News for hackers. Stuff that matters.
Re:Canada Border Services seizes lawyer's phone, laptop for ... by LeonM on Sunday May 05, 2019 @02:37PM (#19834231)
I have asked this question before, but never really got a satisfiable answer: why do governments (not just USA/canada) spend these resources to check data physically at a border?

It's not like you need to 'smuggle' any form of data physically.

I mean, any data considered to be dangerous (like terrorist attack plans, atomic bomb designs or political inside information) can be accessed across borders via the internet. You don't need to have those on any of your devices.

And even if you had the data on a laptop, how does border patrol even know what they are looking at?

Re:Canada Border Services seizes lawyer's phone, laptop for ... by Fogest on Sunday May 05, 2019 @03:27PM (#19834495)
There is actually a Canadian Border Patrol TV show you can watch, and they don't even try and hide that they do this. They very openly show when they check someones phone and laptop. I have seen it on the show, and they have shown them "catching" people. They'll usually use it to check if people are intending to stay and work in Canada, such as seeing in their texts or emails that they were arranging work and/or places to live.

They have shown this very thing on the show where they found on their device that they were making these arrangements. It seemed very invasive and disturbing. They got their password and were looking at their phone and laptop in a backroom. The traveller didn't even get to see what they are doing or anything.

I don't have anything to hide, but I would never feel comfortable with ANYONE having free reign over my unlocked devices, especially not a government border agent doing it behind closed doors.

Re:Canada Border Services seizes lawyer's phone, laptop for ... by nitemice on Sunday May 05, 2019 @09:37PM (#19836225)
Even if I agreed with customs officers rifling through my devices, I would only ever want them to have read-only access. Like, you'd hope they're not malicious, but can you really trust some in-a-hurry agent with little to no training in this area to not accidently wipe half your hard drive?
Re:Canada Border Services seizes lawyer's phone, laptop for ... by andrekandre on Sunday May 05, 2019 @04:16PM (#19834800)
> I don't have anything to hide

that’s not for you to decide (unfortunately)

Re:Canada Border Services seizes lawyer's phone, laptop for ... by sc11 on Sunday May 05, 2019 @02:50PM (#19834307)
It's often just security theatre meant to please the law & order voter base more than anything else. They might catch some minor criminals but as you said, if you really want to "move" data across a border, there are plenty of ways to do so without physically carrying a device.

For some goals it can actually be useful, though I'm not sure if this is done during regular border checks or just in the context of asylum requests or similar: Accessing location histories, picture metadata or social media profiles on your device can be a fairly easy way to check that you're not giving them false information about where you're coming from or where you've been. This can be done automatically, so the officer doesn't need to figure out themself what they're looking at.

Re:Canada Border Services seizes lawyer's phone, laptop for ... by bonestamp2 on Sunday May 05, 2019 @06:29PM (#19835486)
This might partially answer your question...

I had my laptop searched at the border once. It was my work laptop. They told me the same thing, if I didn't share the password they would confiscate my computer.

It felt wrong that they should be able to search my computer, but I also felt bullied because I was going to need my computer the next day if I wanted to work and I think most people, including my boss at the time, would not see a problem with the search, so I let them search.

All they did was open up Windows Explorer and do a search for *.jpg. Then she looked up at me and said, "What kind of images am I going to find on your computer today?"

I don't remember what I said, but basically it took about 30 minutes for Windows to display all the results. She looked through them all and then I was free to go. I got the impression that they were looking for child pornography, but I don't know that for sure.

Either way, it was a pretty innocuous search, but this was also about 10 years ago. From what I understand, they now pull all the files off your computer and index the contents. They likely have a list of keywords that it searches against immediately and then it's indexed for when they add more keywords later.

Re:Canada Border Services seizes lawyer's phone, laptop for ... by ddalex on Sunday May 05, 2019 @07:14PM (#19835684)
When I was working for $Big$Corp, I was explicitly instructed to 1) always shut down the devices with full-disk encryption 2) never give up passwords 3) surrender devices without opposition or bargaining (cooperate) and 4) call company lawyers as soon as possible

Never have faced any search, but interesting stance there.

