9 ms·
Stop Fabricating Travel Security Advice
- Zhenya 10y ago'the grugq' has left us with a complete cliff-hanger: "Good travel advice to follow in a later post…"
- hleszek 10y agowhich will be composed of just one line: "just avoid the US for now"
- deleted 10y ago[deleted]
- DoofusOfDeath 10y agoPerhaps I just missed it (it's late), but I couldn't find anything in the article backing up the author's claims about how those strategies would play out. Was this just a record of his thought experiments?
- tushar-r 10y ago>If the officer demands that you turn on your device but the battery is dead then it mean that you are unable to comply. Ah ha! A clever loophole that no one has ever thought of before. Yeah....about that: http://www.etihad.com/en-us/before-you-fly/us-preclearance/ http://www.etihad.com/en-us/before-you-fly/us-preclearance/ All guests travelling to the US, UK or Canada from Abu Dhabi International Airport are required to turn on all electronic devices in their possession prior to boarding. Guests must ensure that all electronic devices in their hand luggage or on their person, including mobile phones, tablets and laptops, are charged to minimize any potential disruption to their journey. Abu Dhabi Airport does not have a facility to store devices, which cannot be powered up and Etihad Airways cannot take responsibility for devices which are left behind. This requirement is part of enhanced security measures by the authorities of these countries. Failure to do so may result in not being allowed to take the device(s) onto the aircraft or being denied access to fly.
- danblick 10y agoI seem to recall a story from several years back about bombs being disguised as laptops. Requiring devices to be powered on was a simple strategy to make sure they weren't completely fake. [1] https://www.google.com/amp/s/amp.cnn.com/cnn/2016/02/11/africa/somalia-plane-bomb/index.html https://www.google.com/amp/s/amp.cnn.com/cnn/2016/02/11/afri... [2] https://www.fedscoop.com/tsa-targets-explosives-disguised-travelers-electronics/ https://www.fedscoop.com/tsa-targets-explosives-disguised-tr... I wouldn't be surprised if all electronics had to be powered on for that reason. (Snooping aside.)
- belovedeagle 10y agoIANAL either, but the author seems to have missed the point of the "I don’t know my password it is in a password manager which I can’t access" one (or, indeed, the blank device — but this one has numerous advantages). Yes, this will piss off CBP and they will punish you for it, and especially I wouldn't recommend it if you're not a US citizen but are desirous of entering the US. But if you're a US citizen, CBP isn't about to risk their position in court: they will not detain you indefinitely for noncompliance especially when you have an entirely plausible (and true!) explanation for your inability to comply.
- burgerdev 10y ago> People who don’t own laptops, tablets and/or smartphones yet travel internationally don’t exist anymore. Why would I take my electronics on a leisure trip? Isn't it enough to depend on them during work hours? Does this really rouse suspicion at CBP?
- leonatan 10y agoI don't know why this is downvoted. This is standard practice by many people who travel, especially if traveling with the whole family.
- sleepychu 10y agoThey go to a foreign country voluntarily with no comms devices whatsoever?
- douche 10y agoI didn't the last time I went on vacation in Europe. My cell phone carrier also is atrocious and charges usurious international roaming charges, so that was a contributing factor, but it's really nice to unplug and go off the grid on vacation. You just have to do things the old fashioned way - print out your reservations and itinerary, get some maps.
- coldpie 10y agoSure. Everybody did for all of history until about twenty years ago. Many still do. It's really not that crazy.
- tarheeljason 10y ago> Because it is normal for people to travel with blank devices, in no way will the CBP officer suspect that you have something to hide. It is common for businesses to issue employees blank laptops specifically for international travel.
- a3n 10y agoIs there a "best practice" doc or description about that somewhere?
- peteretep 10y ago> It is common Cite?
- evgen 10y agoAt one time is was common at Facebook to give employees traveling to certain countries burner laptops and given recent US policies I expect more companies to enact such policies.
- charlieegan3 10y agoNot a citation but I've heard of various UK companies that do this. Usually for intellectual property reasons.
