Live data from Hacker News

Pair Locking Your iPhone

arkadiyt.com

41–50 of 308 posts

Re: Pair Locking Your iPhone

#41

> Pair locking is a useful feature to protect yourself against invasive device searches. Probably also a good way to get onto no-fly lists, and spend hours in detention, etc.

...but it's no different in that respect than declining to unlock, which I imagine pretty much everyone on this site will do in such a situation.

> get onto no-fly lists

Source? I can't find evidence that anyone has ever been added to a no-fly list for declining to unlock.

Re: Pair Locking Your iPhone

#42
post #18

If you want to keep your phone secure, enable a long passcode, turn on full device encryption, and turn it off. If you are a US citizen, you can't be turned away at the border or forced to unlock the device. If you're not a US citizen or don't want to be harrassed by customs, bring a burner phone. Tools like Cellebrite can and do take advantage of security vulnerabilities. Turning off pair locking lulls users into a…

> If you are a US citizen, you can't be turned away at the border or forced to unlock the device. There's an important divide between what customs is supposed to do, and what they might actually do in practice. Going through customs means putting yourself at the whims of people that you do not control. If you're a white male, there's perhaps less of a chance that a bad employee will feel they can take advantage of yo…

Eventually they have to let you through though. They can't send you to a detention center for not unlocking your phone, you're a US citizen and you're not being compelled by a court to do anything. They might keep you in a room for many hours but at the end of the day they will let you go and you'll have a good story to tell the news channels.

Re: Pair Locking Your iPhone

#43

Earlier quoted context omitted.

I really wish Apple would put something in place where you effectively have two user accounts. If you type your actually passcode, it's just your normal account. If you type another specific passcode, it's a burner account with minimal apps and information. It has enough info to make it look like it's being used, but nothing important. Obviously border control would quickly know about this, but there's no way to veri…

> there's no way to verify Obscuring in this manner likely counts as lying to a federal officer, particularly if they catch on and ask if this is your main profile.

INAL but I don't think that legally it would be lying. I believe lying requires more than not complying. Plus, we always have the right to remain silent.

Re: Pair Locking Your iPhone

#44
post #18

If you want to keep your phone secure, enable a long passcode, turn on full device encryption, and turn it off. If you are a US citizen, you can't be turned away at the border or forced to unlock the device. If you're not a US citizen or don't want to be harrassed by customs, bring a burner phone. Tools like Cellebrite can and do take advantage of security vulnerabilities. Turning off pair locking lulls users into a…

I really wish Apple would put something in place where you effectively have two user accounts. If you type your actually passcode, it's just your normal account. If you type another specific passcode, it's a burner account with minimal apps and information. It has enough info to make it look like it's being used, but nothing important. Obviously border control would quickly know about this, but there's no way to veri…

Attempting to deceive CBP through hidden volumes and the like is not recommended.

https://www.eff.org/wp/digital-privacy-us-border-2017

Re: Pair Locking Your iPhone

#45

Earlier quoted context omitted.

I really wish Apple would put something in place where you effectively have two user accounts. If you type your actually passcode, it's just your normal account. If you type another specific passcode, it's a burner account with minimal apps and information. It has enough info to make it look like it's being used, but nothing important. Obviously border control would quickly know about this, but there's no way to veri…

> there's no way to verify Obscuring in this manner likely counts as lying to a federal officer, particularly if they catch on and ask if this is your main profile.

Doesn’t matter. If there’s truly no way to verify, there’s nothing they can do in a scalable way to determine people are lying about their main accounts.

The only thing they can do is use fear to get you to comply, or make you doubt your deniable encryption scheme is truly secure.

If they really wanted to could they find out? Perhaps. Maybe if they use CCTV footage and extract your phones screen and do comparisons or something. If you are an individual though who has done something to warrant that level of scrutiny, perhaps the additional crime of lying to a Fed isn’t a big deal compared to whatever crime you have done.

Re: Pair Locking Your iPhone

#47
post #18

If you want to keep your phone secure, enable a long passcode, turn on full device encryption, and turn it off. If you are a US citizen, you can't be turned away at the border or forced to unlock the device. If you're not a US citizen or don't want to be harrassed by customs, bring a burner phone. Tools like Cellebrite can and do take advantage of security vulnerabilities. Turning off pair locking lulls users into a…

I really wish Apple would put something in place where you effectively have two user accounts. If you type your actually passcode, it's just your normal account. If you type another specific passcode, it's a burner account with minimal apps and information. It has enough info to make it look like it's being used, but nothing important. Obviously border control would quickly know about this, but there's no way to veri…

Not recommended to rely on in court but if your friend wants to borrow your phone, there are androids that can unlock to different accounts depending on what finger you use to unlock with the fingerprint sensor.

Re: Pair Locking Your iPhone

#48

I wish Apple would introduce a "Border crossing mode". Not gonna happen.

Luckily Android has that mode. They call it "Lockdown". Here's some info on it: https://www.digitaltrends.com/mobile/how-to-use-android-9-pi...

Does this provide any protection? I've never undergone any sort of 'digital search' do they force you to provide your passcode? Do the forensics tools they use bypass user level protections like pin codes/finger prints?

Re: Pair Locking Your iPhone

#49

Earlier quoted context omitted.

Excluding conferences^ and events there's nothing special about the HN audience (other than affluence) that makes them particularly likely—relative to people in a hundred other industries—to need to travel to the USA. ^ ...which are mostly money-making scams anyway, targeting fat corporate and university budgets in return for limited benefit. Rarely do you learn anything that you couldn't otherwise learn from publish…

re:conferences: That's not quite right. In conferences you also meet people, some of whom you knew before and some that you didn't. You get to talk, and ask questions. The ROI of this may be questionable, but it does have value.

Yep, that's what we keep telling ourselves.

Re: Pair Locking Your iPhone

#50
post #3

> Pair locking is a useful feature to protect yourself against invasive device searches. Probably also a good way to get onto no-fly lists, and spend hours in detention, etc.

Given the same approach is used by organisations to manage their devices, I doubt this is likely to play out that way. However, if you're already a person of interest, this is unlikely to make you that much safer as any reasonable grounds for search would be used to exercise warrants against any computers you own. So, I suspect it's a reasonable protection for "slightly-more-tech-savvy-than-average" Joe's wishing to…

That's probably a good reason to choose an organisation name that looks enough like your employer, for added believability...
Post reply on HN