How to Keep ICE Agents Out of Your Devices at Airports (theintercept.com)

by cdrnsf 159 comments 100 points
Read article View on HN

159 comments

[−] nine_k 52d ago
The usual fare: log out, disable biometrics, use long pins and passwords, power off. Prefer a burner device, or clean your device and restore when you arrive.

I remember how Google's internal guidelines for travel circa 2011 required to remove any material under NDA from your laptop when traveling to China or Russia; you had to restore it over the VPN after a safe arrival. Funny that now the same precautions apply to the US :((

[−] belorn 51d ago
This has been the recommendation when traveling to the US since 2001, only that the worry was NSA rather than ICE.

The procedure that I got recommended in 2005 was to install a second fresh operative system (preferable windows) on the laptop on a separate partition/disk, make a copy of the old boot partition and disk encryption headers, encrypt the copy and store it online for later retrieval, and then overwrite the old boot with the new installation. Make sure to leave the old partitions alone.

The restore is then as simple as downloading the encrypted backup, decrypt and dd it back in place. Repeat the process before taking the trip back. It was advisable to test the processes before to familiarize yourself to it, and to use the fresh installation a bit so it wasn't completely blank.

[−] TheNewsIsHere 50d ago

> I remember how Google's internal guidelines for travel circa 2011 required to remove any material under NDA from your laptop when traveling to China or Russia; you had to restore it over the VPN after a safe arrival.

I made this suggestion when I served on the security team at a major cybersecurity player.

When we had our company-wide annual internal conference it was always in person. This meant that basically everyone, with basically cumulative access to everything, and all our code, would be traveling across a multitude of borders at once. Some of which were less friendly than the US (at that time).

This was rejected as impractical for developers and redundant for everyone else. So I suggested locking the accounts of everyone who was traveling between the time they left and the time they arrived. This would have the side effect of signing them out of our most sensitive systems and removing certain highly confidential data from laptops. This was also rejected as “unnecessary”.

That company now counts a healthy proportion of the Fortune 500 amongst their customer base. I hope things are not so cavalier anymore.

[−] Ms-J 51d ago
All solid advice.

I would like to add as a reminder to encrypt all devices as well. Leave as little plaintext data as possible.

Veracrypt has the ability to create hidden volumes, regardless of OS.

[−] nine_k 51d ago
This goes without saying!
[−] joe_mamba 52d ago
>you had to restore it over the VPN after a safe arrival

How do you restore it via VPN? Don't you first need a workable OS to connect to VPN first?

[−] nine_k 52d ago
You have a working OS! But you're logged out, all sensitive data is removed (safely overwritten with random data first), and you don't have the means to connect to the VPN or anything corporate (it was before zero-trust architecture), even at gunpoint. You can check your flight status, or look up a cafe nearby to eat, etc. But you have to go to a Google office in the destination city, identity yourself, and get the trusted bits restored on your corp machine. This, together with an OTP device, finally allowed you to reconnect to the internal network (and go check fresh memegen).
[−] tpetry 52d ago
I do understand why all these steps are required. And they are good. But how should zero-trust architecture solve that? You‘re still authenticated what the core problem is.
[−] nine_k 52d ago
Zero-trust architecture just can work without a VPN, unless the network is blocked. Otherwise everything should be similar.
[−] f1shy 52d ago
“Remove material under NDA” not format blank the computer.
[−] Lord_Zero 52d ago
Do you need to disable biometrics if you simply reboot? my Pixel 10 Pro XL wont let me in without pin after reboot. Biometrics wont work until that first unlock.
[−] spwa4 51d ago
The guidelines also say that if the border agents of China or Russia ask you point blank, to give them access. It is not worth risking your personal safety for your device. That includes your PIN and password, and in China and Russia's case, whether or not that's actually allowed by law.
[−] abc123abc123 52d ago
Ditch the phone. The liability, tracking and mental health problems created due to modern phones has made owning one unsustainable. Email works, at worst, voip providers exist. Do you need a map? Print one. Do you need directions? Ask someone. Does the restaurant only offer app or qr, ask someone, or go somewhere else.

I have never encountered a phone-related problem that could not be solved with:

1. A print out. 2. Asking someone. 3. Using your web browser on your computer. 4. Using some kind of voip if audio communication is needed.

Yes, it is not as convenient as the surveillance and privacy nightmares of today, but if your life is only about convenience, then send your money to the government, and let them just decide for you how much money you need, and you don't even have to think about that.

A minor inconvenience is a price well paid for freedom from surveillance and excellent mental health.

The ones who complain about inconvenience don't really care about privacy, democracy and freedom, so should not complain when these things are attacked.

[−] bdangubic 52d ago
You drive car or walk everywhere you go? Car is convenience, yes but it is the privacy nightmare (unless you gamble and drive without plates :) )
[−] lcnPylGDnU4H9OF 51d ago

> unless you gamble and drive without plates

New cars are being fitted with cell modems to ping cell towers.

[−] bdangubic 51d ago
Yea, driving a modern / newer car is just as bad privacy-wise as having a mobile phone. I mentioned plate readers as I was expecting "Don't drive new cars" given the "don't use mobile phone" comment :)
[−] thiht 51d ago
Insane take, you can’t expect anyone to agree with this.
[−] bens74 51d ago
I don't agree a phone free life is an insane idea at all. It is in fact extremely reasonable, rational, and admirable. The parent makes it sound easier than it is though. You might consider that part "insane".

