Live data from Hacker News

1Password Travel Mode: Protect your data when crossing borders

blog.agilebits.com

31–40 of 553 posts

Re: 1Password Travel Mode: Protect your data when crossing borders

#32

Wouldn't an alternative "destroy everything" password be a good idea also ? Would work like this : When forced to enter / give the password to your vault, you enter/give this one, and everything the vault contains is wiped out before the vault is unlocked.

That's basically the definition of spoliation of evidence, if things were to ever escalate to civil or criminal proceedings.

This qualifies already.

18 U.S. Code § 1519 defines it as "Whoever knowingly...conceals...with the intent to impede...the proper administration of any matter within the jurisdiction of any department or agency of the United States"

So technically, entering travel mode for the purpose of hiding your stuff from border agents could be interpreted as a violation of that statute, regardless of whether there was an active investigation or legal proceeding.

Of course, it would trigger a massive backlash if a federal prosecutor went after people for this. But it's there...

Re: 1Password Travel Mode: Protect your data when crossing borders

#33
post #27

Wouldn't an alternative "destroy everything" password be a good idea also ? Would work like this : When forced to enter / give the password to your vault, you enter/give this one, and everything the vault contains is wiped out before the vault is unlocked.

Do you want to go to prison?

There needs to be a crime before someone can be charged with tampering. No crime, no evidence, no tampering.

Re: 1Password Travel Mode: Protect your data when crossing borders

#36
post #11

Earlier quoted context omitted.

,,even if you’re asked to unlock 1Password by someone at the border, there’s no way for them to tell that Travel Mode is even enabled.'' It looks similar to hidden partition in TrueCrypt

Any subscription-based 1Password can be accessed from the web. Couldn't they just demand those credentials?

Only if you know them. I don't know about you, but I don't have my long random account key memorized (only my master password). You can't log into the website without that account key.

Of course, you do need to be able to log in to turn travel mode back on, so if I were to use this I'd probably do something like set up a service to securely send me my account key after I'm expected to have finished crossing the border, or maybe just store it on a remote server that I have access to under the expectation that the TSA can't demand that I SSH into a remote server (especially one they don't even know about). Though if I'm traveling alone (instead of with my wife) I'd probably just call her and ask her to turn travel mode off for me.

Re: 1Password Travel Mode: Protect your data when crossing borders

#37
post #31

Counter: the border agent asks "are you hiding any information from us?". answer yes, and they get you to disable travel mode. answer no, and you just committed a felony.

Literally removing your access to data isn't the same thing as hiding it. Having a TrueCrypt partition on your drive that you can still unlock if you know it's there is hiding it. Securely erasing that partition is not.

Re: 1Password Travel Mode: Protect your data when crossing borders

#38

Earlier quoted context omitted.

That's basically the definition of spoliation of evidence, if things were to ever escalate to civil or criminal proceedings.

This qualifies already. 18 U.S. Code § 1519 defines it as "Whoever knowingly...conceals...with the intent to impede...the proper administration of any matter within the jurisdiction of any department or agency of the United States" So technically, entering travel mode for the purpose of hiding your stuff from border agents could be interpreted as a violation of that statute, regardless of whether there was an active…

I think there is a line to be drawn somewhere, and I don't know where — but taking this further, if I erase my laptop before going to the US and then restore it from a backup online, isn't this the same thing as „knowingly concealing with the intent to impede”?

And what if I don't take the laptop at all? Am I „concealing” anything? Theoretically — yes.

There has to be a limit to how far one can take the application of that law.

Re: 1Password Travel Mode: Protect your data when crossing borders

#39

Wouldn't an alternative "destroy everything" password be a good idea also ? Would work like this : When forced to enter / give the password to your vault, you enter/give this one, and everything the vault contains is wiped out before the vault is unlocked.

Once again we drum up technical "solutions" to what ultimately is a policy issue.

A better idea is to change our laws so that our constitutional rights are respected. If that's not possible then the next solution is to change our elected officials.

Re: 1Password Travel Mode: Protect your data when crossing borders

#40
post #31

Counter: the border agent asks "are you hiding any information from us?". answer yes, and they get you to disable travel mode. answer no, and you just committed a felony.

Answer "There is no hidden information on this computer, or any of my other devices".
Post reply on HN