosy. One of the reasons it really sucks for everyone when an EU country starts slipping towards fascism.
That is so sad, man. How is this normal for you?
Trump’s America: when confronted with negative traits of your country, always assume your country is the lesser of all evils.
don't bring anything organic to Australia unless it's been commercially processed, and even then show it to the border officers so they can make the call. You don't get penalized for showing them something not allowed, you just can't bring it into the country, and they throw it in the bin for incineration. Penalties start when you try to sneak something in anyway.
> and about not angering the agents more than you plan to
When I was a teenager (long ago at this point), I got into an argument with a police officer over surfing in a certain area. It was pouring down rain, so he was annoyed he had to sit outside and wait for my friends and me to come to shore. Once we got in, he was telling me that he could take my surfboard and my car, and all other craziness. Being the dumb smart-ass I was at the time, I laughed and told him he was full of shit, among other things. He went to take a swing at me but his partner grabbed him.
We all go to court and the judge immediately dismisses the case against all my friends. I had a lawyer with me that I knew and he went to talk to the cop and when he came back over he goes "I don't know what you did, but that cop hates you." I get up in front the judge and he praises me for understanding the law (and I could still see the cop was visibly pissed), but then says he can't have me disrespecting and being a smart-ass to his cops and gave me community service that once completed whatever the ticket was would go away.
Maybe it's just me, but I am of the exact opposite opinion. Cops have enormous power, and any misuse of it should be pushed back on hard. Cops that misuse their power should not be respected. An informed citizenry is a wonderful asset in making that power imbalance less of a problem.
The parent described a story from a different reality - one where people are people, where communities have basic expectations of conduct, and authority is respected on all sides. The cop was angered and snapped (bad), but was stopped by their partner (good, and it's one of the reasons cops have partners!). The parent was a kid who behaved like an asshole in a moment, by their own admission. Plenty of teenagers act like that, it's an age-old more. The judge did not act as a proxy for the angry cop to retaliate, but instead reacted correctly by both praising the civic attitude (to the chagrin and I imagine further embarrassment of that cop), and addressing the behavior that is not welcome in a civilized community.
You can't have it both ways. You can either have civilization of people, or violent hellhole of laywers and robots. Pick one.
(And if you pick wrong, then don't complain, and by $deity, don't export these attitudes overseas, please.)
So why did he not give the cop community service then?
yeah that would be pretty petty, given that most people in their lives are able to perfectly deal with such behaviour, whether it's their job or in personal life, without a judge to slap annoying people on the wrist
what is this prima donna behaviour?
it is them that need to work to deserve their uniform, they need to understand it is an honour they have to keep up, be the better person. if you can't do that, you have no job wearing that uniform.
but I guess their narcissism must feel strengthened by people like you arguing this is perfectly reasonable behaviour for officers of the law
you can have it both ways, you just need to want it
A judge solving their own problems in this way is clearly abuse of power as well
Unless you want to fight that all the way up the judicial food chain
I'm sure there are scenarios where the cop can confiscate the surfboard and the car. The distinction is probably somewhat vague even for highly educated lawyers, and cops cannot expected to be that.
He should have stood up for his rights, sure, but laughing in the cop's face and telling them they're full of shit is disrespectful, and at least where I live is a misdemeanor even if the original case is wrong.
I'm not sure how this suddenly flips for cops
... or otherwise, that people in your community could not apply any counter-pressure to such judicial behavior, in the media and public fora.
The ordinance was removed a few years later. This cop was also known to hate surfers. All the small beach town BS you hear about.
Most people don’t have boundless time or energy and just want things to go away.
… ironically this fact is used a lot in gaining confessions by police.
I don't think it ever makes sense to transport actual data across borders if you care about governments gaining access to it.
Then everything else is documented inside Bitwarden. It's just a matter of installing the apps and logging in using the credentials stored in Bitwarden and a 2FA token generator.
There's no need for relying on any phone OS features.
I wonder if border agents could coerce you into giving access to your internet file storage, though.
Another question is if going with a burner phone that has just sim card and bank card, sufficient. But then you need appleid/google account on the device, and this again links back to your phone number, and it's not easy in practice to have proper clean device.
People have been doing this since way back in the TrueCrypt days - IIRC you could configure it to run a whole fake version of Windows if you wanted without easily revealing your actual main volume.
Most hardware crypto wallets also have a "duress wallet" feature where you keep a low balance for the same reason.
Wiping is obviously extremely suspicious and asking for trouble
It's sad this is the default view. It's his device, his data, his life on that phone. If he had wiped the phone before the interrogation it wouldn't be a problem. How long before? A second before? A week before? But wiping the data a minute later is suddenly asking for trouble.
If you're going to be in a situation where you're in a room with some goons backed by the full power of the state, it is what it is.
Maybe because I'm not American I don't have any hangups about seeing the US government this way, but my own government is no different - you can (and people have) get stopped at Heathrow, taken to a dimly lit backroom and given a going over for hours
Edit: a bigger picture question is the difference between things that may be legally punishable and things that may cause suspicion from CBP agents, which aren't the same thing at all.
A non-citizen who arrives with a blank phone might be denied entry because it seems suspicious.
Note that if you're not a citizen of the USA, refusing to comply with a request like this is very likely to have you sent back to your country and denied access to the USA forever. While they can't legally force you to comply, they can absolutely deny you entry for any reason like this, regardless of having a valid visa and everything else in order. This even applies to legal residents.
Selection on border control might be arbitrary, they can hold you or send you back over a photo or something you wouldn’t think should be a problem.
Ideally you would like to have all wiped just in case but then you really stand out…
and
you can’t be sure which things can get you in trouble.
The good thing about a total wipe is that it's very easy to implement, and it's hard for it to go wrong. You just encrypt the whole drive and, when you want to wipe it, erase the key.
Of course the problem there is, many people have an app store installed, and app stores have histories. And logs. And "what you used to have installed" is so easily found under Google Play, for example.
As someone else said in this thread, the law isn't code. It's not if-then statement based. It's also predicated upon intent in many cases. What actions did a person take, and why, when told to (for example) unlock their phone.
The problem here is that if you are asked to unlock your phone, any action you take to thwart that request by "trickery" to get data deleted, could be construed as 'deleting evidence'. So while some methods might make it more difficult for the border agent to realise "something happened", if they're suspicious still, then you're still in hot water.
In the eyes of the law, the court, and likely the jury, you've done a sneaky thing to thwart evidence collection.
The only safe method is a full wipe prior to travel. In this manner, you're not deleting evidence when told to hand it over. It's an entirely different bar. They can be cruel about it, and take your phone for a few months, but you're not going to be in legal hot water.
In as no one will see the phone is wiped until you are compelled to unlock it, there's no greater change of the phone being seized. You're already being investigated. Just be blunt, say "Whenever I travel, I just wipe it", and that's that.
This is why it's a shame that GrapheneOS has no viable backup solution. Its build in method is unreliable, and doesn't work very well, and is gitchy, it's a very well known problem.
And Android and ADB sometimes have issues with large backups of directories, and so you have to manage that with tar + stream and other business, but at least working around that is easy.
But if you could backup individual apps and all their data, you could uninstall all your privacy laden stuff, cross the border, and reinstall in minutes.
That's the true, legal way to travel safely. Especially if the app removal resulted in a 'shred' of the data files instead of delete.
If anyone has ever struggled with large data backup/restore, here's the only real method I've found for copying large swaths of files from/to via adb:
adb exec-out 'tar --dereference --create /storage/emulated/0/dir/ 2>/sdcard/backup-errors.txt' |dd of=/tmp/backup-$(date +%Y%m%d).tar && adb shell cat /sdcard/backup-errors.txt
dd if=backup-20250309.tar | \
adb exec-in 'cd /storage/emulated/0/tempdir; tar xpvf - 2>/sdcard/restore-errors.txt' && \
adb shell cat /sdcard/restore-errors.txt
... where I seemed to recall it was a social media post, but it is unclear whether it's private messaging, public social media, or private messaging under a public social media account.
[EDIT] according to [1] it was on WhatsApp with a U.S national.
My understanding is that refusal to provide social media accounts, or passwords to devices, or passwords to social media accounts, can be considered suspicious in its own right and ground to be held in custody for further exam, and/or denied entry; foreigners do not get to have the same "give password" == "right to not incriminate yourself" that U.S of A. citizen have. In doubt I would assume I don't.
[0]: https://www.lemonde.fr/en/international/article/2025/03/20/f...
[1]: https://www.lemonde.fr/international/article/2025/03/22/le-r...
Like, get a cheap phone, install the bare minimum stuff you need for travel.
For extra safety, before returning home wipe it and just put back the exact apps you need for moving around (e.g.: ride hailing app).
Same thing with laptops, tablets, etc.
I love the geography of the US, and it has some truly stunning places to visit.
