3 ms·

Everyone please read Surveillance Self Defense from EFF [0] My advice, take a burner phone to the airport (and elsewhere?), and since devices are subject to wa

by k310 8d ago

Everyone please read Surveillance Self Defense from EFF [0] My advice, take a burner phone to the airport (and elsewhere?), and since devices are subject to warrantless search anywhere and everywhere, via exceptions to the fourth amendment [1] (the constitution seems designed to be bent or outright ignored), keep your data at home and encrypted. The "cloud" is a government data supermarket. For example. > While the Fourth Amendment is the foundation, federal and state laws can add layers of complexity. For example, the Patriot Act expanded the government's ability to conduct surveillance and searches, particularly in national security cases, sometimes with a lower burden of proof than traditional criminal investigations. MUCH lower. [0] https://ssd.eff.org/ https://ssd.eff.org/ [1] https://uslawexplained.com/warrantless_search https://uslawexplained.com/warrantless_search

FuriouslyAdrift 8d ago
When I travel internationally, I do not take any electronics with me. If I need a cell phone, laptop, etc., then I will buy or rent something cheap at the destination. I got into the habit while traveling back and forth the mainland China as it was our corporate policy (and we never brought any electronics back, either).
- alyeska2 8d ago
  I tried that once. Then when I tried to log in to my Gmail account at my destination, it flagged it as a suspicious login attempt and wouldn't let me in without entering a code they texted to my American phone number, which meant I was locked out of my email for the duration of the trip. Plus travel day realities often require your phone and accounts - plane tickets, Uber/Lyft, hotel reservations or updates from Airbnb with check-in instructions, door codes, etc. It's a tremendous challenge and hassle for any regular person. We really just need to push back on the government overreach. It's tragic that half of the Trump voters proclaim to be "small government" and "Don't tread on me" but then tolerate things like this. There's certainly a bipartisan group of people opposed that are large enough to effect change if we work together.
  - belorn 8d ago
    I 100% agree that the best solution would be for the law to catch up and actually treat privacy as a human right. Until that time there are things which, while challenging and a hassle, do help. I would use the same sim-card in the burner phone. Any attack by the government that they can do with your real sim card can also be done through phone number spoofing. For email, use unique emails (things like booking+youremail@...) for reservations/bookings/tickets and have those forwarded to a second email account that you want to use during the trip. It is already good privacy hygiene to use unique emails for all types of registrations, and you will have more control when services eventually have a leak.
    - leptons 8d ago
      > (things like booking+youremail@...) This is so trivially easy to bypass. If you're a service selling email addresses, just strip off the booking+ part and you have the "real" email address. All my sign-up email addresses are via a catch-all email, so I can just give a service "thisservice@mydomain.com", or "thatservice@mydomain.com", so I there is no single "real" email address, and I get to track who exactly is selling my email address. So far I haven't had problems with anyone spamming "anything@mydomain.com".
      - belorn 8d ago
        They can bypass it, and as the user you can also use any other sign or character that you want. If you email is foo@ then you can use the letter x, as registrationxfoo@. A popular choice for a company email is first.lastname@, so you can use a . for it, or the - character. + is just what some program, like procmail and Sieve, will recognize without much trouble. Using a a catch-all email with your own domain works also perfectly fine. Doesn't work as well if there is multiple email users of that domain.
  - alexgieg 8d ago
    It isn't that they tolerate it, it simply doesn't affect them, so they don't care. Besides, it affects many they dislike, so that's always a bonus. Remember, when ultra-partisans, of most political ideologies, demand rights and freedoms, there's almost always an implied "for me and mine" in there. Exceptions to this are extraordinarily rare, even more so nowadays.
toyg 8d ago
has anybody ever challenged the PATRIOT Act on compliance with the 4th Amendment? Not that it really matters, with the current Supreme Court being what it is, but still...
- cogman10 8d ago
  The issue, as I understand it, is that someone with standing to sue over the 4th amendment would be prosecuted under a FISA court. Those cases due to how the court was created and structured, do not end up in front of the supreme court. It's one of those weird things in the US constitution which allow for congress to create new federal courts which don't ultimately fall under the jurisdiction of the regular federal courts. https://en.wikipedia.org/wiki/Jurisdiction_stripping https://en.wikipedia.org/wiki/Jurisdiction_stripping
  - wahern 8d ago
    The FISA court only handles warrants, not prosecutions. Generally the only parties involved in a warrant request to a court (FISA or any other), are the judge and the government representative(s) seeking the warrant, though the court can pull in third-parties if it wants, e.g. for advice on legal questions. A secret criminal prosecution trial would be unconstitutional under the Sixth Amendment ("In all criminal prosecutions, the accused shall enjoy the right to a speedy and public trial"). Though SCOTUS has unfortunately allowed for some classified material to be kept secret, sometimes (IIRC) even from the defendant and the jury, though usually this is ancillary stuff, not the direct evidence that would secure a conviction.
    - cogman10 7d ago
      Warrants are what's at issue when the 4th amendment is in play. The thing you can't do when FISA issues a warrant is get the details about that warrant, who issued it, why it was issued. You can't even know that a FISA warrant was deployed against yourself. Normal judicial warrants are public record.
rconti 8d ago
The resources you link to are helpful; however, this is not really practical advice for most people most of the time. To the extent that our smartphones are a very helpful device to have in our day-to-day lives at home, they're even more useful in a foreign country where they become our only available computing device; indispensable for keeping in touch back home, navigation on unfamiliar transit systems, translation of unfamiliar languages, and so on. Of course, with great effort and moderate expense, you could setup a burner phone with access to many of your same accounts and resources, but the more features you add to the burner phone, the more it begins to look like the device you're leaving "safe" at home. I'm traveling overseas tomorrow and my partner and I will both be taking our phones with us as we do every day in our home country.
- finaard 8d ago
  I find modern smartphones more and more unusable, both OS becoming more hostile towards the user, and applications widely moving to dropping logins in regular intervals. That has been happening for years already, so I slowly moved more and more stuff back to a computer. By now I'm at a point where I no longer even backup my phone - there are a bunch of apps, but I can just install them and log in again on a different device as needed. The final step to make it truly throwaway was me doing a custom matrix bridge for SMS earlier this year - I had voice routing setup for a while already. So now my old SIM cards are in a 4G modem at home, and the phone I carry around with me just has a data SIM. Huge quality of life improvement, as I can terminate as many numbers as I want there, and have access to both voice and SMS data from my computer as well.
  - rconti 6d ago
    How does this relate to travel? Are you saying that the modern smartphone drops logins so often that the burner is less of a burden? Or that you should just travel with a laptop? (which I do quite often, since a thin laptop takes so little space and weight)
    - finaard 5d ago
      Both. My standard phone defacto already is a burner phone, so I'd just either wipe it or pick something new up when travelling to that kind of countries. Similar for a notebook - I'd travel with an empty one, restore it after arriving, and wipe it again before leaving. I have infrastructure in place to make that easy and secure for me to do.
doctorpangloss 8d ago
"Hey Mr. Border Guard, this is a burner phone, have at it!" "Okay can you login to your email for me? If not I'm going to have to keep you here until you do."
- trollbridge 8d ago
  You have to set up trivial, low value “burner” email that you use for your emailing activity when overseas, and other related social media accounts, and make sure to keep them “warm”. A spare old Pixel or iPhone SE is $20-$50 you can use for this purpose.
- iamnothere 8d ago
  If you’re talking about a US citizen returning home, they can’t hold you indefinitely. If you disagree, I challenge you to find a counter example. All bets are off if you’re a non-citizen entering another country, it depends on the laws and customs there.
- deleted 8d ago
  [deleted]

