← Back to context

Comment by sfRattan

18 hours ago

Ultimately, when you choose to enter a duress PIN that will wipe your device, you have to recognize that choice may have legal consequences. I don't like the amount of power our government has at the national border when it comes to detaining and pressuring citizens, but our Constitution explicitly grants it at least some of the power it now exercises in that context.

If your threat model includes US state actors at the national border, then your security practices need to account for the confiscation of your device at that border without requiring you to willfully wipe the phone and (in the eyes of police and prosecutors) destroy evidence.

That means:

1. Don't travel with anything you can't afford to lose on device. This means setting up travel-specific password managers and hardware keys for a subset of your accounts that you absolutely need to access while abroad, and being prepared to reset those passwords and disable those hardware keys very quickly once home.

2. Review past legal cases against travelers and identify what behaviors the government considers worthy of prosecution or harassment. Your secure setup must function without needing you to engage in those behaviors, even if it is less convenient as a result. This isn't perfect, as the government may decide some new behavior is prosecutable.

3. Consult with a lawyer and review your security procedures from a legal standpoint. All of the above is technical and practical advice, not legal counsel and no substitute for it.

We Americans are fortunate to carry powerful passports and enjoy relatively easy international travel but, for better or worse, that velvet glove covers an iron fist we would be foolish to forget or ignore.

> 1. Don't travel with anything you can't afford to lose on device. This means setting up travel-specific password managers and hardware keys for a subset of your accounts that you absolutely need to access while abroad, and being prepared to reset those passwords and disable those hardware keys very quickly once home.

> 2. Review past legal cases against travelers and identify what behaviors the government considers worthy of prosecution or harassment. Your secure setup must function without needing you to engage in those behaviors, even if it is less convenient as a result. This isn't perfect, as the government may decide some new behavior is prosecutable.

> 3. Consult with a lawyer and review your security procedures from a legal standpoint. All of the above is technical and practical advice, not legal counsel and no substitute for it.

Just don't go to the usa and if it's for professional reason, don't bring your personal phone.

  • You've left out the important qualifier I put at the outset of those three points:

    > If your threat model includes US state actors

    It was not advice for everyone, nor even most people. I have plenty of friends abroad, and a few of them have even traveled to my country for the World Cup and had a grand time.

    I roll my eyes at this kind of overreaction, the same way I imagine Europeans rolling their eyes to hear Americans worried about migrant crime news stories not wanting to travel to Europe. Or maybe they used to roll their eyes at that... I'm less sure now.

Have the duress PIN on sticker on your phone. Maybe put it backwards and don’t say anything to border patrol. Have them try it out and erase the phone and then you can legitimately say you didn’t do anything and they did it themselves.

  • But if the prosecutors can make a convincing argument that your intent was exactly that all along, then you may end up convicted anyway.

    Intent matters. It might be hard to prove, but it matters.

    It may not even be that hard; what other possible explanation is there for someone putting a PIN visible on their phone that wipes it while crossing a border?

    • > what other possible explanation is there for someone putting a PIN visible on their phone that wipes it while crossing a border?

      Two obvious answers:

      1. It's for the general case of lost/stolen phone.

      2. It's for the owner. I can't remember numbers I don't type in, might as well keep it visible on the device.

    • >what other possible explanation is there for someone putting a PIN visible on their phone that wipes it while crossing a border?

      For thieves, obviously.

    • claim your password to be some derivative of the duress PIN, for example: 1234 is password reminder for 2444 (one 2 three 4), the device is erased anyway.

    • if the cops do that, they're breaking the law with that search already

      theyll have a hard time showing that you intended for the government to break the law. first the government would have to admit breaking the law

      1 reply →

    • They might be able to convict on that, but that sets a dangerous precedent imo, which is that doing anything preemptively to prevent searches is conviction worthy, including the preparation the OP suggested.

  • Or just make it your birthday. Though I'm not at all sure the agents will try typing random codes in without at least some idea that they may work, given that many OS's will quickly start to punish with tarpitting.

  • Be funnier if you even write “do not enter 123456”.

    • That might have actually been legal. I'm not a lawyer, but it's definitely better for the accused than what happened in reality.

