Slashdot Mirror


Tips For Taking Your Laptop Into and Out of the US?

casualsax3 writes "I'm going to be taking a week long round trip from NYC to Puerto Vallarta Mexico sometime next month, and I was planning on taking my laptop with me. I'll probably want to rip a few movies and albums to the drive in order to keep busy on the flight. More important though, is that I'm also going to be taking pictures while I'm there, and storing them on the laptop. With everything in the news, I'm concerned that I'll have to show someone around the internals of my laptop coming back into the US. The pictures are potentially what upsets me the most, as I feel it's an incredible violation of my privacy. Do I actually need to worry about this? If so, should I go about hiding everything? I've heard good things about Truecrypt. Is it worth looking into or am I being overly paranoid?"

65 of 940 comments (clear)

  1. Put the tinfoil hat away by Anonymous Coward · · Score: 3, Insightful

    No one is going to search your computer other than to make sure it is a computer and not a bomb.

    1. Re:Put the tinfoil hat away by Raleel · · Score: 2, Insightful

      I actually fly international, and am currently overseas, and typing this on a laptop. Yes, they can probably search your laptop. I've yet to actually see anyone get their laptop searched in the airport... I've been in more than half a dozen airports in the last month and a half. I've been with teams of a half dozen, all with laptops, and none has gotten searched. I'm currently with a team of many more than that and none of them has been searched.

      So, yes, it's probably possible for them to search it, but I don't think it's particularly common.

      --
      -- Who is the bigger fool? The fool or the fool who follows him? --
    2. Re:Put the tinfoil hat away by Reality+Master+101 · · Score: 5, Insightful

      You'd think that, but there have been stories recently about that not being the case.

      There are "stories" about kidnapping of children, but I still let my children play outside. There are "stories" of serial killers, but I still walk in the city. There are "stories" of school shootings, but I still let my kids go to public school.

      What's your point?

      I can find a "story" about anything. That doesn't mean that it's common or that special precautions need to be taken.

      --
      Sometimes it's best to just let stupid people be stupid.
  2. Re:If you're that worried... by vwjeff · · Score: 5, Insightful

    Make sure you have a backup of the pictures before you enter the US. Secure online storage is cheap. You can refuse to give them the password but they can take your laptop for "analysis."

  3. Short Answer by scipiodog · · Score: 4, Insightful

    Short answer: Truecrypt (as you mentioned in the summary.) Is it worth looking into? Yes. Are you being overly paranoid? No. Seriously, have you noticed the big brother trends recently? Truecrypt is very simply and effective encryption, in several forms, from simple encrypted containers to hidden O/S partitions. To take such a simple precaution is not, IMHO, overly paranoid.

    --
    http://clightnirish.wordpress.com/
  4. Tip #1: by Ethanol-fueled · · Score: 1, Insightful

    Use a cruise ship as much as possible. If you leave the US on the boat and come back on the boat then they won't rummage through your shit:

    On my last cruise we hid(and these were strictly for our own presonal/recreational use) 3 handles of booze, 24 Marijuana cookies, 1 small bag of marijuana buds, and my noncritical laptop in our main(heavy with clothing etc) luggage. Only the carry-on bags were searched. When coming back into the US just keep your laptop in your main luggage with your clothes and don't have any contraband on you when you get back(like I said, they won't search your laptop if its in the large luggage) as there may be a doggie sniffing.

    If you are flying out of the country and flying back in, I don't know what to say except sorry, bro!

    1. Re:Tip #1: by Ethanol-fueled · · Score: 2, Insightful

      Which cruise line and port, if you don't mind me asking?

  5. Re:If you're that worried... by Timothy+Brownawell · · Score: 4, Insightful

    ...encrypt it. Full disk encryption is relatively cheap, easy, and unobtrusive.

    And ineffective, unless your privacy is worth more than the cost to piss them off and have to replace your laptop.

  6. Re:If you're that worried... by Anonymous Coward · · Score: 5, Insightful

    But uh, mind if I ask: exactly what kind of pictures are you planning on taking on your vacation? ;-)

    It shouldn't matter what kind of pictures he takes. It is none of their business.

  7. Re:If you're that worried... by QCompson · · Score: 4, Insightful

    But uh, mind if I ask: exactly what kind of pictures are you planning on taking on your vacation? ;-)

    A subtle "if you have nothing to hide then you have nothing to fear" poke. Haha.

    It doesn't matter what kind of pictures he takes with him on vacation. He doesn't want a bunch of random law enforcement officials looking at his private pictures. Understandably.

  8. If you can't afford to lose it... by Duradin · · Score: 3, Insightful

    As the old traveler's adage goes, if you can't afford to lose it, don't bring it.

    Find a cheap laptop used laptop you won't have problems with ditching. Use a live cd or usb key boot solution so nothing ends up on the hard drives.

    Keep your pictures on SD cards and mail them or a copy to yourself or some drop point. Encrypt them all.

  9. My personal experience by SkankinMonkey · · Score: 4, Insightful

    I've taken my laptop across the border 4 times, my wife has done so many times more, neither of us have had our laptops searched. I've been pulled aside by customs and asked questions once, but even then they did not request to see my laptop. I think the bottom line is, if you act shady they'll look at your stuff, if you're just getting your business done then you're fine.

