3 ms·
> Any device that you lose physical control of during these encounters must be presumed to be compromised and should be physically destroyed afterwards. Seems
by archgoon 8y ago
> Any device that you lose physical control of during these encounters must be presumed to be compromised and should be physically destroyed afterwards.
Seems unwise to destroy evidence. Find the rootkit, or have your employer or security researcher do so, prove it's existence, and sue the Government.
But yes, definitely get a new laptop.
- 0xDEFC0DE 8y agoI don't think that will go anywhere. How do you prove the government did it and that it wasn't on there before the encounter?
- satokema 8y agoWhy do you need proof? Show it to the internet, there should be other examples too. It's way easier and less legally ambiguous to make people THINK you are rooting their devices than to actually do it and leave actual evidence to be found. They could even be looking for OTHER rootkits instead of installing them. I suspect there's a lot of availability bias going on here as well - how many travelers go through the US per year versus how many of them are famous ex-CTOs that get reposted on HN?
- inetknght 8y agoimage the device prior and after; compare images