This is a most excellent place for technology news and articles.
Interesting to see how this goes.
Yes, that is how it would go if rule of law had worked.
I can just imagine how awkward the whole thing was
A duress PIN should load a normal looking phone so the dumb cops think you complied. Hide the wipe behind texts from your mom and emails from work.
@GrapheneOS@grapheneos.social everyone seems to be clamouring for the same thing: add "duress profile" to the roadmap. Keep up the good work.
Hell, an OS that gave me separate profiles for different pins could be useful for a bunch of things.
gOS already has separate profiles with different passwords, how about setup a profile with a few pictures of gaping anuses to match the energy of nosy warrantless searching federals and install a couple apps with some activity I'm guessing is going to be better than an obvious wipe, even though a wipe is legal as it's your property and not evidence of a crime to destroy your own stuff.
@modem_down @beep @Semi_Hemi_Demigod It would be trivially detected by widely distributed standard forensic software including the non-Premium variant of Cellebrite able to run on a laptop.
The point isn't to make it forensically undetectable, but to prevent the room temperature IQ cop from noticing what happened. If they "unlock" the phone and don't see anything that looks out of the ordinary they won't make a big deal out of it and there's a chance they'll let you go.
The room temperature IQ cop is going to plug the phone into a system that will do that forensic detection. Using commercial or special software.
Room temperature IQ cop knows how to plug the cord into the phone and the cord into the laptop.
@orclev Standard operating procedure is increasingly to extract data with standard forensics software. If it doesn't go smoothly then they'll likely detain people and get experts to deal with it.
@GrapheneOS@grapheneos.social
It would be trivially detected by widely distributed standard forensic software including the non-Premium variant of Cellebrite able to run on a laptop.
By "duress profile", I mean that if user has enabled a "duress profile" feature in Settings, then entering the duress PIN would:
So, how would forensic software detect that the unlocked profile is a duress profile?
@modem_down @beep @Semi_Hemi_Demigod The software walks the person using it through enabling Android Debug Bridge and extracting data with it. It's either not going to work or will be able to see many signs of what happened. GrapheneOS is well known to the forensic data companies and they make a point of trying to support it. They haven't had much success with locked GrapheneOS devices but they can certainly handle detecting it and detecting if a feature like this was used via ADB.
That is more or less what the old TrueCrypt (and also VeraCrypt) systems did. One password gets you the real data, the other opens a different partition that could be stuffed with dummy data.
True privacy/security night involve a hybrid, where it opens the device to the fake partition+profile but also kills off internal keys to the real data when the duress is used
Tunick asked four times during the interrogation to speak with a lawyer, but was rebuffed each time, according to courtroom testimony. Additionally, the agents produced no warrant and did not read Tunick his rights.
If he’s not even accused of a crime, how is wiping his phone “destroying evidence”? What is the crime being committed here? You are allowed to wipe your own phone, and technically he didn’t even do that.
Furthermore, asking a suspect for their passcode is bargain basement police work. Being surprised when this doesn’t work seems pretty incompetent. I think they’re throwing the book at him because they fucked up.
No, they're throwing the book at him to make a statement.
Their argument, which is stated in the article, is that since he was not in the US (you are not considered in the U.S. until you go through border protection, even if physically here), US rights and protections don't apply.
Similarly, this isn't destruction of evidence they are charged for. It is destruction of property to prevent seizure. Which is a bit awkward because that's a law in the US, but he isn't in the US yet....?
Of course, it's all bullshit. We all know this, but this is going to set a very dangerous precedent if it sticks.
The argument is that the US government doesn’t have to follow US laws when interacting with US citizens outside of the US?
That’s especially dubious when “outside the US” is referring to a legally flimsy distinction like the international terminal of an airport which is on US soil and controlled exclusively by the US government.
There’s no way this isn’t going to be abused if allowed by courts.
Crime of not letting nazis look at your phone.
I didn't read the article or anything but he typed in a duress password which wiped the phone right?
Edit: wait, is this article saying they're tryna charge him for merely using GrapheneOS?
Edit: read it, it says he gave them the duress password. If it were me, I would've withheld it and tell them explicitly not to use my duress password
including the erasure of the phone’s contents after he gave them a passcode, due to violations of his constitutional rights
I just read the article and the whole thing is fucking crazy
Tunick asked four times during the interrogation to speak with a lawyer, but was rebuffed each time, according to courtroom testimony. Additionally, the agents produced no warrant and did not read Tunick his rights.
What are the dumbasses gonna do? Sorry man we're gonna arrest you on charges for phone restart. The fuck?
Besides the accusations of pedophilia? Are these people actually mental?
Besides the accusations of pedophilia? Are these people actually mental?
Why yes, yes they are. Like, actually. They are actively attacking the people of our country.
I’m not a US citizen but do you have any rights at a border checkpoint? I was under the impression that no warrant is necessary, nor lawyer required, to answer questions.
You have fewer rights at a border crossing for sure, but that doesn't make it some sort of "constitution free zone", mostly it means that they are allowed to conduct 'routine' searches and interviews without a warrant, and hold you for a certain amount of time, and deny you entry if they deem that necessary, all without a judge or warrant involved. How much protection you get from the 4th and 5th amendments is definitely different at the border than not at the border.
How does this work:
He’s not yet granted access to the US, so laws don’t apply to him.
He destroyed evidence, so laws do apply to him.
How can both of these statements exist at the same time? Why not just turn him away?
Even if they turned him away, he could get back in line with his clean phone and give them a working password.
I can't believe he has to wait until October for a determination on this. The facts of the case are clear. If nothing else I hope he sues the police department that put him on a watchlist for terrorism.
If he wins this case that would be my first move. The only reason he was harassed like this was because he voiced a negative opinion about a city project.
Get fucked, it's enshrined in the U.S. constitution against unreasonable searches and seizures through the 4th ammendment. You are not obligated to incriminate yourself in anyway.
The right against self incriminating is the 5th amendment. And he's being charged for destroying evidence, not for not providing it. But I love the spirit.
I specifically called out the searches and seizures ammendment bcz that's what this is about.
Something makes me think the officers intended to "find" CSAM on his phone. Like sprinkling crack, or a planter gun.
Absolutely the right move to nuke it.
Mental note: When traveling internationally, back up phone to cloud somewhere and wipe it prior to traveling. Step two, restore from cloud after exiting airport.
Hell, I don't even have anything remotely questionable on my phone other than some Trump mocking memes, but there is absolutely no reason to chance it.
Step 1.5. Log into some email service that you only use for the purpose of travel (ie: forward your hotel reservation etc). Put some of your travel photos back on your phone.
That way it looks like you actually used the phone and didn’t wipe it before crossing.
Less sus.
Didn't that was enough fot the guy with memes of Babyface Vance?
You want a dummy account on it that just has the details of the flight in there so its not completely blank just useless to the border police but clearly not just blanked awaiting setup.
This is going to get dropped because I'm betting the last thing they want is for lawyers to dig in to the reason for the search.
Using local duress keys protects true personalIP.
