People have been doing this since way back in the TrueCrypt days - IIRC you could configure it to run a whole fake version of Windows if you wanted without easily revealing your actual main volume.
Most hardware crypto wallets also have a "duress wallet" feature where you keep a low balance for the same reason.
Wiping is obviously extremely suspicious and asking for trouble
"Wiping is obviously extremely suspicious and asking for trouble"
It's sad this is the default view. It's his device, his data, his life on that phone. If he had wiped the phone before the interrogation it wouldn't be a problem. How long before? A second before? A week before? But wiping the data a minute later is suddenly asking for trouble.
I don't like it and I wish we had more privacy, but realistically there is no such "right".
If you're going to be in a situation where you're in a room with some goons backed by the full power of the state, it is what it is.
Maybe because I'm not American I don't have any hangups about seeing the US government this way, but my own government is no different - you can (and people have) get stopped at Heathrow, taken to a dimly lit backroom and given a going over for hours
I don't know that there is case law on this but I imagine that "prior to the admissibility inspection" is likely to be treated differently from "during the admissibility inspection" or "during administrative detention or secondary inspection" (or "in response to a request or question by a border agent"!).
Edit: a bigger picture question is the difference between things that may be legally punishable and things that may cause suspicion from CBP agents, which aren't the same thing at all.
it seems to me that if you give them a password to unlock the phone and when it unlocks it has been wiped that will cause problems whether it is the password that causes the wiping or not?
A US citizen has an almost unlimited right to enter the USA. The border search rule permits officials to search for things that are illegal to import. A blank phone is not illegal to import.
A non-citizen who arrives with a blank phone might be denied entry because it seems suspicious.
well OK, luckily my checking of media informs me no citizens have been stopped and held in custody by immigration without due process or any particular grounds, especially recently, so it all sounds good.
We noted in the border search guide that lying to the agents in response to their questions is potentially a crime in its own right (even if it's not done in order to hide anything illegal). We thought that this made hidden volumes quite tricky, particularly if one's intent was to pretend to comply with a question or request while actually not complying.
It's not possible to make a robust feature like that because of low-level architecture of SSDs. Implementing a detectable solution would give people a false sense of security.
Sure - but the point is, if you're instructed by the officer to enter a password so they can inspect your device, and you enter a fake password and show them a fake version of your data, that could easily be found later to constitute a lie and lead to serious legal trouble.
They can't compel you, no. However, they can ask you to do so, and if you enter a privacy password that shows them something other than your real device (which is what this thread was about), you can very likely be faced with charges of obstruction of justice or even perjury. The point was that it's better to simply refuse, and accept the consequences of that, rather than trying to use technical means to trick them or to wipe data.
Note that if you're not a citizen of the USA, refusing to comply with a request like this is very likely to have you sent back to your country and denied access to the USA forever. While they can't legally force you to comply, they can absolutely deny you entry for any reason like this, regardless of having a valid visa and everything else in order. This even applies to legal residents.
> you can very likely be faced with charges of obstruction of justice or even perjury.
If they can't compel you to enter a password (courts have ruled passwords are 'speech' and the government can't compel or constrain speech, absent some well-defined grounds for doing so. There IS law around spoliation of evidence but AFAIK this requires a judge issuing an order. Of course, suddenly taking actions you wouldn't otherwise have on learning you're under suspicion could be claimed by a prosecutor in court as circumstantial evidence of guilt but it's not a cause of action in the first place until you're notified by a court to preserve evidence. Can a prosecutor try to construct a theory that the alleged actions do amount to obstruction? They can try but it's a serious long shot. I think this is a case of this administration directing the justice department to bring yet another dubious, likely-to-lose case as an extremely aggressive way to make a point by trying to assert and establish rights they don't actually have. So far, their track record in such cases hasn't been good.
> Note that if you're not a citizen of the USA
Yes, everything is different in this context if you're not a U.S. citizen. The U.S. govt can deny entry to non-citizens essentially without justification. I think this sucks as it goes against long-held American ideals around presumption of innocence, consistent treatment under the law, standards of evidence and having cause, but it's not currently prohibited.
Lying to an officer during the course of an investigation, particularly an interrogation, is not protected free speech. The officers and even the courts can't compel you to produce a password. But they may ask for a password to inspect your device, and if you choose to say "yes, I will enter my password" and proceed to enter a different password that presents fabricated data to the officers, I don't think it's far-fetched to say that amounts to lying in the course of an investigation, which is either obstruction or perjury or some other charge (I'm not well versed on the legal terminology).
Note that I'm not talking about a situation where they have you in custody or are about to, but haven't (yet) removed your phone for whatever reason, and you quickly take some action to clear it. I'm talking about a situation where they are questioning you, and in the course of questioning, request that you unlock your phone for them to inspect, you agree to do so, and proceed to wipe the phone or enter a dummy password for a fake account while pretending that you are complying with the request.
It is this second situation that happened in the article - the man being charged was held in custody and repeatedly asked to unlock the phone or risk having it seized; the man finally agreed to unlock it and provided a passcode to the officers, but the passcode instead wiped the phone.
If you want to gamble on that, that's your prerogative. But if they suspect you did this, computer forensics techniques can easily reveal this, especially if the rest of the data on the device is recoverable to you as well.
Edit to add: beyond forensics, they can also simply ask you to enter the other password, to prove that the account you showed them first was the right one.
People have been doing this since way back in the TrueCrypt days - IIRC you could configure it to run a whole fake version of Windows if you wanted without easily revealing your actual main volume.
Most hardware crypto wallets also have a "duress wallet" feature where you keep a low balance for the same reason.
Wiping is obviously extremely suspicious and asking for trouble