Live data from Hacker News

US citizen charged after GrapheneOS phone wipes during airport search

techspot.com

921–930 of 1001 posts

Re: US citizen charged after GrapheneOS phone wipes during airport search

#921

Earlier quoted context omitted.

I agree that trying to outcompete seems really hard, but also: Given what the experience of using a non-rooted phone is like, how very very tight the sandboxing is and how useless it is a General Purpose Computer that will tell you anything: I find it very hard to believe the unlocked phone is going to let you start probing firmware & snooping on hidden volumes. This post sent my BS detector on high alert. I'm strugg…

you do realize what the threat model behind a hidden volume is right? no one will be accessing the firmware through the OS, they will access it from the PCB/chip/debug port. there is no point to a hidden volume if you cannot credibly deny its existance.

in some cases yeah i think that is a legit fear. but for 99.9999% of people entering in at the border, are you fucking mad? you are proposing they are taking apart people's phones to get physical access? many of these devices deliberately try to secure the storage too; Samsung Knox and Pixel are not just a walk in the park, even with hardware access.

i think there's an enormous amount of theater, that ridiculous over-fear that buys in to the mythology is actively bad. we see this everywhere. it was the leading point at the start that Cory Doctorow had against Shoshana Zuboff's Age of Surveillance Capitalism: that not only do the critics accept the incredible super powers of surveillance that are being marketed to us, they radically over-accentuate & amplify the capabilities. fearmongering is wicked effective! Take the PR and say, see, isn't it terrible? They can program our lives, make us do anything with their ads! except, it's just not nearly anywhere so bad. https://jon-lund.com/main/doctorow-v-zuboff-the-real-problem...

we see that with AI regularly. both the labs and the people of the world are totally on board to radically over-promote the capabilities, to say they can do anything. the story of models escaping containment, leaving notes to themselves? i mean, isn't the story just that you aren't monitoring your runs at all and have no human supervision here? that you swarmed so hard, and you did it without any way to have your swarm even moderately supervised? i'm having a harder time nailing this down exactly but it feels like a once again mythology building project, creating ridiculous impressions. to be sure, the hugging face hack was a pretty remarkable story. but i think we tend to assign quasi-mystical understanding, that we mythologize readily.

i cant remember where i read it but i think all the time of i think a Sid Meier's interview maybe or something, discussing the development of The Sims, where sponteaneous combustion was a huge problem in the game for a long time. it was a bug, unintentional, the story goes here. but play testers and gamers invented all manner of excuse, backwards justification, reading of tea leaves, laying of bones to ascribe meaning to the events, to declare it's purposefulness. humanity is such an immense pattern matcher and our talent it to ascribe meaning to it, but holy frelling frak if you haven't seen the 21st century and decided that we dont go way way way in on that allowing all manner of false positives in to our meaning, if we aren't super apt to believe incredible tall tales, the tallest dirtiest (orangest) of nonsense, i just don't know what to tell you.

Re: US citizen charged after GrapheneOS phone wipes during airport search

#922

Earlier quoted context omitted.

"U.S. law though is highly non-autistic" hilarious but also another point to emphasize is how truly depressing American courts often are. Take the right to a jury. It sounds noble in theory. But when they say judged by your peers they don't mean your actual peers. It's people who couldn't get out of jury duty. Prosecutors have high success rates. Federal prosecutor success rate is over > 90%. Studies of jury psycholo…

As a convicted felon for the last 25 years without a single incident since I was released. I tell everyone I know to never trust a single thing anyone says if there is any chance you are being looked at for criminal charges. It's "I want a lawyer" and nothing else. Just SHUT THE FUCK UP, don't call me, your parents, someone to bail you out. Call a mother fucking lawyer. Because once you get your sleeve caught up in t…

I worked in LE and I support this message. Not because I think police (in my country) are corrupt or anything, but because it's really easy to dig a hole for yourself from the stress of being questioned by police, even if you're completely innocent. And once police have reasonable grounds for investigation, your privacy and that of your family members is gone.

Re: US citizen charged after GrapheneOS phone wipes during airport search

#923
post #893

Earlier quoted context omitted.

Maybe change your location then :P

Turns out immigration in other countries isn't a cakewalk either.

Yeah that is true, sadly... I was a little too provocative without acknowledging the complexity behind it.

Re: US citizen charged after GrapheneOS phone wipes during airport search

#924

Earlier quoted context omitted.

Remember that the creator of Mega is getting extradited to the USA - again - a country where he's never been, by the way - for basically this crime (using encryption).