But they're not so stunning that I need to risk my freedom - risk my freedom - to visit them in person.
According to the ACLU I think this person would have been better off saying little and not wiping their phone.
https://www.aclu.org/know-your-rights/what-do-when-encounter...
If it's your own, that's harder to do – time to fight and change the system before it gets worse and will swallow you whole.
While most of my Italian/Polish friends had 0 issues, on a handful of occasions people were stopped and questioned for hours with agents pretending full access to every single device and just overall treating you as criminals.
In one occasion a friend of mine stated that he was quite sure they just enjoyed that kind of sweeping power and it had nothing to do with border security, it was just fun to them.
In another one, the suspicion was on the fact that this person did not have socials, he just disliked them and had nothing except a Google account for Youtube. This fact made them super suspicious and the person was stuck at La Guardia for 3 hours, even his body was inspected. Disgusting.
That's the reason I never traveled to the US and never will, just having IT security in your CV is enough to make the border gamble not worth it
I do know two people who have experienced them as a result of the government taking a personal interest in them, so it's certainly not impossible. However, it's not a common experience.
I've personally experienced searches of my suitcases about four times in about 100 U.S. border crossings (as a U.S. citizen, but the people performing or directing those searches generally didn't know my citizenship status), and zero electronic device searches.
Maybe my anecdotal experience is influenced by me being in IT, but still.
There's no chances I can remember them all, especially as I've been contracting and get a new email every 3-4 months or so.
U.S. law though is highly non-autistic and what you were trying to do is just as important as what you superficially did. Hell there could have been a third set of four numbers that were the nuclear launch codes. It’s not the fact that it was four numbers, it’s what you were trying to make happen when you typed them. Now of course whether they can prove what your intent was when you typed them is another matter, but generally a duress pin should be for when robbers are breaking into your house, and the government will be on your side, and not when the government will be against you.
It's people who couldn't get out of jury duty. Prosecutors have high success rates. Federal prosecutor success rate is over > 90%. Studies of jury psychology show how much peer pressure and other factors extrinsic to the law come into play.
Remember what happened to Aaron Swartz. Law is the mask of power. By all means defend and assert your rights, but understand the costs. I find people are under such illusions about how cruel the American justice system is that this leads them to make foolish decisions. Do not underestimate the adversarial nature of the justice system, nor the accompanying incentives agents of the state who are on the other side of you have to lie.
This is a misunderstood statistic.
Federal prosecutors won't even pursue cases unless they think there's a high chance of success. They don't operate like two private parties suing each other to force the court to decide something. If the evidence is there or the charges aren't fully formed, they don't waste resources on it.
This leads to a contradictory set of complaints that the legal system lets too many people go or doesn't have enough teeth.
Given the incarceration rates compared to average western standards, that's a moot point. Even if they selectively pursue, they do pursue a hell of a lot, and they do get a hell of a lot of convictions - relatively. Factor in the severity of the convictions, also much worse compared to average western standards even for the same offenses, and it's an ever worse picture.
I don't think you make anything moot by compounding more regional stats. Some countries have more crime, they underinvest in rehabilitation, addiction treatment, and social diversion programmes. Shock horror: jobless, homeless addicts commit crimes. The US also has a land border with long land borders.
That is all to say, comparing apples and margaritas doesn't do what you think it does.
The problem with this theory is that it ignores the incentives on the other side in a criminal case. When you get charged with something, the prosecutor offers you a deal and that deal is almost invariably a significantly lower penalty than what happens if you go to court and get convicted. The plea deal is a lesser charge, if you demand a trial then they throw the book at you, stack charges and ask for more severe penalties for each one.
With the result that if someone actually did it, demanding a trial instead of pleading guilty for a lesser sentence has a large negative expected value. Which in turn implies that it doesn't make sense to do unless you think there is a high probability you can win, for example because you know you didn't do it. The coercive force is so large that it can cause innocent people to plead guilty, since even a 10% chance of losing can screw up your whole life when it means a 10x higher penalty.
And yet > 90% of the people who thought their chances of being acquitted were high enough to be worth taking a much large sentence on conviction, still get convicted. Which seems suspicious.
The most classic case of federal offense is tax fraud. You can't record tax fraud on a camera or believe the witnesses, you actually need to look at the balance sheet and contracts of the company and make sure there is actually a crime to prosecute.
To be clear, I totally agree with your points, I just think this is more of a case of "lying with statistics" than being a misunderstanding.
"Never attribute to malice that which is adequately explained by stupidity."
Because of this, no true justice is possible. Trials don't just try the defendants, it forces the prosecutor to prove that there really was a case and that they weren't just trying to bully someone who felt it was hopeless and would rather get out of pre-trial jail early. It forces the cops to actually make a fucking case, rather than rely on horseshit to lock someone away that can't bond out.
And no reform is possible. If you explain any of this to someone who actually understands it, they panic and say "but the prosecutors wouldn't even be able to bring 1/50th of those cases to trial, the system would overload" as if that were a bad thing that they couldn't. In the same way that you're not caught in a traffic jam but rather you are traffic, you're not caught up in these problems... your apathy, your ignorance, your rejection of boat-rocking, in short you are the problem.
Prosecutors pick their cases. Defense doesn't. The cases that aren't 90%+ sure aren't charged.
Prosecutors will often lower charges to ones where it can be tried without a jury too
it should be about 50% conviction rate so that juries dont go in with non-evidence that the case is good because the feds thought it should go to court
And you think that benefits defendants how???
We should all know it though!:
It has been commonly used to oppose what jurors perceive as unjust laws, such as those that once penalized runaway slaves under the Fugitive Slave Act, prohibited alcohol during Prohibition, or criminalized draft evasion during the Vietnam War.
Honestly we didn't even throw the book at him, prosecutors were charging him with a bunch of offenses and we decided guilty on only two, but the repeat offender bit probably locked him up for a few decades.
The funny thing was that all the jurors thought the victim was a complete douchebag and thought both parties deserved time. As it turns, somebody I knew at the time knew the victim from childhood and he apparently molested his 8 year old cousin.
There's a kind of fog of incomprehension over indirect crimes which makes them much easier to get away with.
People still die though.
I feel like many court cases are textbook instances of Everyone Sucks Here. I needed therapy after the case because it had so shaken my faith in both the justice system and humanity.
I really don't think most of the people posting here understand what the professionals working in criminal justice/law see on the average day. They see the worst of the worst on one side, and then the public who they are trying to get a paycheck to defend on the other attacking them.
This in no way excuses bad behavior, but we're all human and these people aren't robots.
Forensic sciences and experts hired by prosecutors is a big problem.
Hell Americans know this too which is why you have a professional judge and lawyers. And you guys don't have a night watch with pitch forks and muskets to police the village anymore.
A jury system is an anachronistic relic.
OP is strongly implying that the 90% success rate for prosecutors is due to the courts being stacked against the defense. IMO that is where the logical fallacy is. Since prosecutors have wide latitude in deciding which cases to charge in the first place, it is very possible that the high success rate is due to prosecutors only charging cases where the accused actually committed the crimes being charged. Indeed, for the ~10% of cases where the accused is not found guilty, about 8% are due to the government dropping the case - only 1% are the jury acquitting the defendant outright. Thus, it would appear from that data that when the prosecution sees they are not likely to win a case, they drop it.
I'm making no argument that the courts or law are "fair", I'm just making the argument that quoting the 90% number is in no way evidence that courts are inherently biased towards the prosecution.
The legal profession is incentivised to not seek to change rules that disadvantage their clients…
Indeed. There are certainly parallels between him and Sam Tunick. But I'm not sure the public is ready for all the parallels.
That has to be incorrect, by the time someone is under actual attack from a criminal that criminal will have allready comitted crimes that the police can and have to punish for, i.e. Threat of Force with a Lethal weapon or sth like that.
1981 Warren v. District of Columbia
Arresting people because they might/could commit a crime would be a bad route to go down.
> The police exist to protect the government, not the people.
The police exist to protect the rule of the land. The military exists to protect the government.
Luckily that has never happened /s
There is a reason that Elon Musks companies and others put a ‘you agree to not have a jury trial…’ clause in their terms as Judges are easier to influence - when a legal case is filed it’s allocated to a judge and certain cases will go strategically to a Judges with certain bias
But that's good no? People who got out never would have taken it seriously.
I sat on a jury trial and was highly impressed with how seriously my fellow jurors took it - especially the presumption of innocence. When they started to go down some incorrect logical path, someone would step up and correct it.
Not to mention the public defender ripped apart the DA's case. It was the exact opposite of what I was expecting.
> Prosecutors have high success rates.
You're forgetting that the prosecutors don't bring cases they think they're going to lose to trial, they either drop the charges or try a plea deal. So you'd entirely expect the success rate to be high.