- woof 10y agoBlank as in "wiped" or blank as in "wiped, reinstalled OS and apps, configured for the user but with no corporate data on the device"?
- lb1lf 10y agoMy employer (Big engineering multinational with a finger in lots of pies, including aerospace and defense) issues travel laptops and phones if you go to any number of countries, including the US. Fresh OS install, required additional software, VPN client, 2FA for connection, one factor is given to you by a local company rep after you have cleared immigration. No company info whatsoever on the laptop as you depart - not even your itinerary. Instructions are to wipe the user partition (using some proprietary, presumably good disk wiper) before heading for the airport again - and not leave ANY information on that partition unless VPN is unavailable, anyway. Also, do not leave the laptop unattended or on a network unless necessary. When returning to HQ, drives are said to be removed and zapped before a new HDD is installed and the laptop is ready for the next user. The plural of anecdote is not data, but based on what I've heard from others I've worked with, this is now close to standard practice.
- twblalock 10y agoA lot of the bad travel advice I've seen reminds me of legal conspiracy theories in general: there is an underlying belief in the existence of magical incantations or ingenious solutions that will stop law enforcement agents in their tracks.
- always_good 10y agoReminds me the use of "SWIM" (someone who isn't me) on drug-related message boards to avoid self-incrimination.
- verbify 10y agoWhile some of these 'legal conspiracy theories' are undoubtedly ridiculous (e.g. the people who think invoking 'sovereign citizen' will make an iota of difference). But I have some sympathy for these beliefs - there's sometimes good advice (sometimes you need a lawyer before talking to the police) that might seem like a conspiracy or hoops you need to jump through. Hearing some legal arguments seems like semantics to the uninformed. This is probably why people think the legal system is 'magic'.
- msoad 10y agoWhat if they ask for your online account passwords?! What should one do?
- Sir_Substance 10y agoNot travel to the USA.
- msoad 10y agoI live in the US
- Sir_Substance 10y agoMy commiserations.
- maccard 10y agoI think the advice still holds, unfortunately. Don't travel across the US border :/
- Sir_Substance 10y agoThe situation is far worse than that: https://www.aclu.org/other/constitution-100-mile-border-zone?redirect=constitution-100-mile-border-zone https://www.aclu.org/other/constitution-100-mile-border-zone...
- gst 10y ago> Usually phrased as “I don’t know my password it is in a password manager which I can’t access.” Or, “there is 2FA setup and I don’t have my second factor.” Or other similar technicality. This approach seems to be based on the belief that the password itself is the ultimate goal of the system, when it has been clearly stated that the goal is access to the content of the digital device or the social media account as a requirement for entry into the US. So what is the recommended solution then if I use a password manager? I don't know any of my passwords and for most websites I'd need the password manager on my laptop to login. Should I reset my social media passwords to a password that I can remember before traveling, so that I'm able to surrender the password if asked at the border?
- pjc50 10y agoESTA applicants are apparently now required to write their Facebook password on the application form. It sounds like changing it to one you remember/write down is the only answer. Or brazening out the "I don't have facebook" route.
- sim0n 10y agoAre you mistaking this for the ESTA application form allowing people to enter their social media handles?
- viraptor 10y ago> So what is the recommended solution then if I use a password manager? Open the password manager, find the password, and write it down.
- gst 10y agoI don't have my personal laptop with me when travelling (because personal phone and work laptop is sufficient). So that's not really an option.
- verytrivial 10y ago> Good travel advice to follow in a later post… Do not travel to the US until they treat non-citizens as people.
- refurb 10y agoDo not travel to the US until they treat non-citizens as people. The US isn't the only country that does this.[1] Maybe instead of avoiding the US, don't leave your home country at all? [1]http://globalnews.ca/news/3268531/cellphone-search-at-the-border-cbsa/ http://globalnews.ca/news/3268531/cellphone-search-at-the-bo...
