News for hackers. Stuff that matters.
Re:New DHS policy on demands for passwords to travelers’ ele... by nicolas_t on Friday January 12, 2018 @03:10AM (#16131282)
I sometimes have to go to the US for business purposes but from now on will only do so with a wiped computer with just enough installed to look like a normal user's data.
Re:New DHS policy on demands for passwords to travelers’ ele... by lethargic_meat on Friday January 12, 2018 @03:19AM (#16131329)
Just have multi-boot and before crossing set the auto-boot timeout at 0, then change it later. If you want to be safe, you can also copy and delete the boot details for your actual partition.

I leave a dummy partition with Windows, office and other shortcuts and a wallpaper of a cat during my US visits. I also have both a facebook and a gmail subscribed to all the spam you can get.

Not because I have any criminal activities but my customers deserve to have their information protected.

If authorities want to check my private and work data, they can ask nicely through a judge.

Re:New DHS policy on demands for passwords to travelers’ ele... by shubb on Friday January 12, 2018 @06:11AM (#16132030)
>> If authorities want to check my private and work data, they can ask nicely through a judge.

I am confused,surely non-citizens have no rights or recourse to the law at an airport?

In any case, I am concerned that your approach would be defeated if they took an image of your hard drive and threw some basic tools at it. They probably have this as a kit.

Re:New DHS policy on demands for passwords to travelers’ ele... by zerkten on Friday January 12, 2018 @11:18AM (#16133971)
Non-citizens effectively have zero rights. Your rights increase as you go through different visa types and get to citizens. The appearance of actions like these can make you appear deceptive, or uncooperative at the very least. CBP can easily put you on a plane back after making things uncomfortable for a while.
Re:New DHS policy on demands for passwords to travelers’ ele... by blunte on Friday January 12, 2018 @10:14AM (#16133444)
And while you wait for a judge to decide, you sit in a room at the airport with no toilet, no windows, no communication to the outside world.
Re:New DHS policy on demands for passwords to travelers’ ele... by ATsch on Friday January 12, 2018 @04:51AM (#16131675)
If your computer can boot from it, I can recommend using an SD card with a bootable partiion.
Re:New DHS policy on demands for passwords to travelers’ ele... by netsharc on Friday January 12, 2018 @04:58AM (#16131703)
As the decoy, or as the main OS? I suppose disconnecting the SATA-cable would make the hdd/sdd invisible to the system...
Re:New DHS policy on demands for passwords to travelers’ ele... by cesarb on Friday January 12, 2018 @05:24AM (#16131843)
> I suppose disconnecting the SATA-cable would make the hdd/sdd invisible to the system...

On a laptop? All laptops I've seen have the hard disk plugged directly into the motherboard, with no cables in between. Having a SATA cable is more of a desktop thing.

Re:New DHS policy on demands for passwords to travelers’ ele... by xxs on Friday January 12, 2018 @07:07AM (#16132264)
Weird, I do have exactly the opposite experience, incl. a bay for a second SDD (on a gaming laptop/workstation one). Ability to replace an old HDD with SDD on a 6y old laptop... and then replace the optical drive with another HDD (just for the storage)

Perhaps nowadays it's the norm to have it all soldered in but I'd just not buy such.

Re:New DHS policy on demands for passwords to travelers’ ele... by zbentley on Friday January 12, 2018 @10:10AM (#16133409)
I think a minority of laptops have soldered-on HDs. More have them hard-attached now than a few years ago (when almost none did), and many recent laptops have "mSATA" connections, which is more like a RAM connection than a cable. You could achieve the same thing with an mSATA connection as you would with unplugging a cable by removing the mSATA drive/card, and applying a thin strip of something non-conductive over the pins, and plugging it back in. Just please don't use something adhesive; the residue after a few applications/removals can screw up connectivity when you want it to work.

That said, I'd imagine there's an economies-of-scale advantage to having soldered-on drives (to say nothing of the economic benefits of un-upgradability: sorry folks, but there aren't enough people to whom part-swap upgrades are important to sway the hardware industry at large on this issue, though a few small manufacturers/lines will probably target that market). As a result, I'd imagine that we'll see more and more of them in years to come, though I'd be happy to be wrong about that.

'course, I don't recommend bringing your data into a country you consider hostile regardless of whether you've set it up so a cursory search doesn't find it. If the country really is hostile to your interests, that won't stop them if they want your info.

Re:New DHS policy on demands for passwords to travelers’ ele... by rozenmd on Friday January 12, 2018 @06:40AM (#16132158)
On a macbook there's still a SATA ribbon cable between the HDD/SDD and the mainboard
Re:New DHS policy on demands for passwords to travelers’ ele... by zbentley on Friday January 12, 2018 @10:13AM (#16133436)
On much older MacBooks that is true. MacBooks since around 2015 have had mSATA "RAM-style" connectors, and I've heard that some more recent models have soldered-on drives, though I haven't seen this myself.
Re:New DHS policy on demands for passwords to travelers’ ele... by yorby on Friday January 12, 2018 @05:32AM (#16131872)
If they plug it in their system, wouldn't you be afraid to bring back some kind of malware? I'd try to bring no electronics when crossing the border...
Re:New DHS policy on demands for passwords to travelers’ ele... by MentallyRetired on Friday January 12, 2018 @03:17AM (#16131322)
wait, so you're actually a spy? What kind of user are you if not a normal one?
Re:New DHS policy on demands for passwords to travelers’ ele... by koonsolo on Friday January 12, 2018 @04:11AM (#16131518)
This works the other way around you know.

I knew some programmers who worked for a EU company that had a military contract.

When they traveled to US (talking around 2005 here), their entire harddisk was encrypted and they got a short education on how to handle certain suspicious situations.

US is known to use intelligence data any way they want, including economical gain. So if your laptop contains any confidential data of any big European company, it's already a good idea to not make that data available.

The whole Edward Snowden debate was only an issue because US was collecting data of their own citizens. Let's be honest, nobody cared who they were spying on abroad.

It's really sad to see how "friendly" nations treat each other like that.

So to answer your initial comment: The one who has the confidential information is not the spy. The spy is the one who wants to get access to it.

Re:New DHS policy on demands for passwords to travelers’ ele... by swiley on Friday January 12, 2018 @08:37AM (#16132666)
The US border sounds so much like the Chinese one! :(
Re:New DHS policy on demands for passwords to travelers’ ele... by saurik on Friday January 12, 2018 @03:20AM (#16131334)
The wiped laptop certainly doesn't look like that of a normal user without adding stuff.
Re:New DHS policy on demands for passwords to travelers’ ele... by easytiger on Friday January 12, 2018 @03:32AM (#16131381)
> normal user

The normal user browses the web and almost nothing else.

Re:New DHS policy on demands for passwords to travelers’ ele... by Kirth on Friday January 12, 2018 @05:58AM (#16131976)
It always amazes me what a "normal user" collects on their device when all they really do is use it as an internet machine.
Re:New DHS policy on demands for passwords to travelers’ ele... by saurik on Friday January 12, 2018 @09:07AM (#16132856)
... but this laptop hasn't even been browsing the web, and so it will have no history and no cache and no saved passwords for websites and wifi hotspots ...
Re:New DHS policy on demands for passwords to travelers’ ele... by nicolas_t on Sunday January 14, 2018 @01:04AM (#16143032)
That's actually a good point. Might be a good idea for a software there: something that generates fake browsing history for the different browsers.