Slashdot Mirror
Securing Your Notebook Against US Customs
Nethemas the Great points out a piece from Bruce Schneier running in the UK's Guardian newspaper with some tips for international travelers on securing notebook computers for border crossings. A taste of the brief article:
"Last month a US court ruled that border agents can search your laptop, or any other electronic device, when you're entering the country. They can take your computer and download its entire contents, or keep it for several days. ... Encrypting your entire hard drive, something you should certainly do for security in case your computer is lost or stolen, won't work here. The border agent is likely to start this whole process with a 'please type in your password.' Of course you can refuse, but the agent can search you further, detain you longer, refuse you entry into the country and otherwise ruin your day."
...that your desktop is the Goatse guy and you have 14 videos of horse porn set to auto-play the moment your laptop gets opened. If you're going to snoop through my stuff in public, then the whole terminal is gonna get their money's worth, you fascist bully-boys.
Make a folder called "Terror Plans" and fill it with images of cute, cuddly kittens.
FOXTROT UNIFORM CHARLIE KILO
It's actually because I need to load a device management driver that overrides the BIOS data for the hard disk, but it may actually be worth it for them to try to fiddle around at the MS-DOS prompt...
If builders built buildings the way programmers wrote programs, then the first woodpecker would destroy civilization.
Of course not. The Department of Homeland Security doesn't hire any lower than a Master's degree.
Cretin - a powerful and flexible CD reencoder
That is what TrueCrypt is for (but don't encrypt the entire drive). Just encrypt what needs encryptin'. Set up an encrypted volume with a shadow volume inside a regular file. Call it something that looks like a system file like MSDOS.SYS or DBLSPACE.BIN or something. (That would explain the unusually large size of the file.)
So first, they would have to know you even have something encrypted (which is just a guess if they see TrueCrypt installed). Then they'd have to know what/which files was/were encrypted (which can't be determined by examining the file). Then they'd have to ask you to mount the volume and provide the password (at which time you then provide the shadow volume password, which only contains innocuous files).
I can't be the only dummy to figure that out.
"They said I probly shouldn't fly with just one eye," "I am Bender. Please insert girder."
Yup. Set the GRUB timeout to 0; you can only boot Linux iff you hold escape.
You can bet that before I type my password for a customs agent, I'm going to talk to my company's legal department. And I'll wait in the customs office as long as it takes. Or simply forfeit the laptop and put it in the trash.
The IP on my laptop is easily worth 10x more than the value of the laptop itself.
--
$tar -xvf
Works very well. I had to set this up due to being detained at the border for several hours because they didn't know linux. They keep the laptop, computer plus some external drives and let me go. Still working on getting them back, hence anonymously. Bought a new laptop after that, set up the dual-boot with short times to select something other then windows and no log-in required. Been inspected several times after that with no problems.
Having returned from my second trip to China, I still find it amazing that it is easier for me, as a foreigner, to enter China than it is for me, as a US citizen (born a US citizen to parents who were US citizens, etc.) to enter the US after a trip abroad.
I just pretty much walked right through in China - I handed them the entry form (one half of the two part form - the other half you give them when you leave) and they waved me through. Customs in China did not even ask to see my laptop, never mind read files or anything like that.
On returning to the US at Detroit International, I was given the 3rd degree by US Customs agents, and I'm a US Citizen. "How long were you in China?" (as if he couldn't tell by the side-by side entry/departure stamps in my passport) "What were you doing there?" (visiting friends) "What do these friends do for a living?" (A couple of college professors and a financial analyst)
This happened on both of my trips.
And I noticed that they were doing this to EVERYONE, not just me. (The plane had several hundred people on it.) I'd hate to see what they were doing to Chinese citizens entering the US.
I hope they realize that they are going to scare businesses away from the US if they keep this up.
I find it somewhat ironic that the captcha for this post is "undergo".
if your under suspicion for who you are then you are pretty well fucked. But if your just worried about a random security search and wanting to keep certain data private you only need to get past that first step because they will not spend the money to dig deeper even if they do copy your hard drive.
if you are a known individual (person of interest) and you expect to be stopped at the border, don't carry sensitive material with you. Hell, just mail a flash drive.
"In America, first you get the sugar, then you get the power, then you get the women..." -H. Simpson
Or another example is detain you and/or the computer until they can image the drive.
And they can confiscate contraband (your definition may vary).
Ultimately, you have the right to enter the country.
>>>"The border agent is likely to start this whole process with a 'please type in your password.' Of course you can refuse, but the agent can search you further, detain you longer, refuse you entry into the country and otherwise ruin your day."
Sounds like a small price to pay in order to protect my right to liberty. Just because the government demands access does not mean I have to comply.
Other people have paid a far higher price for liberty ("the full measure of devotion" aka death).
The government is not your daddy. Its purpose is not to raid middle-class neighbors' wallets and give it to you.
Have all your US and overseas clients meet each other in Toronto, Vancouver or anywhere in Canada for that matter.
Undetectable Steganography? Yep, there's an app fo
of course there's always deniable encryption, ie rubberhose.