- castillar76 10y agoThis is the thing that gets lost in some of these discussions. US citizens tend to shrug at this stuff and say, "Well, I'm a citizen, it doesn't affect me." But it WILL affect you, because once the US starts putting this stuff in place, everyone else will too. Intrusive border searches, electronic snooping and information gathering, insistence on decrypting devices and permitting searches of social media accounts, gathering biometric data...all these things that the US is busy imposing on immigrants and visitors, other countries will in turn happily impose on US citizens entering /their/ borders.
- lb1lf 10y agoI remember back in 2004 or so, going to Brazil. At the airport in Fortaleza I saw a couple of Americans lined up to have their fingerprints taken as a reciprocity measure after the US required it of Brazilian citizens entering the US. The prints were taken in the old-school way using ink and file cards - after which the cards were unceremoniously dumped in a bin. Apparently, it is possible to be a d--k with some class when working border patrol duty. :-)
- deleted 10y ago[deleted]
- briandear 10y agoGood grief -- do you know how many non-citizens easily enter the US every day? Thousands. The vast majority have zero issues at all. The reason that these occasional issues even make the news is because it's outside the ordinary; the media cherry picks some sympathetic character, "He's a respected Holocaust historian!" and they turn it into a representative data point that the immigration enforcement system is off the rails. Combining that with an anti-Trump narrative, they get more page views and another news cycle to lament the failure of US policy. 75 MILLION non-citizens visit the United States each year and 41% of those entered via New York, Miami or Los Angeles. On a typical day, less than 1000 people are refused entry. Some of the reasons for refused entry include not having sufficient funds to support themselves for the duration of the trip, suspicion of being an intended immigrant without a visa for that purpose, ties to criminal organizations, having overstated a previous visa, having a dangerous infectious disease, having been found guilty of crimes of moral turpitude (rape, fraud, child mokestation,) having been found guilty of a major crime, a lack of proof (in the case of tourists) of continuing ties to their origin country. This hyperbole about non-citizens not being treated as people is just nonsense. In Schengen (and many other countries, such as Korea), you can get randomly stopped for visa and passport checks, especially in Germany, Austria and Switzerland. If you overstay a Schengen visa for even a few days, you can sometimes expect to endure a more inconvinient immigration experience when attempting to leave the area (especially in Germany.) You have U.K. immigration working on Eurostars leaving from Brussels South and also allows them to actually work in the station. You have Belgium-UK information sharing and coordination on that route. There have been instances of U.K. Immigration denying entry to an American woman carrying a cello because she was to play in a free concert at a university in Leeds. They deemed that unpaid activity "work," detained her for 8 hours and deported her back to Chicago. Other academic performers have been denied entry when carrying large instruments as well. My point: immigration everywhere has seemingly arbitrary, ridiculous incidents. Should we just stop traveling anywhere?
- borplk 10y agoNot that I think those pieces of advice are particularly good but what does the author suggest other than surrender? His post is basically saying "There is nothing you can do about it just surrender.".
- Senderman 10y agoYou know, this all sounds right, but so did the alleged "bad" advice at first. There's a lot of uncertainty about this topic right now, and the author fails to point to any examples or experiences from real-actual-travels to verify any of the advice being given here, rendering the article as baseless as the kinds of advice it's attempting to call out. In truth, I believe he should take a cue from his own headline.
- empath75 10y agoI travel without cellphones and tablets all the time. Last time I went to Spain, I bought a prepaid phone while I was there.
- exolymph 10y agoThe Grugq is more credible than most social media randoms, although I grant that it's hard to know that if you aren't aware of his bona fides.
- Senderman 10y agoI'm sure that's true. But it doesn't change my core argument: Every time we write something that reaches a wider audience (social-media-randoms and pseudo-randoms alike), we have an opportunity to stress to the reader that they should check these facts for themselves - either by pointing to data and examples (which my original comment accused our friend grugq of failing to do), or by simply stating to readers that they should be wary of bad travel advice and look into it. Now that I flesh out my argument, I realise I'm scapegoating this article a bit, and my real lament is that there AREN'T enough accounts and examples of what to do in these awkward border situations. The only commentary I've seen from legal professionals is that there "hasn't been a case" yet, which would flesh out the meaning of the types of demands border agents are allowed to make. It's a pretty tricky problem. Democracies are good at improving things inside their borders, but that stops -at- the border, and the current situation is the proof. I'm at a loss for now as to how it's going to improve.
