Live data from Hacker News

The protester's guide to smartphone security

privacyguides.org

91–100 of 246 posts

Re: The protester's guide to smartphone security

#91
This is what the other side is telling law enforcement about iOS devices.

https://cellebrite.com/en/glossary/bfu-iphone-mobile-device-...

iOS is amazing insecurely to a determined law enforcement agency after the first unlock when you turn your phone on.

And a mitigation that Apple is doing.

https://lonelybrand.com/blog/iphones-operating-on-ios-18-1-w...

As far as having a strong pin to help protect you, it won’t protect you from rubber hose decryption.

Re: The protester's guide to smartphone security

#92

This is what the other side is telling law enforcement about iOS devices. https://cellebrite.com/en/glossary/bfu-iphone-mobile-device-... iOS is amazing insecurely to a determined law enforcement agency after the first unlock when you turn your phone on. And a mitigation that Apple is doing. https://lonelybrand.com/blog/iphones-operating-on-ios-18-1-w... As far as having a strong pin to help protect you, it won’t pro…

> As far as having a strong pin to help protect you, it won’t protect you from rubber hose decryption.

I wonder why no one adds a „decoy pin“ which looks like it unlocks the device but secretly deletes sensitive data.

Probably, most people don’t see rubber hose cryptography as a real threat, and in most cases, they’re probably right.

Re: The protester's guide to smartphone security

#93
post #88
post #3

If you're attending a large-scale protest, it's likely that the cell-towers (or stingrays) won't be able to handle everyone who is connected anyways, so worth planning to use apps that can chat over P2P WiFi or Bluetooth together with the rest of your friends. This also allows you to continue using Airplane Mode the entire time, while being able to communicate with people nearby. Alternatively, investing in walkie-ta…

"investing in walkie-talkies that have encryption can be worth it as well" Generally not allowed in many bands in the US. Motorola sells some AES walkies. They're really the only ones I know of, and they're very expensive.

Well the whole point of hiding your tracks is evading law enforcement, why would you care if it’s illegal? Or is it because of the „only do one crime at a time“ thing?

Re: The protester's guide to smartphone security

#94

I don’t understand the issue. Protesting is legal. Are we advocating for illegal activity?

https://en.wikipedia.org/wiki/2012_Quebec_student_protests

Mostly legal protests that got violently repressed by enforcement of unconstitutional laws in Quebec.

https://en.wikipedia.org/wiki/2010_G20_Toronto_summit_protes...

Same thing in Toronto.

Canada rates very high on democracy indexes. Even if you beat the charge in court you can still get arrested on bullshit in every country.

Re: The protester's guide to smartphone security

#95
post #39
post #19

Earlier quoted context omitted.

Lots of groups have used https://briarproject.org/ successfully in the past, I've heard. Assumes you're using Android though which if you're using a burner, you most likely are.

> successfully Successfully in terms of communication or in terms of security? Successful communication is easy if you don't worry about security. Just post it on Instagram. How do you know if your security is successful? How do you know if your messages were intercepted and read, your app was hacked, data was extracted from it, etc.? The attackers (authorities or otherwise) are not going to tell you.

> Successful communication is easy if you don't worry about security. Just post it on Instagram.

Nope, assume Meta is captured and will suppress such communication.

https://news.ycombinator.com/item?id=42777938

https://www.bbc.com/news/articles/c4g32yxpdz0o

This has been widely replicated on inauguration day before being rolled back.

I would assume any social media site whose CEO attended is captured as well.

Re: The protester's guide to smartphone security

#96
post #88

Earlier quoted context omitted.

"investing in walkie-talkies that have encryption can be worth it as well" Generally not allowed in many bands in the US. Motorola sells some AES walkies. They're really the only ones I know of, and they're very expensive.

Well the whole point of hiding your tracks is evading law enforcement, why would you care if it’s illegal? Or is it because of the „only do one crime at a time“ thing?

Why do you assume this is about doing illegal things? This is about protests, many of which never turn into riots or illegal acts.

Re: The protester's guide to smartphone security

#97

This is what the other side is telling law enforcement about iOS devices. https://cellebrite.com/en/glossary/bfu-iphone-mobile-device-... iOS is amazing insecurely to a determined law enforcement agency after the first unlock when you turn your phone on. And a mitigation that Apple is doing. https://lonelybrand.com/blog/iphones-operating-on-ios-18-1-w... As far as having a strong pin to help protect you, it won’t pro…

> As far as having a strong pin to help protect you, it won’t protect you from rubber hose decryption. I wonder why no one adds a „decoy pin“ which looks like it unlocks the device but secretly deletes sensitive data. Probably, most people don’t see rubber hose cryptography as a real threat, and in most cases, they’re probably right.

I don’t have any trust in the police or even more so the various 3 letter agencies.

Re: The protester's guide to smartphone security

#98

Earlier quoted context omitted.

Keep in mind "Mens rea." If you are implicated in the crimes of the crowd all of these actions may be used to increase the penalties you face. Even if you "trust" the crowd, somehow, you should remember that agent provocateurs exist. You might ask what attending a large scale protest is intended to achieve and decide for yourself if the personal risks are worth it.

And if those risks are too great due to state over-reach, best stay at home.

That seems too lenient on yourself. Why not do the right thing and hand yourself into the Inquisitor General for wrong-think about protesting? Maybe they'll go easy on you.

Re: The protester's guide to smartphone security

#99
Unfortunately this is a topic that attracts LARPers. Remember that if things get spicy, you are not going to settings nerd your way out of a bad interaction with the police.

Tech advice for legal and illegal protests is pretty much diametrically opposite, and advice for countries like the United States is much different than for somewhere like Egypt.

It's complicated!

Re: The protester's guide to smartphone security

#100
post #3

If you're attending a large-scale protest, it's likely that the cell-towers (or stingrays) won't be able to handle everyone who is connected anyways, so worth planning to use apps that can chat over P2P WiFi or Bluetooth together with the rest of your friends. This also allows you to continue using Airplane Mode the entire time, while being able to communicate with people nearby. Alternatively, investing in walkie-ta…

The battery thing can be important. One strategy law enforcement uses is to force your phone into a high energy state and zap the battery very quickly.

No need for the law enforcement to do anything. I suspect that a large, thick crowd where everyone carries a phone creates enough radio interference that phones lose contact with the tower very often, and try to reconnect very often, especially when people send or receive messages, auto-upload photos, etc. This keeps the phones in the active state for longer, draining the batteries.
Post reply on HN