Live data from Hacker News

Australians who won't unlock their phones could face ten years in jail

nakedsecurity.sophos.com

51–60 of 167 posts

Re: Australians who won't unlock their phones could face ten years in jail

#51
post #47

Has anyone created a mobile OS that has a feature where if a certain password is entered on the unlock screen that it boots up a dummy desktop while silently encrypting or erasing the phone in the background?

That doesn't seem like it would be helpful from a forensics standpoint -- if a court is asking for my password, they probably already have an image cloned from my device, so any such things seem like they would either be noticeable, or simply be ineffective.

Re: Australians who won't unlock their phones could face ten years in jail

#52
post #47

Has anyone created a mobile OS that has a feature where if a certain password is entered on the unlock screen that it boots up a dummy desktop while silently encrypting or erasing the phone in the background?

It doesn't seem so easy to do reasonably. Somebody can compare your call log/messages to data they got from your provider.

It still seems like a nice idea, but it doesn't really give you plausible deniability.

Re: Australians who won't unlock their phones could face ten years in jail

#53
post #6

Also concerning is what they are doing towards companies (pardon the tangent): > It covers [...] device vendors [...] as long as they have "a nexus to Australia" > But what if the suspect stores the keys themselves? In that case, the government would pull out the big guns with a second kind of order called a technical capability notice. It forces communications providers to build new capabilities that would help the…

The article mentions both child abusers and terrorists yet the laws will rarely be used for that. Mandatory metadata retention was also bought in for the same reasons and has barely appeared as evidence in any subsequent cases, despite >300,000 warrantless metadata requests last year, overseen by a handful of public servants behind closed doors, in a country of 25 million people.

Another very concerning law is about "fixated persons", which was bought in with big budgets and huge teams of detectives solely dedicated to going after lone wolf terrorists, so far the only person charged is a former mining executive who was a respected lawyer and Head of Compliance at one of Australia's biggest gas companies (One of the largest gas exporters in the world.)

She turned whistleblower on some corrupt deals and environmental coverups involving certain fracking leases and the government. After contacting the Mining Minister about it over the space of a few months, instead of investigating, the Minister referred her to the police, she was then deemed a "fixated person", which involved incarceration without charge, being taken to a mental institution and forcibly injected with anti-psychotic drugs for months. Eventually a judge decided she could go home. All media coverage of it is banned in Australia until the trial is finished, which has been postponed at every hearing for over a year now, time heals all wounds I guess.

It's naive to think that those in power wouldn't abuse such laws. I'm all for giving police the powers they need and perhaps even more as long as there is transparent oversight and it's targeted, but the complete opposite is happening in many places on Earth right now. Monsters flourish in the darkness.

Re: Australians who won't unlock their phones could face ten years in jail

#54
post #9

I think it's fine. If you did nothing wrong then you have nothing to lose by unlocking your phone. So if you don't unlock your phone, it's an admission of guilt. People are way too paranoid. Nobody cares about what you do with your phone. Sometimes I feel like the upper classes of society (especially hypocrites who have money and a reputation to protect) are projecting their fears on all other classes. Then like fool…

> If you did nothing wrong then you have nothing to lose by unlocking your phone.

This is provably not true. In fact, you need to come up with evidence proving that there is NOTHING to lose by unlocking your phone.

Re: Australians who won't unlock their phones could face ten years in jail

#55
Plausible deniability. The system should allow two (or more) passwords, one unlocks only the important stuff and one unlocks much less dangerous stuff while destroying any evidence of the first, including the multiple passwords protection layer. To add some credibility, the less dangerous data should contain something one could get in trouble for but not enough to have his life destroyed. As an example, if after being forced to reveal a password my phone showed photos of myself having sex with a hooker, I don't think many prosecutors would believe I put them there to protect other more sensitive stuff that would ruin my entire life and not just my relationship. And if they did, I just served them with real proof of why I encrypted my phone which should be enough to counter their unfounded accusations.

Re: Australians who won't unlock their phones could face ten years in jail

#56
They don't really have to ask to get into your phone if you are with a US carrier. If they absolutely need access to your phone, they will get on it with very little resistance. https://motherboard.vice.com/en_us/article/7xdxg9/fbi-hackin... https://techcrunch.com/2018/06/25/nsa-att-intercept-surveill... https://wikileaks.org/ciav7p1/#EXAMPLES

Re: Australians who won't unlock their phones could face ten years in jail

#57
post #6

Also concerning is what they are doing towards companies (pardon the tangent): > It covers [...] device vendors [...] as long as they have "a nexus to Australia" > But what if the suspect stores the keys themselves? In that case, the government would pull out the big guns with a second kind of order called a technical capability notice. It forces communications providers to build new capabilities that would help the…

The article mentions both child abusers and terrorists yet the laws will rarely be used for that. Mandatory metadata retention was also bought in for the same reasons and has barely appeared as evidence in any subsequent cases, despite >300,000 warrantless metadata requests last year, overseen by a handful of public servants behind closed doors, in a country of 25 million people. Another very concerning law is about…

Do you have more information about the case you’re referring to? I’d like to learn more.

Re: Australians who won't unlock their phones could face ten years in jail

#58

Plausible deniability. The system should allow two (or more) passwords, one unlocks only the important stuff and one unlocks much less dangerous stuff while destroying any evidence of the first, including the multiple passwords protection layer. To add some credibility, the less dangerous data should contain something one could get in trouble for but not enough to have his life destroyed. As an example, if after bein…

that sounds like a really good idea and not that difficult to implement.

Re: Australians who won't unlock their phones could face ten years in jail

#59
post #49
post #3

Seems like the only logical solution is to carry a hammer to destroy your phone if necessary. If the heat hasn't told you they want your phone, there's nothing legally stopping you from destroying your own property if you see them coming...

Yeah, the court would never figure that one out and charge with destruction of evidence!

"Why did you destroy your phone?"

"I was angry at losing a game of Pocket Tanks and I have anger management issues"

Re: Australians who won't unlock their phones could face ten years in jail

#60

Don't keep anything sensitive on your phone, encrypted or otherwise. Keep it on some storage medium whose very existence is secret. They can't accuse you of refusing to unlock something whose whereabouts are unknown and, indeed, whose very existence is only alleged.

Related. The US government is starting to train dogs to find chemicals found in hard drives and usb drives.

https://www.youtube.com/watch?v=Zt2UhSBCl8Q

Post reply on HN