2 ms·

The problem is it will be detectable and detected and then the password demanded and a failure to provide it will result in charges. I think unfortunately the a

The problem is it will be detectable and detected and then the password demanded and a failure to provide it will result in charges. I think unfortunately the answer is the phone has to be plausibly empty when crossing the US border, they should focus their efforts on being able to store the full state of the phone remotely and encrypted and being able to restore it easily.

mixdup 8d ago
Would it be detectable to some goon at the border? Probably not. They'd put in the sanitized password, see nothing, and let the person go. If it gets seized and an FBI or CIA analyst gets ahold of it, then yeah the smart guys are going to see it but you'd be in that situation anyway, so why not have an out that may avoid it?
- _2pou 8d ago
  Hidden volumes are impossible to detect, even with the password to the 'clean' volume and full device access.
- Cider9986 7d ago
  Yes. https://news.ycombinator.com/item?id=49399927 https://news.ycombinator.com/item?id=49399927. In the US you don't have key disclosure laws so the best course of action is to shut the fuck up [1]. [1] https://reddit.com/r/funny/comments/olecn5 https://reddit.com/r/funny/comments/olecn5
_2pou 8d ago
Hidden volumes are not detectable and impossible to prove, even with the password to the clean volume and device access. That's the entire point.
- kmoser 7d ago
  My understanding is that wear-leveling on SSDs leaves forensic traces which allows hidden volumes to be detected.
  - slaymaker1907 7d ago
    The trick around that is to use some form of oblivious block storage. That would completely remove those traces, though it is very performance intensive to anything obliviously. However, that would clearly make your phone look suspicious from forensic analysis. To counteract that, you have two hidden volumes leaving you with three total systems: your insecure system (first password), the honeypot volume for “clever” actors to find, and then the truly secure volume. I think one honeypot would be ideal. It needs to be convincing and have data that seems sensitive which would take a lot of effort. Put your nude photos there or something.

mixdup 8d ago

Would it be detectable to some goon at the border? Probably not. They'd put in the sanitized password, see nothing, and let the person go. If it gets seized and an FBI or CIA analyst gets ahold of it, then yeah the smart guys are going to see it but you'd be in that situation anyway, so why not have an out that may avoid it?

_2pou 8d ago
Hidden volumes are impossible to detect, even with the password to the 'clean' volume and full device access.
Cider9986 7d ago
Yes. https://news.ycombinator.com/item?id=49399927 https://news.ycombinator.com/item?id=49399927. In the US you don't have key disclosure laws so the best course of action is to shut the fuck up [1]. [1] https://reddit.com/r/funny/comments/olecn5 https://reddit.com/r/funny/comments/olecn5

_2pou 8d ago

Hidden volumes are not detectable and impossible to prove, even with the password to the clean volume and device access. That's the entire point.

kmoser 7d ago
My understanding is that wear-leveling on SSDs leaves forensic traces which allows hidden volumes to be detected.
- slaymaker1907 7d ago
  The trick around that is to use some form of oblivious block storage. That would completely remove those traces, though it is very performance intensive to anything obliviously. However, that would clearly make your phone look suspicious from forensic analysis. To counteract that, you have two hidden volumes leaving you with three total systems: your insecure system (first password), the honeypot volume for “clever” actors to find, and then the truly secure volume. I think one honeypot would be ideal. It needs to be convincing and have data that seems sensitive which would take a lot of effort. Put your nude photos there or something.