Slashdot Mirror
Laptops Searched and Confiscated at U.S. Border
An anonymous reader writes, "According to an article in the New York Times, the Association of Corporate Travel Executives is asking the U.S. government for more detailed guidelines on when and why a laptop gets confiscated at the U.S. border, which, anecdotally, is happening more often. The story includes a report from a business traveler who had her laptop confiscated over a year ago and has yet to have it returned." According to the article, a knowledgeable lawyer said: "[Border guards] don't need probable cause to perform... searches under the current law. They can do it without suspicion or without really revealing their motivations." And an ACTE exective is quoted, "Potentially, this is going to have a real effect on how international business is conducted."
Canadian Customs has "searched" my laptop twice. Once I sat at the border for about four hours while the tried to figure out how to use the finder. U.S. customs took my laptop (a MacBook Pro) out of the case and looked at it, but I think they decided they didn't want to spend the time with it.
I shudder at how long it would take the good customs folks to work their way through a Linux box, or a decently encrypted hard drive.
In both of the Canadian searches, I was asked questions specifically based on email messages cached in my mail client. That was awful disturbing.
In the "long search" case they apparently also spent most of their time browsing the iPhoto and Photoshop albums and asked me a lot of questions about other places I had been.
First of all, don't put it to sleep. Turn it off, so that the password they ask for will be a login password rather than some kind of state-restoration password.
Next, when they ask for a login password, give it to them. Give them a username too.
Now they log in. They see a very boring directory, which is very easy (and here's the important part: quick!) to search through. They yawn after a very brief investigation, give the machine back, and you go on your way.
Why did everything work out? Because you gave them a username and password that you don't use everyday, so all your personal stuff isn't sitting in there, needing to be sorted though looking for stuff related to kiddie porn, terrorism, drugdealing, and .. (oh damn, what's the 4th horseman? I forgot.)
As copyright owner of this comment, I authorize everyone to defeat any technological measure which limits access to it.
I use TrueCrypt for my laptop. I don't have a password, I use a key on the work network protected by VPN (if you're not on the local network.) I literally cannot be forced give access to someone without setting up the VPN connection. Anything sensitive is on the encrypted partition. If I have to travel overseas, I will ask that they disable my VPN access until a mutually trusted aquaintance at my destination requests it be restored. I might go so far as to ask that I not know who is the responsible party.
If my laptop is confiscated, it will be a pain, but not terrible since the encrypted partition is backed up when I'm on the work network. If they must decrypt it, then they have to go through my company's security officer and the company's lawyers. If they take the laptop, then its my company's problem and they can decide if it's worth the legal fight.
Why? I handle other people's sensitive personal data (and try to keep even that at a minimum on my laptop.) I do what I can to protect the privacy of anyone who has trusted us to keep it private. If I'm dealing with someone who is trying to legally obtain the contents of the drive, they are forced to go through a legal process that protects our clients and by extension myself. If I'm dealing with a personal criminal with a gun, hopefully I can just hand over the laptop and valiently try to run away.
No lying to officials is necessary. I don't think I'd volunteer to explain that there is an encrypted partition, but if asked directly I can tell the truth.
If you're worried about it, you could probably set up the same with friends instead of a company and have most of the benefits.
If the climate is really nasty, then I'll probably just ship the drive. Boot? Sure, that's knoppix by they way, let me know if you need help finding the games.
B) Eliminate all the stupid users. This is frowned upon by society.