How to Keep ICE Agents Out of Your Devices at Airports (theintercept.com)

by cdrnsf 159 comments 100 points
Read article View on HN

159 comments

[−] nine_k 52d ago
The usual fare: log out, disable biometrics, use long pins and passwords, power off. Prefer a burner device, or clean your device and restore when you arrive.

I remember how Google's internal guidelines for travel circa 2011 required to remove any material under NDA from your laptop when traveling to China or Russia; you had to restore it over the VPN after a safe arrival. Funny that now the same precautions apply to the US :((

[−] belorn 51d ago
This has been the recommendation when traveling to the US since 2001, only that the worry was NSA rather than ICE.

The procedure that I got recommended in 2005 was to install a second fresh operative system (preferable windows) on the laptop on a separate partition/disk, make a copy of the old boot partition and disk encryption headers, encrypt the copy and store it online for later retrieval, and then overwrite the old boot with the new installation. Make sure to leave the old partitions alone.

The restore is then as simple as downloading the encrypted backup, decrypt and dd it back in place. Repeat the process before taking the trip back. It was advisable to test the processes before to familiarize yourself to it, and to use the fresh installation a bit so it wasn't completely blank.

[−] TheNewsIsHere 50d ago

> I remember how Google's internal guidelines for travel circa 2011 required to remove any material under NDA from your laptop when traveling to China or Russia; you had to restore it over the VPN after a safe arrival.

I made this suggestion when I served on the security team at a major cybersecurity player.

When we had our company-wide annual internal conference it was always in person. This meant that basically everyone, with basically cumulative access to everything, and all our code, would be traveling across a multitude of borders at once. Some of which were less friendly than the US (at that time).

This was rejected as impractical for developers and redundant for everyone else. So I suggested locking the accounts of everyone who was traveling between the time they left and the time they arrived. This would have the side effect of signing them out of our most sensitive systems and removing certain highly confidential data from laptops. This was also rejected as “unnecessary”.

That company now counts a healthy proportion of the Fortune 500 amongst their customer base. I hope things are not so cavalier anymore.

[−] Ms-J 51d ago
All solid advice.

I would like to add as a reminder to encrypt all devices as well. Leave as little plaintext data as possible.

Veracrypt has the ability to create hidden volumes, regardless of OS.

[−] nine_k 51d ago
This goes without saying!
[−] joe_mamba 52d ago
>you had to restore it over the VPN after a safe arrival

How do you restore it via VPN? Don't you first need a workable OS to connect to VPN first?

[−] nine_k 52d ago
You have a working OS! But you're logged out, all sensitive data is removed (safely overwritten with random data first), and you don't have the means to connect to the VPN or anything corporate (it was before zero-trust architecture), even at gunpoint. You can check your flight status, or look up a cafe nearby to eat, etc. But you have to go to a Google office in the destination city, identity yourself, and get the trusted bits restored on your corp machine. This, together with an OTP device, finally allowed you to reconnect to the internal network (and go check fresh memegen).
[−] tpetry 52d ago
I do understand why all these steps are required. And they are good. But how should zero-trust architecture solve that? You‘re still authenticated what the core problem is.
[−] nine_k 52d ago
Zero-trust architecture just can work without a VPN, unless the network is blocked. Otherwise everything should be similar.
[−] f1shy 52d ago
“Remove material under NDA” not format blank the computer.
[−] Lord_Zero 52d ago
Do you need to disable biometrics if you simply reboot? my Pixel 10 Pro XL wont let me in without pin after reboot. Biometrics wont work until that first unlock.
[−] spwa4 51d ago
The guidelines also say that if the border agents of China or Russia ask you point blank, to give them access. It is not worth risking your personal safety for your device. That includes your PIN and password, and in China and Russia's case, whether or not that's actually allowed by law.
[−] abc123abc123 52d ago
Ditch the phone. The liability, tracking and mental health problems created due to modern phones has made owning one unsustainable. Email works, at worst, voip providers exist. Do you need a map? Print one. Do you need directions? Ask someone. Does the restaurant only offer app or qr, ask someone, or go somewhere else.

I have never encountered a phone-related problem that could not be solved with:

1. A print out. 2. Asking someone. 3. Using your web browser on your computer. 4. Using some kind of voip if audio communication is needed.

Yes, it is not as convenient as the surveillance and privacy nightmares of today, but if your life is only about convenience, then send your money to the government, and let them just decide for you how much money you need, and you don't even have to think about that.

A minor inconvenience is a price well paid for freedom from surveillance and excellent mental health.

The ones who complain about inconvenience don't really care about privacy, democracy and freedom, so should not complain when these things are attacked.

