8 ms·

Could you just bring a device with freshly installed Windows / OSX, and clone the whole disk image over the internet once you're inside U.S. ?

by Rarebox 10y ago

graeme 10y ago
Well, yes. But as tptacek said: "But non-citizens, possibly including LPRs, cannot: if an alien attempts to cross the border with a device they can't unlock "because they don't have the corresponding 2FA token with them" (as one friend suggested they do), they'll be detained, their devices confiscated, and then put on a flight out of the country." I'm not a US citizen. I don't have anything in particular I care about the CBP seeing. But, I'd rather they not have all of my 400 passwords. I'd then have to change everything, and also be breaking a bunch of bank terms of service. I don't think CBP actually wants my bank info. But with all passwords in a manager, they would get it if they had access. However, with no passwords, they may bar entry.
- tptacek 10y ago
  I'm traveling overseas this summer, and I don't plan on having my 1Password database handy when I reenter the country.
  - graeme 10y ago
    So you will be a position of "can't login to that site". How does that square with: "if an alien attempts to cross the border with a device they can't unlock "because they don't have the corresponding 2FA token with them" (as one friend suggested they do), they'll be detained, their devices confiscated, and then put on a flight out of the country." I guess they haven't yet started asking for social media passwords, so maybe I'm overthinking this. I'm certainly going to be prepared to unlock any devices. It's the web passwords I'm not sure what to do with.
    - infinite8s 10y ago
      Well, in tptacek's case, I believe he's a US citizen so they can't deny him entry.
      - graeme 10y ago
        Hmm. What would be the best practice for a foreign national?
        tptacek 10y ago
        None of us know. It's a real problem.
        zeveb 10y ago
        > What would be the best practice for a foreign national? Understand that you may be denied entry to any country but your own. It's a fact of life which you cannot do anything about, so you might as well accept it. What I do is: - travel with a machine which is not logged into any of my accounts - if asked, I can honestly say that I do not know any of my social-media passwords (because they are all of the form mZOH05WaxeAWqI79myMxcx or SWwDmDOkyHCVdX8eOiTLXC1U1psffeXfFgNx6PaZZhp); if that's unacceptable to customs in any country, they can send me back home - if they press, I can honestly say that my computer back home (not the computer I have with me) has my master password file, and that there is no other copy

Could you just bring a device with freshly installed Windows / OSX, and clone the whole disk image over the internet once you're inside U.S. ?

by Rarebox 10y ago

Could you just bring a device with freshly installed Windows / OSX, and clone the whole disk image over the internet once you're inside U.S. ?

graeme 10y ago

Well, yes. But as tptacek said: "But non-citizens, possibly including LPRs, cannot: if an alien attempts to cross the border with a device they can't unlock "because they don't have the corresponding 2FA token with them" (as one friend suggested they do), they'll be detained, their devices confiscated, and then put on a flight out of the country." I'm not a US citizen. I don't have anything in particular I care about the CBP seeing. But, I'd rather they not have all of my 400 passwords. I'd then have to change everything, and also be breaking a bunch of bank terms of service. I don't think CBP actually wants my bank info. But with all passwords in a manager, they would get it if they had access. However, with no passwords, they may bar entry.

tptacek 10y ago
I'm traveling overseas this summer, and I don't plan on having my 1Password database handy when I reenter the country.
- graeme 10y ago
  So you will be a position of "can't login to that site". How does that square with: "if an alien attempts to cross the border with a device they can't unlock "because they don't have the corresponding 2FA token with them" (as one friend suggested they do), they'll be detained, their devices confiscated, and then put on a flight out of the country." I guess they haven't yet started asking for social media passwords, so maybe I'm overthinking this. I'm certainly going to be prepared to unlock any devices. It's the web passwords I'm not sure what to do with.
  - infinite8s 10y ago
    Well, in tptacek's case, I believe he's a US citizen so they can't deny him entry.
    - graeme 10y ago
      Hmm. What would be the best practice for a foreign national?
      - tptacek 10y ago
        None of us know. It's a real problem.
      - zeveb 10y ago
        > What would be the best practice for a foreign national? Understand that you may be denied entry to any country but your own. It's a fact of life which you cannot do anything about, so you might as well accept it. What I do is: - travel with a machine which is not logged into any of my accounts - if asked, I can honestly say that I do not know any of my social-media passwords (because they are all of the form mZOH05WaxeAWqI79myMxcx or SWwDmDOkyHCVdX8eOiTLXC1U1psffeXfFgNx6PaZZhp); if that's unacceptable to customs in any country, they can send me back home - if they press, I can honestly say that my computer back home (not the computer I have with me) has my master password file, and that there is no other copy