Re:Canada Border Services seizes lawyer's phone, laptop for ... by SteveNuts on Sunday May 05, 2019 @07:22PM (#19835713)
>it was a pretty innocuous search

You and I disagree wholeheartedly there, that's an extremely invasive search.

Re:Canada Border Services seizes lawyer's phone, laptop for ... by throwawayjava on Sunday May 05, 2019 @09:49PM (#19836277)
In particular, a perfectly reasonable answer to the question "what am I going to find on this computer?" might be "Naked pictures of me/my spouse" if it's a non-work laptop.

It's extremely invasive for some random civil servant to execute an unexpected search on a device that most reasonable people assume is private.

Re:Canada Border Services seizes lawyer's phone, laptop for ... by bonestamp2 on Monday May 06, 2019 @03:06AM (#19837390)
As far as searching my work laptop, it was not harmful or offensive to me. It was strictly used for work purposes and there was truly nothing on the computer that they could do any harm with (to me or the company).

That said, under nearly any other context, I agree that it would be harmful and offensive.

Re:Canada Border Services seizes lawyer's phone, laptop for ... by majos on Sunday May 05, 2019 @08:10PM (#19835890)
Why do you think they did this kind of invasive search? It's very weird to me that border patrol would randomly search all the images on someone's computer. This doesn't even seem like an efficient way to catch criminals. Power trip?
Re:Canada Border Services seizes lawyer's phone, laptop for ... by bonestamp2 on Monday May 06, 2019 @03:10AM (#19837410)
No joke, I was sent to secondary search because I was holding a piece of cake in a go box from my lunch that I hadn't eaten and I didn't declare the piece of cake (technically, they are correct, I should have declared the slice of cake). Once you go to secondary search, they search all your stuff, including your computer. They didn't search the cake for some reason though.
Re:Canada Border Services seizes lawyer's phone, laptop for ... by 9HZZRfNlpR on Sunday May 05, 2019 @09:36PM (#19836221)
Maybe just "a randomized search". Sounds very inefficient.

I think they are just looking for crimes like drug mules, people coming to work with tourist visa etc. Everyone here talks about nuclear plans but I doubt.. probably bully too but against simple minded criminals it can work. Texts of arranging work or when is the package going to arrive etc.

Re:Canada Border Services seizes lawyer's phone, laptop for ... by majos on Sunday May 05, 2019 @10:17PM (#19836358)
Right, but parent comment said they just searched all images (or jpgs). Hard to think of any motivation beyond finding child pornography, no? But that doesn't seem like something you'd reasonably become suspicious of during a short interaction.
Re:Canada Border Services seizes lawyer's phone, laptop for ... by chillingeffect on Monday May 06, 2019 @09:59AM (#19839433)
>Power trip?

It saddens me that we think of federal governments as benign protectors of our rights. The States did not need and did not want a federal government. We feared they couldn't protect our interests. We had to be persuaded through the Bill of Rights to accept their "protection." The feds have some idealistic people within their organizations, but their stance is to utilize state-level resources for their own needs, such as international warfare wealth accumulation. This includes domination of individuals. We have only our states and the Bill of Rights to protects us from the feds.

Computers represent a very real threat to federal power. People could use them to rise up against federal governments and make their lives very uncomfortable, which is to say, much like our own. These dreams of small groups contacting one another and creating world peace beginning through networked communication were made explicit in the 90s and early 2000s. The maintain its dominion, international governments from around the world simply have to assert themselves in every aspect of our lives. With state protections, one of the key places feds can insert themselves is at borders, where reaching out to people from other nation-states happens.

Efficiency is for little people, like you and me. Federal governments print the paychecks for the border patrol, tax they money the pay them, then tax the people the border patrol buys all their worldly possessions. They care about efficiency less than google cares about disk space. I know I sound like a paranoid libertarian here, but I'm actually only a slightly-light-of-center person trying to bring a little reality and clarity to the situation. We are essentially pets.