What? A jury system is far from perfect but this is about as intellectually rigorous as “the lottery is a tax on the poor”. Many people are thrilled to do jury duty because they are invested in their community, your nihilism is not a universal truth, jury duty isn’t a burden, it is a civic duty, an honor.
It’s not even just who couldn’t get out of it. It’s filtered for people who answer honestly. I was disqualified for a grand jury because the judge asked me if I would believe the testimony of police officers as truthful and I said it would depend on the police officer.
The system already had their hands forced on accepting that some cops lie with Brady disclosures but the fact that I didn’t just naively accept police testimony meant I was an unscramble juror.
Even if you’re a true believer in the system you won’t be allowed to participate because you didn’t lie.
For example in Europe when someone dies somebody always has to go to jail, even if they were defending themselves or responding to a potential threat. A jury could show compassion or empathy. Judges are extremely stoic in that regard.
Please cite the european law that states this.
Programmers have trouble seeing color (two identical numbers are the same bits, how can typing '1234' to unlock one phone be legal, and '1234' to unlock another phone be illegal?)
Courts care about color (intent, provenance, permission), even though that color cannot be digitally represented.
Honestly, given what I know here (a full case might be different), I would believe they did it on purpose.
Take the hypothetical as posed: duress code one digit off, entered while detained after being interrogated for hours, and repeatedly pressured to unlock. The government has to prove beyond a reasonable doubt that he knowingly triggered the wipe and did it for the purpose of impairing the seizure. Nothing about that scenario makes mistyping an unreasonable explanation unless there is more circumstantial evidence that indicates him intentionally providing the wrong PIN.
Proving that to a jury looks very hard.
Is a piece of software subject to patents? Is it export controlled?
Both of those can change without the data changing at all. A new patent can be applied for and accepted, at which point all code the patent description matches is potentially encumbered (even if it was written with no knowledge of the patent or before the patent existed, yes our patent system sucks).
Export controlled is also a matter of laws, not an attribute of the data itself, and laws change independent of data.
All of a things properties are not contained in or expressed by the thing itself.
The reason cable companies have to pay these fees in the first place is a narrow and somewhat pedantic argument that is entirely based on connecting multiple households to the same antenna. Which Aereo doesn't do, no trickery involved.
If there had been a style of "cable" company that used one wire and antenna per house from the start, they could have avoided these fees too. They only didn't exist because cables and antennas are expensive.
Any single person could have legally set up their own server and antenna. But Aereo building these en masse makes them a cable company instead of an antenna-building company because... vibes, basically.
The best evidence that this was a failure of justice is that they pivoted to "okay, we're cable, we'll pay the fees for a mandatory license" and got rejected for not being a cable company.
Uber avoided medallions.
I guess that proves law is not code!
It's worse than that: a lot of engineer types reason about almost everything as if it were code. It's a manifestation of Engineer's disease.
“laws must be construed liberally in order to accomplish their remedial purpose" https://en.wikipedia.org/wiki/Serial_comma#Maine_labor_dispu...
Him deleting his phone was very likely a matter of safety for his fellow activists. Sad that our government does this but it’s not like this guy was a drug dealing or something.
Love this way of putting it. Stealing for future conversations with fellow software developers.
> When interpreting EU law, the CJEU pays particular attention to the aim and purpose of EU law (teleological interpretation), rather than focusing exclusively on the wording of the provisions (linguistic interpretation).
https://www.europarl.europa.eu/RegData/etudes/BRIE/2017/5993...
If you don't understand what I mean, swap out "autistic" for "retarded" and the joke still functions, but a lot more people will be offended by it.
I still laughed though.
I'm not disagreeing with your overall point, but autistic in that comment is attempting to capture that "literal rhetoric but socially unaware" style of argument people can have when they argue a point too black and white.
"Retarded" does not imply this
I would say the problem with the comment is more in line with how OCD or adhd is used, improperly. Like despite autism being a spectrum with traits that can't be reduced to that one stereotype.
It's being used to invoke a stereotype of neurodivergence. Not as a stand in for general stupidity.
FYI it was a reference to fictional character Michael Scott from television production The Office (US). The characters main trait was unintended verbal faux pas, where he meant well but actually caused awkwardness and offense.
Often by stereotyping the traits of specific minorities.
it is time
From the article, it looks like warrantless search & seizure and lawyerless detainment over the suspicion of participating in plain old 1st amendment activities.
When we met it was interesting how our jurors decided “I don’t believe anything that guy says” and so on when it came to their motives and so on.
The trial itself was very carefully choreographed, almost pre determined and static.
But the decisions and jury activity was very dynamic. There was absolutely no magic legal mechanisms at that point.
Best outcome is he successfully sues for the violations.
And people are still convinced that's the land of the free, when it's a distorted non-representative democracy on top of a police state.
US is closer to South American banana republics than Iceland or Japan.
Mamy will read this and think that crossing a border with a GrapheneOS device is a bad idea, or just drop using what is a nice security feature entirely.
Just being charged is already a massive pain in the ass (both in terms of stress and costs) to an individual.
On another note, maybe GrapheneOS should add some kind of feature where the phone involuntarily destructs if a correct PIN isn't entered for 48 hours (or whatever the user sets at installation time, and changing the value should not be permitted). That way the trigger for the wipe is the confiscation, not the act of entry of a duress PIN. You could disclose the mechanism to the officials who intend to confiscate, and also say (truthfully) that you have no control over the feature.
Purely technically it would also depend on the state of the phone. Phones can be read out/exploited more easily after first unlock (AFU) than before first unlock (BFU). So, a middle path would be putting the phone in BFU. Much harder to use exploits against the phone and biometric authentication doesn't work. One way of fairly reliably doing this is setting the reboot timer to 10 minutes or turning off the phone in critical situations.
It's also relevant to take into account that he wasn't protecting himself by wiping the phone, but fellow activists. So, he may have taken the risk of potential legal issues by wiping the phone to project others.
i m not sure how legal a protection it is, and whether the courts would interpret your choice of OS as complicit in evidence destruction.
However there are arguments morally, and constitutionally, and logically, about what can be done.
Law is effectively a weak gentleman’s agreement we tolerate because the alternative is violence.
(Well, law is enforced with violence too, I suppose.)
When I was a kid I wanted to be a police officer because I wouldn't have to follow any laws or rules. Then I got a little bit older and realized that wasn't how being a police officer actually worked in practice. Then, I got a little bit older than that, and realized that it actually does work like that.
This has always been true and there has never really been perfect justice. Ultimately, power and violence have always superseded the law. High trust societies with less corruption and a strong justice system try to limit these circumstances.
I'm imagining that IQ bell curve meme, just with you at different ages.
You raise the standard for justice to perfection. There also has never been perfect corruption and anarchy.
> Ultimately, power and violence have always superseded the law.
That's like saying night has always superceded day. Everyone recognizes that recent years have been very unusual or unique in US history. That means for the great bulk of US history, it was different. Why doesn't 99% of US history outweigh the 1% (picking numbers very loosely) in determining what is somehow inevitable to you.
In fact, law is universal among human cultures. We are naturally social and live in groups with rules. Those that violate rules are generally outcasts.
But the most fundamental and significant error is attributing the current situation to some unavoidable system instead of the actions of people, especially those that stand aside and allow these things to happen. Many of them stand aside because they are told - probably messaging ultimately from the lawbreakers - that they are powerless and should despair.
i dont?
this is how the US has always been. its who americans are. the odd time was the obama years
Liberal democracy with sometimes-fair application of it is the aberration.
Not all of us do. To be honest, the older I am, the less sense many laws make to me, and the more I'm willing to help people break them.
Want to see a really confused border agent? Travel without a phone. Fedex your phone to your hotel/home. Read a book on the plane. The concept that someone doesn't have a phone/computer drives cops insane.
One of the wikileaks crew pulled this one in NY. Several agencies were a set to grab his devices and detain him until he unlocked them ... But all he had in his carry-on was a magazine. His devices had been wiped and sent by mail. He re-imaged them only once he was home and safe. No devices to unlock, no reason to detain him.
LOL, that made me chuckle.
People somehow think they're the first one to think of a workaround to a law, when in fact it's been happening since the first law was written down. The law adjusted and if people think they can do one thing, then claim they intended another they have a big surprise coming.
The whole case is going to come down to the nuanced and often contradictory interpretations of border law exceptions. I also don't agree that these sort of protections are for e.g. robbers, because of the criminal underground's $5 in-person data hacking tool. [1]
[1] - https://xkcd.com/538/
The rest (believing they can't do this or that, because it's in some constitutional document, or violates a basic right) is sovereign citizen kind of self-delusion.
When the judge and officers of the court agree with me, the law is reasonable and just, but when they do not agree with me, the law is arbitrary and capricious. ¯\_(ツ)_/¯
Having the law be whatever it's thought to be by police, prosectors, judges, and others can lead to obvious injustices, but there's been no serious attempt to remove ambiguity in any country's legal code as far as I know.