      "I told you not to. You're the ones who wiped my phone. You owe me money for destroying my personal property."

      I'm not saying you would get a check courtesy of Uncle Sam for your troubles, but the argument that you deceived authorities into destroying evidence is a lot weaker.

      I might go with "do not enter 696969" instead because the stranger fiddling with your phone probably expects a your phone to do something funny, like load a shock site.

  • Why would agents think that a number written on your phone is the PIN? That would only make sense if it was a communally-used device, not a personal one. Also, no one would put sensitive info on a devices that has the PIN affixed to it.

    I suppose it's possible someone might enter it without thinking, but the odds seem low. Also seems risky to put a self-destruct PIN on your device, lest a friend (or enemy) enter it by accident or as a prank.

the funny part is he didn't enter the pin he gave it to them and they entered it..., not sure if it makes any difference but there is a certain irony to it that it was the non warrant based search actions (which might be legal at the border) which lead to the erasure of data

  • Edit for the confused and misinformed: 18 USC 1001. Also, is ≠ ought.

    Lying to a federal officer is a crime, IIRC, and if the lie results in destruction of evidence, the person who told the lie is probably accountable for both crimes. This isn't a lie with plausible deniability: you have to set a duress PIN, understanding what it does, and then communicate that PIN instead of the unlock PIN.

    A duress PIN to wipe the device don't exist to absolve the owner of liability... It exists for when compromising the device could get people the owner cares about killed or disappeared and the owner considers their own liability, disappearance, or death a preferable outcome.

    It is an extreme solution for extreme scenarios. People need to be sober in weighing its use.

    • > It exists for when compromising the device could get people the owner cares about killed or disappeared and the owner considers their own liability, disappearance, or death a preferable outcome.

      Devil’s advocate, it sounds like the accused could be part of some mutual aid networks who could be helping people who are vulnerable against the actions of the current government. People who may die if they’re deported, or returned to their family (gay or trans youth). This person may literally have saved lives by not handing over their phonebook and messages.

    • > It exists for when compromising the device could get people the owner cares about killed or disappeared and the owner considers their own liability, disappearance, or death a preferable outcome.

      Or it's preferable to get caught lying to a federal officer than it is for them to have the evidence on your phone.

      1 reply →

    • >Lying to a fed

      They asked for the pin, maybe they should have said "not the duress pin"

      >Destroying evidence

      How did they know there was any evidence on there?

      >it exists for when compromising the device could get people the owner cares about killed or disappeared and the owner considers their own liability, disappearance, or death a preferable outcome.

      No, the duress pin is there for when I'm under duress and being forced to unlock my device against my will

      >It is an extreme solution for extreme scenarios

      Wiping a device I own is extreme?

      8 replies →

  • I’ve been arguing against some LLMs about this point for a good hour and there’s a whole lot of linking intent to action where you can be liable if a court can prove it. Not that an LLM is legal gold but it’s the best thing I have to pass ideas around with.

    The entire situation is sort of nonsensical and boils down to lots of minutia in law that no normal person would know about.

    For example having normal widely known security features like wiping the device after N failed PIN attempts is fine. Even having long standing security practices that can’t be related are fine, like having a timed touch point where if you don’t enter the PIN every… 15 days or whatever the device wipes, perfectly fine if it can’t be connected towards the crime and you’re not compelled to tell officers you have such a security mechanism.

    Even if you were to set a trap where you use the same PIN for your bank, your laptop, and some other security devices in repetition then decide to set your duress PIN to that by assuming it would be discovered as a probable option they’d use, you’d be ok but it could be questionable if that was by design…

    It’s so obscure really as to how and how you’re not allowed to protect your data, even if you’re not the one performing the action to clear destroy the potential evidence yourself. The entire thing seems pretty absurd a frankly arbitrary to me, and I don’t know how people could know which cases are and aren’t legal. I know not to destroy evidence myself but I wouldn’t know to tell someone to not use the duress pin or that even giving them my duress pin could somehow be my liability. It’s madness if you ask me.

Not a lawyer, but destruction of evidence would only be valid if there was first some reasonable suspicion of a crime? Is that right?