Re:Canada Border Services seizes lawyer's phone, laptop for ... by kjdndisneinj on Monday May 06, 2019 @06:47PM (#19844717)
You've got some interesting points here, but it definitely reads more like conspiratorial thinking. What realistic difference is there between "The States" and the federal government? In the end you're still going to have a government enforcing these things, unless you depart radically from our current societal structure.

It sounds like you're just skeptical of a powerful centralized state, and it's coming out through the lens of historical American federation/republicanism. That isn't wrong, but it's as much a history of competing factions as it is an strong intellectual basis.

You're not the only one skeptical of a powerful, centralized state. Try reading Kropotkin or Luxemburg. You might find the ideas resonate with you. Those authors have a coherent ideological basis, and suggest paths to decentralized democracy that has been realized in various forms in recent history, but is radically different to the current American government.

Re:Canada Border Services seizes lawyer's phone, laptop for ... by chillingeffect on Wednesday May 08, 2019 @08:04AM (#19858020)
> What realistic difference is there between "The States" and the federal government?

It's huge! The power to drive international trade and warfare, for starters! Also, the ability to create laws that don't reflect people in your area/community.

Also wrt this thread, states don't (generally) enforce searches at their borders, because states aren't fighting for domination with nation-states. States are only trying to control their geographic area.

Thank you for the references, I'll check them out.

Re:Canada Border Services seizes lawyer's phone, laptop for ... by executesorder66 on Monday May 06, 2019 @05:18AM (#19837896)
So basically, if I ever travel to the US or Canada, I should wipe my device first and then have about 20000 copies of gotse.jpg (but each with a unique name) on the device to force the agent to look at each picture.
Re:Canada Border Services seizes lawyer's phone, laptop for ... by iamatworknow on Monday May 06, 2019 @10:07AM (#19839503)
This exact thing happened to my brother once. They took his laptop and did Windows Explorer searches for image extensions as well as the words "boy" and "girl", so your (and his) hunch that they were searching for child porn is probably correct. This was maybe 5 years ago.
Re:Canada Border Services seizes lawyer's phone, laptop for ... by jmull3n on Sunday May 05, 2019 @08:48PM (#19836057)
Did they look for any other file extensions or was that literally it?
Re:Canada Border Services seizes lawyer's phone, laptop for ... by bonestamp2 on Monday May 06, 2019 @03:02AM (#19837371)
That was literally it. I was standing there. They only searched for images. Again, this was about 10 years ago though. From what I understand, they now pull everything for future analysis.
Re:Canada Border Services seizes lawyer's phone, laptop for ... by kermitismyhero on Monday May 06, 2019 @09:07AM (#19839035)
Sounds like it might be fun to load one's devices with infinite zips labelled with tempting filenames, like "red light district itinerary.zip". https://research.swtch.com/zip
Re:Canada Border Services seizes lawyer's phone, laptop for ... by stjohnswarts on Sunday May 05, 2019 @02:44PM (#19834280)
It's basically be because the natural tendency of government is acquire and centralize as much power as possible. Now some forms of government take longer but without constant review and concern by citizens in a democracy it will gradually move towards a despotic regime. In some countries like China it has already happened because individual freedom isn't that valuable to the general citizenry, in the USA and Europe it is moving in that direction. Citizens need to become more active and vote for parties that advocate for more freedom rather than less.
Re:Canada Border Services seizes lawyer's phone, laptop for ... by yason on Sunday May 05, 2019 @05:18PM (#19835146)
I have been asking this question myself. To a technologically nerdy person like myself it makes absolutely no sense. There is no reason whatsoever to physically transfer any dangerous or delicate information across a border. Anyone actually with the possession of such information would obviously never bring any of it near the border control.

However, I think the answer is that I'm way too optimistic. There must be lots of people who voluntarily do carry incriminating information with them across borders because they either don't care or they're just stupid. Others have mentioned emails or text about a job when you're not travelling with a work visa.

If this is true then I think border control is also just being merely pragmatic.

