3 ms·

I'm not quite sure what you're trying to accomplish - TSA agents are no more trained in computers than your average mall-cop and if they do decide to inspect yo

by csydas 10y ago

I'm not quite sure what you're trying to accomplish - TSA agents are no more trained in computers than your average mall-cop and if they do decide to inspect your electronics, it's likely because you were flagged already when the ticket was purchased or you rubbed the agent the wrong way. What your drive looks like is probably irrelevant as the decision to copy isn't based on evidence or practicality it's based on an order from higher up or a whim, and then procedure is followed, which for electronics is to plug the drive in and do a copy of some sort. I mean you can do whatever you want but only the encryption is going to do you any good for actual security. Even if you make it really convincing that the drives are empty, procedure is still going to make them plug it into the copier anyways. I mean, from the article, they're confiscating headphones and power cords - there's no rhyme or reason here except intimidation; the agents don't investigate - someone else does. Do what you like, but it sounds like hassle you're adding to what is going to happen anyways.

Zak 10y ago
I'm not quite sure what you're trying to accomplish - TSA agents are no more trained in computers than your average mall-cop and if they do decide to inspect your electronics This depends entirely on the context. If you're a high-value target to an intelligence agency, there's a very high probability they would have someone pose as an agent of the TSA or CBP, or that they would have one of those agencies grant them access to your electronics. Someone involved in the publication of leaks or creation of security-related software would count as a high-value target. they're confiscating headphones and power cords - there's no rhyme or reason here except intimidation This, too depends on context. For the average person, the purpose is obviously nothing more than harassment. It's not difficult for a flash drive to be concealed inside a USB cable though, and if you're being targeted for a search, it makes sense for them to take everything. On the other hand, a MicroSD card can be hidden just about anywhere, so if they're not going through all your stuff with a fine-toothed comb, the whole thing is theater.
- csydas 10y ago
  While I don't disagree on the possibility of a high value target getting preferential treatment, I'm still not sure why they'd waste the time besides having a slightly more competent agent plugging the stuff in to make sure it's copied. Or just confiscating the drives straight up as they did in the article and sending the target along. There really isn't a need for an on the spot forensic analysis, as the type of equipment you'd need would just be space prohibitive in an airport. My objection to the commenter's idea was pretty much that they're going out of their way to create a scenario in which it looks like the drive doesn't contain data, but unless you are a high value target, all that work would likely go unnoticed since you're just getting a standard agent. Even if you didn't, and you had a recently graduated CS savant as the agent, it seems more likely that there would be no investigation to wonder "should I copy this drive or not" - they'd just do it. Or just confiscate the drive, etc. You can make the effort to try to make the drives look blank, but that feels a lot like theatre. It'll maybe fool someone looking to pull data, but if they just do some raw disk dump like with dd or most forensic tools, I don't think it makes much of a difference. It's just planning for a situation that really wouldn't happen. >It's not difficult for a flash drive to be concealed inside a USB cable though, and if you're being targeted for a search, it makes sense for them to take everything. On the other hand, a MicroSD card can be hidden just about anywhere, so if they're not going through all your stuff with a fine-toothed comb, the whole thing is theater. I'm not really sure on what the argument is here. Again, I think if a high priority target is really going through, they're not taking the microsd with them. There are far better ways of moving such data, such as a trusted 3rd party who receives the parcel through a series of proxies or a secure transmission, etc. If you are a high value target or in a dangerous profession or project that you feel warrants protection, there are a myriad of better ways of moving your sensitive data across checkpoints. If we wanted to get really fancy, you could have carrier pigeon or a falcon fly it across the border, or feed it to a dog and wait for the micro sd card to be pooped out. I'm not saying that we shouldn't be wary and consider protections, but it just feels like this line of thinking in tech crowds tends to lead to incredibly specific scenarios that their solution resolves when many much more practical solutions exist. Under the auspices of fun mental exercise, I think it's fine, but when we're considering these as actual solutions to the very real threat of government searches at check points, then it's just adding bad suggestions.
- bigbugbag 10y ago
  > If you're a high-value target to an intelligence agency... They have threatened to shoot a presidential plane flying over Europe and searched it on the possibility that Snowden might be on board. So yes be aware when you are a person of interest.
throwawayish 10y ago
> make them plug it into the copier anyways. I heard USB is a finicky thing, rather hard to implement correctly. I wonder how many of these copier devices (-- are these dedicated DSM-like units? Probably embedded/outdated Linux then!) were already infected and grep copied contents for relevant data.

