Concern over US effort to prosecute Sam Tunick, accused by authorities of wiping his phone using GrapheneOS
Dammit! I have to go in and out of the us and I use GrapheneOS!
Not even because of some heavy privacy from the government. I just want to be able to use F-Droid and my own apps and sandbox Google.
Why does everything nice have to get tied into bullshit like this?
Government is so removed from doing anything by and for the people that it’s just sickening. Speaking to the choir I know.
Don’t put in a duress code that wipes the device and you’ll be fine. I generally agree with you tho as I’m on GOS too.
What is cop city? Did I miss a day of fascism news?
It’s the area by Atlanta the they’re trying to build a huge like 500 acre cop training and detention facility. It was nick named cop city
And demolishing an old growth forest to do it.
Meanwhile, if they seized his phone and tried to unlock it without a warrant signed by a judge, that is a violation of his rights as per the fourth amendment of the Constitution of the United States. However, in the US presently, such violations are routine by law enforcement.
Some agencies insist suspects do not have access to those rights if certain conditions apply, such as being within one hundred miles of a US border (such as a coast), or being on a terror watchlist.
Some agencies insist suspects do not have access to those rights if certain conditions apply, such as being within one hundred miles of a US border (such as a coast),
It seems kinda nuanced tho. From various sources, the rules look like this. Ofc sometimes the rules may not be followed, that’s a separate issue. This is just the rules CBP has,
-
CBP agents can, with no cause, perform a “basic search”. That means looking through photos, text messages, call logs, and emails. But not using tools or forensic methods.
-
CBP CANNOT compel you to unlock the device for them or produce a pw. They CAN confescate the device if you don’t, tho.
-
CBP agents CANNOT perform a forensic search without reasonable suspicion and a signoff from a supervisor. A forensic search is one that uses external tools, not just the agent eyeballing your photos and messages after you unlock it for them.
-
CBP agents CAN perform a forsensic search with reasonable suspicion, and a supervisor signoff.
-
CBP CANNOT access cloud data from your device. Only data on the device is in bounds.
-
CBP MUST follow a special protocol if the owner asserts certain privileges, such as attorney client priviledge, or protected medical data.
This leaves travelers in a position where they CAN assert their 4A rights when it comes to data on the device. But it comes at a price. It may lead to the confescation of the device. That is coersive ofc, and many ppl won’t want to. So in practice, many ppl will cooperate and unlock the dev for the agent. But if you really want to push back, you can, and they have to let you into the country still if you are a citizen.
-
Isn’t that like a third of USA area? And probably half its residents?
edit: it’s not quite so thick, but actually more than half its residents:
I think airports count too.
…Federal authorities had put him on a terrorism watchlist because of his alleged association with the movement against Cop City.
Terrorism watch lists, no fly lists and government lists of cults and sects should not be legal in the US, as they violate the right to due process. Often there’s no reasonable way to challenge having your name on a list. It’s put there arbitrarily by a law enforcement officer without any oversight or process, meaning your name can be added again without restriction. And being on those lists often affects the civil rights to which you have access.
But then, the new regime is trying to strip ordinary citizens of their rights until we are all bonded serfs again.
I smell the “all Linux users are hackers” argument approaching:
If you don’t use an OS with mandatory ID you’re a terrorist
We are. And that’s completely legal
It is the necessary precondition to the “anyone with greater than x FLOPS in their own home is a terrorist” argument.
Who would have more than 1 flop at home? Hackers and Communists obviously
Free publicity for GrapheneOS.
federal authorities had put him on a terrorism watchlist because of his alleged association with the movement against Cop City.
Murica, land of the free…
Murica, land of the free…
Home of the…
…largest prison population on Earth, predominantly made up of African Americans and Hispanics who carry out labour essentially for free. (< Thats what they mean by the “free” part.)
The headline is misleading. They’re not prosecuting him for using GrapheneOS; they’re prosecuting him for using a duress code to erase data when they wanted to search it.
That’s also bad, but it’s a different set of facts. If he had simply refused to provide access, they would have seized his phone, but wouldn’t have this particular creative charge to prosecute.
In my opinion a duress code should wipe the phone invisibly. So the cops shouldn’t even know it wiped the real data off the phone. Like if you type a duress code it should open the phone with an alt account on a different data partition and hide the partition of the other account and delete it in the background and then zero out the storage drive of that partition so they can’t retrieve the data with forensic tools. You use one account for normal everyday stuff. And the other account for shit the fascists will hang you for.
A phone that is empty when they unlock it is sus as fuck.
The way profiles work right now makes a decoy profile not work properly. GrapheneOS developers don’t add features that can be defeated by basic training.
Last I heard, the way the developers want to do it is add an early boot passphrase and then a decoy setup would be possible without leaving a way for attackers to be able to know for sure that a decoy feature was used.
Submit a PR
Carry a second phone.
Do all your non-sus stuff on one phone, do all your sus stuff on the other phone.
You’re going to sell your old phone and start using this one. You just hadn’t gotten around to it yet.