With a bit of questioning and informal profiling they can spot people whose story doesn't ring true: next they just need a way to figure out what's false with that one particular person. A success rate of 38% for electronics searches was quoted: that is very high and certainly makes mobile/laptop search to the top of the list of what to look at when you bring the traveller in and start investigating. I think they'd do it even for a 10% success rate: checking a few emails and messages is fast and apparently a low-hanging fruit.

That's pretty much what I would do if my job was to figure out what's wrong with a person's story.

It's akin to starting debugging by enabling asserts and running the binary in a debugger to catch any obvious issues live with a stacktrace, or something similar. Won't help with most of the trickier bugs but sometimes it points right at the culprit and it's a cheap test to run.

They wouldn't find the folder containing your blueprints for that bomb but they'll see you'll be meeting some people next week in a place that is very, very far from where you said you'd be vacationing.

Re:Canada Border Services seizes lawyer's phone, laptop for ... by Nasrudith on Sunday May 05, 2019 @07:55PM (#19835834)
I would guess part of the reason is because they aren't rational - they are upset that things changed and interfered with their snooping even though it has been irrelevant since radio and code books have existed. If I say "Aunt Bertha had a baby." without context you have no idea if I am being literal or signaling something sinister.

A far harsher and less charitable theory is that border control is where paranoids, xenophobes, and authoritarians accumulate and the point is control and punishing "the other" instead of actual effectiveness.

Re:Canada Border Services seizes lawyer's phone, laptop for ... by temac on Sunday May 05, 2019 @02:57PM (#19834345)
They probably just want to take advantage of old laws and/or not precise enough that allows them to search everything (according to their interpretation, including virtual things) on anybody -- without even any probable cause.

Most government can't do that (in theory...) when you are a citizen or maybe even just a resident, except when you cross the border. So if they want to watch you politically, they do that (at least) at the border.

Re:Canada Border Services seizes lawyer's phone, laptop for ... by mattnewton on Sunday May 05, 2019 @05:14PM (#19835123)
The 38% true positive rate makes me think that either border customs violations are incredibly broad and common, or there is some kind of parallel construction happening here where they have a good idea of what they hope to find when they seize these devices from extralegal sources.

Edit: given the source, the 38% could also be inflated (perhaps by not counting certain false positives) since it comes from the department looking to justify their work.

Re:Canada Border Services seizes lawyer's phone, laptop for ... by docker_up on Monday May 06, 2019 @12:42AM (#19836927)
Because things like SMS history and call history are far more valuable. They can download your entire SMS, call and contacts list, get the text from that, and then create a social graph based on who you know and who you are in contact with. Then it becomes very easy to trace people and who they are affiliated with. Plus going through SMS history is a great way to find reasons to throw someone in jail. My friend coming from Canada to the US was denied entry for 10 years even though she lived in the US most of her life because of jokes she had in her texts about marrying her ex-boyfriend for a green card. It's very real and it happens.
Re:Canada Border Services seizes lawyer's phone, laptop for ... by astura on Sunday May 05, 2019 @05:00PM (#19835030)
If you arrive at the US border and you say you're coming into the country for a short vacation and your text messages/email is full of conversations about employment in Seattle and your browser history is full of apartments for rent in Seattle, then they use that information to deny your entry into the country. It's mostly looking for "story checks out" kinda stuff like that.

There's TV shows that follow border agents for various countries during their day-to-day work.

Re:Canada Border Services seizes lawyer's phone, laptop for ... by skywhopper on Sunday May 05, 2019 @03:47PM (#19834612)
I was coming here to ask this exact question. There's no reason it makes sense to search electronic records at a border crossing. As you point out, the point of the search is to control customs and ensure there's no smuggling going on. But electronic records are not smuggled physically. There is zero reason to do so.

So the actual reason customs agencies perform these searches is that they are allowed to do so because of the way the laws are written and precedent is set.

Re:Canada Border Services seizes lawyer's phone, laptop for ... by fauigerzigerk on Sunday May 05, 2019 @05:33PM (#19835220)
>It's not like you need to 'smuggle' any form of data physically.

