Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

1Password Travel Mode: Protect your data when crossing borders

blog.agilebits.com

Post reply on HN
Print view View original

231–240 of 553 posts

Re: 1Password Travel Mode: Protect your data when crossing borders

#231

Post by albemuth »

Sir_Substance wrote: post #143
rosser wrote: post #116

Earlier quoted context omitted.

Do you honestly think customs agents care whether you'll get fired or not? US immigrations will permanently sever families that have been together for years or even decades with utter disregard for the emotional trauma they're inflicting. Your job matters exactly fuck-all to a CPB agent.

Yup. The correct solution is to stop traveling to the US. Stop sending your employees to the US as well. If the rest of the world starts insisting that US companies always come to them because of how US border agents act, that shit will bubble up to the lobbyists real fast.

As a foreigner married to a citizen, I'm not too satisfied with this suggestion.

Re: 1Password Travel Mode: Protect your data when crossing borders

#232

Post by valuearb »

vijayr wrote: post #120
stickfigure wrote: post #114

The right solution to this problem is, when traveling, always answer "no" to "may I search your laptop?" It sucks, and it many mean a lot of hassle ranging from confiscated equipment to being held at the border to being refused entry, but this is just one of the new risks of travel. Border security only gets away with this because people say yes. Companies need to make clear to their employees (and the public) that s…

Companies need to make clear to their employees (and the public) that sharing passwords is a terminable policy violation So which is a better option? Losing a job (or) refused entry/detention/harassment after 24+ hours on the plane/getting treated like a criminal....? (not that criminals need to be treated badly) The right solution to this problem is saner laws and educating the public about privacy and related topic…

If NASA engineers aren't allowed to refuse to unlock their work devices containing confidential NASA information, what hop is there for us?

Re: 1Password Travel Mode: Protect your data when crossing borders

#233

Post by vageli »

Analemma_ wrote: post #216
eridius wrote: post #179

Earlier quoted context omitted.

I don't think it's rules lawyering to say that literally not having the data is different than hiding it. There's nothing illegal about choosing to not bring stuff with you when you travel. And as long as the CBP's authority is limited to searching your devices and not forcing you to log into websites, then simply not carrying the data on your device seems perfectly reasonable. Furthermore, I don't think there's anyt…

> Furthermore, I don't think there's anything productive at all about making the argument that federal prosecutors will get you no matter what you do. That's just shutting down the discussion entirely. Well, it is true that if the government wants to come after you- as in, you specifically- then it is basically true that they will get you no matter what you do. But that's not the point I was making in my previous pos…

> The point I was trying to make was that this 1Password feature will not help you, legally, if CBP realizes you're using it and they want to make a fuss. Maybe if you rolled your own PW manager and decided not to sync the incriminating data, you'd have a case. But this feature is literally advertised as "protect your data from unwarranted searches [clearly implying, searches by the government] when you travel". The technical implementation (your "deleting" vs. "not having" distinction) does not matter: the intent is clear.

We are hinging on the subtle difference between deletion and non action. If I choose not to bring my phone with me to the border, and an agent remarks on the suspiciousness of that fact, if I were to reply, "I didn't bring it because I didn't want to travel with it," did you commit a crime?

Even if you were arrested for that statement, dor a prosecutor to convince a jury that you didn't bring data with you because you didn't want it to be inspected at the border vs you didn't bring it because you didn't want it to get stolen/whatever does not seem likely, but that is just my opinion.

Re: 1Password Travel Mode: Protect your data when crossing borders

#235

Post by fernandotakai »

codeka wrote: post #197
ptaipale wrote: post #182

Earlier quoted context omitted.

I think in this case the correct technical term is "denied entry". You haven't passed immigration to the country. Deportation is the expulsion of someone who's actually in the country, past the border, and resident or visiting.

Potato/potahto, really. Good luck getting a visa next time if you've ever been "denied entry". Really, for non-Americans the best advice is just don't go in the first place. Second best advice is just comply with border security personnel. Any tricks like leaving the battery empty, bringing a burner, not bringing a laptop and getting a loaner when you get there etc, they do nothing but raise suspicions.

> Any tricks like leaving the battery empty, bringing a burner, not bringing a laptop and getting a loaner when you get there etc, they do nothing but raise suspicions.

as i said on another comment, even not having social media is suspicious. which is insane, because it means you cannot have privacy if you want to go to another country.

Re: 1Password Travel Mode: Protect your data when crossing borders

#237

Post by Nition »

kstrauser wrote: post #220
MatthewWilkes wrote: post #35

This feature really should ask you to commit to your duration of travel beforehand. It's no use if you can be compelled to readd the data.

Better, the feature should _always_ show both "Enable Travel Mode" and "Disable Travel Mode" buttons so that it's not possible to tell whether or not it's enabled. Disabling travel mode should prompt for a password, then return a message like "all vaults protected with this password are now enabled" no matter what the result of the operation is.

So if you're in Travel Mode and you don't want them to know, you'd intentionally put in the wrong password to unlock? I agree that sounds like the best option. It's a lot like TrueCrypt's concept of having an encrypted drive with one password, and another, hidden encrypted drive in the same file with a different password. No-one can prove you have the second hidden one.

Re: 1Password Travel Mode: Protect your data when crossing borders

#238

Post by rosser »

kevindong wrote: post #234

Or: just delete the app before you get to customs and redownload after you pass customs. Simple, elegant, and fool proof.

If CBP knows you're a 1P user (which they hypothetically could since the NSA has read 1P's emails to you, a foreign user of that service), but you don't have the app installed when you attempt to enter, what makes you think they'll respond differently than they currently do to people whom they know have Facebook accounts, but delete the app from their device before attempting to enter the country, rather than allow the immigrations agent access to their feed?

Re: 1Password Travel Mode: Protect your data when crossing borders

#240

Post by beefsack »

stickfigure wrote: post #114

The right solution to this problem is, when traveling, always answer "no" to "may I search your laptop?" It sucks, and it many mean a lot of hassle ranging from confiscated equipment to being held at the border to being refused entry, but this is just one of the new risks of travel. Border security only gets away with this because people say yes. Companies need to make clear to their employees (and the public) that s…

Just saying "no" will work in very few countries.
Post reply on HN