Elektrine lite

← Feed

@evacide@hachyderm.io

Post #4069393

2026-07-24 18:09 UTC

This matters a lot because people are constantly asking me if they should set up a duress passcode in order to fool law enforcement. https://techcrunch.com/2026/07/24/us-accuses-american-of-allegedly-wiping-his-phone-using-a-duress-password-during-border-search/

Replies (15)

  • @millie@infosec.exchange 2026-07-24 18:15

    @evacide@hachyderm.io honestly skill issue on part of law enforcement for not 1. copying the encrypted content before attempting decrypt 2. using the built-in software for decryption this is like digital forensics 101

    Open ##4069395

  • @rrb@infosec.exchange 2026-07-24 18:16

    @evacide@hachyderm.io Don't most of these devices have wear leveling, which makes erase programs ineffective? https://ssd.eff.org/glossary/wear-leveling Or am I misinformed? Or do they just nuke the key?

    Open ##4069417

  • @tehfishman@ioc.exchange 2026-07-24 18:17

    @evacide@hachyderm.io Also rephrased as "Should I engage in an action that could easily be perceived as destruction of evidence?" to the shrieks of lawyers everywhere

    Open ##4069447

  • @grumpydad@infosec.exchange 2026-07-24 18:56

    @evacide@hachyderm.io Would it matter? A guilty system recognizes no innocents.

    Open ##4070083

  • @psh@infosec.exchange 2026-07-24 19:09

    @evacide@hachyderm.io I’ve been following this story for awhile and it brings a lot of questions in regards to what rights a citizen has when it comes to illegal seizures. Unfortunately things like this a more and more common even without an activist background. “I have not seen this before, though I’ve discussed the potential scenario with activists and journalists over the years,” said Sandvik. “I think this case serves as a reminder that authorities may argue you knowingly destroyed data, so it’s better to not have that data on you when you cross certain borders.” Agree with Sandvik on this. Say you’re a journalist or activist, I would imagine having an encrypted remote backup on a home server, with the ability to load that backup via a vpn, and a utilizing mostly blank phone when moving through processing locations like a border would be a smart move.

    Open ##4070354

  • @EdBruce@infosec.exchange 2026-07-24 19:28

    @evacide@hachyderm.io Mine is PIN protected and I would never give my PIN. What I wonder is I put the duress PIN on a piece of paper and put it inside of the protective shield. If they found it and entered it am I liable because I knew they might do that. But truthfully I've forgotten my duress PIN and would need to do this to remember it.

    Open ##4070725

  • @evacide@hachyderm.io (sorry I can't read the article without disabling ad blocker) I wonder if it would be the same to reboot/clear RAM instead of wipe the device. Same question for graphene's periodic reboot. If my device reboots every hour, have I destroyed evidence?

    Open ##4071574

  • @azonenberg@ioc.exchange 2026-07-24 20:16

    @evacide@hachyderm.io My general opinion on this sort of thing is, it's a tool for when you'd rather take the charge for destruction of evidence instead of the charge for whatever they'd find otherwise is.

    Open ##4071736

  • @Avitus@ioc.exchange 2026-07-24 20:18

    @evacide@hachyderm.io I do wonder if this would still be considered a crime under an administration that isn't actively trying to turn America into Russia/Nazi Germany.

    Open ##4071836

  • @KeithWM@mastodon.social 2026-07-24 19:19

    @evacide@hachyderm.io Has the US gone completely mad?

    Open ##4072030

  • @evacide@hachyderm.io A perfect example of „unlawful law“. This is a question I’m asking myself very often: What should we do when the law becomes obviously unlawful but it’s still lawfully because it’s the law?

    Open ##4073612

  • @dianea@lgbtqia.space 2026-07-24 22:28

    @evacide@hachyderm.io how difficult is it to have a password login screen that accepts multiple passwords, each leading to a different account. I could enter the password to a harmless account and the gestopo wouldn't be the wiser.

    Open ##4074318

  • @wall_e@ioc.exchange 2026-07-24 22:51

    @evacide@hachyderm.io the winning move is not to play. I.e. don't have any devices/data with you when you cross a US border. Even better, if at all possible, don't cross a US border. It's a Kafkaesque twilight zone where you're currently at the mercy of an openly fascist executive branch

    Open ##4074666

  • @nakal@mastodon.social 2026-07-24 18:25

    @evacide@hachyderm.io If you're a criminal, it's better to have a duress PIN. You are able to destroy evidence that is more incriminating than the erase action itself. If you're not a criminal, it's better to have a duress PIN, because the law enforcement is not allowed to search your phone without a warrant and you protect your valuable private data. Since being criminal (or not) is an invariant here, you should use a duress PIN.

    Open ##4081564

  • @e_nomem@hachyderm.io 2026-07-24 18:37

    @evacide@hachyderm.io I've always wondered if this would be considered destruction of evidence... I guess now we get to find out.

    Open ##4200943