People already complain that there are too many laws on the books.
This is the thing that people should be reminded over and over here - and to be fair it tends to be more autistic than elsewhere
(Regardless if you are on the defendant or the prosecution side - or might potentially be)
If your threat model includes US state actors at the national border, then your security practices need to account for the confiscation of your device at that border without requiring you to willfully wipe the phone and (in the eyes of police and prosecutors) destroy evidence.
That means:
1. Don't travel with anything you can't afford to lose on device. This means setting up travel-specific password managers and hardware keys for a subset of your accounts that you absolutely need to access while abroad, and being prepared to reset those passwords and disable those hardware keys very quickly once home.
2. Review past legal cases against travelers and identify what behaviors the government considers worthy of prosecution or harassment. Your secure setup must function without needing you to engage in those behaviors, even if it is less convenient as a result. This isn't perfect, as the government may decide some new behavior is prosecutable.
3. Consult with a lawyer and review your security procedures from a legal standpoint. All of the above is technical and practical advice, not legal counsel and no substitute for it.
We Americans are fortunate to carry powerful passports and enjoy relatively easy international travel but, for better or worse, that velvet glove covers an iron fist we would be foolish to forget or ignore.
> 2. Review past legal cases against travelers and identify what behaviors the government considers worthy of prosecution or harassment. Your secure setup must function without needing you to engage in those behaviors, even if it is less convenient as a result. This isn't perfect, as the government may decide some new behavior is prosecutable.
> 3. Consult with a lawyer and review your security procedures from a legal standpoint. All of the above is technical and practical advice, not legal counsel and no substitute for it.
Just don't go to the usa and if it's for professional reason, don't bring your personal phone.
Intent matters. It might be hard to prove, but it matters.
It may not even be that hard; what other possible explanation is there for someone putting a PIN visible on their phone that wipes it while crossing a border?
Two obvious answers:
1. It's for the general case of lost/stolen phone.
2. It's for the owner. I can't remember numbers I don't type in, might as well keep it visible on the device.
theyll have a hard time showing that you intended for the government to break the law. first the government would have to admit breaking the law
"I told you not to. You're the ones who wiped my phone. You owe me money for destroying my personal property."
I'm not saying you would get a check courtesy of Uncle Sam for your troubles, but the argument that you deceived authorities into destroying evidence is a lot weaker.
I might go with "do not enter 696969" instead because the stranger fiddling with your phone probably expects a your phone to do something funny, like load a shock site.
I suppose it's possible someone might enter it without thinking, but the odds seem low. Also seems risky to put a self-destruct PIN on your device, lest a friend (or enemy) enter it by accident or as a prank.
If I have a dash-cam, and I wipe the SD card, can the government imply that because I erased the card, it must prove that I was speeding? The dash-cam automatically over-writes old footage - perpetually destroying evidence.
Given nebulous cases such as "hacking" a site by looking at the HTML[0], am I destroying evidence of crimes whenever I format my PC? I hope the government requires specific charges and more proof of a crime other than missing evidence. Say I destroy my diary - can the government claim that is the key evidence where I confessed to being the gunman on the grassy knoll?
For the duration of the border search. This guy is at risk because he caused the data to be deleted during a border search, when CBP asserts they can legally look. He would have been fine if he deleted data on the plane or after leaving the airport.
(This is my understanding of the government's position; personally I don't think this prosecution is constitutional)
If the erasure was a non-automated result of them asking you, and you alone, what conclusion do you think is possible? Probable?
Lying to a federal officer is a crime, IIRC, and if the lie results in destruction of evidence, the person who told the lie is probably accountable for both crimes. This isn't a lie with plausible deniability: you have to set a duress PIN, understanding what it does, and then communicate that PIN instead of the unlock PIN.
A duress PIN to wipe the device don't exist to absolve the owner of liability... It exists for when compromising the device could get people the owner cares about killed or disappeared and the owner considers their own liability, disappearance, or death a preferable outcome.
It is an extreme solution for extreme scenarios. People need to be sober in weighing its use.
Devil’s advocate, it sounds like the accused could be part of some mutual aid networks who could be helping people who are vulnerable against the actions of the current government. People who may die if they’re deported, or returned to their family (gay or trans youth). This person may literally have saved lives by not handing over their phonebook and messages.
Or it's preferable to get caught lying to a federal officer than it is for them to have the evidence on your phone.
but not necessary evidence, as evidence would imply a crime. But when it comes to police harassing activists, or outright mislabeling them as terrorists, there are many fully legal things you still might prefer the police not to have. Lets not forget that boarder police has in the past tried absurd things like trying to seize Attorney-client privilege protected information from a US attorney.
Through most likely many people setting up and using a duress pins never truly think this thought from a legal POV.
the most authoritarian places in the world wouldn't charge defendants for "lying"
> the most authoritarian places in the world wouldn't charge defendants for "lying"
What on Earth is this second part of your comment supposed to mean?
Do you expect to be able to lie to the government in an authoritarian country? And not be arrested if they catch you in the lie there? And not be charged or worse if they consider the lie serious?
One of which is self indications (even of things that cops didn't know about or couldn't prove) that would allow them to just question anyone into admitting even a parking offense, but I guess you can shut up indeed
I was worried that they could use any crime in a broad area and just force everyone to say with who they were and what they were doing, but you can also shut up
I was also worried than on investigations with no real crime involved, they could just go play jeopardy and ask you what you were doing minute by minute, and get you to talk until something gets inaccurate (while they have cctv but you have no vcr in your brain). But again, you can shut up.
When I'll be in America, I'll remember not to talk to cops.
Not even to 911 as emergency calls are error prone : You said someone was attacked by a suv and knife when it was a pickup truck and machete, you go to jail
In authoritarian countries, that absolutely happens. In America and the West, police are generally expected to have reasonable suspicion of anyone they detain to interrogate, and the length of detention is also limited if no evidence validating suspicion is forthcoming. They could not simply arrest everyone in the proximity of a crime, and geofence warrants are controversial exactly because that was the standard in the analog world.
> I was also worried than on investigations with no real crime involved, they could just go play jeopardy and ask you what you were doing minute by minute, and get you to talk until something gets inaccurate
Again, they must have reasonable suspicion to even detain you. You are reasoning about law codes as if they were literalist computer code for a compiler. The law, at least common law in America, is written by and for humans who are expected to exercise good faith as a part of enforcing and interpreting the law.
Do know your right to remain silent, and ask for a translator and consular assistance if detained or arrested. Police departments will provide these things because attorneys in court will question the reliability and admissibility of any testimony in the absence of their provision.
Don't worry too much about police if you're in America to visit. They're ordinary people who mostly want to catch criminals who are hurting their community. Bad apples are rare, and bad apples who harass someone on a tourist visa are rarer still.
Very few states have anything resembling this specific federal statute, and one doesn't typically call 911 to obtain service from federal law enforcement agencies. And in the case of a 911 call specifically, "heat of the moment" and "good faith" do a lot of work.
Unless you obviously intended to mislead an emergency services response, you will not be criminally implicated from good faith statements made during a 911 call regarding some incident you merely observed as a bystander.
> Subsection (a) does not apply to a party to a judicial proceeding, or that party’s counsel, for statements, representations, writings or documents submitted by such party or counsel to a judge or magistrate in that proceeding.
Is it true that the law is only selectively applied to some people?
They asked for the pin, maybe they should have said "not the duress pin"
>Destroying evidence
How did they know there was any evidence on there?
>it exists for when compromising the device could get people the owner cares about killed or disappeared and the owner considers their own liability, disappearance, or death a preferable outcome.
No, the duress pin is there for when I'm under duress and being forced to unlock my device against my will
>It is an extreme solution for extreme scenarios
Wiping a device I own is extreme?
> They asked for the pin, maybe they should have said "not the duress pin"
The law doesn't work like that. Unless you're provably at the developmental level of a 5 year old, the court knows you know what was required, and also knows what you intended when you gave the duress pin.
The justice system famously never plays "simon says"...
This is a Mickey Mouse distinction no court will take seriously.
> Wiping a device I own is extreme?
When the consequences are potential years in prison for lying to the US government or, in another country, torture or death in prison for obstructing an authoritarian government, then yes... Extreme.
All I'm saying is to decide to use a duress PIN at any national border or in any foreign country soberly, with knowledge of the potential or likely consequences.
If you think the system needs fixed or destroyed, you do you, but don't be surprised when that approach gets you in trouble at the border.
Also happens in the US
People who think that tricking the cops into wiping your device legally absolves you need to grow up. Also those who argue that LE can't prove any evidence was destroyed since it's been destroyed.
That doesn’t pass the sniff test
18 U.S. Code § 1001 [1]
https://www.npr.org/2020/11/25/939064270/trump-pardons-forme...
> President Trump has issued a pardon to his first national security adviser, Michael Flynn. Flynn had pleaded guilty to lying to the FBI and then recanted.