[−] bdangubic 52d ago
You drive car or walk everywhere you go? Car is convenience, yes but it is the privacy nightmare (unless you gamble and drive without plates :) )
[−] lcnPylGDnU4H9OF 51d ago

> unless you gamble and drive without plates

New cars are being fitted with cell modems to ping cell towers.

[−] bdangubic 51d ago
Yea, driving a modern / newer car is just as bad privacy-wise as having a mobile phone. I mentioned plate readers as I was expecting "Don't drive new cars" given the "don't use mobile phone" comment :)
[−] thiht 51d ago
Insane take, you can’t expect anyone to agree with this.
[−] bens74 51d ago
I don't agree a phone free life is an insane idea at all. It is in fact extremely reasonable, rational, and admirable. The parent makes it sound easier than it is though. You might consider that part "insane".

I have tried really really hard to break the phone addiction too. Though so far without durable success, unfortunately. :-(

[−] JKCalhoun 51d ago
(Raises hand) Ummm…

Maybe it's because I went nearly 50 years with no cell phone?

It seems reasonable to shut the phone off—check it through with your luggage.

(One of my favorite travel memories was trying to ask people in Tokyo for directions to my hotel—I speak only English.)

[−] zouhair 52d ago
Don't go to America is the best alternative.
[−] Ekaros 52d ago
Only go to good parts. Like Mexico and South America in general.
[−] jeffrallen 52d ago
Canada's ok, but only in May and October. The rest of the year is ice and/or black fly season.
[−] ishouldstayaway 52d ago
In English, "America" means the USA specifically.

But you knew that already and decided to just post bait.

[−] calderarrow 52d ago
[−] shimman 52d ago
Seems too subjective. I don't think it'll take off.
[−] ishouldstayaway 51d ago
Hey look judging from how this thread evolved in the last several hours, at least it turned out that the bait worked and a bunch of people were dumb enough to take it?

ha ha

[−] smarf 52d ago
or, perhaps, they are wryly pushing back against the USA capturing a generic geographic term for themselves
[−] triceratops 52d ago
To be fair though, that horse bolted a couple of centuries ago. What other name would you call it by? There's another "united states" on the same continent. The country to the immediate south is formally known as the "United Mexican States".
[−] Brian_K_White 52d ago
But the whole hemisphere is not "Mexico". USA and Canada are not also "North Mexico". Their harmless little reminder is more correct than any of the attempted arguments against it.
[−] triceratops 52d ago
It was the first group of united states on the continent. North America was, relative to the land that became Mexico, thinly peopled. Unlike in Mexico there was no pre-colonial, indigenous empire that had ruled and named the land which eventually became the 13 colonies. So there wasn't necessarily a better alternative to put after "United States of" at the time. Do you know of one?
[−] nobody9999 51d ago

>Unlike in Mexico there was no pre-colonial, indigenous empire that had ruled and named the land which eventually became the 13 colonies.

Actually, there were multiple indigenous political entities both along the Eastern Seaboard (where we find those 13 colonies) as well as across what is now the US and Canada[0].

We just took their land and killed most of them, but they were still pretty organized -- with political groupings of various types.

[0] https://scholar.flatworldknowledge.com/books/32177/ourhistor...

[−] triceratops 51d ago
Where's the Tenochtitlan of the 13 colonies?

Of course colonists committed genocide against indigenous people everywhere they went. No one's denying that. I'm addressing precisely what you yourself said

> there were multiple indigenous political entities both along the Eastern Seaboard

They were fragmented and smaller than the Aztec empire. That doesn't make it right to take their land. It does explain why their names didn't apply to the entire land. Because none of them was so big and centralized. If you look at the geographical features of the Eastern seaboard - mountains, lakes, streams, rivers, cities and towns, even 2 states (Massachusetts, Connecticut) - native names abound.

The lands that became the US and Canada really did have fewer people living on them than the lands that became Mexico. [1] Again because Mexico had centralized states and large-scale agriculture capable of supporting large populations.

https://en.wikipedia.org/wiki/Population_history_of_the_Indi...

[−] spwa4 51d ago
What about all the non-western colonists?

What about Iran? Iran was conquered by muslims. So should we conquer it and kick muslims out because it wasn't ok to take that land? What about every muslim country? Muslims stole mecca from the Jews, as is extensively detailed in muslim history books. Should it be conquered and returned?

What about China? The kingdoms did most of the conquering of course, then "unification" took their land and then communists did ethnic cleansing until Han Chinese were in most places all that's left. Hell, a number of the people they cleansed aren't even gone yet. There are still Tibetans. There are plenty of original Hong Kong'ers still alive.

What about Russia? What about North Africa? What about ...

[−] nobody9999 51d ago

>They were fragmented and smaller than the Aztec empire.