As much as I don’t trust Samsung, they have an encrypted profile and you can put all of your social media over there and just wipe knox if you need it, having empty knox on Samsung was probably the default.
Is shutting down your phone considered tampering with evidence? It wipes the key from memory
What about lockdown mode?
This is a slippery slope
If the government is mad enough at you, they might go to court to find out. The government seems to be pretty mad at the people protesting “cop city”.
Yes. On that node it’s important to know that in many countries you can refuse to give up your password but if you erase the data it’s seen as destruction of evidence.
“We have no way of knowing what was on the device but we KNOW it was evidence damn it!”
using a duress code to erase data
Just for my information, is that possible on androids without grapheneOS?
I do not believe that it is
Yes there are apps called durress and sentry and wasted amongst others. But eventually it become built in the graphene operating system by default. No different than find my device delete or other methods. It’s just any data deletion is a law breaking charge.
Yeah I know there’s apps for it but I don’t think base android has it.
Tunick’s federal public defenders,
TBH I hope he can get more than public defenders. They work hard but they are often over worked and under resourced. Plus not being specialists in this. Maybe the EFF will offer specialist help. EFF is already aware of his case. Hence why anyone who is able to, should donate to the EFF. So they can employ high powered lawyers.
Additionally, the agents produced no warrant and did not read Tunick his rights.
NAL, but I think the gov can’t have it both ways. IF they did not produce a warrant or Mirandize him, THEN they cannot come at him for wiping his own phone. The gov might have a case if they had a warrant and he knowingly wiped it. But that’s not what allegedly happened here. No warrant = still 100% his device to do what he wants.
Aside from his case, courts in the US are all over the place, on whether you can be compelled to unlock a device if there IS a warrant. More often than not, they have ruled you CAN’T be compelled to produce a passcode from your memory. But in some cases, they have ruled the opposite. It’s super chaotic, and prob needs a SCOTUS ruling.
IANAL too, but 4th amendment protections are different at borders, and this was at an international airport. The duress code is an interesting wrinkle, like what if he told them the code and the officers entered it into the phone, did the officer technically erase evidence then? I think Apple has some similar setting to wipe the iPhone after 10 failed attempts or something like that, so surprised this hasn’t come up before to setup precedence
Yah, lots of interesting things here. I agree, seems like it’s long past the point where this needs to get sorted out.
I think in legal cases with a warrant and so on, the police make a forensic image of the device, and will not just try to unlock it like happend here. They entered the code here without a safe image, b/c there was no court case, no warrant, just the border search.
Here’s what the EFF has to say about border searches. They agree with us, it’s past time to get a solid legal framework. They talk about the 4A border search exception a little.
Mostly I’ve heard that they can take your device, but they can’t stop a US citizen from entering the country, and they can’t compel a pw from you. However, for most ppl, that’s already a LOT of duress, b/c losing a phone with your whole life on it, is a huge blow.
It’s past time to get a solid legal framework.
Perhaps the suit over Max Blumenthal’s recent experience will set some precedence. ADC sues DHS Secretary Mullin over illegal CBP seizure of Max Blumenthal’s devices
Edit to add: Perhaps not: DHS has returned his devices, probably because they did’t want this to go to court, probably because they know their legal position is weak.
Interesting. Thanks for the link! I didn’t hear about that one before.
Seizing a journalist’s phones provides the government access to private sources and years of protected newsgathering. Allowing political pressure to determine whose protected electronic devices the government may search would pose a profound threat to the free press and the Constitution.
Indeed.
this is going to play out like the others that have used encryption on their computers; with them in jail for years on end for contempt of court.
Wouldn’t it be great to see contempt of court charges for the wealthy and powerful, instead of just a random citizen erasing his phone?
That might be accurate in some places, but it VERY misleading for the US in particular.
In the US, the courts are currently divided on whether encryption has 5A protection. But more cases than not, have ruled they DO enjoy 5A protection against self incrimination. For example, US v. John Doe, 2012. VA vs David Baust, 2014. SEC vs Bonan Huang, 2015. US vs Mitchell, 2017. There are lots of other individual cases, where courts ruled a defendant does NOT have to unlock an encrypted device. The warrant gives the gov the right to the device, but the defendant did not have to help them access it.
One prob with compelling a pw, is it’s impossible to know if the suspect is refusing, or legit forgot. Esp when there is a long time interval. Ex, Voigt and Victor, it was 10 months before the gov requested the pw, and
A judge declined to hold Hencha Voigt in contempt of court after she gave incorrect pass codes to police investigating a ‘sextortion’ case.
There have been cases that went the other way, and a suspect was held in contempt for failing to produce a pw. Hence why it is a chaotic legal situation, until a higher court sorts it out. But your odds are pretty good, at the mo, in the USA.
It is likely, SCOTUS will eventually rule that just like a GPS track enjoys 5A protection, so does the device contents. Not certain, ofc! But that would align with recent court rulings, ex, Chatrie v. United States.
