Write the duress PIN on a piece of paper in your wallet. Someone searching your phone is probably also searching your wallet and may try the PIN.
Genius. Flips the script. In the process of conducting an illegal search, you deleted my phone causing considerable financial and emotional damage. Lawsuit time.
It probably won't work, at least (US)domestically. The requirement for obtaining a warrant before searching a phone is part of training because there is a clear Supreme Court ruling to that effect.
That being said, what the law says and what some random asshole does during a stop are not always the same thing.
Feds following the law? Did you miss the last decade?
That being said, what the law says and what some random asshole does during a stop are not always the same thing.
If the duress pin makes obvious it's the duress pin then it's not really doing its job. It should instead open a profile with not much in it while erasing the other profile and files in the background.
My understanding is you can't actually be forced (legally) to give up your phone's PIN or password as part of a police search, because it violates the 5th amendment against self-incrimination, even at the border. Now will they still find a way to fuck up your day if you refuse to unlock your phone, sure, but I feel like saying "I have a right under the 5th Amendment to not reveal my password" is going to be a lot easier to defend than "I intentionally wiped/locked/bricked my phone when you asked to look through it."
Depends
Most phones can be accessed by forensic software. The more secure phones are protected as long as they've just been restarted but before they're unlocked for the first time.
Some phones, like an up-to-date GrapheneOS on a supported Pixel, may resist forensic imaging after first unlocking but the information is in memory so there could potentially be zero days or other exotic methods of obtaining the data.
A duress wipe lets you know 100% that the data is not accessible.
Back up and wipe your phone before you cross the border. That way if they want to look at it, feel free to hand it to them. When you get back home, restore the backup.
Also consider getting a throwaway phone if they try to keep it.
What law did he break? Vs the warrantless search that is breaking the law. If only the supreme court didn't give them a pass.
Search without a warrant is valid at the border.
So I've learned :(
Without a warrant, it's literally his phone to do with it what he pleases. Baffled that that's not the end of the conversation.
Assuming we lived in a rational world with a fair and impartial justice system, and not one that exists to funnel money from the working class into the Epstein class and kill or imprison everyone that makes that less easy.
well they have the "border search exception" so at the border, no, they generally do not need a warrant for "routine searches" of electronic devices. Fucked up, but that is the law on the books and US courts have virtually always upheld it when it comes up.
Assuming we lived in a rational world with a fair and impartial justice system
That's like assuming unicorns will protect all that is good and sugar is effective weight loss
Well yeah. Hence the second half of that sentence.
Oh, because they are outside US borders they claim not to need a warrant, but that doesn't stop them using US law to prosecute him though.
I think the supreme court has said they can search phones without warrants at the border and points of entry, so airports.
You can't be compelled to give them your password, but you can be compelled to use your biometric ID. Clear as mud.
The headline is wrong.
Fascist regime fucks over people's constitutional rights and could send a man to prison for protecting his own privacy.
There, fixed.
GrapheneOS should update the duress passcode to load a dummy profile like Only Key’s Plausible Deniability Feature.
Loading any profile allows the operating system access to root privileges, and opens potential for user privilege escalation.
The profiles are independently encrypted with a key derived from the user's profile PIN. If the other profiles are not logged in then their keys are not in RAM (and they get zeroed beforehand so they can't be read out of unallocated memory).
Even if the bad guys get root via a LPE in a dummy account there are no keys to find and the profiles' storage are not mounted.
You couldn't trust the device after that however, who knows what kind of persistent spyware they could have installed.
Then it should delete the data while loading a dummy profile
That would be an interesting proposition... under duress load profile x and delete all other profiles, apps, settings and keys.
Or maybe a lighter version of the duress pin that just loads the fake profile (or alternate profile) but leaves the other(s) intact.
If you're just handing your phone over for a border pig to swipe through before waving you through that might be adequate.
It depends on whether you believe forensics can recover the data when handed over. So make it a setting
This is a most excellent place for technology news and articles.
