Slashdot Mirror
Canadian Fined For Not Providing Border Agents Smartphone Password (www.cbc.ca)
Reader da_foz writes: A Canadian was reentering Canada when he was arrested and charged with hindering or obstructing border officials. At the time traces of cocaine were found on his bags and he was carrying $5,000 in cash. He provided his smartphone to border agents as requested, however refused to provide the password. Canada Border Services Agency officials asked for Philippon's smartphone and its password. From a report: "He handed over his BlackBerry but refused to disclose the code to access the phone. Philippon was arrested and charged under the federal Customs Act, accused of hindering or obstructing border officials." It is unclear if he provided the password while agreeing to the fine.
Boarder Agents?
Never, ever give out your passwords to any "law enforcement" (the reason for the quotes will be clear)
- It's ridiculously easy to plant evidence on a cellphone or PC;
- Your password can be used later for industrial espionage;
- There is no guarantee that the law officer would really be a law enforcement officer or that he is honest and therefore not going to use your passwords for dishonest activities;
Religion: The greatest weapon of mass destruction of all time
Are traces of cocaine the same as the "we smelled marijuana"? Was the cash found first, then they somehow found some "traces of cocaine"?
SLOWER TRAFFIC KEEP RIGHT
Hmm, original submission spells it correctly, but the headline doesn't. Another case of semiliterate editors at /.?
"I do not agree with what you say, but I will defend to the death your right to say it"
Are the Headings "Write-only" (so they can never be spell corrected?)
Why are duress passwords not a standard feature at this point?
Because they are useless once the party causing the duress becomes aware that such a thing exists.
Agent: "Give me your password" ...
You: "Here you go"
Agent: Clubs you with a wrench. "Give me your REAL password, smartass"
You:
Well, the concept behind a duress password is that they have to actually try the one you give them to verify it, and once they enter a duress password further attempts to get a real one are useless. (note, there's no reason you can't have arbitrarily many duress passwords, so they'll never be sure that the Xth unique password you divulge is the real one.)
If the duress password summons the authorities or destroys the device than, asking for your password is pointless as they know that even if you do give them the real one they won't be able to verify that without risking the device's destruction, or exposing their attempt.
The problem arises when the people breaking in ARE the authorities, as then they don't care if the phone calls the cops, and they will nail you with obstruction and destroying evidence if the device self destructs. In that case it's safer to try the "I forgot" or "I plead the 5th (or local equivalent)" gambit.
Better be sure whatever you are protecting is worth your life or your freedom because that's what it might cost you.
What you are trying to protect is your freedom. If you're going to lose it one way or another, it seems better to lose it by standing up for yourself.