Basic Security Precautions for Non-Profits and Journalists

Post by angry_octet » Tue, Feb 14, 2017, 3:56 PM UTC

Buge wrote: post #94

This should be updated to not just specify the US border. It should say any international border with border control. In Canada you can be put in prison for 1 year if you don't give up your password at the border.

While I'm sure you are referring to the Alain Philippon case, your facts are wrong.

Firstly, the CBSA action was never tested in court. Failure to divulge information hasn't been defined as 'hindering' before. The case would probably have to go to the Supreme Court of Canada for it to be decided.

Secondly, even at the border you can choose to remain silent.

See linked page for advice from actual lawyers.

The most likely worst outcome is you get refused entry if you are not Canadian.

https://bccla.org/2016/08/what-happens-if-you-dont-provide-y...

Post by zobzu » Fri, Feb 24, 2017, 6:16 AM UTC

mixedCase wrote: post #127

weeks wrote: post #121

Earlier quoted context omitted.

https://source.android.com/security/verifiedboot/verified-bo... How do you propose a custom rom can establish hardware root of trust without being signed by the device manufacturer?

I believe the point is that such a signature is useless since the software signed as safe is actually unsafe, while a self-signed rom at least has a chance to be safe.

this reminds me of when team-teso had their stuff on their website directly accessible over https.. so they used a self-signed cert, so that no govt or corporation could require a MITM with a valid signed cert from any trusted CA.

Re: Basic Security Precautions for Non-Profits and Journalists

Re: Basic Security Precautions for Non-Profits and Journalists