10 ms·

I leave mine behind whenever I travel outside the US, not so much because I am afraid to be on a list (although after reading this article, that fear has risen

I leave mine behind whenever I travel outside the US, not so much because I am afraid to be on a list (although after reading this article, that fear has risen somewhat) but because I employ encryption on my laptop. If they do search my device for anything illegal, they will inevitably ask for my password, which I don't want to give for philosophical reasons. Then it's pretty much guaranteed that I'll be detained and/or my laptop will be taken. You are right that, as a US citizen, this is a very strange revelation to have when packing for an overseas trip. Personally, this very real possibility opened my eyes on just how far we've fallen.

m_ram 13y ago
"I don't remember my password."
- jlgreco 13y ago
  That is when they detain/harass him and steal his computer anyway.
  - andrewpi 13y ago
    And probably use the NSA backdoor to peek at the hard drive, right?
- grey-area 13y ago
  It's illegal not to provide your password in the UK, not sure what the rules are under these special powers in the US.
  - notdrunkatall 13y ago
    The more I read about the laws in the UK, the more I appreciate the laws in the USA. We don't have everything right, but at least our system is rooted in the notion of the sanctity of individual rights. Or was.
  - aqme28 13y ago
    IIRC the 5th amendment allows you to not divulge your password, unless they can prove that there is illegal content .
  - haakon 13y ago
    What if you genuinely don't remember your password? Is it in effect memory loss that's been made illegal?
  - aplusbi 13y ago
    Then change your password to something that you don't actually know. Generate a random password before your trip and print out a few copies. Take one with you and secure the remaining ones. Before you fly through the UK, change the password on your computer to the random one and destroy the printout. When you get back home use the remaining printouts to change your password back and then destroy them.
    - pavel_lishin 13y ago
      At this point, why are you even bringing your computer along, if you have no way to log into it?
      - aplusbi 13y ago
        This obviously depends on your travel plans. For the US, for example, CBP can only search your belongings on entry into the US. If you are traveling from the US -> wherever -> US then you only need to secure your laptop for your return flight.
    - TheCraiggers 13y ago
      These sorts of techniques make great comments, but are nearly useless in reality. First of all, even if you're being truthful, saying "I don't know my password" will likely not be believed. Explaining the process you went through to safeguard your password will merely elicit suspicion by a border agent. Why would you go through such pains if you had nothing to hide? And once they are suspicious of you, you will almost surely be detained and have your equipment seized. Yes, the government might not be able to decrypt it for years, but they still have your laptop, and they are still in possession of your data, encrypted as it may be. So, I ask you, who won this little battle? It sure wasn't you. IMHO, the only valid approach here is to host everything on an external server, and VPN / SSH into it to do your work. Don't store the connection info locally, and don't store any passwords / keys locally. Make sure no confidential files ever touch your hard drive, even in a cache. Most agents have no idea how that process works, and unless you have a shortcut on your desktop / home directory labeled "connect to home fileserver" they probably won't even think to ask you for any further info. EDIT: Stupid spelling error. Thanks, recursive.
- w1ntermute 13y ago
  http://xkcd.com/538/ http://xkcd.com/538/
ensignavenger 13y ago
Look into Hidden Volume technology. Then you can give them the "password" and they can look around all they want.
- TheCraiggers 13y ago
  I have. However, my fear is that it will either not work when it's needed, or that they may have some manner of technology that allows them to scan for such things, or possibly the footprints left behind by such software, or logging them into an OS that looks like a fresh install might be enough to illicit some suspicion. Politely declining to share your password is within your rights at the US border. However, giving them a "fake" password seems like it may be a crime. And even if it's not, it will certainly get you detained and your laptop taken. Thankfully, I don't need my laptop that much when traveling overseas and my stupid non-global Verizon phone won't work anyway. Much safer to leave it behind.
  - rosser 13y ago
    You aren't giving them a "fake" password, you're just not giving them all of your passwords.
    - TheCraiggers 13y ago
      The point is you might still be considered to be interfering with the investigation, should they find out. Everything I've ever read about topic stresses that you should be absolutely truthful with a border officer. At least in the US, lying to one is a serious offense. Your post encourages hiding behind semantics and technicalities- and while those might save you in a courtroom (if you have a good lawyer), they won't save you when you're face to face with an angry border agent who just discovered your ruse. Again, this is why I don't use this method. It didn't work on my parents when I was a kid, and I don't think it will work in this case either.
  - ensignavenger 13y ago
    I understand- the software behind hidden volumes is relatively new. I think this is an area the open source/security community should really put some effort behind. It is recommended that you use the regular non-hidden volume OS for trivial tasks frequently to make it a normal OS. If you do this, you are giving them your password. You just use a differnet password and a hidden volume for all of your private stuff. Leaving it behind works as well, if that is acceptable to you! And is probably the most secure thing. :)

m_ram 13y ago

"I don't remember my password."

