Instead of a PIN that wipes the device, it would be much better to setup a special PIN that logs the user into a sanitized, completely separate profile with generated content of no practical value. This would create plausible deniability, and be sufficient to allow low-level border agents to look through a phone and pass any checks without raising these kinds of alarms. The wipe PIN should still be an option, but should be separate, and only be for cases where you suspect a forensic imaging or search of the device is to take place and the legal consequences outweigh the risks.
US citizen charged after GrapheneOS phone wipes during airport search
91–100 of 1001 posts
Re: US citizen charged after GrapheneOS phone wipes during airport search
#92I’ve seen a lot of people on the internet over the years say things like “the government can’t make x illegal, it’s just y.” For example, the government can’t make wiping your phone at the border illegal, it’s just punching four numbers into your phone, just like a pin, only a different four numbers, which could just have well been your pin. U.S. law though is highly non-autistic and what you were trying to do is jus…
> U.S. law though is highly non-autistic and what you were trying to do is just as important as what you superficially did.
Love this way of putting it. Stealing for future conversations with fellow software developers.
Re: US citizen charged after GrapheneOS phone wipes during airport search
#93I’ve seen a lot of people on the internet over the years say things like “the government can’t make x illegal, it’s just y.” For example, the government can’t make wiping your phone at the border illegal, it’s just punching four numbers into your phone, just like a pin, only a different four numbers, which could just have well been your pin. U.S. law though is highly non-autistic and what you were trying to do is jus…
I think people are aware that the government can physically do a lot of stuff, e.g. shoot you in the face for no reason. And vice-versa for that matter. However there are arguments morally, and constitutionally, and logically, about what can be done.
And all of those arguments are entirely academic, and subject to change depending on economic status, skin color, or nationality.
Law is effectively a weak gentleman’s agreement we tolerate because the alternative is violence.
(Well, law is enforced with violence too, I suppose.)
Re: US citizen charged after GrapheneOS phone wipes during airport search
#94> federal agents had already circulated his name and photo internally, saying he was under investigation for "suspected terrorism activities" because of his alleged association with the movement against Cop City
Of course it’s about that huh. It’s quite scary how far the US will go against anyone who engages in this sort of activism.
Re: US citizen charged after GrapheneOS phone wipes during airport search
#95One of the GrapheneOS people (I think) suggested keeping a bit of paper in your wallet with the duress pin, perhaps thinly disguised. Then the cops could try it on their own initiative. I suppose they'd become aware of that trick eventually, but then they wouldn't be able to use all those other genuine pins they find.
This is an interesting idea, but was that GrapheneOS person a lawyer giving legal advice?
No, he wasn't, what is your point?
Re: US citizen charged after GrapheneOS phone wipes during airport search
#96Ultimately, when you choose to enter a duress PIN that will wipe your device, you have to recognize that choice may have legal consequences. I don't like the amount of power our government has at the national border when it comes to detaining and pressuring citizens, but our Constitution explicitly grants it at least some of the power it now exercises in that context. If your threat model includes US state actors at…
Have the duress PIN on sticker on your phone. Maybe put it backwards and don’t say anything to border patrol. Have them try it out and erase the phone and then you can legitimately say you didn’t do anything and they did it themselves.
But if the prosecutors can make a convincing argument that your intent was exactly that all along, then you may end up convicted anyway.
Intent matters. It might be hard to prove, but it matters.
It may not even be that hard; what other possible explanation is there for someone putting a PIN visible on their phone that wipes it while crossing a border?
Re: US citizen charged after GrapheneOS phone wipes during airport search
#97Earlier quoted context omitted.
>Lying to a fed They asked for the pin, maybe they should have said "not the duress pin" >Destroying evidence How did they know there was any evidence on there? >it exists for when compromising the device could get people the owner cares about killed or disappeared and the owner considers their own liability, disappearance, or death a preferable outcome. No, the duress pin is there for when I'm under duress and being…
> They asked for the pin, maybe they should have said "not the duress pin" This is a Mickey Mouse distinction no court will take seriously. > Wiping a device I own is extreme? When the consequences are potential years in prison for lying to the US government or, in another country, torture or death in prison for obstructing an authoritarian government, then yes... Extreme. All I'm saying is to decide to use a duress…
Just submit citizen. Nothing to hide, right?
Re: US citizen charged after GrapheneOS phone wipes during airport search
#98I’ve seen a lot of people on the internet over the years say things like “the government can’t make x illegal, it’s just y.” For example, the government can’t make wiping your phone at the border illegal, it’s just punching four numbers into your phone, just like a pin, only a different four numbers, which could just have well been your pin. U.S. law though is highly non-autistic and what you were trying to do is jus…
In this case, the government was against him due to his activism against a police training campus.
Him deleting his phone was very likely a matter of safety for his fellow activists. Sad that our government does this but it’s not like this guy was a drug dealing or something.
Re: US citizen charged after GrapheneOS phone wipes during airport search
#99Earlier quoted context omitted.
Meanwhile cops can and do regularly deceive and lie to citizen and not only don't face any consequences but actively benefit from it.
I don't really see a problem with this assuming the deception is used to uncover crimes.
Will the problem is that we’ve seen it’s not only used to uncover crimes.
There’s plenty of empirical evidence of cops lying to lock up innocent people.
One truly absurd case was lying to convince a man he killed his father, and extracted a murder confession for a victim who they knew wasn’t dead.
https://people.com/thomas-perez-jr-murder-interrogation-1186...
Re: US citizen charged after GrapheneOS phone wipes during airport search
#100Earlier quoted context omitted.
Modern SSDs are log-structured under the hood. The presentation to the host system as a random access block device is an abstraction on top of that, emulating the semantics of spinning rust. Inspecting the underlying log will reveal the location of the hidden area, even if it looks random when read linearly.
I’m not so sure that log structure would reveal to you VeraCrypt style hidden volumes. It would only tell you about which blocks are allocated but the whole point is that VeraCrypt would allocate the whole space and within it have hidden space. You wouldn’t be able to infer (at least ethically, but you could lie) whether or not a hidden partition exists because you don’t know if the allocated block is present in the…
It would also give you information about the order in which blocks were written, and the historical state of the disk. Because of wear leveling, block allocation isn't just a one-time initial thing; the mappings between logical and physical address space are changing with each write.