2 1337 4 u!
Being detained by customs does not give you a criminal record. If you're a non-citizen, it may indeed cause trouble in entering the country again. To get a criminal record, you must be tried and convicted of a crime.
Some would say we have arrived long ago, but this is certainly a telling mark.
We are discussing "hiding legal and unincriminating" stuff so that we don't get hassled by government police. We have gone far beyond the "if you don't have anything to hide, you have nothing to fear" argument where now, even when you don't you have plenty to fear... in this case, potential loss of ability to work!!
They have been going too far for a while, but this is a point at which even the most common person can appreciate and understand the problem with this.
If the EFF were buying "public awareness" ad time on TV, radio and print (I haven't seen any if they already are) I'd donate $100 each month from now until "we've won" whatever that means. I'm sick of this.
The problem is, this isn't the security check to get on a plane, it's the customs people when you enter the country. When you fly into the US, and assuming you are flying on to another destination, you get off the plane, get your bags, and go through customs. These people have an incredible amount of power over you and you probably have little legal recourse, even if you're an American citizen.
I find the contrast sad... when I recently flew into Amsterdam, I grabbed my bag, the guy stamped my passport, and I walked through a door out into the real world. No questions, no forms, no inspections, no going through my bags. And this while I'm coming from the "land of the free" to one of those wacky socialist European countries.
Does that mean I can shoot the border agent and not be prosecuted under American laws?
:-)
Try not to confuse 'legal fictions' with reality
Awesome furniture, accessories and cabinetry in Santa Rosa, CA: http://humanity-home.com/
That and I know some decent degree of people encrypt their porn anyways (on their home computers - most people stupid enough to download porn at work aren't going to be smart enough to hide it). For the married guys, it keeps the wife from seeing it or the kids from stumbling across it if they're playing on the computer.
;). Heck Truecrypt can even store an encrypted volume on an unformatted unpartitioned chunk of hard drive. There's little way they can prove that that's anything other than some space you haven't allocated yet.
In my own case, I encrypt it (using Truecrypt - awesomest OSS program I've found in a long time) because while my family knows I keep porn on my computer, if I ever have a random car accident or something I don't want them to see exactly HOW MUCH I have on the system once they start looking through my files
"People who think they know everything are very annoying to those of us who do."-Mark Twain
Add me to the list. The Grandparent poster and the rest of the country can sit back and watch their rights drain away if they want to sit in the corner with their security blanket, but I won't.
;o).
I'll be the guy raising a fuss and throwing a fit. It'll happen at the border, then in court. And if someone wants to slap one of those "letters of security" on me, they may as well send me right to jail... 'cause that letter won't keep me quiet regarding any injustice placed upon me.
If standing up for my rights "ruins" my life, then that "life" wasn't worth jack to begin with.
I suppose it helps that I'm religious, too... those religious fanatics got that right, at least. When you're looking forward to a long eternity, the time spent here isn't worth getting your rights trampled over.
That being said, I don't imagine it'll be too long before the black suit guys show up for me
Even as an atheist, my time here is important enough not to waste it with trampled rights.
But otherwise, yes, you're right.
You are certainly right that entering any country can be an interesting experience. Some years ago as a Brit I re-entered the UK and was waived on, by a male customs officer, thru the green passage. A female voice from behind me called out "Stop". I complied and asked why she was giving contrary intructions to another officer? She simply told me "I am in charge". Cut the story short, this female customs officer tore all my baggage and suitcases apart for 1 1/2 hours in a desperate attempt to justify her "suspicions" to her lower ranks. Eventually she decided I owed TWO POUNDS duty, on a minor gift. As I was attempting to put my belongings in order, which were by now strewn over a wide area, she demanded payment. I pulled out a 50 pound note from my wallet and handed it to her apologizing for my lack of small change. She turend and walked towards a door with the money. I called out "Stop" and she turned with a very annoyed look on her face. I said "Excuse me, but your lack of trust of me has been very evident, so you will foregive me if I have similar reservations towards yourself. Please sign this piece of paper saying you hold my 50 pound note and will return with 48 pds change". She turned red with anger, but complied. Meantime the rank and file officers just about fell apart and all ran away rather than laugh out loud. Yeah I know I pushed my luck. But I had retained my cool for 1 1/2 hours while being treated as if I were the worst form of low life..... I also knew I had nothing to hide. Trust is a two way thing anyway. The moral of all this is that when entering ANY country you are and can be subject to officials who have "god" like powers. And there is little one can do but smaile and be responsive and stay cool for as lonmg as possible.
Returning from numerous business trips to Mexico over the years, I've received extra scrutiny twice. Once because I had declared liquor on a prior trip and I was over my limit. I actually got to keep the booze and was told to 'watch it' next time. The next time, I came back with some medication for dysentery and looked pretty rough (my next stop was a hospital for a week long stay) The customs guy asked, "Where did you get this strange Mexican medicine?" I answered, "From a strange Mexican doctor. Where is the bathroom?" The guy laughed and sent me on my way before I shat on his floor.