So what? Portugal was smaller than the Aztec Empire too. As was the Netherlands. And England. Should we pooh pooh them as unimportant as well?

https://en.wikipedia.org/wiki/Cahokia

https://en.wikipedia.org/wiki/Iroquois

https://en.wikipedia.org/wiki/Salish_peoples

https://en.wikipedia.org/wiki/Cree

https://en.wikipedia.org/wiki/Ancestral_Puebloans

https://en.wikipedia.org/wiki/Algonquian_peoples

And many others.

Just because they had brown skin and often didn't engage in wholesale slaughter doesn't make them unimportant -- or not political entities.

[−] ciupicri 52d ago
If I'm not mistaking the name "United States of Mexico" appeared in 1824, whereas "United States of America" appeared earlier in 1787.
[−] gib444 51d ago
How about its real name, the USA? Crazy idea I know
[−] marssaxman 52d ago
The level of arrogance some western-hemisphere Spanish speakers have, trying to tell foreigners that the name they use for their own country in their own native language is wrong, demanding that they translate the Spanish name and use that instead, is so absurdly entitled that it's just... hilarious.
[−] guzfip 52d ago

> The level of arrogance some western-hemisphere Spanish speakers have

It’s almost exclusively Western Europeans doing this IME

[−] Brian_K_White 52d ago
It's so wierd to perceive that as arrogance. Actually "wierd" is being too nice.
[−] marssaxman 52d ago
In your world, then, is it normal to complain about other people's names, and expect them to change what they call themselves to better suit your preference?
[−] Brian_K_White 51d ago
Again, wierd. No one is doing that. But for some reason you decide that someone has done something to you, or done anything at all to anyone.
[−] nyantaro1 51d ago
Let them have it. 'America' is so loaded with horrible things that I don't really think the rest of the continent cares
[−] ishouldstayaway 51d ago
This is the point: in English, it is not a generic geographic term.

It is in Spanish, though, so I get where the confusion comes from (at least when that confusion is genuine and not just boring troll shit). In Spanish, "América" refers to what in English is "the Americas", because in English we use separate terms for North, South, and (sometimes) Central America.

It's not pushback. It's just dishonest ragebait bullshit.

[−] chb 51d ago
So was Trump being inclusive or exclusive when he renamed the Gulf of Mexico to the Gulf of America?
[−] gib444 51d ago
Times are a changing. We can change the English language on this matter too (or more accurately, it might end up changing).

It is something that needs correcting tbh. The USA does not own the Americas.

[−] mothballed 52d ago
I treat all items on an international trip as disposable. Been robbed by thieves, police (Mexico lol), and brutalized by US CBP enough to know it's not worth it to try and take anything across borders besides the shirt on your back. Anything carried is a liability for them to claim you filled some customs form wrong or to fake a drug dog hit on it.
[−] comrade1234 52d ago
"Immigration and Customs Enforcement have already started targeting travelers, with agents in plain clothes forcefully detaining a mother in front of her young daughter at San Francisco International Airport on Sunday after a tip from the Transportation Security Administration."

I don't think the tsa is at sfo. They use a private contractor for tsa functions. Is the quote made-up?

[−] g947o 52d ago
Airlines like Alaska Airlines make it very difficult to board a plane without a phone. It's still possible, but you need to prepare early and get your boarding pass printed at home, provided that you have a printer, apparently.
[−] charles_f 52d ago
It's an interesting state that you can force someone to unlock their phone with biometrics, but you can't force them to reveal a pin.

Anecdotally, I have been to the US a few times in the past year, and seen no change myself - where are you going and why? Thanks have a good trip. It was for short business trips, and I'm white with a number of documented entries/departures, so my experience might be very different from the next person though.

[−] righthand 52d ago
Burner phones for all! Defund, disband, destroy DHS, ICE, CBP, TSA.
[−] anotherevan 51d ago
"Unlock your phone."

"No, I don't have to."

Detained in a room for twelve hours.

"Okay, okay, here's my phone."

[−] chasil 52d ago
Apple devices allow biometrics to be disabled for unlocking the phone.

They are still active for accessing anything in the wallet, however.

[−] nequals30 52d ago
For Linux users, you could try disabling the desktop environment when going through the airport (or using termux-launcher on your phone).

It'd be fun to see how they'd handle a CLI. Might result in getting detained, though.

[−] seethishat 52d ago
Don't carry them with you. I'm old and I can tell you from experience... you can live life without holding a cellphone all the time. It's not as hard as you think.
[−] chasil 52d ago
[−] Sophira 52d ago
Additionally: If you have adb access turned on, turn it off before travelling!
[−] gos9 51d ago
iPhone: clicking power button five times in quick succession locks down to password access only.
[−] novaRom 52d ago
Another method many don't know is to have 2 synchronized phones while traveling, so if one is out of you, you still have full control.

Enable self-destruction mode caused by a special unlock PIN on each of them.

[−] htx80nerd 52d ago
[flagged]