  10. Re:If you're that worried... by LighterShadeOfBlack · · Score: 5, Insightful

    Truecrypt would not help: If they really wanted to see your content they could ask you to show it to them or alternatively confiscate your laptop and decrypt it themselves.

    Truecrypt provides plausible deniability - the capability to create a hidden encrypted volume within another encrypted volume, thereby allowing you to grant access to unimportant/dummy data when a password is asked for without the attacker knowing additional information even exists.

    As for the US government just decrypting the colume themselves, as far as I know they simply don't have that capability. If your boss knows otherwise or has knowledge of ways to defeat Truecrypt's plausible deniability then (s)he should provide some kind of evidence to back that up, otherwise this just sounds like uninformed guesswork or pure tinfoil-hattery.

    --
    Spelling mistakes, grammatical errors, and stupid comments are intentional.
  11. Misdirection is key by anyGould · · Score: 2, Insightful

    Put them on your iPod. I've got a 80GB Classic, and there's more than enough room there to store whatever you need, and who's going to search your music player for stuff?

    Unless, of course, you're doing something naughty and arouse suspicion, in which case you're pretty boned - encrypting/obfuscating the file on the 'Pod would probably help, but if you're getting the full treatment...

    What the world really needs is secure storage with a self-destruct feature - when they ask you for the password, you give them X, which wipes the drive as quickly and as thoroughly as possible. (Preferably with a "decrypting, please wait" message)

  12. circumvention by Draque · · Score: 5, Insightful

    An ounce of circumvention is worth a pound of countermeasures. Don't store them on the laptop at all. Store the pictures you're taking online and you'll be able to access them from anywhere. Border patrol can't find something on your computer when it's not there. Even if that's not feasible 100% of the time, you could still make a temporary archive online while removing them from your computer. If even that has you feeling paranoid, you could always burn the files to DVD, wipe them from your computer, and stow the DVD.

  13. Re:If you're that worried... by Anonymous Coward · · Score: 1, Insightful

    Which TrueCrypt actually implements. Other problems you want to bring up that we can solve technically or are we just left with political problems now?

  14. In other news.. by bigattichouse · · Score: 4, Insightful

    Offshore laptop rentals with temporary accounts linked to offshore data are booming! What a great business model. You set up an account with the company, stuff all your crap on a server, then when you get to your destination, you pick up a laptop (maybe your "rental fees" are part of your normal monthly service account)... logging in to the laptop mounts the remote volume and download away.

    --
    meh
  15. Re:If you're that worried... by MBGMorden · · Score: 5, Insightful

    Truecrypt provides plausible deniability - the capability to create a hidden encrypted volume within another encrypted volume, thereby allowing you to grant access to unimportant/dummy data when a password is asked for without the attacker knowing additional information even exists.

    Well, there's that, and the fact that no file can be positively identified to be a Truecrypt volume. Until you you give a password it just appears to be random data. High entropy random data, but the guy at the border is looking for a 5 minutes spree tops - I seriously doubt he knows what entropy is let alone enough to check for it.

    If you're that worried create a volume with nearly same size as your system RAM, keep it in a directory with some source code (even write a stupid program that will crash if you want) and just name it "core" or "core.dumped". If asked about it tell them when you were testing your program (that does whatever you want to maekup) it crashed and dumped memory to file. It's probably just corrupted nonsense . . .

    --
    "People who think they know everything are very annoying to those of us who do."-Mark Twain
  16. Re:If you're that worried... by Jjeff1 · · Score: 2, Insightful

    Not full disk. If it looks like you're got something to hide, eg anything your average AOL using person wouldn't have on their PC, they'll be all over you. You want to look as much like your typical PC user as possible.

    Use truecrypt with the encrypted volume option. When truecrypt is running you'll see an additional drive letter where you store your documents. When truecrypt isn't running, you just see a file. The file can be anywhere, named anything, say C:\windows\system64.dll.

    Before you hit customs, remove or hide truecrypt.

    It's very unlikely anyone would notice anything out of the ordinary.

    Of course if you're the type of person who's randomly selected for special screening, then you might still be better off uploading the files.

  17. Re:Put the dunce cap away by megamerican · · Score: 4, Insightful

    No one said it is happening to everyone. That misses the point entirely. Illegally searching even a small percentage of people is unnacceptable. Especially since people affected by this have almost no redress and the DHS doesn't even accurately report when they do this.

    I guess its only a problem when it happens to you. Maybe you should pick up a history book and find out how well that attitude worked in the 1930's and many other time periods.

    --
    If you have something that you dont want anyone to know, maybe you shouldnt be doing it in the first place -Eric Schmidt
  18. Re:If you're that worried... by dgatwood · · Score: 4, Insightful

    There's only one solution that guarantees that nobody will rifle through your data: don't bring it with you through the border crossing. That's what servers are for... and SSL, or at least SSH/SCP/SFTP.

    --

    Check out my sci-fi/humor trilogy at PatriotsBooks.