Rules for thee but not for me.
make sure to give trump a payout and you too can loe to the fbi
The entire situation is sort of nonsensical and boils down to lots of minutia in law that no normal person would know about.
For example having normal widely known security features like wiping the device after N failed PIN attempts is fine. Even having long standing security practices that can’t be related are fine, like having a timed touch point where if you don’t enter the PIN every… 15 days or whatever the device wipes, perfectly fine if it can’t be connected towards the crime and you’re not compelled to tell officers you have such a security mechanism.
Even if you were to set a trap where you use the same PIN for your bank, your laptop, and some other security devices in repetition then decide to set your duress PIN to that by assuming it would be discovered as a probable option they’d use, you’d be ok but it could be questionable if that was by design…
It’s so obscure really as to how and how you’re not allowed to protect your data, even if you’re not the one performing the action to clear destroy the potential evidence yourself. The entire thing seems pretty absurd a frankly arbitrary to me, and I don’t know how people could know which cases are and aren’t legal. I know not to destroy evidence myself but I wouldn’t know to tell someone to not use the duress pin or that even giving them my duress pin could somehow be my liability. It’s madness if you ask me.
One of the most depressing things I've read on here
Who said it was evidence? Did a judge authorize or issue a warrant to collect said evidence? Absent that, it's just your property, and you can do with it as you please.
Whatever the American legal system may say, a couple of thugs with no warrant conducting searches and seizures of data is a blatant violation of the Constitution's intent. This is the sort of behavior Americans used to rightfully condemn.
I'm all for privacy and find this seizure stuff really wrong but to me it just looks like another form of "orange man bad"
Have you read United States v. Flores-Montano? The border search exception (which I disagree with) is pretty old. Can you find an era in which Americans in general found it objectionable or were united in rejecting its application to data?
“Hey! I saw you holding that Mexican pepper in Mexico, and then you threw it in that Mexican trash can before crossing into Texas!”
“Yeah, so?”
An ”investigation” is just a fancy word that broadly describes the type of information collection that law enforcement does. Yes, it is typically about things they think are crimes. Because that’s their job. But there’s not some legal hurdle they have to pass here, the word describes their work.
instead they are harassing
If someone accuses you of a crime, committing a different crime is probably not a good move, in any situation.
Why do people go sovereign citizen when reality doesn't work their way? Stop imagining that the way you want things to be is the way things really are.
Cops do not need a judge to authorize the seizing of evidence. Cops do not need judges to decide what evidence is. Tell me, why did you just pretend like these are real requirements? I can understand why you'd want it to be that, but you wanting it to be that doesn't change reality.
It's as if you've just learned about the Fourth Amendment but know nothing about the nuance behind it.
Your system wouldn't even work at all. Let's imagine the cops get a tip that a bald man with a blue tshirt shot a man. They patrol the streets and find a match. By your logic they should not have the ability to search the man and seize his gun as evidence until a judge issues a warrant.
And no, they wouldn’t have denied him entry, but they would have seized his device.
its not just a word, its a specific legal term
cops definitely do need judges to say what evidence is admissible, and they really dont have thr ability to just declare anything they want as evidence and just steal it
Though during traffic stops, if a defendant disposes of his drugs while on the run, that can also carry a charge of destroying evidence even though no warrant was issued.
IANAL
The textbook tampering with evidence example is: drug dealer tries to flush the drugs when the police knock on the door.
But yeah, people tamper with evidence because they think they can get away with it. That doesn’t mean they always succeed in cleanly doing it without creating evidence of the tampering itself.
For example: the police think you are running a fraud scheme. They knock on your door. You shred a bunch of paper. The police wanted to see what was on the paper. You have violated the US law on tampering with evidence.
Something like this may need to become the standars over duress pins which should be treated as a fallback or more extreme alternative. Right now, A single choice to reasonably and rightfully protect your privacy reuslts in jail time over something which likely wouldnt have resulted in any issues if superficial compliance was observed.
These goons, even if a branch of a facist regime, are ultimately burocrats with violent options to settle. They aren't doing forensics on your device etc. They have neither means nor knowledge to do so. They just need to tick their boxes. Did the phone unlock? tick. Did our spyware complain? no? tick. Overall appearance of compliance from person? yes? tick. free to go, next!
You just have to find ways to stay safe without agitating their workflow and all is well.
- [1] https://veracrypt.io/en/VeraCrypt%20Hidden%20Operating%20Sys...
this problem may be solvable by a purpose-built abstraction where every write no matter what address will look identical to the firmware (naively, a randomized key-value map).
However, if you must do it, there are better options than duress pins that wipe a device.
what do you imagine allocation is in this context? it's just a set of written blocks that mark address ranges and other metadata for the OS filesystem driver (all encrypted).
firmware metadata will leak the fact that there is churn in the address range where a potential hidden volume lies. the churn will be inconsistent with filesystem activity that would be present in its absence.
it's not just SSDs you need to worry about either, HDD firmware also keeps metadata, some of it could be be proxy to churn by region.
trim lets the firmware know which mappings it can discard without the explicit reuse of the same address.
however I don't believe you can observe this effect from trim command results, it will report the usual size trimmed as if the firmware never realized that you reused the same address range multiple times.
Given what the experience of using a non-rooted phone is like, how very very tight the sandboxing is and how useless it is a General Purpose Computer that will tell you anything: I find it very hard to believe the unlocked phone is going to let you start probing firmware & snooping on hidden volumes.
This post sent my BS detector on high alert. I'm struggling to take it seriously.
no one will be accessing the firmware through the OS, they will access it from the PCB/chip/debug port. there is no point to a hidden volume if you cannot credibly deny its existance.
I'm not going to explain my full understanding of this piece of wisdom, it would be a wall of text, I want just mention that this behavior is addictive: it is much easier to start justifying your means than to stop it. And over time those justifications become more and more flexible.
I'm ready to agree that there are situations in which ends justify the means, but if you are not aware of downsides in your particular case, and if it doesn't seem controversial to you, you are most likely mistaken and the ends do not justify the means.
There’s plenty of empirical evidence of cops lying to lock up innocent people.
One truly absurd case was lying to convince a man he killed his father, and extracted a murder confession for a victim who they knew wasn’t dead.
https://people.com/thomas-perez-jr-murder-interrogation-1186...
I doubt this person will be found guilty. They will be able to prove he wiped his phone, but it will be hard to prove he destroyed evidence.
Obviously a good alternative is a dummy device but it carries similar risks, and the best option is to simply not go to authoritarian shitholes like the USA. Thankfully I've been able to avoid/push for US folks visiting us instead, but honestly the alternatives are as bad.
Its a shit situation where most reasonable actions carry real risks, its up to individuals to choose what is acceptable risk to them, but a dummy os you use as a daily driver for inconsequential work is, to me, an ideal midground.
See: https://news.ycombinator.com/item?id=49057812
Implementing it in a convincing way is harder than you think. Moreover if you're under the type of regime that will throw you in jail for not giving up a password, they're probably not going to let you off the hook because they can't definitively prove you have a hidden volume.
Done well, I see no reason it should raise redflags in routine stops, so unless you're being targeted (at which point you've got way bigger problems) it should just seem like you're a run of the mill person who does not use their device to its full capacity, which is the majority of users.
at some point, having any mitigations even present is a problem. At some point being met with a boot password at all is a problem that puts you on a list. I have no solution there other than to not go to those countries or keep dummy hot.
1. SSDs (including phones) have TRIM/discard, so you need to disable it, otherwise the hidden volume would get wiped. You going out of your way to disable it is going to be suspicious.
2. Even if the above wasn't an issue, you can't really use the outer os to any meaningful extent, because you run the risk of overwriting the inner volume. That makes your decoy os suspicious. It's not definitive proof you have a hidden volume, but I doubt the authorities would care too much about that.
So the main/hidden volumes really works like a duress: you might destroy your hidden volume while using the main one under duress, but that does not apply when using the main volume while able to additionally unlock the hidden volume.
If you are in a situation to need to worry about any of this, you're probably going to jail for one reason or another, anyways.
See also relevant XKCD:
The $5 wrench decryption technique would be even more unpleasant if you hadn’t created a hidden volume, as there would be no way to prove you hadn’t.
Should people be sure to never use Veracrypt volume encryption unless they create a hidden volume? I have trouble even thinking this way!
As long as the border your crossing doesn't respect the 4th Amendment, the best approach is to not carry anything incriminating across it, nor anything that may make you suspicious.
Here is the statute Tunick is indicted under: https://www.law.cornell.edu/uscode/text/18/2232
There is an immediate problem: the device was being searched, and this statute criminalizes destruction of property to prevent seizure, not searches. I don't think this statute applies this situation. Regardless of whether the border agents could lawfully search his phone at the border, they didn't have grounds to seize it. I suspect this prosecution will quietly be dismissed within a few months.