jlgreco 13y ago
That is when they detain/harass him and steal his computer anyway.
- andrewpi 13y ago
  And probably use the NSA backdoor to peek at the hard drive, right?
grey-area 13y ago
It's illegal not to provide your password in the UK, not sure what the rules are under these special powers in the US.
- notdrunkatall 13y ago
  The more I read about the laws in the UK, the more I appreciate the laws in the USA. We don't have everything right, but at least our system is rooted in the notion of the sanctity of individual rights. Or was.
- aqme28 13y ago
  IIRC the 5th amendment allows you to not divulge your password, unless they can prove that there is illegal content .
- haakon 13y ago
  What if you genuinely don't remember your password? Is it in effect memory loss that's been made illegal?
- aplusbi 13y ago
  Then change your password to something that you don't actually know. Generate a random password before your trip and print out a few copies. Take one with you and secure the remaining ones. Before you fly through the UK, change the password on your computer to the random one and destroy the printout. When you get back home use the remaining printouts to change your password back and then destroy them.
  - pavel_lishin 13y ago
    At this point, why are you even bringing your computer along, if you have no way to log into it?
    - aplusbi 13y ago
      This obviously depends on your travel plans. For the US, for example, CBP can only search your belongings on entry into the US. If you are traveling from the US -> wherever -> US then you only need to secure your laptop for your return flight.
  - TheCraiggers 13y ago
    These sorts of techniques make great comments, but are nearly useless in reality. First of all, even if you're being truthful, saying "I don't know my password" will likely not be believed. Explaining the process you went through to safeguard your password will merely elicit suspicion by a border agent. Why would you go through such pains if you had nothing to hide? And once they are suspicious of you, you will almost surely be detained and have your equipment seized. Yes, the government might not be able to decrypt it for years, but they still have your laptop, and they are still in possession of your data, encrypted as it may be. So, I ask you, who won this little battle? It sure wasn't you. IMHO, the only valid approach here is to host everything on an external server, and VPN / SSH into it to do your work. Don't store the connection info locally, and don't store any passwords / keys locally. Make sure no confidential files ever touch your hard drive, even in a cache. Most agents have no idea how that process works, and unless you have a shortcut on your desktop / home directory labeled "connect to home fileserver" they probably won't even think to ask you for any further info. EDIT: Stupid spelling error. Thanks, recursive.
w1ntermute 13y ago
http://xkcd.com/538/ http://xkcd.com/538/

ensignavenger 13y ago

Look into Hidden Volume technology. Then you can give them the "password" and they can look around all they want.

TheCraiggers 13y ago
I have. However, my fear is that it will either not work when it's needed, or that they may have some manner of technology that allows them to scan for such things, or possibly the footprints left behind by such software, or logging them into an OS that looks like a fresh install might be enough to illicit some suspicion. Politely declining to share your password is within your rights at the US border. However, giving them a "fake" password seems like it may be a crime. And even if it's not, it will certainly get you detained and your laptop taken. Thankfully, I don't need my laptop that much when traveling overseas and my stupid non-global Verizon phone won't work anyway. Much safer to leave it behind.
- rosser 13y ago
  You aren't giving them a "fake" password, you're just not giving them all of your passwords.
  - TheCraiggers 13y ago
    The point is you might still be considered to be interfering with the investigation, should they find out. Everything I've ever read about topic stresses that you should be absolutely truthful with a border officer. At least in the US, lying to one is a serious offense. Your post encourages hiding behind semantics and technicalities- and while those might save you in a courtroom (if you have a good lawyer), they won't save you when you're face to face with an angry border agent who just discovered your ruse. Again, this is why I don't use this method. It didn't work on my parents when I was a kid, and I don't think it will work in this case either.
- ensignavenger 13y ago
  I understand- the software behind hidden volumes is relatively new. I think this is an area the open source/security community should really put some effort behind. It is recommended that you use the regular non-hidden volume OS for trivial tasks frequently to make it a normal OS. If you do this, you are giving them your password. You just use a differnet password and a hidden volume for all of your private stuff. Leaving it behind works as well, if that is acceptable to you! And is probably the most secure thing. :)