by k310 8d ago

FuriouslyAdrift 8d ago

When I travel internationally, I do not take any electronics with me. If I need a cell phone, laptop, etc., then I will buy or rent something cheap at the destination. I got into the habit while traveling back and forth the mainland China as it was our corporate policy (and we never brought any electronics back, either).

alyeska2 8d ago
I tried that once. Then when I tried to log in to my Gmail account at my destination, it flagged it as a suspicious login attempt and wouldn't let me in without entering a code they texted to my American phone number, which meant I was locked out of my email for the duration of the trip. Plus travel day realities often require your phone and accounts - plane tickets, Uber/Lyft, hotel reservations or updates from Airbnb with check-in instructions, door codes, etc. It's a tremendous challenge and hassle for any regular person. We really just need to push back on the government overreach. It's tragic that half of the Trump voters proclaim to be "small government" and "Don't tread on me" but then tolerate things like this. There's certainly a bipartisan group of people opposed that are large enough to effect change if we work together.
- belorn 8d ago
  I 100% agree that the best solution would be for the law to catch up and actually treat privacy as a human right. Until that time there are things which, while challenging and a hassle, do help. I would use the same sim-card in the burner phone. Any attack by the government that they can do with your real sim card can also be done through phone number spoofing. For email, use unique emails (things like booking+youremail@...) for reservations/bookings/tickets and have those forwarded to a second email account that you want to use during the trip. It is already good privacy hygiene to use unique emails for all types of registrations, and you will have more control when services eventually have a leak.
  - leptons 8d ago
    > (things like booking+youremail@...) This is so trivially easy to bypass. If you're a service selling email addresses, just strip off the booking+ part and you have the "real" email address. All my sign-up email addresses are via a catch-all email, so I can just give a service "thisservice@mydomain.com", or "thatservice@mydomain.com", so I there is no single "real" email address, and I get to track who exactly is selling my email address. So far I haven't had problems with anyone spamming "anything@mydomain.com".
    - belorn 8d ago
      They can bypass it, and as the user you can also use any other sign or character that you want. If you email is foo@ then you can use the letter x, as registrationxfoo@. A popular choice for a company email is first.lastname@, so you can use a . for it, or the - character. + is just what some program, like procmail and Sieve, will recognize without much trouble. Using a a catch-all email with your own domain works also perfectly fine. Doesn't work as well if there is multiple email users of that domain.
- alexgieg 8d ago
  It isn't that they tolerate it, it simply doesn't affect them, so they don't care. Besides, it affects many they dislike, so that's always a bonus. Remember, when ultra-partisans, of most political ideologies, demand rights and freedoms, there's almost always an implied "for me and mine" in there. Exceptions to this are extraordinarily rare, even more so nowadays.

