Live data from Hacker News

Canada Border Services seizes lawyer's phone, laptop for not sharing passwords

cbc.ca

51–60 of 483 posts

Re: Canada Border Services seizes lawyer's phone, laptop for not sharing passwords

#51

Earlier quoted context omitted.

Eh, wipe disk (or install a new one), re-install OS, and if you're super paranoid then re-flash BIOS and you should be good to go.

That's literally useless for government sponsored persistent malware.

Can you expand on this? I'm curious and a little Googling didn't yield much

Re: Canada Border Services seizes lawyer's phone, laptop for not sharing passwords

#52
post #33

> Officers uncovered a customs-related offence during 38 per cent of those searches, said the agency. I really want to understand what kind of digital data is considered a customs-related offence.

I'm more surprised at the 38% true positive rate. If you consider false positives, it would mean that they are shockingly good at profiling and most criminals are dumb enough to leave obvious evidence on their phone, or an overwhelming majority of people have committed a "customs-related offence" so that you could pick anyone and they would be guilty.

I would think most offenses are for improper entry, visa, etc. If you were entering to work on a tourism visa I think it would be very easy to find proof in a simple email, text or document.

Re: Canada Border Services seizes lawyer's phone, laptop for not sharing passwords

#53
post #40

Earlier quoted context omitted.

Most violators of the law are not "baddies", unless you believe most people are "baddies"

Most people are not baddies, but some are. True malevolence is quite real unfortunately.

>Most people are not baddies

According to the moral sense or The Law? As in "Three Felonies a Day". Because gestapo doesn't have too much interest in the former.

Re: Canada Border Services seizes lawyer's phone, laptop for not sharing passwords

#54
post #20

He's suing to get them back and for compensation for having to "temporarily" replace them, but even if he wins he probably shouldn't trust either device in the future (possibly more so for the laptop).

>he probably shouldn't trust either device in the future (possibly more so for the laptop). Seems risky for the government to put any firmware/hardware implants on those devices. The user is naturally going to be suspicious of it because the government had unrestricted access for days/weeks. So there's a high chance that the user might not even use it or will send it to an expert for analysis. If discovered, it's goi…

Suspicious, sure, but most users aren’t equipped to do that kind of diagnosis, and many won’t be able to afford new devices, and maybe it will look even worse for the government but I am certain absolutely nothing bad will happen to the people who added the malware.

Re: Canada Border Services seizes lawyer's phone, laptop for not sharing passwords

#55
post #2

> He said the officer then confiscated his phone and laptop, and told him the items would be sent to a government lab which would try to crack his passwords and search his files. Hopefully they were powered down and used proper full-disk encryption.

Do you think its better to have an iPhone powered down or on? I am wondering if it would be possible to leverage remote wipe features, but maybe the border agents power off the device or put it in a bag / container that blocks cellular signals.

Powered off.

Law enforcement has tools like Cellebrite and GrayKey that can unlock or extract data while the phone is powered on but locked.

Apple is making this a bit more difficult by disabling the port if the phone hasn't been unlocked for seven days or more, but if the device is powered on and law enforcement acts fast, it's vulnerable.

https://ios.gadgethacks.com/news/heres-apples-stopping-polic...

Re: Canada Border Services seizes lawyer's phone, laptop for not sharing passwords

#56
post #14

> Officers uncovered a customs-related offence during 38 per cent of those searches, said the agency. I really want to understand what kind of digital data is considered a customs-related offence.

There’s a reality tv show that follows the Canadian border patrol, in the couple episodes I’ve seen the agents have found emails about the person crossing actually going for work when they say for tourism or visiting family.

I watch that show too much and it seems there is nothing they can't search or if they can't get access to they'll confiscate and send the device to some lab in Ottawa. If the intent of the show is to portray them as *ssholes then mission accomplished.

Re: Canada Border Services seizes lawyer's phone, laptop for not sharing passwords

#57
post #9

>Wright refused, telling the officer both devices contained confidential information protected by solicitor-client privilege. >He said the officer then confiscated his phone and laptop, and told him the items would be sent to a government lab which would try to crack his passwords and search his files. Can this be used to get whatever case(es) he was defending thrown out because solicitor-client privilege was violate…

You will never be able to prove parallel construction happened.

Re: Canada Border Services seizes lawyer's phone, laptop for not sharing passwords

#58
post #21

Digital privacy while crossing borders seems to increasingly be an issue. And I'm worried that it's not going to improve any time soon. Politicians and very rich people don't deal with border security the same way normal people do.

That’s my main issue with the recent trend to make international travel harder.

There’s a huge push to assume that travelers are criminals and all kind of inconveniences, expenses or outright humiliations are O.K.

Re: Canada Border Services seizes lawyer's phone, laptop for not sharing passwords

#59
Is it legal to take steps to intentionally frustrate any future searches that may be done against the device by border agents, in cases where the is no other crime being covered up?

For example, having a trusted remote party encrypt your data, and that party will only decrypt it once you've cleared customs?

Re: Canada Border Services seizes lawyer's phone, laptop for not sharing passwords

#60
post #49

Earlier quoted context omitted.

Full disk encryption is the default on MacOS Mojave.

It's also enabled by default on Surface Book 2 (and possibly other Surface line devices). No idea how well Bitlocker (or Windows Hello for that matter) stand up to border control.

BitLocker security depends on TPM usage. If it's turned on a lab can crack it rather easily because the keys can be stolen via LPC.
Post reply on HN