  19. Re:Yes, you're being overly paranoid by goaliemn · · Score: 2, Insightful

    Exactly. I go in and out of the country 15-20 times a year, and have for the last 5 years. Never had any problems with customs. I bring my laptop with about 1/3 of the time and never been asked to show it, let alone whats on it.

    If you're a nice guy, it shouldn't be any problems. If you make an idiot of yourself, get ready for the check.

  20. Re:If you're that worried... by ShieldW0lf · · Score: 3, Insightful

    The smart thing to do is stay the hell out of the country. It's not safe. There are systems in place to make a person disappear into a concentration camp forever. Whatever justifications are made for their existence, all it takes is for some small minded official to decide to start the process, and you are totally fucked.

    --
    -1 Uncomfortable Truth
  21. Re:Put the dunce cap away by HBI · · Score: 5, Insightful

    Only children think in terms of the worst things that could happen to them. Every day, when I leave my house, I could get run over by a bus. I could get ass raped in a jail after being unfairly imprisoned by a cop for a crime I didn't commit. My house could be robbed. My person could be robbed. My car could have a molotov cocktail thrown at it. I could catch some nasty disease from a toilet seat.

    Note I spend about zero time thinking about these things because the chances of them happening to me are about nil. Ditto having my laptop searched. What are they going to find, my porn stash? WTF do I care, really. It's not worth a moment of my life to worry about.

    I retort: Maybe you should grow up and worry about things that are important, like where your next meal is coming from. I hear that it's growing fashionable now.

    --
    HBI's Law: Frequency of calling others Nazis is directly correlated with the likelihood of the accuser being Communist.
  22. Rubber hose code cracking.... by refactored · · Score: 3, Insightful
    ...the trouble with any encryption is it sends a strong signal to the spooks... This guy is hiding something, put him through the works and see if anything leaks out.

    But I dare say you may be safe... after all, TrueCrypt has probably received a visit from No Such Agency.

    Google for crypto nsa backdoor

    1. Re:Rubber hose code cracking.... by LighterShadeOfBlack · · Score: 4, Insightful

      Well with Truecrypt at least it's open source so that should provide a good degree of protection against a backdoor in the software itself. There's still the possibility of a backdoor in the underlying encryption schemes of course which would be far beyond most people's ability to detect no matter how many people see it or how long they look. Truecrypt does however allow you to chain multiple encryption and hash algorithms which, given the diversity of their origins, should provide a reasonable degree of protection from backdoors.

      --
      Spelling mistakes, grammatical errors, and stupid comments are intentional.
  23. Never been asked about laptops by afore · · Score: 2, Insightful

    I have been between Taiwan and the US, Shanghai and the US numerous times in the last two years carrying 2 laptops. Never been asked. In fact, the last time two weeks ago, I had two laptops, 1 for work and 1 for my personal use, and a newly purchased in Taiwan EEEPC netbook which I declared.

  24. Re:If you're that worried... by paulatz · · Score: 5, Insightful

    I think it is much easier to bring 2 USB keys to Mexico, move the data on them and send them home via regular mail, separately.

    --
    this post contain no useful information, no need to mod it down
  25. Re:If you're that worried... by Dare+nMc · · Score: 4, Insightful

    no one is going to look at the contents of your laptop

    they're have been over 20 lawsuits filed against US customs for them doing that exact thing (how many didn't sue?). So it is very unlikely the someone from customs will look at your laptop data. But not a absolute by any means.

    Now the likely hood of those outside of US customs (ie a thief or friend, etc) looking at it is infinitely more likely. They may even blackmail you with that data. So it is a very good idea for him to encrypt the incriminating photos,etc and a few other things for kicks. I wouldn't worry about the video files ripped from DVD, at most rename them to something less obvious (for windows just change the extension, they won't even play then) Besides if you watching them on the plane the air Marshall seeing(and caring) you play them is slightly more likely anyway. Since entering the US is the only time you'd see customs just delete them as you watch And empty the recycle bin (restore from backup once home.)

  26. Re:If you're that worried... by Reece400 · · Score: 2, Insightful

    Burn the data to mixed mode disc's & label only the music on the disc for extra obscurity.

  27. secondary inspection by drfrog · · Score: 2, Insightful

    if uve never been pulled into the us customs secondary inspection i wouldnt worry about it

    ive never had my laptop scrutinized and ive been pulled into secondary inspection a few times

    { canadian programmer telecommuting in the states == working in the states }

    think about who and what they are really looking for , its probably not you or your files

    --
    back in the day we didnt have no old school
  28. Re:If you're that worried... by postbigbang · · Score: 4, Insightful

    Such a plan is an invitation for disaster and confiscation. Don't think for a second that encryption isn't a red flag. And if they could decrypt (I believe for many reasons that there isn't such a thing as an unbreakable cypher) your data, why are you angry? Would they steal it? Put it up on a flickr site?

    Yes, the entire program is a total affront to both US Constitutional rights to reasonable search (this isn't), to privacy (yes, we need a real amendment) and just plain human dignity.