You say CBP is "empowered" to seize a device if the owner refuses to provide a password but I can't find a statute that authorizes it or precedent squarely saying the 4th Amendment allows this. The scope of the border search exception isn't settled. So the next argument available is that the executive is wrong and CBP does not have the constitutional authority to seize a device merely because the owner refuses to provide a password. That's obviously a much bigger argument and who knows if it would work, though this case sorta feels like it could become a marquee 4A case.
"The ACLU argues that the Fourth Amendment does apply in these situations, at least to electronic devices, because they contain so much private information. But the law is very unsettled, and the Supreme Court has not addressed the issue."
https://www.aclumaine.org/know-your-rights/electronic-device...
it's ridiculous on the face of it that that guys phone should be searched at all
The police ask for the combination.
The owner provides a combination that opens the safe, but the safe’s security mechanism first destroys its contents. The police can now inspect the safe but there are no documents left.
Even if the documents had remained, they would still have been written in an indecipherable code unless the police also had the codebook.
This person was complicit with the search: he gave the police access to search the safe.
> The owner provides a combination that opens the safe, but the safe’s security mechanism first destroys its contents. The police can now inspect the safe but there are no documents left.
> This person was complicit with the search: he gave the police access to search the safe.
The problem is that it's very obvious the police didn't want access to the safe because they like opening safes but to get the documents inside. The person denied that intent.
> ... written in a code that only the owner understands.
> Even if the documents had remained, they would still have been written in an indecipherable code unless the police also had the codebook.
This is an orthogonal argument basically saying "if the documents had also been encrypted, then there would have been no difference between destroying the documents and just leaving them encrypted".
First, that's not what was the case in the original situation - there is nothing saying there was secondary encryption on the phone.
Second, obviously, destroying documents and encrypting them is not equivalent because in the second case there is still an option to try and brute-force the code or try to decrypt them in another way.
A GrapheneOS phone stores its files encrypted. The PIN is not itself the encryption key; it is used, together with a high-entropy secret protected by the Titan M secure element, to derive the material needed to unlock the randomly generated filesystem-encryption keys.
The duress PIN does not overwrite every file. It irreversibly destroys the multiple layers of key material and encryption metadata needed to decrypt the data, making any encrypted remnants effectively unreadable.
A hypothetical, extraordinarily powerful quantum computer could theoretically decrypt the remaining ciphertext by searching for the encryption keys.
"Whoever, before, during, or after any search for or seizure of property by any person authorized to make such search or seizure, knowingly destroys, damages, wastes, disposes of, transfers, or otherwise takes any action, or knowingly attempts to destroy, damage, waste, dispose of, transfer, or otherwise take any action, for the purpose of preventing or impairing the Government’s lawful authority to take such property into its custody or control or to continue holding such property under its lawful custody and control, shall be fined under this title or imprisoned not more than 5 years, or both."
But I'm curious what the officer specifically requested. If the officer just asked for "the pin code", without explaining what they were trying to do or which pin code, then it seems he did comply: he gave them a pin code that gives them access to the [cleaned] phone.
Then the officer destroyed the property...
"Whoever, before, during, or after any search for or seizure of property by any person authorized to make such search or seizure .. takes any action ... for the purpose of preventing or impairing the Government’s lawful authority to take such property ..."
You’re just carrying a blank phone that you intend to set up and use later, and they can’t force you to install your backup onto a phone.
Now, this is sus as hell, and you’ll probably draw all kinds of extra attention, but if border security wants access to your phone in the first place, you’re already in a weird place.
It doesn't have to be blank - just clean.
Now having a corporate device with little data is no longer outstanding. Everything is in the cloud these days.
As for personal devices, you can explain you're taking a dumb cheap laptop for your holiday as you're working on a desktop PC at home. You're not taking your entire house when you're on a trip, just a laptop to check tourism information and post blog posts
I myself bought a crap laptop on ebay to shove it in bags and backpacks and go to conferences and not be sad the day it's broken.
but above all, he's a citizen so shouldn't care about looking "suspect". He has a right, not a privilege, to cross that border. They can explain a judge how he looked sus if they really want to search his home.
If you don't trust a government, ensure you aren't carrying any information you don't want to give up before entering their borders where you will be under their power.
Of course it’s about that huh. It’s quite scary how far the US will go against anyone who engages in this sort of activism.
So there’s a feature called Duress PIN which as explained through some comments means you put a different pin which intentionally wipes the phone. It’s not auto wipe or wipe after several failed attempts but intentional wipe of device. (Worth explanation as the current title nor the article doesn't easily explain this was made by the US citizen providing the alternative passcode)
For more technical details:
> GrapheneOS provides users with the ability to set a duress PIN/Password that will irreversibly wipe the device (along with any installed eSIMs) once entered anywhere where the device credentials are requested (on the lockscreen, along with any such prompt in the OS).
So you use 1st pin for normal use, 2nd for downloading your flight details on patriot mode, and 3rd for unlocking to patriot mode whilst silently nuking unpatriotic data.
Or a PIN that just nukes the data for certain apps (Signal, Telegram, WhatsApp, E-mail) etc. Feds can read my Slack messages all day.
1. Never ever have Signal installed on the phone during border crossing. The presence of the app itself may trigger them (speaking from first-hand experience).
2. Having an empty Telegram account may look suspicious. My recommendation is to have two separate Telegram accounts, with the "unpatriotic" one in the separate profile only.
3. Never ever use WhatsApp for anything "unpatriotic". It's way of deleting messages leaves traces ("This message has been deleted") which may rise suspicions.
As for email, I just don't have any email clients installed on my "patriotic" profile. They all go to the "unpatriotic" one.
So you use 1st pin for normal use, 2nd for downloading your flight details on patriot mode, and 3rd for unlocking to patriot mode whilst silently nuking unpatriotic data in case of seizure.
I spent two weeks thinking about my new setup on Graphene OS and Windows, but it was time well spent. Before that, my checklist for pre-border-crossing cleanup required about 8 hours of work. With the new setup, I can complete the cleanup in about an hour, and restoring takes even less.
Android switched from block device encryption to filesystem-based encryption (with encryption data and metadata). This provides many security improvements, such as per-file encryption keys and per-profile keys.
However, this also means that the main file system is readable and you could enumerate the available users. If you would encrypt/obscure that information, you could still infer the presence of other profiles from file system block allocations.
(Disclaimer: not an expert, but I read the relevant Android docs at some point.)
It's just not possible to hide them in a good way that would faze knowledgeable people or software.
Also too patriotic is sus. Better to keep some minor offenses (that give you a fine or a week of jail at most) on that partition so they will think that this is the thing that made you so nervous during the search
I believe the old TrueCrypt had two passwords, each revealing a different set of files. You'd put e.g. your tax forms in one, so if forced to decrypt your drive, you could cooperate and do so.
It's not illegal to delete your own vacation photos. So to prove this guy guilty of destruction of evidence, does the government need to prove there was actual evidence in the phone?
> It's concerning – and sends the message that [GrapheneOS] is criminal by default
What's with this sensationalism? The GrapheneOS phone didn't just wipe itself - the defendant actively took steps to wipe it. The defendant isn't being prosecuted "by default" for having a GrapheneOS phone. He is being prosecuted for what he actively chose to do with that phone.
If your argument is that the search and seizure was unconstitutional, and you're within your rights to wipe your data, then argue that. I'm very sympathetic to such arguments. But stop with this "they prosecuted me for having a GrapheneOS phone" misdirect
Most previous court cases involving encrypted devices have required substantial proof that the encrypted device contained incriminating evidence. To be clear "you sent this illegal thing from your house" levels of evidence.
It mostly seems inept, if you are going to push to expand your powers you do it on strong cases where you know what happened. Doing it on weak cases like this gives a judge an opportunity to shut down that without giving you a chance of a meaningful conviction and without that you won't get any benefits...
They don't have to, only that you destroyed evidence. That's why many people get prosecuted with "obstruction of justice" rather than the actual crime.
>While destruction of potential evidence does introduce a certain amount of leeway that doesn't allow going from absolutely nothing to "evidence was on the wiped device".
So if someone was doing insider trading, and the SEC came knocking, then immediately afterwards they start burning every document they have and microwaving their computers, do you think they should get off the hook? Surely you must think, even if the authorities or society can't a priori know you were guilty, the subsequent activity should be illegal? Note this isn't the same as banning burning documents or microwaving computers, only doing so after you're aware there's an ongoing investigation.
Your example is fabricated since the justice department didn't even bring forward a specific crime they believe was committed here.
If they charged him with a crime and had evidence his device had evidence of that crime (even if in reality it didn't) that would be a more interesting question.
But again where is the crime?
Destruction or removal of property to prevent seizure.
CBP are empowered to search US citizens devices and, if the citizen refuses to comply, to seize that device. They'll be alleging that by knowingly providing CBP with a duress PIN he destroyed his own property to prevent its seizure.