The data may be a by-product of using the device. I suspect they are primarly looking for communications data that is bound to be on every device that is actively used to communicate.

The more end-to-end encryption is used the more interesting the ends become.

>And even if you had the data on a laptop, how does border patrol even know what they are looking at?

Maybe they just copy everything for later analysis in case communications data hints at this being a person of interest.

Re:Canada Border Services seizes lawyer's phone, laptop for ... by jason0597 on Sunday May 05, 2019 @05:48PM (#19835305)
>The more end-to-end encryption is used the more interesting the ends become.

That is such a great line that encompasses about why more and more the ends of the end-to-end encryption are being attacked.

Re:Canada Border Services seizes lawyer's phone, laptop for ... by admax88q on Sunday May 05, 2019 @05:36PM (#19835232)
> It's not like you need to 'smuggle' any form of data physically.

Because most people don't have the technical know how, or desire to spend the effort to ensure that the data they _are_ bringing across the border is safe to disclose.

Even elsewhere in the comments here is a long debate about the "safe" way to deliver data across borders, some of which are actually terrible ideas.

Yes, theoretically, people could avoid bringing any sensitive data physically across the border, but most do anyways and I bet you do too.

Re:Canada Border Services seizes lawyer's phone, laptop for ... by jason0597 on Sunday May 05, 2019 @05:44PM (#19835283)
>some of which are actually terrible ideas

Which ones?

Re:Canada Border Services seizes lawyer's phone, laptop for ... by michaelt on Monday May 06, 2019 @09:20AM (#19839120)
Assuming the goal is "Get through security without losing your laptop or your data" I would say the following are terrible ideas:

"Prank them with an undecryptable random file" https://news.ycombinator.com/item?id=19834934 and "prank them with 20,000 goatse images" https://news.ycombinator.com/item?id=19837896 as they can get you back by seizing your electronics. Of course, those sound like jokes not serious suggestions.

"Have it remotely locked by an administrator" https://news.ycombinator.com/item?id=19835097 as they won't understand that technical mumbo-jumbo and will just seize the laptop.

"Have a hidden dual-boot system" https://news.ycombinator.com/item?id=19836135 as if they take a disk image and spot it, they'll be particularly suspicious of you.

Some posters also think "Send your encrypted laptop by mail" https://news.ycombinator.com/item?id=19835019 is not good advice.

Re:Canada Border Services seizes lawyer's phone, laptop for ... by dontbenebby on Sunday May 05, 2019 @03:16PM (#19834438)
Because they don't have enough evidence for a warrant and it's an easy way to get data
Re:Canada Border Services seizes lawyer's phone, laptop for ... by gnopgnip on Sunday May 05, 2019 @05:46PM (#19835295)
Canada is successful 38% of the time when checking electronics. Common scenarios are seeing text messages showing someone has accepted a new job and will be working while on a visa waiver/tourist stay, or planning to get married while on a work visa.
Re:Canada Border Services seizes lawyer's phone, laptop for ... by jpatokal on Sunday May 05, 2019 @05:54PM (#19835324)
However, in this case, they're checking the electronics of a Canadian citizen who has every right to be in the country.
Re:Canada Border Services seizes lawyer's phone, laptop for ... by ddalex on Sunday May 05, 2019 @07:16PM (#19835691)
But they don't stop people coming into the country or seizing their property. They are temporarily withholding the devices and copy the data. That's why you use full disk encryption - is they want to copy and store pseudo random data, let them.
Re:Canada Border Services seizes lawyer's phone, laptop for ... by saagarjha on Sunday May 05, 2019 @02:42PM (#19834266)
I think the goal is to get people who have incriminating evidence on their phone, however unlikely that might be for sensitive information.
Re:Canada Border Services seizes lawyer's phone, laptop for ... by mbesto on Monday May 06, 2019 @09:39AM (#19839262)
1) Security theater

2) The people who make these decisions (politicians) don't really understand how any of this works (aka luddites)