Should International Travelers Leave Their Phones At Home? (freecodecamp.com)
Long-time Slashdot reader Toe, The sums up what he learned from freeCodeCamp's Quincy Larson: "Before you travel internationally, wipe your phone or bring/rent/buy a clean one." Larson's article is titled "I'll never bring my phone on an international flight again. Neither should you."
All the security in the world can't save you if someone has physical possession of your phone or laptop, and can intimidate you into giving up your password... Companies like Elcomsoft make 'forensic software' that can suck down all your photos, contacts -- even passwords for your email and social media accounts -- in a matter of minutes.... If we do nothing to resist, pretty soon everyone will have to unlock their phone and hand it over to a customs agent while they're getting their passport swiped... And with this single new procedure, all the hard work that Apple and Google have invested in encrypting the data on your phone -- and fighting for your privacy in court -- will be a completely moot point.
The article warns Americans that their constitutional protections don't apply because "the U.S. border isn't technically the U.S.," calling it "a sort of legal no-man's-land. You have very few rights there." Larson points out this also affects Canadians, but argues that "You can't hand over a device that you don't have."
The article warns Americans that their constitutional protections don't apply because "the U.S. border isn't technically the U.S.," calling it "a sort of legal no-man's-land. You have very few rights there." Larson points out this also affects Canadians, but argues that "You can't hand over a device that you don't have."
Depending on how long you're staying, you could send your phone via courier to meet you at your destination. Of course, then you have to trust the courier company and the customs agents handling the package.
So what happens when travelers start carrying attack hardware & software that bites back. Imagine that the border agent sticks your phone into his reader and along with your data your phone injects a virus into his system. This can be done at very low levels. Or your 'phone' might simply send out 200,000 volts of power through the connection frying boarder patrol's expensive equipment.
Sounds like a good plot for a thriller spy movie...
And it's all possible.
reacting to these egregious violations of privacy by leaving your smartphone at home, or simply not having one, seems somehow inadequate. The fascists will simply keep pushing and pushing, gradually closing the net around you as they have ever since the passage of the (un)PATRIOT Act. In an actual free and open society, stealing, er excuse me "confiscating" someone's property and then demanding the victim give up their password would be illegal, and the very idea that the 4th Amendment to the United States Constitution shouldn't apply just because you are near the national border would be laughable. But we're not a free country, are we? No, not for a long time now.
You must give border agents a key that will unlock your phone, but what if your phone had multiple levels of unlock? One key unlocks it to show a minimal contact list, texts and phone call histories of only select contacts and web history of only whitelisted sites. Sign in with a different key and suddenly your full history is available. If the filesystem is encrypted who is to know you haven't done a full unlock for the border goons.
This is no different from the drill for laptops. On your travel day, back up your phone, encrypt the backup, send through your by vpn to a server stateside, reset the phone to factory defaults. Download the backup when safely stateside.
Some mornings it's hardly worth chewing through the restraints to get out of bed.
I'm not sure that leaving your phone at home counts as "resistance" - it sounds more like surrendering.
#DeleteChrome
Yes, and no.
The US military (which includes everything from SEAL Team 6 down to your local police officer it seems now) has a concept of "developed capacity is intent to use it." Yes, using this thought process means that since every woman has a vagina, then she has the intent to become a prostitute, which is absurd on it's face.
That's kind of the point here.
If TSA/ICE/some random cop on the beat has the capacity to slurp your phone, then obviously, while the intent might not be there, they certinaly could if they had the slightest reason do to so. Such actions as looking at them. Not looking at them. Appearing nervous. Appearing calm. Being dressed too well. Being dressed poorly. Being dressed differently. Not being dressed differently. Speeding. Not speeding. Going slower than the speed limit. Using a highway. Using back roads.
These are all excuses used in court to preform a "reasonable suspicion" search, including one officer in Georgia that used all of these excuses in a single month. (I'll add there wasn't a single conviction in the bunch, only complaints of rights violations where were dismissed.)
The point is that "over the top" applies not to just viewing with alarm the possibility of police abuse, it's been proven to happen. Frequently. Most often with absolutely no consequence to the officer, department, or state actor involved.
I forget where, but it's been said "If you don't give weight to your principals, then the first wind will carry them off." And I absolutely disagree that constitutional protections "don't apply" to the boarder. Yes, I'm aware that's how courts have ruled, but I am not saying it isn't treated like that, I'm saying it is a break with the honor of our laws to do so. Further, nothing in the constitution or the bill of rights denies civil rights other than voting or holding certain public offices to non-citizens, and it doesn't say "while in the territory of the US". These rights should apply in downtown USA the same as they apply where ever the United States holds defacto jurisprudence, even if it's not our country. In other words, no more "black sites" and "rendition" allowed.
We have been told over and over again that "They hate us for our freedoms", but I don't see that we have many freedoms we can be proud of any more, let alone ones others would envy. Indeed, I think we've done much more damage to ourselves with our "security" stance than the terrorists have done.
Necessity is the plea for every infringement of human freedom. It is the argument of tyrants; it is the creed of slaves.
> You have very few rights there
This does apply to them searching your phone, you have no choice. But it doesn't really apply to US citizens on giving up your password, if you have some time to spare that is. They cannot deny a citizen entry without cause, they can deny them their possessions or hold them for a "reasonable time." So eventually they have to allow citizens out of the constitution free zone, and into the US. Although they may be able to force you to give a fingerprint.
Of course this only applies to US citizens and US customs. Other countries are under no such consideration. But I am not sure many have any protections from search anywhere.
You can't be compelled to give your password, you can however be denied permission to travel if you withhold it.
