Imagine everyone starts doing this. Would they start to ask for your FB/Gmail login credentials?
I’ll never bring my phone on an international flight again. Neither should you
41–50 of 118 posts
Re: I’ll never bring my phone on an international flight again. Neither should you
#42Earlier quoted context omitted.
It's called deniable encryption ( https://en.wikipedia.org/wiki/Deniable_encryption ), and there are several software packages that can utilize it.
A big flaw of deniable encryption software is that it's only used by people who use the deniable part, so its use strongly suggests the existence of such hidden data. Whether or not that's sufficient to detain someone and demand that they produce the additional password will vary depending on various jurisdictions' laws, but I personally wouldn't tempt fate with it.
it's the same with a phone that underwent factory reset during the walk from the plane to the first customs officer... you're suspect either way. similar with not having a phone at all - pretty much everybody who can afford to fly halfway across the world should be able to afford a phone. don't have one? suspect.
Re: I’ll never bring my phone on an international flight again. Neither should you
#43I'm thinking not bringing the phone or deleting all apps before landing won't help much if they ask you to login into your accounts on a computer (or stay detained for hours if you refuse or claim that you don't use facebook/email, your pick).
Re: I’ll never bring my phone on an international flight again. Neither should you
#44"I'll never carry my phone when entering the US from abroad again. Neither should you"
He mentioned other countries moving towards this kind of thing, and if you look around then that wouldn't be surprising for places like the UK as well.
Re: I’ll never bring my phone on an international flight again. Neither should you
#45Earlier quoted context omitted.
It's called deniable encryption ( https://en.wikipedia.org/wiki/Deniable_encryption ), and there are several software packages that can utilize it.
A big flaw of deniable encryption software is that it's only used by people who use the deniable part, so its use strongly suggests the existence of such hidden data. Whether or not that's sufficient to detain someone and demand that they produce the additional password will vary depending on various jurisdictions' laws, but I personally wouldn't tempt fate with it.
Not really - plenty of people use TrueCrypt to encrypt their drive without using the hidden OS feature for example.
Re: I’ll never bring my phone on an international flight again. Neither should you
#46> But before we do, take a moment to think about all the apps you have on your phone. Email? Facebook? Dropbox? Your browser? Signal? The history of everything you’ve ever done — everything you’ve ever searched, and everything you’ve ever said to anyone — is right there in those apps. If you personally do not care about your privacy, why should someone else care?
Privacy is a right afforded others.
Your particular risk model may or may not include CBP, both others' might. Immigration lawyers (for whom attorney-client privilege should hold), immigration NGO workers (for whom it almost certainly doesn't), journalists, asylees, among others.
The protections which apply to you also apply to them, and aren't granted conditionally. Which is why, if you believe in civil liberties, liberal democracy, and freedom, you should fight like motherfucking hell for them.
Unless, of course, you don't.
Re: I’ll never bring my phone on an international flight again. Neither should you
#47Imagine everyone starts doing this. Would they start to ask for your FB/Gmail login credentials?
I don't think you've been paying attention: https://www.eff.org/deeplinks/2017/01/fear-materialized-bord...
Re: I’ll never bring my phone on an international flight again. Neither should you
#48Earlier quoted context omitted.
My thought was actually to shut it off and pack it in my luggage so it's not with me through security. I won't see it until I reach the baggage claim.
Customs inspect checked luggage.
Yeah, I suppose this would only work if you mailed the phone to yourself, such that you only take hold of it after you passed customs.
Re: I’ll never bring my phone on an international flight again. Neither should you
#49I wonder how possible it would be to create a jailed environment on Android or iOS that can not access any of the data on your phone and could be entered by putting in a false password. That would allow you to enter your "password" on-demand and then only present a jailed process to those seeking to violate your privacy. It could appear to be a full experience, but not actually contain any personal data, or contain f…
In the Android world there exists a system called MultiROM, it allows you to have multiple ROMs installed on your phone with separate data partitions.
You could theoretically load one ROM up with all your personal data (and have it encrypted) then have another for customs usage, just boot it up before you reach the agent. Remember to load it with plausible data to prevent any suspicions and you should be good to go.
The odds of the border agent messing around in your recovery to boot the other ROM... I'd say fairly low.
This may be a practical solution today for people who want privacy at the border.
Re: I’ll never bring my phone on an international flight again. Neither should you
#50Earlier quoted context omitted.
It's called deniable encryption ( https://en.wikipedia.org/wiki/Deniable_encryption ), and there are several software packages that can utilize it.
A big flaw of deniable encryption software is that it's only used by people who use the deniable part, so its use strongly suggests the existence of such hidden data. Whether or not that's sufficient to detain someone and demand that they produce the additional password will vary depending on various jurisdictions' laws, but I personally wouldn't tempt fate with it.
Yes, we need this as a feature of iOS and Android. Type one password - decrypt a clean version of your phone. Type another password or use a different fingerprint - decrypt another version of your phone. They'd have to make it so you can't tell the difference between a phone with a deniable section versus one that does.