Given that use this tactic will probably increase over time, phones and other portable computers should really support duress passwords.
The device should look like it unlocked properly, but really put everything in a type of read-only mode where writes and certain network transactions return success but don't actually do anything. Obviously, if network access (any type) is available, some sort of silent alarm can be raised at the same time.
I'm not saying it couldn't be done, but it would be very difficult to do in a way that wouldn't be noticed, especially once it became common knowledge.
No mugger is going to stick around longer than they have to. The need to get away quickly would dictate the design choices for such functionality. Maybe we'll get lucky and a few security developers at Apple/Google/etc. will read this discussion and get some good ideas to think about :).
I'm not affiliated with Cerberus in any way, just a happy customer.
[1] https://play.google.com/store/apps/details?id=com.lsdroid.ce...
If the thieves are somewhat savvy they will just hold down the power button until it turns off. Can't disable that in software.
You know what would be the better thing to do in that situation? Make damn sure shit works and they get what they're looking for. I'll worry about cancelling credit cards, etc. later.
For post-contact response, maybe even an IVR system you can call (from a public phone or something) and give an audio or DTMF password.
(I'd also like to get my phone droned after I move out of danger close radius, or the civilized city equivalent (police/bike gang/etc. show up at geolocation))
You could force the device to self-wipe data storage after X minutes or force specific apps to 'crash' on open (email, 2FA apps, banking, etc.) where even offline access could be detrimental.
When assaulted, just cooperate.
Murder rate is like 25x less, and even less common for strangers. (Though like half of stranger murders are during robbery, so yea, just do what you're told)
I was just joking about the dumb one shooting you, though I think any mugger would be pretty pissed if you rattle off a long gibberish password rather than "password1."
Passwords are the one exception to this. You can always confirm a password instantly from anywhere. But it doesn't need to be that way, you can have duress passwords. Truecrypt supports hidden archives, where entering the fake password unlocks a different encrypted folder with different files. The same thing thing is true on some "secure photo" apps for phones. For a phone, you would have a password that bricks the phone after a certain time limit, like 24 hours. But appears to work fine for the moment.
They could take a video.
Well, in most of the US, 43 out of 50 states, 5-10% of the civilian population could also be "well armed", and outside of (still) high crime areas like Chicago I think this sort of crime is much less common, and as noted by dvirsky the crime rates in general have been dropping for decades, although that's almost certainly more due to demographics than anything else (i.e. the population of young men).
My vision of a "sane society" is one where I don't necessarily bother with a sensor, although the data from one would certainly be neat, but one in which during a moment's inattention from the one with the gun, or when they stupidly ask me to empty my pockets, I draw my 1911 and give them some .45 ACP love instead of my can't lock in the first place feature phone etc. Assuming my situational awareness was so poor I hadn't started avoiding letting them get so close in the first place, a skill honed in the dozen years I lived as an unarmed pedestrian in the Boston area, yuck.
Before anyone goes off on an "oh, you're so deliciously macho" tangent, while you have to judge each incident by itself, statistically, resisting a criminal assault results in much better outcomes. If you live in Silicon Valley, well, it sucks to be you (even if this isn't your sort of thing, as it is nationwide for the 90-95% of the population who don't legally carry concealed, you don't benefit from herd immunity).
But I'm quite happy to carry one of the greatest legacies of John Moses Browning, and I marvel at how mature this technology is, where century old designs like the the Mauser 1898 rifle and the 1911 handgun are entirely competitive with the shiny new stuff, albeit maybe not quite as easy and inexpensive to manufacture or maintain.
I'd be willing to wager that simply passively handing over your wallet and phone, by a wide margin, results in better outcomes than trying to draw a weapon on a guy jacked up on adrenalin with his finger on the trigger pointed at you.
Anybody so stupid to risk a felony conviction on something so low-value as mugging someone, is probably stupid enough to pull the trigger if startled.
But I've read of accounts where citizens did things that struck us serious self-defense types as really stupid, but prevailed, and I don't judge them because I wasn't there and they were right, even if the risk struck us as too great.
Here, I'm imagining a scenario where my gun, which just happens to rest over my right back pocket where my wallet might be, wouldn't even visible to the criminals until they've got about 2-3 tenths of a second to respond, ideally where I'd also start moving laterally. And if it's night, I'd be wearing body armor (yeah, I'm paranoid :-), so even his being "stupid enough to pull the trigger" if he can manage to do so might not be the end of the world.
But it all comes down to your judgement of the situation, your luck, etc. ... and as many people have told me, you make your own luck as it were. Which circles back to what the statisticians discovered.
Honestly, one of the more astute things you mentioned was not getting into this situation in the first place, "Assuming my situational awareness was so poor I hadn't started avoiding letting them get so close in the first place," - I take full responsibility for getting mugged - it was after dark, on a deserted sidewalk - and my lack of situational awareness, directly led to the miscreants getting close enough to draw down on me and relieve me of my possessions.
I lived in a much rougher part of Oakland (17th and the lake, in 98-99) for 2 1/2 years, and never once came close to being on the receiving end of a crime, because I was always hyper aware of my environment. But, you get sloppy on the peninsula, and look what happens...
Thought personally, not living in the US, just the thought of being robbed is like science fiction to me. And it's not like I live in a great country, but things like this just almost never happen here. Gas stations and convenience stores get robbed sometimes, your apartment might be broken into, but someone on the street robbing you? I don't know a single person this had happened to.
With touch ID, my password is a 24 character ridiculous combination of special characters, numbers, and letters (only typed on power up) - so If I ever get mugged again (highly unlikely now that I'm living in Singapore) - at the very least, they'll get the iPhone unlocked with my touch ID, and if they ask me to enter my password - zero chance of them memorizing it without taking a lot of detailed notes - which, honestly, muggers usually aren't into.