The fourth amendment reads:
The right of the people to be secure in their persons, houses, papers, and effects against unreasonable searches and seizures, shall not be violated, and no Warrants shall issue, but upon probable cause, supported by Oath or affirmation, and particularly describing the place to be searched, and the persons or things to be seized.
There's some wiggle room in there, but the intent seems clear. Searches should be limited to those accused of a crime, and must be authorized by a judge/magistrate that there is probable cause.
I've been thinking about this since the recent article where a NASA JPL US citizen employee was detained and forced to give up his password.
I have a Chromebook. It's easy to wipe it completely to fresh out of the box factory settings. At the border, you can give them a completely blank computer. (or set up a dummy Chromebook account with nothing on it). Then when you are back safely in the US, just enter your credentials and it will download everything from the cloud and you're back in business.
Phones are a little more difficult. You can factory reset these but your SIM card still has data. You'd need to install a decoy SIM card in it (preferably a burner SIM from some odd place where it won't work in the US). You'll have to deal with your own SIM card by hiding it or mailing it to yourself. Once you reinstall your original SIM and login, the phone apps, etc. will restore themselves.
Either that or just buy a burner phone and ditch it before you return.
I don't read your sig. Why are you reading mine?
so if it only happens to 1 in a 1000 people it's ok?
Yes, dear AC, if it happens due to some level of reasonable suspicion. I take it you would prefer a system where CBP has no authority to search anything under any circumstances? Hopefully you don't actually live in the U.S. and thus benefit from its protections as you sit in the comfort of your own home (ok, ok, or your parent's basement) and crank out ignorant anonymous posts.
Mod me down again, anarchists.
The best answer is always ECONOMIC. Stay away from the USA and travel elsewhere. If they notice a huge decline in tourism and the associated revenue they will be forced to rethink TRUMP and his policies.
The issue is, that's not my call. I'm a professional, I travel to the US on business. In doing so, I bring data that is not mine with me. Corporate emails, credentials that could cause a CNN moment if mishandled, etc.
Those data are stored under cryptographic control, using two factor authentication. It is not mine to decide if it's acceptable to hand it over to anyone.
So now I need to take further steps to ensure I have access to the data required when I travel internationally to my corporate HQ, which increases the cost of doing business.
My company will never move their HQ out of the US, but others may decide at some point that it'll cost them less in the long run.
Min
On the whole, I find that I prefer Slashdot posts to twitter ones because I don't get limited to 140 chars before
Yep, the USB device (aka gadget) tells the USB host (computer) what kind of device it is. Newer phones equipped with USB OTG have the hardware to work as either end of the connection.
Some chips used in common USB memory sticks can be programmed to act as a keyboard, sending keypresses to the computer when someone plugs in the "flash drive". I built one of those myself, using a usb flash drive with my company's logo on it. If I were to leave that drive laying around the office, one of my co-workers would probably think that because it's one of a batch of drives the company ordered with the company logo on it, it's safe to plug in. They wouldn't know I altered it to work as a keyboard. Currently it's set to press the appropriate keys to rickroll someone, opening a browser to YouTube playing Rick Astley.
Canada's customs agents also take away phones and read data off of them.
The US Constitution is the entirety of the legal basis for the very existence of the American federal government. Is it binding upon all American government officials, agents, and employees at all times and all places. There is no provision in the constitution for the suspension of the bill of rights at the border, and the fact that our rights are routinely violated when entering the country is because our courts are derelict in their duty to enforce the constitution.
-jcr
The only title of honor that a tyrant can grant is "Enemy of the State."
Keep in mind the LEO community of every stripe (pastry?) came out overwhelmingly for Trump. Hell, the goons in US Customs and Border Protection (CPB) were *actively* ignoring Federal judge court orders banning Bannon's XO.
Plenty of US Blue Shirts champing at the bit to be Il Trumpe's brown shirts. Psychotic high school bullies don't change: they just become cops.
Funny, I've always thought that "they hate us for our freedoms" was a joke, and understood as such by everyone. Are you telling me people seriously mean it when they say that? And that other people believe it? Because I always thought they hate you for destroying their countries and ruining their lives, and not so much about what you do when you are at home...
I've made scores of international trips in my life, for business and pleasure, and on only one occasion did the border guards demand access to my laptop. That was at Pyongyang International Airport in North Korea, in August of 2015. And at least the search was conducted in full view of myself -- they even asked me to do a lot of it myself, since they were completely unfamiliar with KDE and couldn't type on my Dvorak keyboard. It turns out all they were looking for were South Korean movies (which they didn't want me distributing to the locals), and as soon as it became obvious that I had none, they called off the search.
I agree with this completely. As a Finn I've often been pondering recently what I'd do if the time comes to visit the US for business reasons or otherwise and this idea of just getting brand new device to bring along has been in my thoughts. However, in the context of your quote it has one massive setback: it's yielding to the system by saying 'fine, I agree that you can search everything I have so I bought a device with nothing on it'. It's not going to help the situation in the long term.
In fact I can see this kind of behavior being used to tighten the screws of surveillance even more: "Sir, we have noticed that you are on Facebook/Gmail/twitter but you're not logged into any of those on your device, please provide the passwords so we can verify you're not trying to hide any illegal activities'. That is, having a 'fresh' wiped device could itself be in the future seen as cause for 'reasonable suspicion', only making the problem worse.
In so far as I can see, the only way is not to try to go around the surveillance by means of technical solutions, but to oppose it in courts en masse. It's a hard route to take, but failing to stand up for your constitutional rights will, in the light of history, only lead to them being slowly chiselled away.
"It is the business of the future to be dangerous" -Alfred North Whitehead