4 ms·

I flew into the US this morning (Green Card holder), and before I landed I changed my password to a random string that I had put in my home directory and a USB

by axoltl 10y ago

I flew into the US this morning (Green Card holder), and before I landed I changed my password to a random string that I had put in my home directory and a USB stick in my house. I did not know what the string was (being 16 bytes from /dev/random base64 encoded), and thus could not give up my password. My reasoning was they could go to my home and retrieve the USB stick, but they'd need a warrant. I understand I would've been detained for a significant amount of time, but I also would not have been able to give them my password. Do they have to release me after a while, or can they just kick me out (Greencard's a little stronger than a visa, but I'm not a citizen)?

TillE 10y ago
Best case scenario is they just seize your device for a few months if it's encrypted. I definitely wouldn't take any risks at all as a non-citizen. Don't travel with encrypted data; travel with no data. That is, only travel with what you're willing to expose to malicious strangers. Stash anything else you need on a server somewhere, and encrypt that.
- diafygi 10y ago
  Aren't there reports of asking for social media passwords, even if you don't have a device[1]? So traveling without electronics seems to not prevent access to private information. Q: "I have Facebook open on my screen. What is the username and password to your Facebook account?" So now most people have a choice. Do you lie and say you don't have a facebook account, do you try and change your password so you can say "you don't know it" (possibly getting rejected from entering), or do you give them the password? [1] - http://www.businessinsider.com/john-kelly-travel-ban-social-media-password-2017-2 http://www.businessinsider.com/john-kelly-travel-ban-social-...
  - bobsil1 10y ago
    Use a password manager. "I have no idea, sir."
    - hughdbrown 10y ago
      So you set your account to some string selected by your password manager and you don't have the password manager on your phone/computer. Then the agent says, "Fine, why don't you: 1. install the password manager on your phone/computer and log in to the password manager or 2. reset your password for the account and get the reset link emailed to you." Your ignorance only takes you to the next step.
      - bobsil1 10y ago
        "It's not in the cloud. It's on my Mac at home."
      - askvictor 10y ago
        "I have two factor authentication on my password manager, and the second factor is this phone which I can't unlock as the password is a random string stored only on a USB stick in my house" (Or 2nd factor itself is at home)
astrodust 10y ago
At this point anything you carry into the US that's electronic in nature might be seized if you don't "cooperate". It might make sense to bring nothing other than really basic burner phones that have an absolute minimum on them. If you've got to bring your notebook along, might make more sense to FedEx it to your destination and travel practically naked.
paulddraper 10y ago
They would just seize your device. Locking your gun safe and throwing away the key doesn't mean the authorities are helpless.

by axoltl 10y ago

TillE 10y ago

Best case scenario is they just seize your device for a few months if it's encrypted. I definitely wouldn't take any risks at all as a non-citizen. Don't travel with encrypted data; travel with no data. That is, only travel with what you're willing to expose to malicious strangers. Stash anything else you need on a server somewhere, and encrypt that.

diafygi 10y ago
Aren't there reports of asking for social media passwords, even if you don't have a device[1]? So traveling without electronics seems to not prevent access to private information. Q: "I have Facebook open on my screen. What is the username and password to your Facebook account?" So now most people have a choice. Do you lie and say you don't have a facebook account, do you try and change your password so you can say "you don't know it" (possibly getting rejected from entering), or do you give them the password? [1] - http://www.businessinsider.com/john-kelly-travel-ban-social-media-password-2017-2 http://www.businessinsider.com/john-kelly-travel-ban-social-...
- bobsil1 10y ago
  Use a password manager. "I have no idea, sir."
  - hughdbrown 10y ago
    So you set your account to some string selected by your password manager and you don't have the password manager on your phone/computer. Then the agent says, "Fine, why don't you: 1. install the password manager on your phone/computer and log in to the password manager or 2. reset your password for the account and get the reset link emailed to you." Your ignorance only takes you to the next step.
    - bobsil1 10y ago
      "It's not in the cloud. It's on my Mac at home."
    - askvictor 10y ago
      "I have two factor authentication on my password manager, and the second factor is this phone which I can't unlock as the password is a random string stored only on a USB stick in my house" (Or 2nd factor itself is at home)

astrodust 10y ago

At this point anything you carry into the US that's electronic in nature might be seized if you don't "cooperate". It might make sense to bring nothing other than really basic burner phones that have an absolute minimum on them. If you've got to bring your notebook along, might make more sense to FedEx it to your destination and travel practically naked.

paulddraper 10y ago

They would just seize your device. Locking your gun safe and throwing away the key doesn't mean the authorities are helpless.