  • This is my core question as well. At what point do you have to maintain property so the government can use it to testify against yourself?

    If I have a dash-cam, and I wipe the SD card, can the government imply that because I erased the card, it must prove that I was speeding? The dash-cam automatically over-writes old footage - perpetually destroying evidence.

    Given nebulous cases such as "hacking" a site by looking at the HTML[0], am I destroying evidence of crimes whenever I format my PC? I hope the government requires specific charges and more proof of a crime other than missing evidence. Say I destroy my diary - can the government claim that is the key evidence where I confessed to being the gunman on the grassy knoll?

    [0] https://news.ycombinator.com/item?id=28992667

    • "At what point do you have to maintain property so the government can use it to testify against yourself?"

      For the duration of the border search. This guy is at risk because he caused the data to be deleted during a border search, when CBP asserts they can legally look. He would have been fine if he deleted data on the plane or after leaving the airport.

      (This is my understanding of the government's position; personally I don't think this prosecution is constitutional)

    • > If I have a dash-cam, and I wipe the SD card, can the government imply that because I erased the card, it must prove that I was speeding?

      If the erasure was a non-automated result of them asking you, and you alone, what conclusion do you think is possible? Probable?

Well I prefer simply to stay out of countries that haven't got their ducks in a row when it comes to freedom. Saves a lot of hassle.

this means: put a good government in charge of the border that respects your rights

>destroy evidence

Who said it was evidence? Did a judge authorize or issue a warrant to collect said evidence? Absent that, it's just your property, and you can do with it as you please.

  • You’re way off about when it’s illegal to start destroying your property that the police want to seize during an investigation.

    • "Investigation" is a pretty generous way to label "some thugs working for an authoritarian state want to look for incriminating stuff - including criticism or mockery of them or their leader - on your communications device".

      Whatever the American legal system may say, a couple of thugs with no warrant conducting searches and seizures of data is a blatant violation of the Constitution's intent. This is the sort of behavior Americans used to rightfully condemn.

      8 replies →

  • To me it’s all quite analogous to walking up to, but not crossing, a border with, say, a fruit that’s legal to possess on the side you’re on, but not on the other side, and either eating or throwing away that fruit before crossing.

    “Hey! I saw you holding that Mexican pepper in Mexico, and then you threw it in that Mexican trash can before crossing into Texas!”

    “Yeah, so?”

    • But that's not what happened here. Here, you were trying to bring the pepper over, got inspected and somehow got rid of it because you were able to be found out.

  • > Who said it was evidence? Did a judge authorize or issue a warrant to collect said evidence? Absent that, it's just your property, and you can do with it as you please.

    Why do people go sovereign citizen when reality doesn't work their way? Stop imagining that the way you want things to be is the way things really are.

    Cops do not need a judge to authorize the seizing of evidence. Cops do not need judges to decide what evidence is. Tell me, why did you just pretend like these are real requirements? I can understand why you'd want it to be that, but you wanting it to be that doesn't change reality.

    It's as if you've just learned about the Fourth Amendment but know nothing about the nuance behind it.

    Your system wouldn't even work at all. Let's imagine the cops get a tip that a bald man with a blue tshirt shot a man. They patrol the streets and find a match. By your logic they should not have the ability to search the man and seize his gun as evidence until a judge issues a warrant.

    • uhh, are you a lawyer with knowledge about how evidence works?

      its not just a word, its a specific legal term

      cops definitely do need judges to say what evidence is admissible, and they really dont have thr ability to just declare anything they want as evidence and just steal it

  • Yes this is different than when law enforcement serve a warrant and the defendant wipes his computer before the agents can get a hold of it. In that case the warrant covers what you destroyed as evidence.

    Though during traffic stops, if a defendant disposes of his drugs while on the run, that can also carry a charge of destroying evidence even though no warrant was issued.

    IANAL

It is so sad and worrying when the already oppressed population argue for paranoid practices constraining their own practices considerably and with great efforts, eroding the other thing that constitution was so famous about, freedom, so some officers supposed to serve the population can do things easily to anyone. If they please and want it easy for themselves.