Live data from Hacker News

US citizen charged after GrapheneOS phone wipes during airport search

techspot.com

971–980 of 1001 posts

Re: US citizen charged after GrapheneOS phone wipes during airport search

#971
post #383

I co-wrote a border search guide for EFF some years ago. I was very interested in finding clever technical approaches but I later ended up feeling that I hadn't given enough thought to the overall threat model questions (even though the guide did address them, perhaps even somewhat usefully). The big picture problem is that the agents performing the searches have an enormous amount of power in terms of potentially se…

Why not have a passcode that boots in to a second “safe for cops to look at” partition?

Not possible to be robust unfortunately due to low level SSD architecture[1] and other reasons:

https://nitter.net/GrapheneOS/status/2082153517234676150#m

[1] https://veracrypt.io/en/Trim%20Operation.html

https://veracrypt.io/en/Wear-Leveling.html

Re: US citizen charged after GrapheneOS phone wipes during airport search

#972
post #383

I co-wrote a border search guide for EFF some years ago. I was very interested in finding clever technical approaches but I later ended up feeling that I hadn't given enough thought to the overall threat model questions (even though the guide did address them, perhaps even somewhat usefully). The big picture problem is that the agents performing the searches have an enormous amount of power in terms of potentially se…

> ... you may have to think both about protecting your data by technical means, ... I thought about that. And I came to the conclusion that a phone is a pathetically bad device to both store your data and to access your data. Mediocre screen. Mediocre input methods. Moreover most phones happen to also be spying device. So if you think about "protecting your data", a reasonable idea is that a lot of data is way better…

Totally wrong. Phones are much more secure at data storage than desktops.

Agreed off-site is way better for duress though.

Re: US citizen charged after GrapheneOS phone wipes during airport search

#973
post #209

Earlier quoted context omitted.

"U.S. law though is highly non-autistic" hilarious but also another point to emphasize is how truly depressing American courts often are. Take the right to a jury. It sounds noble in theory. But when they say judged by your peers they don't mean your actual peers. It's people who couldn't get out of jury duty. Prosecutors have high success rates. Federal prosecutor success rate is over > 90%. Studies of jury psycholo…

> It's people who couldn't get out of jury duty. But that's good no? People who got out never would have taken it seriously. I sat on a jury trial and was highly impressed with how seriously my fellow jurors took it - especially the presumption of innocence. When they started to go down some incorrect logical path, someone would step up and correct it. Not to mention the public defender ripped apart the DA's case. It…

Awesome. Apparently public defenders are better than private attorneys for various reasons depending on the case. They are overworked though.

Re: US citizen charged after GrapheneOS phone wipes during airport search

#974

I’ve seen a lot of people on the internet over the years say things like “the government can’t make x illegal, it’s just y.” For example, the government can’t make wiping your phone at the border illegal, it’s just punching four numbers into your phone, just like a pin, only a different four numbers, which could just have well been your pin. U.S. law though is highly non-autistic and what you were trying to do is jus…

Yes this is the whole $5-dollar-wrench XKCD thing. "Ahah! I've won! The data has gone!! MUWAHAHAH! Take THAT border guards".... congrats you're still going to the same prison though. If you've got something to hide (legitimately or not), don't take it across the border in the US or anywhere. Even then I am sure they'll either compel you to hand over your cloud passwords or again you end up going to the same prison fo…

You can hide cloud passwords very easily compared to local.

Re: US citizen charged after GrapheneOS phone wipes during airport search

#976

Related, There was a local guy who was held 'in contempt' for 4 years for refusing to turn over his password/encryption key https://arstechnica.com/tech-policy/2020/02/man-who-refused-...

He had a warrant from a judge which is much less bad. Still probably 5th Amendment problem

Re: US citizen charged after GrapheneOS phone wipes during airport search

#977

I don’t understand why phones can’t just have decoy profiles you can activate via PIN that look like regular harmless user profiles? Especially now with AI you can quickly populate with a bunch of plausible data. Or better, have PIN for taking you to your criminal/secret profile instead.

[deleted]

Re: US citizen charged after GrapheneOS phone wipes during airport search

#978

Maybe also shows that the duress PIN feature could be implemented better. Booting into a completely fresh phone is suspicious. There also shouldn't be any visual or other indicators of that happening. In the old TrueCrypt containers you could set an optional second password that would decrypt a different volume. The size of the container file was always the same, a decrypted volume always showed the full container si…

Not possible to be robust unfortunately due to low level SSD architecture[1] and other reasons:

https://nitter.net/GrapheneOS/status/2082153517234676150#m

[1] https://veracrypt.io/en/Trim%20Operation.html

https://veracrypt.io/en/Wear-Leveling.html

Re: US citizen charged after GrapheneOS phone wipes during airport search

#979
post #937
post #657

Earlier quoted context omitted.

As one does. Why, six of the eleven times I've had my car stolen, it was a carjacking with myself or my family member in it.

This was joking about GP, if that was not clear. A society simply cannot function with the cartoon levels of crime seen in Batman or Grand Theft Auto; People leave for abroad. Planning what you should do after you're kidnapped is a function reserved for if your life is too much of an apocalyptic disaster to plan not to be kidnapped, and even South Africa and El Salvador at their worst levels of unrest were not really…

I don't think you really know what you're talking about and I'm struggling to answer to your dumb "joke". I was sharing a rough anecdote as an example of how technology fails when designed in isolation and your answer was ... Lol, Batman.

I invite you to read about daily life in latinamerica. Kidnappings were very common in the early 2000s and millions of people indeed leave leading to some of the biggest human refugee crises in the world ... Lol, GTA

Re: US citizen charged after GrapheneOS phone wipes during airport search

#980
post #559

Earlier quoted context omitted.

> you may have to think both about protecting your data by technical means, and about not angering the agents more than you plan to That's the same problem with technical solutions to crime. I come from a very dangerous city and I used to have a car that needed a PIN to work. You could turn then engine on and drive but after a minute if you didn't input the PIN it would turn off without warning and start blasting the…

Why are you staying in this place? (Is this in South Africa?)

Was born there. It was Caracas in the 00s
Post reply on HN