- nitwit005 10y agoNot having a phone is not going to seem suspicious. Even in the US, there are still people who don't own cell phones. About 5% according to the Pew Research center, after I took the difficult step of Googling it. Plus, some people don't have an international phone plan, or compatible charger, so they just leave the phone behind.
- viraptor 10y agoBut what's the number of people who don't own a cell phone and travel internationally. For example Amish people will be in the first category, but not the second. Same with many older people.
- evgen 10y agoGiven the state and costs of international roaming this is when you are least likely to have your phone. "Sorry officer, my phone is at home. Or is carrier locked and given roaming costs it is going to be cheaper for me to buy a phone and pay as you go plan here. Are they any shops in the concourse that you might suggest for getting one?" A pocket camera and list of phone numbers completed the set. Obviously don't lie if you actually have a phone, but not having one is not sufficient ground for detention.
- deleted 10y ago[deleted]
- coldpie 10y agoI own a cell phone, but I've always left it at home while traveling, even before the nutjobs took over the country. I don't have an international data plan and don't trust public wifi, so I travel old-school. I think the author of this article is misguided about how suspicious it is to have no devices while traveling.
- theandrewbailey 10y agoA surprising number of Amish have cell phones. http://lancasteronline.com/news/local/cell-phones-computers-more-and-more-part-of-lancaster-county/article_432d645c-def6-11e3-9e84-001a4bcf6878.html http://lancasteronline.com/news/local/cell-phones-computers-...
- danblick 10y agoAlso I heard that there is a legal precedent that if the government confiscates your drugs you can attack them and demand reparations and they will have to pay. https://en.wikipedia.org/wiki/First_Opium_War https://en.wikipedia.org/wiki/First_Opium_War
- dandare 10y agoI am curios if they can make you log in (thus reveal all your secrets) to THEIR generic Android or iOS phone if you don't carry your phone on purpose.
- Nursie 10y ago>>People who don’t own laptops, tablets and/or smartphones yet travel internationally don’t exist anymore. Let me introduce you to my mother. No, she's not 80 either, mid 60s. Total technophobe. Owns a PC and infrequently sends me emails IN ALL CAPS WITH NO PUNCTUATION. Someone gave her a dumbphone this year, she hates it and has put it in a drawer. She loves her international travel though.
- kome 10y agoI travel with no laptop or cellphone as well. That part of the article was really bizarre.
- SFJulie 10y agoThis guy says that I would be arrested by the CBP if I want to visit my brother because I do not see the interest of device other than a camera going to Florida (near the beach), and no phone because my old nokia is not dual band (I find the TCO of modern smartphones way to high for my slim budget). OK I do take a laptop 0.8 with infinite battery, full OCR and cheap printer: it is called a notebook and a pen (cost 5$). Hence, thrifty persons are all suspect when going to the USA according to the author. Nice mentality! He is right in a way, I cannot afford to visit my brother so I wouldn't really have the problem, but when I my finance will get better, I will not revert my habits: electronic devices are a cost and time sink thus I learned to live less.
- viraptor 10y ago> that I would be arrested by the CBP That was a sarcastic bit. Later: > If you are completely naked of any digital devices but aren’t 2 or 80 years old, then you are extremely anomalous. Most probably someone that should be interviewed by secondary CBP screening… Secondary screenings happen all the time. Especially for anomalous people. I keep getting one.
- js8 10y agoA different article should have been written to a different audience, namely, the border agencies in the US. Seriously, asking for passwords to social networks and websites crosses the line, in fact even examining the content of the devices is walking the line. Border protection agents should worry about real world threats - bombs, weapons and such. Not virtual ones. It's totalitarian.