I have tried really really hard to break the phone addiction too. Though so far without durable success, unfortunately. :-(

[−] JKCalhoun 51d ago
(Raises hand) Ummm…

Maybe it's because I went nearly 50 years with no cell phone?

It seems reasonable to shut the phone off—check it through with your luggage.

(One of my favorite travel memories was trying to ask people in Tokyo for directions to my hotel—I speak only English.)

[−] zouhair 52d ago
Don't go to America is the best alternative.
[−] Ekaros 52d ago
Only go to good parts. Like Mexico and South America in general.
[−] jeffrallen 52d ago
Canada's ok, but only in May and October. The rest of the year is ice and/or black fly season.
[−] ishouldstayaway 52d ago
In English, "America" means the USA specifically.

But you knew that already and decided to just post bait.

[−] calderarrow 52d ago
[−] shimman 52d ago
Seems too subjective. I don't think it'll take off.
[−] ishouldstayaway 51d ago
Hey look judging from how this thread evolved in the last several hours, at least it turned out that the bait worked and a bunch of people were dumb enough to take it?

ha ha

[−] smarf 52d ago
or, perhaps, they are wryly pushing back against the USA capturing a generic geographic term for themselves
[−] triceratops 52d ago
To be fair though, that horse bolted a couple of centuries ago. What other name would you call it by? There's another "united states" on the same continent. The country to the immediate south is formally known as the "United Mexican States".
[−] Brian_K_White 52d ago
But the whole hemisphere is not "Mexico". USA and Canada are not also "North Mexico". Their harmless little reminder is more correct than any of the attempted arguments against it.
[−] triceratops 52d ago
It was the first group of united states on the continent. North America was, relative to the land that became Mexico, thinly peopled. Unlike in Mexico there was no pre-colonial, indigenous empire that had ruled and named the land which eventually became the 13 colonies. So there wasn't necessarily a better alternative to put after "United States of" at the time. Do you know of one?
[−] marssaxman 52d ago
The level of arrogance some western-hemisphere Spanish speakers have, trying to tell foreigners that the name they use for their own country in their own native language is wrong, demanding that they translate the Spanish name and use that instead, is so absurdly entitled that it's just... hilarious.
[−] nyantaro1 52d ago
Let them have it. 'America' is so loaded with horrible things that I don't really think the rest of the continent cares
[−] ishouldstayaway 51d ago
This is the point: in English, it is not a generic geographic term.

It is in Spanish, though, so I get where the confusion comes from (at least when that confusion is genuine and not just boring troll shit). In Spanish, "América" refers to what in English is "the Americas", because in English we use separate terms for North, South, and (sometimes) Central America.

It's not pushback. It's just dishonest ragebait bullshit.

[−] chb 52d ago
So was Trump being inclusive or exclusive when he renamed the Gulf of Mexico to the Gulf of America?
[−] gib444 51d ago
Times are a changing. We can change the English language on this matter too (or more accurately, it might end up changing).

It is something that needs correcting tbh. The USA does not own the Americas.

[−] mothballed 52d ago
I treat all items on an international trip as disposable. Been robbed by thieves, police (Mexico lol), and brutalized by US CBP enough to know it's not worth it to try and take anything across borders besides the shirt on your back. Anything carried is a liability for them to claim you filled some customs form wrong or to fake a drug dog hit on it.
[−] comrade1234 52d ago
"Immigration and Customs Enforcement have already started targeting travelers, with agents in plain clothes forcefully detaining a mother in front of her young daughter at San Francisco International Airport on Sunday after a tip from the Transportation Security Administration."

I don't think the tsa is at sfo. They use a private contractor for tsa functions. Is the quote made-up?

[−] g947o 52d ago
Airlines like Alaska Airlines make it very difficult to board a plane without a phone. It's still possible, but you need to prepare early and get your boarding pass printed at home, provided that you have a printer, apparently.
[−] charles_f 52d ago
It's an interesting state that you can force someone to unlock their phone with biometrics, but you can't force them to reveal a pin.

Anecdotally, I have been to the US a few times in the past year, and seen no change myself - where are you going and why? Thanks have a good trip. It was for short business trips, and I'm white with a number of documented entries/departures, so my experience might be very different from the next person though.

[−] righthand 52d ago
Burner phones for all! Defund, disband, destroy DHS, ICE, CBP, TSA.
[−] anotherevan 51d ago
"Unlock your phone."

"No, I don't have to."

Detained in a room for twelve hours.

"Okay, okay, here's my phone."

[−] chasil 52d ago
Apple devices allow biometrics to be disabled for unlocking the phone.

They are still active for accessing anything in the wallet, however.

[−] nequals30 52d ago
For Linux users, you could try disabling the desktop environment when going through the airport (or using termux-launcher on your phone).

It'd be fun to see how they'd handle a CLI. Might result in getting detained, though.

[−] seethishat 52d ago
Don't carry them with you. I'm old and I can tell you from experience... you can live life without holding a cellphone all the time. It's not as hard as you think.
[−] chasil 52d ago
[−] Sophira 52d ago
Additionally: If you have adb access turned on, turn it off before travelling!
[−] gos9 51d ago
iPhone: clicking power button five times in quick succession locks down to password access only.
[−] novaRom 52d ago
Another method many don't know is to have 2 synchronized phones while traveling, so if one is out of you, you still have full control.

Enable self-destruction mode caused by a special unlock PIN on each of them.

[−] htx80nerd 52d ago
[flagged]