Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Pair Locking Your iPhone

arkadiyt.com

Post reply on HN
Print view View original

281–290 of 308 posts

Re: Pair Locking Your iPhone

#281

Post by bildung »

briandear wrote: post #272
bildung wrote: post #171

Earlier quoted context omitted.

Vertical social mobility is pretty bad in the US. This is for 2012: https://www.epi.org/publication/usa-lags-peer-countries-mobi... This OECD chart shows how your financial outcome is practically inherited in the US and Germany: https://www.weforum.org/agenda/2018/08/moving-up-the-income-... This isn't very surprising. For decades, the strongest predictor for a country having high social mobility is a strong welfare…

> The strongest predictor for a county having high social mobility is a strong welfare program.. Citation needed. > financed by progressive taxation of income and wealth. Only 4 OECD countries still have a wealth tax. “Taxing wealth” hasn’t worked out very well.

> Citation needed.

I already posted a bunch? Nevertheless, here, straight from the horse's mouth: https://www.oecd.org/social/soc/Social-mobility-2018-Overvie...

Scientifically this is pretty much consensus for decades now BTW.

> Only 4 OECD countries still have a wealth tax.

True, but I meant not only the tax literally called wealth tax, but all taxes targeting wealth. Almost all OECD countries have inheritance taxes, capital gains taxes, real estate transfer taxes and so on.

Re: Pair Locking Your iPhone

#282

Post by palunon »

alexis_fr wrote: post #136
jw1224 wrote: post #125

Earlier quoted context omitted.

Can you give a few examples of ways in which a US citizen is more free than I, a UK citizen, am?

You can’t leave Europe, despite your voters voting twice for it, making the Brexit party the #1, and yet your establishment understood “Leave” as “Stay” and refuses to hold a general election because they know they are illegitimate and hold on to their power?

Well, the leave process is currently underway since a little over three years, and is probably reaching its conclusion in a few days.

On the US side, remember what happened when some states left the Union ?

Re: Pair Locking Your iPhone

#283

Post by dodobirdlord »

shkkmo wrote: post #232
dodobirdlord wrote: post #71

Earlier quoted context omitted.

Untrue. People who crack jokes about "constitution free zones" at the border are just uninformed. There are some obvious broad waivers on searches to enable the enforcement of import/export and immigration laws, but other rights that don't relate to the particulars of border enforcement are not impacted.

> There are some obvious broad waivers on searches to enable the enforcement of import/export and immigration laws Except those searches can be done at the behest of other law enforcement agencies and any information found can be shared with them.

Incorrect. CBP has a policy to destroy any digital data collected during a search unless it is relevant to an investigation of customs/immigration crimes or is related to terrorism, which can be broadly construed as related to immigration law insomuch as one of the primary purposes of a border is to keep out unwanted persons.

I recommend reading through this document assembled by the EFF about various kinds of border searches and the constitutionality thereof.

https://www.eff.org/wp/digital-privacy-us-border-2017

Re: Pair Locking Your iPhone

#284

Post by vel0city »

woutr_be wrote: post #185
geggam wrote: post #177

Earlier quoted context omitted.

Use authy for authentication https://authy.com/blog/authy-vs-google-authenticator/

If this was an independent review I would take it more serious, but it comes from authy directly. Serious question tho, can Authy be used on any website that supports Google Authenticator?

Google Authenticator is essentially just RFC6238 - TOTP: Time-Based One Time Password Algorithm.

https://tools.ietf.org/html/rfc6238

Re: Pair Locking Your iPhone

#285

Post by sneak »

kyboren wrote: post #193
Keverw wrote: post #128

Earlier quoted context omitted.

Yeah, good point on suing, I know I've heard suing the feds is a whole other ordeal than suing states or political subdivisions such as cities under the state. For the states/cities, it's a section 1983 lawsuit, while the feds they refer to it as a Bivens action. Sadly though people can't afford that, but I know some lawyers will take a cut if you win.... but some lawyers don't even want to help because they want to…

> Also, read stories of them saying you have no rights to an attorney or even to film them since they don't technically consider you in the US. You are in some limbo between countries. An entirely different ballgame than a traffic stop. But some of that stuff might just be some misconception, some they can lie to you but you can't lie to them. I have had CBP officers tell me that I have no right remain silent. I have…

> I have had CBP officers tell me that I have no right remain silent. I have had CBP officers tell me that I have no right to an attorney. I have had CBP officers tell to me that they will not let me into the country until I answer their questions. They are indeed liars. Stick to your guns and they will fold.