    If you have important data, drop it to a DVD. Put that in a separate place. Carry lots of them. Don't look like a terrorist or mad scientist as you go through customs and immigration. Then restore your data as needed. And feel free to make your computer bag as messy as you can.

    --
    ---- Teach Peace. It's Cheaper Than War.
  29. Re:Easy Solution by bogjobber · · Score: 3, Insightful

    No, problem not solved. He specifically said that he wanted his laptop for the flight, so your solution is no help there. And it is much, *much* easier for them to search your stuff if you send it through a private carrier. There's no expectation of privacy so they can inspect it without a warrant, which is effectively the same as physically carrying it through customs. But this way there's no upset traveller yelling at them and wasting an officer's time, and more imporantly, there's no way you would ever know if your laptop was searched.

  30. Theft in foreign country is a bigger concern by krlynch · · Score: 4, Insightful

    I know it's the hip thing to worry about Customs rifling through your laptop, but statistically, you have much better things to worry about when bringing your laptop on vacation ... among other things:

    0) Forgetting to bring the AC plug adapter,
    1) Customs services in the foreign country,
    2) Airport security on both ends,
    3) Simple theft of the laptop during the trip,
    4) Putting your laptop bag down on the bus and forgetting it,
    5) Spilling coffee on your keyboard at an internet cafe, and
    6) Dropping your laptop on your big toe and breaking both.

    Practically speaking, Customs agents can't be bothered to search individuals that aren't acting truly "hinky". I've been traveling internationally on a regular basis for business. My travel patterns certainly fit a certain "risk" profile (long stays outside the country, frequent travel, watch list name match, etc.) and I've never, in six years of this, ever had anything searched or questioned, much less seized. Practically, it's not worth worrying about.

  31. Re:If you're that worried... by autophile · · Score: 4, Insightful

    Truecrypt provides plausible deniability - the capability to create a hidden encrypted volume within another encrypted volume, thereby allowing you to grant access to unimportant/dummy data when a password is asked for without the attacker knowing additional information even exists.

    And that helps when they confiscate your laptop and "lose" it... how?

    Pictures: Store them on a high-capacity USB drive, SD card, or other small device. Hide it. That way, if they get your computer, they still won't get your pictures.

    Movies: Why I iPod ya? I think they're less likely to grab task-specific devices over computers. And they cost less.

    Either way, by bringing along a laptop, there will always be the risk they simply take it and lose it. No amount of data trickery can get around that.

    --
    Towards the Singularity.
  32. Known Your Adversary by bill_mcgonigle · · Score: 4, Insightful

    Truecrypt provides plausible deniability - the capability to create a hidden encrypted volume within another encrypted volume, thereby allowing you to grant access to unimportant/dummy data when a password is asked for without the attacker knowing additional information even exists.

    To do this you need the TrueCrypt bootloader installed, which is a dead give-away that you probably have a hidden volume. If you don't and they suspect of being a terrorist sympathizer you'll just get thrown in Gitmo until you give up your secrets.

    TrueCrypt plausible deniability is useful against those who cannot employ deadly force against you.

    If you're really concerned, wipe the drive, install linux on a small partition, use an encrypted network connection to upload the photos, then secure wipe the drive and install Windows XP on it for your border crossing. Better yet, get a $50 used laptop and leave it with a local school.

    --
    My God, it's Full of Source!
    OUTSIDE_IP=$(dig +short my.ip @outsideip.net)
  33. Re:Memory Stick would be Easier by tchuladdiass · · Score: 3, Insightful

    Go a step further. Take a 16GB flash drive, and create a 512 MB partition on it. Mount the rest of the drive using a 512 MB offset, and put your encrypted volume on that. Place a few scenery pictures on the 512 MB fat32 partition, and finally print up a label that says 512MB and stick it on there. They wouldn't even come close to seeing that there is an encrypted volume hidden on there then.

  34. This is a job for dual boot. by darkonc · · Score: 2, Insightful
    Set your system to dual boot Windows/Linux. If you're really paranoid, have it boot off of USB first and the main hard drive second. Put the Linux/Grub boot on a USB key, and keep it separate. The system should default to a Windows boot.

    When they boot the system, all they'll see is Windows. Windows will ignore the Linux partition(s). For anything other than an anal-probe search, this'll be enough to keep them at bay.
    It's unlikely that they'll do an anal probe search unless they find something else on you that worries them.

    --
    Sometimes boldness is in fashion. Sometimes only the brave will be bold.
  35. Re:Put the dunce cap away by tirerim · · Score: 4, Insightful

    So, you don't believe in life insurance, then? How about property insurance? Do you even lock your door when you go out? I don't worry too much about getting killed or having my stuff stolen, but that doesn't mean I don't take reasonable precautions for it. Having those precautions in place saves me from worrying about it.

    Personally, I don't worry too much about where my next meal is coming from, because I have a job. If I lose it, then perhaps I'll worry, until I find another one.

  36. The problem is overblown by ljw1004 · · Score: 3, Insightful

    Millions and millions of people travel with their laptops to all countries in the world. Just about no one has problems. Keep things in perspective.

    Yes, you should be concerned about laptop searches and seizures as a general principle of public conduct. No, you shouldn't be at all concerned about your laptop on your trip.