Not true. He previously ran a site called MegaUpload which hosted copyright infringing files. This is why he created Mega, which is an end-to-end encrypted cloud storage service similar to OneDrive of Google Drive. Even if Mega users host illegal or copyright infringing contents he can't be convicted for it. In fact, he won't even know about it. I'm just amazed that not everyone is using it. People don't seem to know…

But he is still being extradited. I believe he lost his decade long argument of "why the fuck would you extradite me to somewhere I've never set foot for something that isn't actually illegal and where I'd suffer inhumane treatment"

Re: US citizen charged after GrapheneOS phone wipes during airport search

#925
post #595

Earlier quoted context omitted.

My solution to this on GrapheneOS is having the primary user as the dummy. I have some random apps, photos, a copy of my password manager and 2fa app on there. Enough to look valid if not boring. I do all my day to day on another profile that can easily be deleted, with my password and 2fa I can easily setup the apps I use again later.

If you give an adversary access to one profile they can see any others exist or traces of it if it's been deleted.

[deleted]

Re: US citizen charged after GrapheneOS phone wipes during airport search

#926
post #383

I co-wrote a border search guide for EFF some years ago. I was very interested in finding clever technical approaches but I later ended up feeling that I hadn't given enough thought to the overall threat model questions (even though the guide did address them, perhaps even somewhat usefully). The big picture problem is that the agents performing the searches have an enormous amount of power in terms of potentially se…

There’s more to it than just not antagonizing the guards. I mean if you make them mad by doing something that is legal that’s probably not ideal for you practically speaking, but it’s not the end of the world. Destroying evidence while they are investigating you is not just going to make them mad though. It is illegal (18 USC section 1519). Where I think people are a little confused here is not realizing that this wo…

Yes but the parties running those countries are currently more ideologically aligned with the people that rally against the US in these cases so they don't think it affects them and thus is not a problem, forgetting that those laws will still be around if the political climate changes.

Re: US citizen charged after GrapheneOS phone wipes during airport search

#927
post #383

I co-wrote a border search guide for EFF some years ago. I was very interested in finding clever technical approaches but I later ended up feeling that I hadn't given enough thought to the overall threat model questions (even though the guide did address them, perhaps even somewhat usefully). The big picture problem is that the agents performing the searches have an enormous amount of power in terms of potentially se…

Makes me wonder if there's a creative and maybe low tech way to incentivise them to not want to keep searching through your phone

Re: US citizen charged after GrapheneOS phone wipes during airport search

#928

Earlier quoted context omitted.

It's also quite surprising that all socials need to be declared. And presumably them AI vetted in time for you to get to the border.

It's reasonable for a country to want to know if you're likely to abuse your visa. Eg your socials might show you are a professional paid speaker at conferences. If you applied for a tourist visa that would be reasonable to flag you and ask you if you have paid gigs on the wrong visa. Europe will also ask the same questions for foreigners. If you're a young woman travelling on your own you can expect questions to cha…

The problem is that giving the capability, initially for "reasonable uses", also makes it available for unreasonable uses. That's the banality of evil - dystopias are built one "reasonable" step at a time.

For the conference case much more reasonable would be to make the organizer and anyone profiting from the even liable for having speakers without a proper work permit.

You can solve these things sufficiently without reaching for the panopticon. As more of our lives are moved to the digital world its very important that we don't give up rights that we previously had in interactions that weren't assisted by technology.

Re: US citizen charged after GrapheneOS phone wipes during airport search

#929
post #431

Earlier quoted context omitted.

Note that border searches of electronic devices are extremely rare overall. There were some statistics from CBP implying a base rate lower than 1 in 10,000 (I think lower than 1 in 100,000) border crossings. I do know two people who have experienced them as a result of the government taking a personal interest in them, so it's certainly not impossible. However, it's not a common experience. I've personally experience…

I'm European and I know plenty, albeit the minority of those I know that went to the US, so I wonder how reliable are CBP stats. Maybe my anecdotal experience is influenced by me being in IT, but still.

I bet they are very reliable. Just look at the immigration hall of the average international US airport and you'll quickly realize that it is literally impossible for even a fraction of the people going through there to be physically searched. Of course this applies only to the average visitor and I'm sure you can significantly increase your changes by being the the "right" line of work - but from my experience and the people I know and work with, being in "IT" in general is not enough to get you searched.

Re: US citizen charged after GrapheneOS phone wipes during airport search

#930

Earlier quoted context omitted.

This is an increasingly popular solution. Foreign tourism has crashed. I love the geography of the US, and it has some truly stunning places to visit. But they're not so stunning that I need to risk my freedom - risk my freedom - to visit them in person.

I do not sell tourism services. I sell software. If there is less foreign tourism in the US, nice places will be less crowded. So, what are my incentives to ask my government to ease foreign entry to my country?

Tourism pays taxes for the government services you receive and specifically pays for upkeep of and infrastructure around attractions that you may find useful yourself.

I don't agree with the premise that the US makes entry for normal tourists particularly onerous though.

Post reply on HN