by csydas 10y ago

Zak 10y ago

I'm not quite sure what you're trying to accomplish - TSA agents are no more trained in computers than your average mall-cop and if they do decide to inspect your electronics This depends entirely on the context. If you're a high-value target to an intelligence agency, there's a very high probability they would have someone pose as an agent of the TSA or CBP, or that they would have one of those agencies grant them access to your electronics. Someone involved in the publication of leaks or creation of security-related software would count as a high-value target. they're confiscating headphones and power cords - there's no rhyme or reason here except intimidation This, too depends on context. For the average person, the purpose is obviously nothing more than harassment. It's not difficult for a flash drive to be concealed inside a USB cable though, and if you're being targeted for a search, it makes sense for them to take everything. On the other hand, a MicroSD card can be hidden just about anywhere, so if they're not going through all your stuff with a fine-toothed comb, the whole thing is theater.

csydas 10y ago
While I don't disagree on the possibility of a high value target getting preferential treatment, I'm still not sure why they'd waste the time besides having a slightly more competent agent plugging the stuff in to make sure it's copied. Or just confiscating the drives straight up as they did in the article and sending the target along. There really isn't a need for an on the spot forensic analysis, as the type of equipment you'd need would just be space prohibitive in an airport. My objection to the commenter's idea was pretty much that they're going out of their way to create a scenario in which it looks like the drive doesn't contain data, but unless you are a high value target, all that work would likely go unnoticed since you're just getting a standard agent. Even if you didn't, and you had a recently graduated CS savant as the agent, it seems more likely that there would be no investigation to wonder "should I copy this drive or not" - they'd just do it. Or just confiscate the drive, etc. You can make the effort to try to make the drives look blank, but that feels a lot like theatre. It'll maybe fool someone looking to pull data, but if they just do some raw disk dump like with dd or most forensic tools, I don't think it makes much of a difference. It's just planning for a situation that really wouldn't happen. >It's not difficult for a flash drive to be concealed inside a USB cable though, and if you're being targeted for a search, it makes sense for them to take everything. On the other hand, a MicroSD card can be hidden just about anywhere, so if they're not going through all your stuff with a fine-toothed comb, the whole thing is theater. I'm not really sure on what the argument is here. Again, I think if a high priority target is really going through, they're not taking the microsd with them. There are far better ways of moving such data, such as a trusted 3rd party who receives the parcel through a series of proxies or a secure transmission, etc. If you are a high value target or in a dangerous profession or project that you feel warrants protection, there are a myriad of better ways of moving your sensitive data across checkpoints. If we wanted to get really fancy, you could have carrier pigeon or a falcon fly it across the border, or feed it to a dog and wait for the micro sd card to be pooped out. I'm not saying that we shouldn't be wary and consider protections, but it just feels like this line of thinking in tech crowds tends to lead to incredibly specific scenarios that their solution resolves when many much more practical solutions exist. Under the auspices of fun mental exercise, I think it's fine, but when we're considering these as actual solutions to the very real threat of government searches at check points, then it's just adding bad suggestions.
bigbugbag 10y ago
> If you're a high-value target to an intelligence agency... They have threatened to shoot a presidential plane flying over Europe and searched it on the possibility that Snowden might be on board. So yes be aware when you are a person of interest.

throwawayish 10y ago

> make them plug it into the copier anyways. I heard USB is a finicky thing, rather hard to implement correctly. I wonder how many of these copier devices (-- are these dedicated DSM-like units? Probably embedded/outdated Linux then!) were already infected and grep copied contents for relevant data.