  37. Re:If you're that worried... by Anonymous Coward · · Score: 5, Insightful

    Extending off of this idea, My solution for travel to the US was to remove the hard drive, leave it at home, and run my laptop off of an ubuntu livecd. Any data I wanted to keep was stored on SD cards purchased in the US.

  38. Re:Put the dunce cap away by swillden · · Score: 3, Insightful

    Note I spend about zero time thinking about these things because the chances of them happening to me are about nil.

    Which just goes to show how bad people are at understanding small probabilities.

    It's foolish to completely ignore possible bad events just because they're unlikely, just as it's foolish to spend lots of time preparing for most unlikely events. The right way to handle unlikely but severely damaging events is to spend a small amount of time on them, and use that time to mitigate the risk to whatever extent is feasible.

    For example: you could get run over by a bus. Therefore, it's prudent to pause for a half-second before crossing the street and look both ways to see if perhaps a bus is coming.

    You could get unfairly imprisoned by a cop for a crime you didn't commit. Therefore, it's worth learning a little about what you do and don't have to say to police in order to minimize the probability that he'll be able to find probable cause for an arrest, and it's a good idea to have your attorney's phone number in your cell.

    Your house could be robbed. So, you should have insurance that covers theft, and should take 15 minutes once a year to video the contents of your home, and store the video in your small fireproof safe (where you keep important stuff to address the small probability that your house will burn down).

    You could catch a nasty disease from a public toilet seat. Well, you could use one of those seat protectors, I suppose. Personally, I think the risk is too small to bother. I do, however, make a habit of grabbing a piece of toilet paper to wipe off the seat before I sit down. This would provide some protection from nasty diseases, but also addresses the much more likely issue that someone may have peed on the seat.

    And so on. Don't ignore small risks, just take appropriately small actions to mitigate them to the degree that makes sense. If you need to figure out how much makes sense, just come up with a dollar figure that values what you'd lose if the event happened and multiply that by the probability of the event happening in a given year. That's the expected annual cost of that risk. Pick an hourly wage for yourself, divide the risk cost by the wage to get a maximum amount of time that it makes sense to spend addressing that risk.

    In the case at hand, it's probably worth a few minutes to type an Ask Slashdot question and read the answers, then a few more minutes to implement whatever seemed to be the best EASY suggestions.

    --
    Note to ACs: I usually delete AC replies without reading them. If you want to talk to me, log in.
  39. Just returned from Europe with no issues by HeWhoMustNotBeNamed · · Score: 5, Insightful

    We flew into Munich, traveled by Train to Austria and returned to the US via Munich. We had no issues other than US Customs wanted to review the food items we were importing and declared. We knew that when we bought the Austrian chocolate and it took maybe an extra 5 minutes to go through the Agriculture lane for customs.

    I did burn a DVD of my pictures as a backup, more in case the laptop was stollen than if US Customs wanted to retain the laptop.

    Get over the paranoia and go see the world.

    1. Re:Just returned from Europe with no issues by bornwaysouth · · Score: 5, Insightful

      Deary, deary me. A sane voice. You really don't belong here. Your lack of problems came about because you acted on a normal fashion. Read the posts. These guys are off on another planet.

      An analogy.
      Imagine that you want to walk down a street at night, which just happens to have a lot of coke dealers on it. You have your own *private* reasons for being there. Cop patrols cruise by. The advice given by the other posts is wonderfully technical. The equivalent is. On seeing a cop car, scuttle into a doorway. Wear patterned clothing that allows you to blend into doorways. Wear rubber gloves and be prepared to drop any stash to allow plausible deniability. Have an artificial third leg. In short, wave a large neon sign saying "Look at me."

      There is an observation in the science press that terrorists seem to be more likely to be geeks than non-geeks. From the posts here, I'd say they are simply more likely to be caught.

    2. Re:Just returned from Europe with no issues by bornwaysouth · · Score: 3, Insightful

      What you say is reasonable. I used to be a chemist. I even had the embarrassment once at an airport of having a little vial of a chemical out of my bag being waved at me and being asked what it was. I said "I don't know." This was utterly truthful. I was bringing it in to have X-ray crystallography done on it. At which stage, I played my voice back in my head and thought "What does that mean to the border guy?" Oh, oh. I said it was mine, I had made it, it had a weird formula, and if he could identify it for me, great. I just wanted to know what it was. And I was off to the local university to find out. He was happy with that (in a grumpy sort of way.) All this was pre-9/11

      I have not gone thru US customs post 9/11. I did know someone who did, with bits of electronics in his luggage. he was a production engineer taking stuff-ups from China back for detailed design analysis. He had a shit-load of trouble. About 4 hours before he could get onto a plane.

