3 ms·
I used to play around on projects adjacent to Tor and TailsOS, and had an idea for a setup I was researching. It's a little intense and probably has annoying fa
by patcon 1mo ago
I used to play around on projects adjacent to Tor and TailsOS, and had an idea for a setup I was researching. It's a little intense and probably has annoying failure modes, but sharing in case anyone else finds it helpful:
- Tasker is an automation app for setting up rules for triggers and actions. It allows extension apps to be created to add new triggers and actions.
- someone at one point made an extension to add an action for wiping or factory resetting when triggered
- there was an existing extension (or core feature) to trigger when certain signals are lost or found (e.g., wifi signals, Bluetooth LE beacons, etc)
So the idea is to carry a BLE beacon (any "item tracking" one works) on your keychain, and an unassuming faraday cage pocket alongside it. If you want to wipe your phone, slip the fob into the pocket, the signal disappears, and your phone wipes. And if you don't have the keychain on you, just refuse to open it right away, as when they put the phone itself in a faraday cage (to prevent it from being remote wiped), they cause the signal to be lost, and it gets reset.
Not sure if all the pieces still exist (I dont think the tasker extension for wiping existed outside a forum post...)
- sebmellen 1mo agoI used to contribute to this https://en.wikipedia.org/wiki/USBKill https://en.wikipedia.org/wiki/USBKill
- patcon 1mo agoAh I recall I used to see the creator around :) thanks for your work! Regarding the motivation for usbkill mentioned in the article: I too was motivated to think on this stuff in relation to my sense of injustice around Ross Ulbrecht, and wanting to think of some way that someone in his position could avoid getting caught. One creative variant in my thinking involved embedding the BLE beacon inside a rubber ball that could be launched and lost track of. Or maybe embedded in heel of a shoe and ditched in transit haha
- hamdingers 1mo agoOr keep it in a faraday bag and have the phone wipe if it sees it. If you're ever searched (or otherwise indisposed), they'll open the bag and wipe your phone for you.
- NewJazz 1mo agoThis depends on the beacon being visible. If they just take the phone and walk away, because that's where they think the evidence is, it won't wipe.
- hamdingers 1mo agoWhen I've gotten secondary screening the first thing they do is take all my belongings and rifle through them on a table. That seems to be standard practice and I'm sure it was step 1 in Tunick's ordeal. Both approaches have situations they wouldn't work in. If you're extra paranoid you could do both.
- iAMkenough 1mo ago> If you're ever searched (or otherwise indisposed), they'll open the bag and wipe your phone for you. Isn't that the same issue here that resulted in felony charges? Border agent was given a duress PIN and wiped the phone for the owner. Now owner is charged.
- fluoridation 1mo agoIt's not the exact same situation. Whether it's similar enough to be prosecuted or convicted is a different question.
- hamdingers 1mo agoI don't see how. Regardless of how you feel about the lawfulness of the overall situation, Tunick gave an agent false information which resulted in the phone being wiped. That's intent. This requires no action whatsoever from the phone's owner, you could even be unconscious/dead and it would still work.
- iAMkenough 1mo agoThe intent in that scenario is to wipe your phone (destroy evidence) when a bag is searched by federal agents.
- echelon_musk 1mo agoWith no third party apps you can set an iPhone to wipe itself after 10 failed passcode attempts.
- grapheneos 1mo agoUS law enforcement is well aware of it. They're also now well aware of the GrapheneOS duress PIN/password feature. It was designed to work against an attacker aware of it by acting as a deterrence. If they're aware of the feature, it discourages them from trying to coerce a PIN/password and attempt to unlock with it. We aren't fond of features depending on an attacker being unaware of them and this isn't one of those. Pixels have a high quality secure element enforcing a maximum of 20 unique attempts to derive the encryption keys for each separately encrypted profile. There's also very aggressive rate limiting between the attempts. It filters out duplicate attempts by temporarily remembering the previous 5 unique attempts to make the rate limiting more usable. A misremembered PIN/password repeatedly entered over and over will only use up 1 attempt. Android does have standard support for enabling wiping after N attempts and an open source app can be used to set a configurable limit rather than specifically after 10.
- hamburglar 1mo agoI like the idea of a phone that automatically wipes itself if I don’t act to stop it. I wonder about the legality of that if the duress code is considered “destroying evidence.”
- krferriter 1mo agoAction vs inaction seems like an important distinction.
- Cider9986 1mo agohttps://news.ycombinator.com/item?id=49040537 https://news.ycombinator.com/item?id=49040537
- ratelimitsteve 1mo agotfw face when I leave my phone on the table and go to the restaurant bathroom only to return to a brand new squeaky clean factory reset
- inigyou 1mo agoCritically, don't brag about doing so. Don't tell the cops you wiped your phone. If asked, it's just a blank phone you brought (maybe you have a plausible excuse like gifting it).