Notably, they don't need to prove he destroyed evidence of anything.
That's as convincing as saying you burned all the documents because you don't want people who break in to read all your financial records. It just happened to start after the SEC came knocking
If you can't see how insanely thin their argument is, and how easily this will be abused, I don't know what to tell you. We could just as easily say having any passcode on your phone at all is obstruction of justice, since the feds could want to look on your phone for whatever made up reason, and if they can't because its encrypted, well why did you do that? What are you trying to hide? Evidence of a crime!?!?!
1. I had to call out, "looking for anything prohibited" is a direct fucking quote from CBP. They admitted it was a fishing expedition.
I specifically said this wouldn't be covered, because you set up the pin before you knew any investigation occurred. However, I think it's reasonable if you were pulled aside by CBP while deplaning, and while you're waiting to interview you decided to hastily turn on encryption on your laptop, or eat a bunch of papers you had on you, I'd say that's similar to evidence tampering, not unlike flushing drugs down the toilet when you see a cop pulling up on your driveway.
You cant have evidence tampering when there is no evidence, because there is no crime for there to be evidence of.
Complete horseshit on many levels, but presumably a legally valid investigation.
Apples and oranges. They presumably already have some sort of evidence in order to get a warrant and are under criminal investigation.
According to the article the agents said it was just a normal part of screening.
What if there was no warrant, and the SEC just came to ask questions?
In many countries certain agencies / agents can do searches which normal law enforcement officers can't. Like not needing a search warrant or even probable cause. Not to mention that wiping a device could in itself be a crime, if it is suspected that evidence is being destroyed.
The key point here is that, as I wrote, some agencies have a lot of authority, and have the power to do pretty drastic stuff.
Attorneys are supposed to be adversarial. The system's soundness shouldn't depend on anything more than them trying to win and not doing anything illegal.
Before "prosecutor" became an elected/appointed office, prosecutors were independent contractors, hired for a single case only and serving at the pleasure of the Grand Jury. The Grand Jury's job was to decide how to spend the public prosecution budget. "Indictment" meant exactly that "prosecuting this person is a good use of tax dollars" and nothing more. We should go back to that.
The officer will say something like "That's your choice, but I will need to seize the device to conduct an analysis. It will be returned once the analysis is complete".
Then you shrug, and they will let you enter the US. The cops will try to get into the phone, fail, and return it to you.
Just bring a phone you don't mind losing for a few months.
They were never going to let him just walk in. Eventually, they'd have to, possibly after lawyers and news would get involved, but it's not like saying "no" was going to end the ordeal right away.
Of course they shouldn't do that to US citizens, but they also shouldn't be targetting protestors they have a personal gripe with.
Do you think things are going to improve in our lifetime?
This is practically the only thing I care about here and there are almost no details. What was his alleged involvement? How many others were targeted?
Bonus for the defense: whatever is left of the DOJ, it’s mainly cranks, cronies, and people who can’t find work elsewhere.
If you've refused to answer questions and giving them the password, and they don't have a warrant, taking your case off and inputting the mysterious number they found in there seems a lot more like them destroying your (data) property by oafishly trying to force access to a phone they have no business messing with, rather than you ostensibly destroying evidence of a theoretical undiscovered crime.
I'm sure they would still try to mess with you in a dozen ways for annoying them, but at least you'd be on decently solid ground in court as far as that goes.
> "the screen went blank, flashed several times, and the phone appeared to restart,"
How about flash some red lights and play an airhorn sound effect, too.
My understanding is phone’s security model aren’t designed for multiple user accounts
You can switch users just fine, you just cannot hide the primary user from the secondary user. Opening up the device also makes it a lot more vulnerable to attacks to dump the keys and storage.
Having multiple users is quite handy but it's not going to do anything at a border checkpoint that'll save you.
If Customs already knew whether the suspect had incriminating files on his/her phone things might be different.
I strongly disagree with the border search exception and would like to see it drastically limited or abolished.
It is also something that has clearly existed in caselaw for decades (arguably for centuries) and that the courts have routinely (to my regret) strongly reaffirmed.
The border search doctrine says that border agents do not need a reason to examine you or your possessions when you are entering the country. They do not need to believe that you are doing something wrong or committing a crime. If they suspect you, they don't need proof or a good reason to investigate you.
I find this doctrine very disturbing and I hope it will be changed or narrowed. I also would like people commenting in this thread to understand that border agents are not just imagining things when they claim to have legal authority to inspect people (or, alas, electronic devices or data) at the border, and that this didn't just start under the Trump administration or something.
The legal consequences of providing a duress PIN may not have been tested and this defendant could well prevail in this case. I just wish people commenting here would understand that there is a tremendous amount of history related to border search authority. You can disagree with it (I hope you will!), but you should understand that it's not just something that someone just made up last week or last month or last year.
No. They'll arrest you just the same for obstructing their search. Then they'll keep you in detention for a long time while you say "I can unlock it for you! You just have to let me out!"
You can pretend you have leverage and say they need to cooperate with you. But once you're detained, police and prosecutors don't really care about cooperation anymore. Their idea of cooperation is you giving them what they want immediately without question. You're made into an example if you don't abide.
And we're living in an era where immigration enforcement can shoot Americans without penalty. It just makes the claims that the government can't arrest someone come across as naive.
This is like saying it's my car's fault if I decided to drive onto the sidewalk or something.
But "GrapheneOS! Spain! Profiling Pixel users! Spain equates GrapheneOS to criminals!" sounds far more spectacular and will give more clicks/links. Sadly, it feeds the narrative that GrapheneOS is just for activists/criminals/whatever. An iPhone in BFU state would have been nearly as safe, but nobody makes these implications about iPhones because everybody has iPhones.
If 1% of iPhone users are criminals and 5% of GrapheneOS users are criminals, border search agents are going to be interested in your GrapheneOS mobile.
I am pretty sure criminals are more likely to use a super safe and secure phone that is easy to obtain.
While he technically did use a special GrapheneOS feature to wipe his phone, the criminal charges would have been the same if he had used the default "reset phone" feature on Android or iOS right before handing the phone over.
The real focus of this case should be on the reason for his detainment and the confiscatation of his phone and multiple refusals to contact his lawyer.
I think the issue is that people expect the USA to be the "land of freedom" when it's not anymore. It's turning more and more into an oligarchy and we are at the point where it's just as bad as russia or china.
If i was offered a trip to China or russia, i'd go but i would take a burner phone with absolutely nothing important; It's the same for the usa now.
This is the kind of thing that loses cases, even if they were legitimate at first. Seems like the prosecutor is desperate charging for the phone wipe cause they didn't have any evidence of terrorism, child-pornography, etc. The problem they have now is given he was in custody and agents pressured him to provide the passcode that they then incompetently put into the phone, the fact that they denied him a lawyer multiple times means there is a very strong argument that his rights were violated. Typically, courts suppress any evidence when there is a violation like this with someone in custody. So the compelled passcode, the phone's reaction when that passcode was entered, and the agents' testimony describing the supposed wipe would be thrown out by most judges. What's left for the prosecution after this is jack and shit, but jack left town.
The powers of investigators special rights and abilities rely on them being used very rarely. Last thing the terrorism investigators want is media coverage exposing their tactics.
>Experts said the legal approach is unusual and may be the first time the law has been aimed at an operating system. "It's concerning – and sends the message that [GrapheneOS] is criminal by default," said Christophe Boutry, a cybersecurity and surveillance expert. Boutry and Bill Buddington, senior staff technologist at the Electronic Frontier Foundation, both said they had not seen a similar case.
Is the actual case about banning the OS? Because it seems pretty clear the case is about the result (the phone being wiped with a special passcode).
The better defense imo would be one of those 'wipe the phone if you get the password wrong x times' and try and claim you forgot under pressure. At least if you wanted to wipe the phone without being accused of destroying evidence during a search.
Not sure why the police and news are saying that he destroyed evidence, since the evidence (as it always has existed before the search began) remains on the disk.
Then you can keep it at home, and you can genuinely say that you don't remember it because it's like 128 digits.
And you're not "destroying evidence" in the jurisdiction in question because the phone is already locked. And you can't unlock it on demand.
1. What happens if the masses just do this? Today it's just a few folks who know how to do this. Tomorrow it could be 10, a year later 100. What's to stop 1000s from doing this and then what is the government going to do? Ban the OS and block it on Github?
2. What exactly happens after you're charged? This doesn't mean the person is convicted. Just that they now have to show up to court wherever the trial is held and have to retain their own lawyer (or public defender?). And what is the likelihood that the case is thrown out or the person is convicted and receives a stiff penalty?
I ask these questions because as far as I can tell, the person was not suspected or convicted of anything, and it's infuriating me that we are just going to stop random citizens and ask for their private data.