      All this is reasonable to expect when social paranoia is given power. I don't like it either. But the original post was, I thought, about someone coming back from overseas and wanting to keep private the info on his laptop. It seems to me that if you act suspicious (encrypting the whole drive) then you are attracting attention. If 300 people have been vomited out of a jumbo jet, the priority must be to clear the very likely innocent as fast as possible. As a passenger, your priority is to get shunted though in the of-no-interest group. This applies if you are a terrorist, porn collector, or simply a good looking woman with photos of yourself on a nudist beach. Making it obvious you have something to hide is a dumb approach. Fun to think of, but stupid as real-world advice

      As for being a specialist wanting to take stuff in. Yeah. You would have to evaluate packing it on the basis that you will be declaring it to a Russian customs inspector in 1961, he being well educated in Marxist-Leninist politics, the deviousness of smugglers, and how to keep the commissars happy. Openly declaring electronics and little vials of chemicals would simply speed up how fast you got taken to a specialist interview room. All three education streams probably apply today. (Marxist-Leninism uses different nouns, and the other two are unchanged).

  40. Re:If you're that worried... by CodeBuster · · Score: 4, Insightful

    I believe for many reasons that there isn't such a thing as an unbreakable cypher.

    Theoretically that is true, but the computational complexity (i.e. the number of operations required to solve the math problem) of modern crypto systems is such that rarely will an informed and determined adversary attempt to brute force the crypto system. In fact the number of operations and computing power required render the entire attempt hopeless, since the data cannot be recovered in this way within a single human lifetime (i.e. 120 years) even when the resources available to first world governments are taken into account. It is more likely, assuming that they have no qualms and are determined to get your data, that black bag or rubber hose techniques will employed instead. Basically, if the computer leaves your sight and possession (i.e. it is taken into the back room before being returned to you) then that particular computer can never be trusted again, which is why you should have a backup of your data somewhere else, preferably on a secure off-site server, before you begin your travels and regularly update it during your trip. As far as I know, from my background in Computer Science, modern cryptography provides security that it at least as good as any alternative method and most probably substantially superior to those alternatives. The mathematical and theoretical foundation of modern crypto is well understood and proven (the government also uses these same or similar crypto systems for their own data, so draw your own conclusions about the effectiveness of modern crypto systems).

    Don't think for a second that encryption isn't a red flag

    So what if it is? Do we surrender our rights under the Constitution because authoritarian elements within our government are treating us all as criminals and terrorists with something to hide? Shall we surrender to fear and give up our rights in response to terrorism or criminal activity and in exchange for what? The promise of those some government agents to protect us against the bad guys? No thanks, I will take my chances with my rights intact. A right not exercised is a right that does not exist except on paper. We should all encrypt all of our data in order to more effectively assert our collective rights against unwarranted search and seizure.

    And if they could decrypt...your data, why are you angry? Would they steal it? Put it up on a flickr site?

    It is the principle of the thing. The government in the US exists because of the consent of the people. Here in the United States, at least according to the Constitution, the individual citizen is sovereign and any powers not specifically granted to the government by the consent of the people are reserved to us the people. I would rather that everyone walk around armed to the teeth and encrypt all of their data then live in an authoritarian nanny state where big brother is watching.

    If you have important data, drop it to a DVD. Put that in a separate place. Carry lots of them.

    There are many ways around their schemes (some better than others) and that is one of them. The fact that determined and knowledgeable adversaries can slip through undetected makes this whole piece of security theater even worse. It only inconveniences and compromises those citizens and people who are not able to, by reason of ignorance or incompetence, protect their data (which almost certainly would not include anyone intent on doing real harm).

  41. Encryption isn't the point by fm6 · · Score: 2, Insightful

    According to briefing my boss gave me recently, Truecrypt would not help: If they really wanted to see your content they could ask you to show it to them or alternatively confiscate your laptop and decrypt it themselves. The latter would mean you would probably not see your laptop again.

    If you do your encryption properly, it simply can't cracked by anyone not willing to expend a lot of expensive computer time — if at all. Encryption gets broken by user sloppiness, social engineering, or (depending on your tin foil hat status) undocumented back doors. NSA magic only works in the movies.

    But you are right about one's laptop getting seized and disappearing forever. The possibility of that happening would keep me from ever taking my main laptop outside the U.S., period. The existence of an encrypted file system might raise their suspicions, but they manage to get suspicious even without that.

    If you have to take a laptop abroad, go out and buy a cheapie you won't mind losing. And if you decide to put your vacation photos on the laptop, you should make a point of not hiding them, so as to avoid drawing attention to yourself. Having an ICE agent see what you look like in speedos may be an embarrassing and pointless invasion of your privacy. But a little embarrassment is something you get over; becoming a "person of interest" is not.

    Unless your pictures are very sensitive indeed, and it would totally screw up your life if the wrong people saw them. In that case, the last thing in the world you should be doing with them is schlepping them around on a laptop.

  42. Re:If you're that worried... by Nefarious+Wheel · · Score: 2, Insightful

    Sure it is. What if he took pictures of naked 10-year-old girls?

    What if he had pictures of his own children and didn't want them in circulation? Being a parent with daughters myself I'm fully aware of the sort of people who make up a percentage of border guards, and I don't want them stalked or targeted or "collected" by people I don't trust. And I certainly wouldn't trust strangers with photos of my children.

    You can't just simply go fishing for incriminating material without probable cause, it isn't right. And in the case of border guards, what amounts to "probable cause" needs to be set out in strict procedures, and every such trigger event needs to be backed up and independently verified. The difference between police and thugs are laws and procedures, not uniforms and badges.

