1Password Travel Mode: Protect your data when crossing borders
blog.agilebits.com
1Password Travel Mode: Protect your data when crossing borders
1–10 of 553 posts
Re: 1Password Travel Mode: Protect your data when crossing borders
#2The implementation looks sound, and it's easy to use. Props to Agile Bits for making this feature a priority.
So this is great! -- I think. My only concern is that if the authorities are already suspicious of you, and find no password vaults (or practically nothing in your password vault), they may just detain you until you reveal what you haven't disclosed to them.
There's clearly a technical solution to the problem of protecting data across borders but they do not work so well under duress. Is there any technical way to convince an adversary you are not hiding anything else or did not delete something?
Re: 1Password Travel Mode: Protect your data when crossing borders
#3The implementation looks sound, and it's easy to use. Props to Agile Bits for making this feature a priority. So this is great! -- I think. My only concern is that if the authorities are already suspicious of you, and find no password vaults (or practically nothing in your password vault), they may just detain you until you reveal what you haven't disclosed to them. There's clearly a technical solution to the problem…
Social engineering. Confidence. At some point technology needs to be abandoned and you need to be a human being during those scenarios.
Or simply don't have anything to hide. If you have a guilty conscience that is going to manifest itself in your body language and mannerisms.
Re: 1Password Travel Mode: Protect your data when crossing borders
#4The implementation looks sound, and it's easy to use. Props to Agile Bits for making this feature a priority. So this is great! -- I think. My only concern is that if the authorities are already suspicious of you, and find no password vaults (or practically nothing in your password vault), they may just detain you until you reveal what you haven't disclosed to them. There's clearly a technical solution to the problem…
Social engineering. Confidence. At some point technology needs to be abandoned and you need to be a human being during those scenarios. Or simply don't have anything to hide. If you have a guilty conscience that is going to manifest itself in your body language and mannerisms.
> Or simply don't have anything to hide. If you have a guilty conscience that is going to manifest itself in your body language and mannerisms.
What if I am an anxious guy?
What if I carry some business secrets?
What if I don't want some TSA agent look at my SO pics I have on my devices/social media?
Re: 1Password Travel Mode: Protect your data when crossing borders
#5Excellent effort. I do wonder though, what is to prevent authorities from forcing you to just turn off travel mode? Is there a timer that you set? Deadman's switch? Geolocating? (The last 2 are not good solutions, but you get the idea)
Edit: I missed this bit below:
> even if you’re asked to unlock 1Password by someone at the border, there’s no way for them to tell that Travel Mode is even enabled.
However, it won't take very long for authorities to wise up, know that 1password has a travel mode, and tell you to turn off Travel Mode, eh? Or am I missing something?
Re: 1Password Travel Mode: Protect your data when crossing borders
#6Earlier quoted context omitted.
Social engineering. Confidence. At some point technology needs to be abandoned and you need to be a human being during those scenarios. Or simply don't have anything to hide. If you have a guilty conscience that is going to manifest itself in your body language and mannerisms.
> Or simply don't have anything to hide. If you have a guilty conscience that is going to manifest itself in your body language and mannerisms. What if I am an anxious guy? What if I carry some business secrets? What if I don't want some TSA agent look at my SO pics I have on my devices/social media?
Being anxious is something you can work on. Business secrets are perfectly legal to carry across a border. Not wanting the TSA to look at your shit is something I can understand.
I'd basically tell them to fuck off (in a more diplomatic sense) until it reached the point of being either blocked entirely from traveling or detainment. At that point you gotta ask yourself if the juice is worth the squeeze and turn back or play their game.
Also this is more than just an issue with the Trump administration and the TSA... I don't travel to Canada any longer due to the treatment I have received at the border there.
Re: 1Password Travel Mode: Protect your data when crossing borders
#7Isn't the counter simple; they ask for your logins to the 1Password vault? I guess this just adds an extra layer of obfuscation.
The most secure way I can think of is to either encrypt your drive (or wipe for travel and online restore once arriving) and physically mail the new password (or hand over to a trusted friend/store location) to the destination. Then there is no way of restoring at the airport.
Of course, then they can just detain you indefinitely for not revealing the password you don't know...
Re: 1Password Travel Mode: Protect your data when crossing borders
#8Earlier quoted context omitted.
Social engineering. Confidence. At some point technology needs to be abandoned and you need to be a human being during those scenarios. Or simply don't have anything to hide. If you have a guilty conscience that is going to manifest itself in your body language and mannerisms.
> Or simply don't have anything to hide. If you have a guilty conscience that is going to manifest itself in your body language and mannerisms. What if I am an anxious guy? What if I carry some business secrets? What if I don't want some TSA agent look at my SO pics I have on my devices/social media?
As the above comment states, confidence. Confidence is everything. It's hard to detect a confident liar without serious equipment and verification.
If it's hard, make up an appropriate story beforehand and rehearse it until it is second nature and you believe it yourself.
Re: 1Password Travel Mode: Protect your data when crossing borders
#9The implementation looks sound, and it's easy to use. Props to Agile Bits for making this feature a priority. So this is great! -- I think. My only concern is that if the authorities are already suspicious of you, and find no password vaults (or practically nothing in your password vault), they may just detain you until you reveal what you haven't disclosed to them. There's clearly a technical solution to the problem…
Social engineering. Confidence. At some point technology needs to be abandoned and you need to be a human being during those scenarios. Or simply don't have anything to hide. If you have a guilty conscience that is going to manifest itself in your body language and mannerisms.
> If you have a guilty conscience that is going to manifest itself in your body language and mannerisms.
More than once, the customs officer has asked me "you don't look people in the eye, do you?" I just say, "no, I don't." (They're apparently happy with that answer.)
So you can be questioned without having a guilty conscience; I just look down a lot.
Re: 1Password Travel Mode: Protect your data when crossing borders
#10Isn't the counter simple; they ask for your logins to the 1Password vault? I guess this just adds an extra layer of obfuscation. The most secure way I can think of is to either encrypt your drive (or wipe for travel and online restore once arriving) and physically mail the new password (or hand over to a trusted friend/store location) to the destination. Then there is no way of restoring at the airport. Of course, th…
> physically mail the new password
Nobody will ever do this.