- glenra 10y ago> Do not lie to federal officers. Do not attract attention. Aren't those in conflict? If you want to not attract attention you want to lie an appropriate amount, like everyone else does. No more, no less. For instance, pretending you respect the security personnel and don't mind obeying their idiotic rules. Some of the responses given to other rules don't seem...responsive. For instance, somebody who travels with a freshly-reset phone to restore later certainly might get extra vetting as a result...but SO WHAT? Going through a secondary screening is MUCH BETTER than having to give up your actual data. Isn't it? Given a choice between NOT letting them get your data and LETTING them get it, in most cases NOT letting them have it seems FAR safer, for the exact same reasons that it's a bad idea to let the police search your home without a warrant. You don't know what they plan to DO with your data access, so you might want to prepare for the worst.
- averagewall 10y agoThe article is about foreigners. It's not just a choice between letting them get your data and not letting them get it. Not letting them could also mean being you turned away and never reliably be able to enter the US for the rest of your life. For most people, that's probably worse than having your device and Facebook accessed.
- cwyers 10y ago> For instance, somebody who travels with a freshly-reset phone to restore later certainly might get extra vetting as a result...but SO WHAT? Going through a secondary screening is MUCH BETTER than having to give up your actual data. Isn't it? That really depends on how resistant a factory reset is to forensic techniques, yes? If they can recover 40% of the data, but give it extra scrutiny, are you really safer than if they have 100% of the data but look at it cursorily?
- boomboomsubban 10y agoSo anyone that routinely wipes their device or doesn't travel with them is a criminal, and your best bet is to just comply and hope they're lazy. How does following any of that advice help the civilian? I only see how a lower adoption rate helps the border patrol.
- iamthepieman 10y agoI don't travel that much anymore, but as recently as 5 years ago I traveled many weeks a year for work. So I have an old travel backpack with a laptop sleeve and about a dozen pockets, I've cut off some straps and buckles as they have become frayed and useless but I still use it, mostly in my office, hung on a hook to keep certain items like survival gear, knives and firestarters away from my kids (I work from home and you can see where this is going) We traveled across the U.S. last week for an important family even. At the 11lth hour in a moment of thrift and panic as I realized my 5 children had commandeered my normal carry-on and luggage, I snagged the old travel backpack, dumped its contents on my desk and began packing. 13 hours later as my happy brood gathered at the benches on the other side of the lemmings line I realized something was wrong as the scanner belt kept going back, and forth, and back with the scanner maw right around, I guessed, the location of my ill-fated backpack. 15 minutes later when an elderly TSA agent finally found the 10 inch 1/4 inch thick black coated survival blade[0] in between the padded lining of the laptop sleeve and the back pad (a perfect place for an idiot, paranoid, delusional to hide an implement of murder) I was certain I was in for the full cavity treatment much as my ragged backpack had been. I'm convinced the only reason i was able to check my carryon WITH the knife inside it after being perfunctorily and even gently escorted back to the check in counter is because I myself was so convinced of my innocence and lack of contraband. When asked if I had anything sharp or dangerous in my pack I answered a quick and unabashed "nope" fully convinced of my own lie and maintained this demeanor until 15 seconds before they pulled the knife from thin air - only being persuaded of my deceit after seeing the fully empty bowels of my pack and remembering its former contents. [0]https://www.topsknives.com/media/catalog/product/cache/1/image/650x/040ec09b1e35df139433887a97daa66f/d/w/dw33-11.jpg https://www.topsknives.com/media/catalog/product/cache/1/ima...
- erelde 10y agoWhat about having two (or several) sets of devices, each sets having "a life", software installed and used etc? A laptop and smartphone for travel and another set for home.
- msimpson 10y ago> "Carrying no devices ... interrogated for hours." Right. So citizens who are aware that the CBP can now peer into their personal affairs decide to leave their devices at home as a matter of privacy and principal. Therefore, this makes these citizens suspicious enough to be interrogated for hours, because: > People who don’t own laptops, tablets and/or smartphones yet travel internationally don’t exist anymore. Give me a break.
- PepeGomez 10y agoIt's only meant to intimidate people. There is no way it could serve a real security purpose.