    --
    Do not mock my vision of impractical footwear
  43. Re:If you're that worried... by jeti · · Score: 2, Insightful

    That's all fine and dandy as long as the burden of proof is not on you. But I suspect that you'll have to convince the border guard that they've seen everything if you want to enter the US and take your laptop with you.

  44. Seriously by Jeremiah+Cornelius · · Score: 5, Insightful

    Regular people, just doing ordinary legal business now need to worry about this?

    What the fuck is up?

    Doesn't this read more like an item that one would have expected to read - historically - by someone concerned about a visit to the Soviet Union, East Germany or Argentina? Looks like the Soviets didn't lose the cold war. There are just 1st and second runners-up, with both losers in a 15 year period, no? I mean, you fuckers used to have LAWS. You used to have a Constitutional validation of basic individual rights! But, I guess there are more important things to a nation, than the consent of the governed.

    In America, Soviet Union becomes YOU! You fucked up, America. And now you no longer exist in any meaningful context. The only single thing that defines you as a coherent entity within your borders is the way in which you are taxed - without representation.

    I don't know if I am angry or sad. But it is sad.

    --
    "Flyin' in just a sweet place,
    Never been known to fail..."
    1. Re:Seriously by Eternauta3k · · Score: 5, Insightful

      Doesn't this read more like an item that one would have expected to read - historically - by someone concerned about a visit to the Soviet Union, East Germany or Argentina?

      Regardless of the truth in that statement, I never heard of Argentina being used as an example of an intrusive country. The checks they do at customs are laughable.

      --
      Yeah. Would you choose a neurosurgeon who pokes around people's brains in his spare time? I wouldn't.
    2. Re:Seriously by habbi · · Score: 1, Insightful

      wha?!?!
      Argentina???
      We are a democracy from 1983 you insensitive clod!

      besides, here we can fly all over with our porn, movies and warez in our laptops and no one is annoying us!

      Cheers!!!

    3. Re:Seriously by dbIII · · Score: 5, Insightful
      One lesson from an incredibly expensive joke of a "terrorist" case in Australia is that a photograph of a landmark is proof you are going to blow it up. Be careful with those holiday snapshots!

      The outcome was that the case was thrown out due to a complete lack of evidence apart from a very distant family relationship with another suspect in the UK, so beware, if Kevin Bacon does something you're screwed. It really did look like a show trial set up for an election year so that Australia could finally show the anti-terror laws were working.

      To be practical and serious I would say leave a copy of everything you really want to keep with somebody before you fly just so you can get it back if the laptop is mishandled or held up in any way, or even if you just drop the thing yourself.

  45. Re:If you're that worried... by timeOday · · Score: 3, Insightful
    All this talk about truecrypt and plausible deniability is rubbish.

    Simply upload your photos from your hotel room (or an Internet cafe) and delete them from your laptop before leaving for home. Viola.

  46. why data on one's person should be excluded... by tlambert · · Score: 3, Insightful

    why data on one's person should be excluded...

    I think if the person is, for example, a lawyer, the data in question could be protected by attorney/client privilege, and therefore they could face disbarrment for disclosure, even were it done under color of authority.

    I imagine, in fact, that this is a real issue for lawyers attempting to operate on behalf of the detainees at Guantanamo Bay.

    But I'll also answer the question in the subject, as to why it should not simply have an exclusion cause for lawyers, instead of being struck down for everyone: because it's in my head and they have no right to search my head. What's the difference between data in your head and data encrypted with a password stored in your head? To me, the data is in your head, and the data on the hard drive is just a useful memory aid.

    Oh, and if the original poster is more concerned about them getting his data than about losing the laptop, make a one time pad, make a copy of it, put the copy of it in a safe deposit box, travel outside the US, and then after encrypting the data with the OTP, destroy the OTP so it is impossible for you to comply.

    -- Terry

  47. Re:If you're that worried... by squizzar · · Score: 2, Insightful

    I believe for many reasons that there isn't such a thing as an unbreakable cypher

    One time pad

    It is the only 'unbreakable' encryption since if done correctly the encrypted data shares no information with the plaintext.

    Unfortunately it's not the easiest encryption to use. My best guess in this case would be to take a copy of the pad with you. If the laptop is searched then you never use that pad because it is compromised. Once you have encrypted your data you destroy the copy of the pad. When you return home you decrypt the data using the original pad. Obviously you would need to secure the original pad at home (e.g. not actually in your house) so that it can't be found in a search. Not convenient of course, but technically unbreakable.

    Personally I agree with whoever suggested transferring your data back via secure shell. In fact, encrypt it with a nice big RSA key, email it to an anonymous gmail account, and carry the key back on a USB stick. What are they gonna do, find all the encrypted data in the world and test your key to see if it decrypts it?

    (The really paranoid part of me thinks that this makes it only a matter of time before possession of any data that could potentially be an encryption key will be a criminal offense)

    Finally if you wanted to be cocky, I'd suggest hiding your pictures as a watermark or whatever in some other, completely innocent pictures. You really think they'll look twice at pictures of a geek in swimshorts.