Same, to all of it. They also told me they were going to arrest me and charge me with interfering with a border control point. Somehow after another 4 hours of declining to answer questions I was released without charge (into a northern Vermont snowstorm where I had no cell service and had to hitchhike to not freeze, due to them having sent the Montreal-Boston bus on without me, but that’s another story).

Re: Pair Locking Your iPhone

#286

Post by jiveturkey »

woutr_be wrote: post #29
noident wrote: post #18

If you want to keep your phone secure, enable a long passcode, turn on full device encryption, and turn it off. If you are a US citizen, you can't be turned away at the border or forced to unlock the device. If you're not a US citizen or don't want to be harrassed by customs, bring a burner phone. Tools like Cellebrite can and do take advantage of security vulnerabilities. Turning off pair locking lulls users into a…

I really wish Apple would put something in place where you effectively have two user accounts. If you type your actually passcode, it's just your normal account. If you type another specific passcode, it's a burner account with minimal apps and information. It has enough info to make it look like it's being used, but nothing important. Obviously border control would quickly know about this, but there's no way to veri…

That's historically been referred to as as duress code.

It would be exceptionally hard to make it look like the phone is being used with the 2nd account. For one thing, having current email would be pretty mandatory to pass a sniff test.

Re: Pair Locking Your iPhone

#287

Post by jiveturkey »

slazaro wrote: post #257
DoubleGlazing wrote: post #101

Earlier quoted context omitted.

It's worse than that in some cases. I used to work for a big 4 consulting firm and they had some horror stories about border device searches. The company policy for travel outside the EU was simple... Your own laptop would go into a server room and become a remote desktop host, you'd be given a blank laptop. When you got to your destination safely you'd call up IT who'd tell you where to download the VPN software and…

The solution could be for the company to give the VPN password to the employee by phone some time after they arrive at the destination. Then the employee literally has no way to access the VPN when detained.

Then the employee may be subject to indefinite detention? That would be an absolutely unthinkably bad policy.

Re: Pair Locking Your iPhone

#288

Post by alkonaut »

htfu wrote: post #163
alkonaut wrote: post #140

Earlier quoted context omitted.

They'll just find you are causing trouble and put you in the little room where you'll sit for a number of hours and learn to stop thinking you could pull stunts at the border. They don't really care why you can't show a normal phone with a history of a normal life. They just want to see a normal device with normal data. There is no scenario where a technicality means you don't hand over a device they can read and the…

But a supervised device is neither wiped, locked, nor extremely uncommon, nor does the device owner usually have the means to break the pairing, so I reckon you're off base here. It is a normal device with normal data, it just can't be imaged. They can still go through it.

I thought the process was more or less automatic. Plug phone in, image it. If the computer says no, that’s bad. They don’t want to skim read your phone contents they need to keep it to make it searchable if it is to have any real value beyond psychology.

Re: Pair Locking Your iPhone

#289

Post by ehsankia »

gnopgnip wrote: post #64
ehsankia wrote: post #28

Earlier quoted context omitted.

I'm curious, would putting your real device in checked in bag and bringing a separate device / burner with you generally enough for bypassing it, or do they check all devices in your bags?

Generally you have all your check bags with you when going through customs.

Right, but do they usually only check the device on you, or do they also go through every device in your bags?

Re: Pair Locking Your iPhone

#290

Post by [deleted] »

alkonaut wrote: post #140
mosselman wrote: post #120

Earlier quoted context omitted.

What you say is "Sorry, I can't unsupervise that". If you wanted to lie, you could say "Sorry it is supervised by my company, I can't unsupervise it" Alternatively you could encrypt the key or whatever, give that to a friend on a USB stick. Then, at the border, you say "I can't unsupervise that, the keys are managed by a third party." Which is technically the truth... the best kind of truth.

They'll just find you are causing trouble and put you in the little room where you'll sit for a number of hours and learn to stop thinking you could pull stunts at the border. They don't really care why you can't show a normal phone with a history of a normal life. They just want to see a normal device with normal data. There is no scenario where a technicality means you don't hand over a device they can read and the…

[deleted]
Post reply on HN