toyg 8d ago

has anybody ever challenged the PATRIOT Act on compliance with the 4th Amendment? Not that it really matters, with the current Supreme Court being what it is, but still...

cogman10 8d ago
The issue, as I understand it, is that someone with standing to sue over the 4th amendment would be prosecuted under a FISA court. Those cases due to how the court was created and structured, do not end up in front of the supreme court. It's one of those weird things in the US constitution which allow for congress to create new federal courts which don't ultimately fall under the jurisdiction of the regular federal courts. https://en.wikipedia.org/wiki/Jurisdiction_stripping https://en.wikipedia.org/wiki/Jurisdiction_stripping
- wahern 8d ago
  The FISA court only handles warrants, not prosecutions. Generally the only parties involved in a warrant request to a court (FISA or any other), are the judge and the government representative(s) seeking the warrant, though the court can pull in third-parties if it wants, e.g. for advice on legal questions. A secret criminal prosecution trial would be unconstitutional under the Sixth Amendment ("In all criminal prosecutions, the accused shall enjoy the right to a speedy and public trial"). Though SCOTUS has unfortunately allowed for some classified material to be kept secret, sometimes (IIRC) even from the defendant and the jury, though usually this is ancillary stuff, not the direct evidence that would secure a conviction.
  - cogman10 7d ago
    Warrants are what's at issue when the 4th amendment is in play. The thing you can't do when FISA issues a warrant is get the details about that warrant, who issued it, why it was issued. You can't even know that a FISA warrant was deployed against yourself. Normal judicial warrants are public record.

rconti 8d ago

The resources you link to are helpful; however, this is not really practical advice for most people most of the time. To the extent that our smartphones are a very helpful device to have in our day-to-day lives at home, they're even more useful in a foreign country where they become our only available computing device; indispensable for keeping in touch back home, navigation on unfamiliar transit systems, translation of unfamiliar languages, and so on. Of course, with great effort and moderate expense, you could setup a burner phone with access to many of your same accounts and resources, but the more features you add to the burner phone, the more it begins to look like the device you're leaving "safe" at home. I'm traveling overseas tomorrow and my partner and I will both be taking our phones with us as we do every day in our home country.

finaard 8d ago
I find modern smartphones more and more unusable, both OS becoming more hostile towards the user, and applications widely moving to dropping logins in regular intervals. That has been happening for years already, so I slowly moved more and more stuff back to a computer. By now I'm at a point where I no longer even backup my phone - there are a bunch of apps, but I can just install them and log in again on a different device as needed. The final step to make it truly throwaway was me doing a custom matrix bridge for SMS earlier this year - I had voice routing setup for a while already. So now my old SIM cards are in a 4G modem at home, and the phone I carry around with me just has a data SIM. Huge quality of life improvement, as I can terminate as many numbers as I want there, and have access to both voice and SMS data from my computer as well.
- rconti 6d ago
  How does this relate to travel? Are you saying that the modern smartphone drops logins so often that the burner is less of a burden? Or that you should just travel with a laptop? (which I do quite often, since a thin laptop takes so little space and weight)
  - finaard 5d ago
    Both. My standard phone defacto already is a burner phone, so I'd just either wipe it or pick something new up when travelling to that kind of countries. Similar for a notebook - I'd travel with an empty one, restore it after arriving, and wipe it again before leaving. I have infrastructure in place to make that easy and secure for me to do.

doctorpangloss 8d ago

"Hey Mr. Border Guard, this is a burner phone, have at it!" "Okay can you login to your email for me? If not I'm going to have to keep you here until you do."

trollbridge 8d ago
You have to set up trivial, low value “burner” email that you use for your emailing activity when overseas, and other related social media accounts, and make sure to keep them “warm”. A spare old Pixel or iPhone SE is $20-$50 you can use for this purpose.
iamnothere 8d ago
If you’re talking about a US citizen returning home, they can’t hold you indefinitely. If you disagree, I challenge you to find a counter example. All bets are off if you’re a non-citizen entering another country, it depends on the laws and customs there.
deleted 8d ago
[deleted]