  48. Re:If you're that worried... by Random+Destruction · · Score: 2, Insightful

    If you read the discussion attached to that article when it was posted on Slashdot, you'll find many many solutions to this issue. Apparently the fix is trivial, and that was just a press release to get attention.

    --
    :x
  49. Re:If you're that worried... by Anonymous Coward · · Score: 2, Insightful

    Allow me to translate your statement:

    All this talk about truecrypt and plausible deniability is rubbish.

    Simply upload your photos from your hotel room (or an Internet cafe) and delete them from your laptop before leaving for home. A four-stringed musical instrument of the violin family, slightly larger than the violin; a tenor or alto violin.

    Voila

  50. Re:If you're that worried... by hairyfeet · · Score: 2, Insightful

    Seems like overkill if he is just wanting to transfer his pictures and not get hassled. I am assuming you have a Windows box at home,yes? One that has a nice 24/7 Internet connection like cable/DSL? If that is the case then the answer is very simple:

    1. Install the free UltraVNC on the machine at home,set your username and password,and if you want,install and use the optional encryption plugin that encrypts the entire stream.Install it on the laptop and test it,and if you don't want el border guards messing with it simply leave the installer in a folder somewhere on your laptop and uninstall after testing.2. When you get to where you are going,run the UltraVNC installer,give it the name/password of the machine you are connecting to and there you go! You now have a secure connection to your main machine at home. Simply transfer you pics and other data to the home machine before you leave and then uninstall UltraVNC and delete the pics. When you get home your pics will be sitting on your home box waiting on you to edit/print/whatever. Enjoy and have fun in Mexico!

    --
    ACs don't waste your time replying, your posts are never seen by me.
  51. Re:If you're that worried... by stephanruby · · Score: 2, Insightful

    A low tech way to discourage searches is to not bring the battery (buy a new one when you get there) and not clean the keyboard and/or screen.

    Do this only if you're worrying more about having your computer searched by some random 8 dollars an hour baggage handler than having it "kept for further analysis" by the DHS.

    Anything that would fall outside of the ordinary should a raise a major red flag for them, and that includes having a laptop with no battery and no power chord, having a cell phone/PDA with no batteries in it (or next to it), or having a non-work related laptop from a male traveler that has no pornography on it and no bodily fluid (that's UV light reacting) on its keys.

  52. You are being paranoid by GayBliss · · Score: 2, Insightful

    I travel in and out of the U.S., the U.K., and Spain every couple of months with my laptop, and sometimes with an additional computer, and I have never been asked to show it to anyone nor have I seen anyone else having their laptop checked. The security in Heathrow doesn't even want the laptop taken out of the carry-on anymore, and the U.S. customs rarely looks at anything from anybody that I have seen.

  53. Thanks Slashdot! Love, TSA by Monkier · · Score: 2, Insightful

    So in a couple of months all the l33t slashdotters a going to be smuggly waking thru border checks, with their hidden linux partions, truecrypt archives.. And the friendly TSA worker is going to pull out a USB key that checks for all the helpful suggestions posted in these comments.

    TSA worker asks you 'are there any pirate movies / mp3s on your laptop?'.. are you going to lie? how many people on the flight saw you watching 'big momma's house 3'? can you afford to be without your laptop for a couple of months?

  54. Do not lie to them by grahamsz · · Score: 1, Insightful

    What's the point in lying to a law enforcement official that's questioning you? Ultimately you could land yourself in a lot of trouble, and I suspect the better border officials will have a good sense for your body language if you are lying.

    Are you really required to hand over keys without a warrant? If its your employers data thats on there then you can surely hide behind a corporate policy that says you can't share your keys without a search warrant.

    Honestly, i've traveled in and out of the US numerous times with laptops and never had they even ask me to so much as turn it on. If you have any data so important that it can't possibly be compromised, you probably don't need to be carrying it.

  55. Re:If you're that worried... by nametaken · · Score: 4, Insightful

    You're absolutely right, it'd be downright trivial to confound any "homeland security" flunky. Those wretches couldn't find their own genitals with both hands and a flashlight.

    What bothers me is that we're even talking about this like we're troubleshooting a minor tech issue. Why the hell should we have to even think about this? How did we get a place where this is an issue to deal with?

    What comes next... they require us to install and run a government supplied application to scan the disk? I mean... that would be in our best interest, right? It'd shorten the lines and protect our children from terrorists at the same time? It's lightweight and unobtrusive, while protecting our freedom?

    This country has a horrible sickness, and no politician is going to cure it. I'm about as normal a guy as you'd ever meet... but something has to happen to wake us the F* up, and I afraid it'd have to be something terrible.

  56. In my experience by therealcrowchief · · Score: 2, Insightful

    I dont know if its because im military or not, but ive flown to and from the US 3 times each since this bill or whatever it is was proposed, all 3 times from Germany to the US, 2 times from the US to Germany and once from the US to France...and I have never been asked for my password for my laptop. While I have nothing to hide, anything I dont want to be seen isnt on my travel laptop, but I still never been asked. This is just my experiences.