Slashdot Mirror
Securing Your Notebook Against US Customs
Nethemas the Great points out a piece from Bruce Schneier running in the UK's Guardian newspaper with some tips for international travelers on securing notebook computers for border crossings. A taste of the brief article:
"Last month a US court ruled that border agents can search your laptop, or any other electronic device, when you're entering the country. They can take your computer and download its entire contents, or keep it for several days. ... Encrypting your entire hard drive, something you should certainly do for security in case your computer is lost or stolen, won't work here. The border agent is likely to start this whole process with a 'please type in your password.' Of course you can refuse, but the agent can search you further, detain you longer, refuse you entry into the country and otherwise ruin your day."
That is what TrueCrypt is for (but don't encrypt the entire drive). Just encrypt what needs encryptin'. Set up an encrypted volume with a shadow volume inside a regular file. Call it something that looks like a system file like MSDOS.SYS or DBLSPACE.BIN or something. (That would explain the unusually large size of the file.)
So first, they would have to know you even have something encrypted (which is just a guess if they see TrueCrypt installed). Then they'd have to know what/which files was/were encrypted (which can't be determined by examining the file). Then they'd have to ask you to mount the volume and provide the password (at which time you then provide the shadow volume password, which only contains innocuous files).
I can't be the only dummy to figure that out.
"They said I probly shouldn't fly with just one eye," "I am Bender. Please insert girder."
Yup. Set the GRUB timeout to 0; you can only boot Linux iff you hold escape.
Works very well. I had to set this up due to being detained at the border for several hours because they didn't know linux. They keep the laptop, computer plus some external drives and let me go. Still working on getting them back, hence anonymously. Bought a new laptop after that, set up the dual-boot with short times to select something other then windows and no log-in required. Been inspected several times after that with no problems.
Having returned from my second trip to China, I still find it amazing that it is easier for me, as a foreigner, to enter China than it is for me, as a US citizen (born a US citizen to parents who were US citizens, etc.) to enter the US after a trip abroad.
I just pretty much walked right through in China - I handed them the entry form (one half of the two part form - the other half you give them when you leave) and they waved me through. Customs in China did not even ask to see my laptop, never mind read files or anything like that.
On returning to the US at Detroit International, I was given the 3rd degree by US Customs agents, and I'm a US Citizen. "How long were you in China?" (as if he couldn't tell by the side-by side entry/departure stamps in my passport) "What were you doing there?" (visiting friends) "What do these friends do for a living?" (A couple of college professors and a financial analyst)
This happened on both of my trips.
And I noticed that they were doing this to EVERYONE, not just me. (The plane had several hundred people on it.) I'd hate to see what they were doing to Chinese citizens entering the US.
I hope they realize that they are going to scare businesses away from the US if they keep this up.
I find it somewhat ironic that the captcha for this post is "undergo".
Or another example is detain you and/or the computer until they can image the drive.
And they can confiscate contraband (your definition may vary).
Ultimately, you have the right to enter the country.
of course there's always deniable encryption, ie rubberhose.
2 1337 4 u!
Unfortunately, you won't have that luxury. No matter what country you're going into, they can do this and you don't get a phone call. They'll sieze your laptop and you'll have no other options. If you smash it, you'll probably get arrested for interfering with an investigation, or the work of an officer. IF you throw it in the trash, they'll collect it and get what they want.
If the IP on your laptop is worth that much, you shouldn't be carrying it outside of the country on a laptop. I worked at a company that prohibited us from carrying certain information on our laptops to some middle eastern countries, as they were known for seizing/replicating hard drives from employees in certain industries.
If anything, you may face legal issues from your employer if you're taking that valuable of information out of the country.
That and I know some decent degree of people encrypt their porn anyways (on their home computers - most people stupid enough to download porn at work aren't going to be smart enough to hide it). For the married guys, it keeps the wife from seeing it or the kids from stumbling across it if they're playing on the computer.
;). Heck Truecrypt can even store an encrypted volume on an unformatted unpartitioned chunk of hard drive. There's little way they can prove that that's anything other than some space you haven't allocated yet.
In my own case, I encrypt it (using Truecrypt - awesomest OSS program I've found in a long time) because while my family knows I keep porn on my computer, if I ever have a random car accident or something I don't want them to see exactly HOW MUCH I have on the system once they start looking through my files
"People who think they know everything are very annoying to those of us who do."-Mark Twain