4 ms·

I would consider any device that's been through an inspection as potentially compromised as they could theoretically install a backdoor and access ur data later

I would consider any device that's been through an inspection as potentially compromised as they could theoretically install a backdoor and access ur data later. Maybe just using some kind of a burner phone is better.

mjevans 9y ago
They can already do this via singray and other cell tower acquisitions. You don't own the baseband firmware, therefore do not trust the device. The same is true of your desktop and likely router gear, but many of those at least require brief physical access to enable (however there's also in transit or baked in at the factory). If you want a truly secure device demand fully open.
- crypt1d 9y ago
  Yes they could, but that would (usually) assume that I'm being targeted specifically by law enforcement. They could also access my data this way, but yet they choose to inspect my phone physically, on entry. What I'm more worried about is my data being accessed as part of yet another mass surveillance program. I'm not saying that is not already possible with other means, but I would certainly not want to make their job easier.
pavel_lishin 9y ago
Honestly, it depends on how paranoid you want to get. The hassle of me totally replacing a phone is not commensurate with the likelihood of the government bugging my phone - unless they're bugging all phones, at which point they're more likely to do so with OTA software updates, or another way to access it without requiring me to pass a border.
- crypt1d 9y ago
  Yes, IT sec is sort of a rabbit hole. There is always another attack vector right under. If its not software, then its firmware, if its not firmware then its the chip..etc. Normally, you would consider where the biggest risk is and set up your security accordingly. Unfortunately, with such an intrusive, state-level actor, you have to assume the worst.
  - pavel_lishin 9y ago
    I don't; if I assume the worst, I hammer every storage device I own, and throw the remaining hardware into the dumpster, and basically start dumpster diving for 1980's computer equipment - because the worst is that they're out to get me, and have already infiltrated everything I own.
vkou 9y ago
The Mossad can make your cellphone explode from a distance of 500 feet by using two matchsticks, a loop of 18 gauge wire, and an eye of newt. If your adversary is the Mossad, or some equivalent thereof, they are going to do Mossad things to you, and you're going to die and there's nothing that you can do about it. Call me a stoic or a fatalist or an idiot, but this is not something I'm concerned about when I'm crossing a border.
- bigbugbag 9y ago
  The mossad is usually not a concern when crossing the US border, but when crossing the US border for business and you have company or sensitive data with you or a device that can help get to this data, you can expect the US services will do what is required to get to the data. It's been shown by snowden and assange that the US regularly use surveillance, spying and every tool available to gain economic advantage over foreign competitors.
- PhantomGremlin 9y ago
  If your adversary is the Mossad, or some equivalent thereof, they are going to do Mossad things to you, and you're going to die and there's nothing that you can do about it. That's a bit hyperbolic. An institution like the Mossad has literally thousands if not millions of "adversaries". They don't kill all of them. They probably kill less than 1% of them. There's plenty of downside to killing someone. E.g. in 2010 the Mossad horribly botched an assassination: http://www.dailymail.co.uk/news/article-1261435/How-Mossad-blew-The-gripping-story-Israels-brutally-efficient-secret-service-botched-Dubai-assassination.html http://www.dailymail.co.uk/news/article-1261435/How-Mossad-b... If even 1% of their assassinations went that badly, the PR fallout would be devastating. I'm sure they're quite selective over who is "going to die". Call me a stoic or a fatalist or an idiot, but this is not something I'm concerned about when I'm crossing a border. There's a 100x greater chance, or maybe a 1,000,000x greater chance that the Mossad (or equivalent) compromise your phone than decide to kill you.

mjevans 9y ago

They can already do this via singray and other cell tower acquisitions. You don't own the baseband firmware, therefore do not trust the device. The same is true of your desktop and likely router gear, but many of those at least require brief physical access to enable (however there's also in transit or baked in at the factory). If you want a truly secure device demand fully open.

crypt1d 9y ago
Yes they could, but that would (usually) assume that I'm being targeted specifically by law enforcement. They could also access my data this way, but yet they choose to inspect my phone physically, on entry. What I'm more worried about is my data being accessed as part of yet another mass surveillance program. I'm not saying that is not already possible with other means, but I would certainly not want to make their job easier.

pavel_lishin 9y ago

Honestly, it depends on how paranoid you want to get. The hassle of me totally replacing a phone is not commensurate with the likelihood of the government bugging my phone - unless they're bugging all phones, at which point they're more likely to do so with OTA software updates, or another way to access it without requiring me to pass a border.

crypt1d 9y ago
Yes, IT sec is sort of a rabbit hole. There is always another attack vector right under. If its not software, then its firmware, if its not firmware then its the chip..etc. Normally, you would consider where the biggest risk is and set up your security accordingly. Unfortunately, with such an intrusive, state-level actor, you have to assume the worst.
- pavel_lishin 9y ago
  I don't; if I assume the worst, I hammer every storage device I own, and throw the remaining hardware into the dumpster, and basically start dumpster diving for 1980's computer equipment - because the worst is that they're out to get me, and have already infiltrated everything I own.

vkou 9y ago

The Mossad can make your cellphone explode from a distance of 500 feet by using two matchsticks, a loop of 18 gauge wire, and an eye of newt. If your adversary is the Mossad, or some equivalent thereof, they are going to do Mossad things to you, and you're going to die and there's nothing that you can do about it. Call me a stoic or a fatalist or an idiot, but this is not something I'm concerned about when I'm crossing a border.

bigbugbag 9y ago
The mossad is usually not a concern when crossing the US border, but when crossing the US border for business and you have company or sensitive data with you or a device that can help get to this data, you can expect the US services will do what is required to get to the data. It's been shown by snowden and assange that the US regularly use surveillance, spying and every tool available to gain economic advantage over foreign competitors.
PhantomGremlin 9y ago
If your adversary is the Mossad, or some equivalent thereof, they are going to do Mossad things to you, and you're going to die and there's nothing that you can do about it. That's a bit hyperbolic. An institution like the Mossad has literally thousands if not millions of "adversaries". They don't kill all of them. They probably kill less than 1% of them. There's plenty of downside to killing someone. E.g. in 2010 the Mossad horribly botched an assassination: http://www.dailymail.co.uk/news/article-1261435/How-Mossad-blew-The-gripping-story-Israels-brutally-efficient-secret-service-botched-Dubai-assassination.html http://www.dailymail.co.uk/news/article-1261435/How-Mossad-b... If even 1% of their assassinations went that badly, the PR fallout would be devastating. I'm sure they're quite selective over who is "going to die". Call me a stoic or a fatalist or an idiot, but this is not something I'm concerned about when I'm crossing a border. There's a 100x greater chance, or maybe a 1,000,000x greater chance that the Mossad (or equivalent) compromise your phone than decide to kill you.