> According to court testimony, federal agents had already circulated his name and photo internally, saying he was under investigation for "suspected terrorism activities" because of his alleged association with the movement against Cop City.
This part is interesting to me:
> RICO conspiracy indictment
> In September 2023, sixty-one people who had been arrested in the forest or at stop cop city protests were charged with racketeering under Georgia’s RICO law. This indictment is likely the largest criminal conspiracy case ever filed against protestors in the US.
> As of April 2025, the racketeering case was stalled. Defendants in the case maintained their innocence and reported difficulty getting work and other hardships while they awaited trial for more than 20 months. In September, all RICO charges were dropped. Judge Kevin Farmer found that the Georgia Attorney General did not have the authority to bring RICO charges in the case.
For anyone unaware, RICO is both a Federal law and a Georgia state law that stands for: "Racketeer Influenced and Corrupt Organizations". It is used to take down mafia, gangs, organized crime, etc. It is a bit sad to see state prosecutors trying to use this against protesters.
If so, "normal" police would not have the "keys". This would be "the compromise".
I realize that in this case the person repeatedly asked for a lawyer, but if you are in a borderline authoritarian state, all bets are off.
On the duress pin, they say (read the whole thing though):
> People should carefully consider how to use it in an actual duress situation where there can be physical or legal consequences for wiping the device.
Instead of wiping it clean, wipe to innocuous mode. Then the burden on their part is not only to show that I gave a bad pun, but that the innocuous mode is materially different than the previous state.
I'm confused to understand if Tunick did anything illegal here. If the authorities want the phone, they should have the warrant and seize it without Tunick's permission.
It appears authorities did not have the warrant which give Tunick all the right to do whatever he desires with his property.
What am I missing here?
What they got him on, is that supposedly he destroyed evidence.
If you don’t want something searched do not bring it across the US border. There is very clear constitutional and statutory authority for these searches.
What would be the reasonable suspicion that a USC bringing their personal phone on a trip with them would be a customs violation?
That doesn't sound at all reasonable.
In fact, the only "suspicion" they had was that he was someone who didn't like LE or Trump which is still not a crime, nor a customs violation.
(The peers)
However, if Tunick was smart he would have refused to provide the PIN, and let them seize it. He'll get it back eventually, but it was in his right to refuse.
If it were a box of drugs and he triggers an incendiary device - he's in trouble . If agents trip a protective boobie trap and destroy the box- he is fine.
Don't know why but this feels correct to me.
Of course TSA agents become angry when they enter the PIN and see a message "wiping device".
The reason is because anyone running an os with a duress PIN that has done nothing wrong can be accused of using a duress PIN because the whole point of the duress PIN is that it looks like you just have a normal phone.
Running a normal apple operating system with just stock apps? Boom, you're a criminal because you obviously used a duress PIN and have something to hide! There is no way to prove you didn't use a duress PIN because the phone was "wiped."
Now unfortunately grapheneos probably leaks information so that a duress "unlock" can be differentiated from a standard unlock by some means. If not then kudos. It looks like it is done instantly by keeping everything encrypted and just zapping the keys, but it also needs to actually unlock to something instead of rebooting to prevent leaking the information that a duress pin was used. Not sure how fiesable that would be though.
In the old TrueCrypt containers you could set an optional second password that would decrypt a different volume. The size of the container file was always the same, a decrypted volume always showed the full container size, the portion not occupied by the data in the main volume was filled with noise, and the data on the non-loaded volume was not protected (so you could erase it without warning by storing too much on the loaded volume), making it practically impossible to prove the existence of a second volume either way in a search situation. I guess there was a reason why the project was stopped.
I'd like some filter where if a comment is downvoted by IP addresses located in USA, they are considered as upvotes.
Technically correct is not the same as practically correct.
They can detain you for days if you're not white. (Kavanaugh Stop)
Before entering the airport you set your device to auto-wipe after x hours.
Once you are sitting in the airplane and flying, you cancel the scheduled automatic wipe.
[1] This is in contrast to many other Android phones outside Pixel and Samsung flagships, because they are too cheap to add a secure element, which iPhone has had since 2013 and Google Pixel since 2018.
If he had simply refused to provide the unlock PIN, he would have walked away. They may have kept his phone, but they would never have got anything from it anyway.
Of course this argument will only work if the phone is indeed and a ephemeral copy of your real data.
Even if the accelerated executive capture of the judiciary is largely ruled back post Trump (big IF), I fear the government will be unwilling to pay with much of the convenience of rule-by-law that it's been given a taste for.
I really don't like this title. Officers asked him to open the phone, which he pretended to do, but instead wiped the device
> During the questioning, agents repeatedly asked Tunick to unlock his phone and warned they would seize it if he refused. When he finally provided a passcode, the phone appeared to restart. The defense motion states that "the screen went blank, flashed several times, and the phone appeared to restart," resulting in the loss of data.
The title implies the agents maybe entered too many pins by mistake and the device auto-wiped, or that it reset itself with no human intervention, which isn't what happened. This is more like shredding paper when the FBI arrives at your office, which most people would attribute to destroying evidence. I hope he wins the case in principle (I think there's a risk of a slippery slope here) but it wouldn't be a moral tragedy if he lost.
It's his device, so he can do everything he wants to. The USA is currently re-purposing constitutional protections. A judge has not signed these warrantless seizures, so why would the individual be under any obligation to cooperate? Besides, why would anyone want to incriminate oneself? The onus would be on the state to prove a guilty state.
www.github.com/jegly/box
https://arstechnica.com/tech-policy/2020/02/man-who-refused-...
Or better, have PIN for taking you to your criminal/secret profile instead.
feds: "unlock your phone or else" victim: "um, you're stressing me man. It's either 1234 or 4321, I forget. One of them wipes the phone, the other will unlock it."
Whichever PIN they try, it wipes the phone, but the feds can't claim it was deceitful, just unlucky.
Nope, in the US.
If you're paranoid enough to be using GrapheneOS, why would you take it to an airport in the US of all places?
I bought a second hand iPhone for overseas trips, which my daughter promptly stole because she wanted an iPhone, but then i got her old android phone, which was LineageOS-compatible, so that became my travel phone.
I _think_ you would need a fresh iCloud account (thus losing access to purchased apps and subscriptions). You also need to manually create fresh social media accounts, copy over contacts, etc.?
Any advice on how to automate this process or is this just a 2-4 hours exercise you do before your trip?
I don't have a lot of "everything else" anyway, so my device would probably look suspiciously 'clean' even if it was my in-this-moment daily driver. (HN is my news and social media). I don't use banking apps, but the irony is that I would need to whilst overseas.
One of the funny things is, I should be able to re-setup any device with an old gmail account at any time in any place, but with all the extra security these days, you need an old device to authorise the setup of a new device. I'm going away early next year, so I'll need to have a dry-run of the setup...
Definitely dry-run. I didn't do that and it was a huge pain to recover everything.
It would be easier for me to just go Android, and I do have spare older devices now too.
And if you use iCloud or any of that stuff - you've already lost; Apple, and the US government already have access to your files and communications before you ever came to the airport. Sure, maybe it's not the specific border guards who have the access, but still.
Another plus is if you do lose the device the damage is minimal, its a bit of a hassle but nothing beats peace of mind
- presumably border patrol wants to see his photos, social accounts, and email. A separate device with a copy of the information they want isn't a defense. Creating fresh travel-only accounts is tedious, b/c fresh accounts aren't connected to your friends or network (with whom you'd want to share your trip with).
laziness isn't an excuse and if you do want access to your phone or device at home you could setup that as well
It's not stated, but probably we can assume the person didn't ask for his phone to be searched - probably he asked NOT for it to be searched, at least based on his multiple requests to talk to his lawyer.
Considering those factors, I'd say border patrol is more responsible for wiping the phone than the person.
(1password has a “traveling” mode that wipes it of sensitive passwords before going across borders. Is that suspicious? Should it be criminalized?)
Are we supposed to live in a world where if I'm crossing a border I must give access to all of my information? That's absurd and more equivalent to a full brain/memory scan than a suitcase search from your example. This is dystopian in every sense of the word.
And rest assured, when it gets to actual full brain scans, the corresponding threads will be chock full of scum tasked to normalize that.
In all cases just don't cross security checks with evidence you wouldn't want to be seized, its not that hard
The Bentham business is alive and kicking.
The big picture problem is that the agents performing the searches have an enormous amount of power in terms of potentially seizing devices and potentially denying entry for non-citizens. I think they should not have this power, but the agents and courts probably don't care that I think that.
The end result (not inherently different from what we wrote in the guide) is that you may have to think both about protecting your data by technical means, and about not angering the agents more than you plan to. I was fascinated by techniques for being unable to comply (which is straightforward to achieve if you want!) but probably didn't think enough about how much this might antagonize border agents in many cases.
I definitely don't know a comprehensive big-picture solution.