501–510 of 553 posts
Earlier quoted context omitted.
You forgot the end of the story: "I'm denying you the ability to enter the country. Next time you let me see everything instead of being a wise guy."
If you are an American citizen, can they prevent you from entering the country? I understand they can delay you, but I don't think it can be indefinite.
They can deny foreigners, but I've always read that they cannot deny Americans in unless their citizenship gets revoked, I guess.
Earlier quoted context omitted.
:-/ What we really need is plausible deniability - if they don't know you use 1password, they don't know to ask for it.
Is plausible deniability the right term here? Usually that's about the ability to deny having known about or authorised something after it's already been discovered. I'm not really sure how you'd refer to the concept "they don't know I have it, so they don't know to ask". Security through ignorance?
Earlier quoted context omitted.
NSA can probably modify the firmware to create some sort of backdoor, if you actually look like that would be worthwhile?
Maybe the NSA can, maybe the NSA can't - but even if they could, I guarantee that customs/postal workers won't have access to it. Unless the NSA is specifically intercepting your particular SSD (in which case you have much bigger problems), standard enterprise-grade encryption will be good enough for shipping purposes.
Are you protecting against "drive-bys", the casually curious, motivated low-resource targeted attacks (e.g. disgruntled former employees, hated neighbors), "small" resource targeted attacks (<$50k?), high-resource attacks or state entities?
If you are refusing to enter the password, access to the device, or to disable travel mode, then good luck to you. IANAL, but the border agent doesn't care if the data is technically in the cloud, rather than on the device, because it restores when you unlock it. In addition to removing the data from the device, cheers, don't you also need to be able to honestly say you can not provide access to it? Ways to honestly…
If you read the article, there is no "tell" that 1Password is in Travel Mode. The only impact is that most of your passwords are missing from the password vault, but the agent would have no way of knowing what's missing. It's not like it pops up a big "Travel Mode" banner.
Earlier quoted context omitted.
If you take the time to FedEx your SSD to avoid customs you certainly made sure the disk was encrypted...
NSA can probably modify the firmware to create some sort of backdoor, if you actually look like that would be worthwhile?
I mean many "average" people get searched on airports, but i don't see why they would intercept an average guys Fedex shipped harddisk and do some voodoo on it. Unless of course you know you're being targeted for some specific reason.
If you are refusing to enter the password, access to the device, or to disable travel mode, then good luck to you. IANAL, but the border agent doesn't care if the data is technically in the cloud, rather than on the device, because it restores when you unlock it. In addition to removing the data from the device, cheers, don't you also need to be able to honestly say you can not provide access to it? Ways to honestly…
This is exactly the approach I took with my password vault application (android only, far less well-known than 1password). I added a location-lock feature that allows the user to store a number of "safe locations" outside of which the vault simply will not decrypt, even if the correct password is entered.
The app also makes it very clear that location lock is enabled and that the user is outside of all "safe zones" and therefore will not unlock. The only way a border agent is getting access is to figure out the GPS coordinate encryption method and adding a new set into the sqlite db or physically driving to one of the safe locations and unlocking it there.
Earlier quoted context omitted.
It's not really the same thing at all. Something you leave in your office is something you won't have access to at your destination - so it's logical that it wouldn't be subject to customs. Something online, regardless of physical storage location, is something you will have access to at your destination, so it should be subject to customs.
So if you travel without your phone, they still have the right to demand access to your email account? How does that make any sense?
Earlier quoted context omitted.
You can get a 10 year prison sentence or so for bribery. In any country in the world, you can be prosecuted there, or in the US or Europe. You will probably also be fired.
> You will probably also be fired. Please elaborate on that.
I'm struggling to understand all the comments here, but it feels like I'm living in an alternate universe. All of these questions like "but do the customs agents search for hidden partitions", etc... Who is it that is running into all these scenarios with border control? I've gone on international flights, including to the us, dozens of times, and have seen around me thousands upon thousands of travelers, and I've ne…
The release goes on to show that this is nearly twice as frequent as the equivalent period last year.
Earlier quoted context omitted.
Literally removing your access to data isn't the same thing as hiding it. Having a TrueCrypt partition on your drive that you can still unlock if you know it's there is hiding it. Securely erasing that partition is not.
Is there any difference between securely erasing a TrueCrypt partition vs forgetting the password?