GrapheneOS duress PIN could land a man in prison
https://www.androidauthority.com/grapheneos-duress-pin-us-prosecution-3691271/Open linkView original on lemmy.todaySyndicated from the fediverse. Read and engage on the original instance.
View original on lemmy.todayhttps://www.androidauthority.com/grapheneos-duress-pin-us-prosecution-3691271/Open linkView original on lemmy.today
180 replies
I'm half-expecting for it to turn out that he was being wholly compliant, and he's being accused of destruction of evidence because they were looking for something that never existed to begin with.
From reading up on the laws and if what this article says is true, even if they unlocked his phone and found evidence of crimes on it, gods case would be kicked to the curb as it was all an illegal search and correct procedures weren’t followed.
Border guards do not need a search warrant to search you and your property at a crossing or point of entry. The search was perfectly legal.
"At a crossing" means with 100 miles of any border or port of entry. Which is about 67% of the country. It is complete bullshit of a policy.
I'm not an expert, but I don't believe that applies to airport points of entry. Regardless, if you're going to something as suspicious as wiping your phone while at a point of entry, consulting a lawyer beforehand is just a reasonable thing to do.
You may think some laws are bullshit, (ie: sovereign citizens) but you are still governed by those laws.
All I am saying is be informed.
Write the duress PIN on a piece of paper in your wallet. Someone searching your phone is probably also searching your wallet and may try the PIN.
Genius. Flips the script. In the process of conducting an illegal search, you deleted my phone causing considerable financial and emotional damage. Lawsuit time.
It probably won't work, at least (US)domestically. The requirement for obtaining a warrant before searching a phone is part of training because there is a clear Supreme Court ruling to that effect.
That being said, what the law says and what some random asshole does during a stop are not always the same thing.
They will 100% tell you they don't need a warrant if it's during any kind of traffic stop or border crossing.
This was a point of entry. No search warrant required.
Feds following the law? Did you miss the last decade?
Their way around it is they say that the border crossing technically isn't 100% normal US territory and therefore some constitutional rights are suspended under the concept of "sovereign self-protection". You could then say any law in the US could be used to justify this concept, in fact it was used to forcibly intern thousands of Japanese and Japanese-Americans during ww2.
He was targeted for purely political reasons, the cop-city environmental protest in Atlanta GA, and I'm wondering why the border officials were even aware of them. Is there some sort of "we don't like what you think" list run by the gov?
His device was threatened with seizure even though he posed no threat, no visible threat or spoken one, no suspicion of a crime, and they had no idea what the contents were. His 5th Amendment rights were violated by the threat to seize it. They want to establish a precedent, that the very existence of a possibility of criminal contents, regardless of any reason to suspect any, is sufficient for search and seizure. Based on this a little kid deleting the contents of their ipad would be a crime.
You think all these data centers are just for making bad code and creepy videos?
If the duress pin makes obvious it's the duress pin then it's not really doing its job. It should instead open a profile with not much in it while erasing the other profile and files in the background.
They asked to unlock his phone, he entered the wipe instead personal pin, and the wipe starts, with no possible reversal.
I mean yeah they discover it when he hands them the phone and it shows something other than an unlocked screen... But he is still in detention? Making a fake homescreen will fool them for like 30 secs tops until they open literally any app and sees it's either completely empty or that it doesn't work.
What would that solve? It just drags out the procedure
Empty apps or no apps aren't necessarily a sign of guilt, but they will look at you like you are because its not normal.
Companies often have travel laptops which are a clean install and no private corporate info exposed.
My understanding is you can't actually be forced (legally) to give up your phone's PIN or password as part of a police search, because it violates the 5th amendment against self-incrimination, even at the border. Now will they still find a way to fuck up your day if you refuse to unlock your phone, sure, but I feel like saying "I have a right under the 5th Amendment to not reveal my password" is going to be a lot easier to defend than "I intentionally wiped/locked/bricked my phone when you asked to look through it."
Depends
Most phones can be accessed by forensic software. The more secure phones are protected as long as they've just been restarted but before they're unlocked for the first time.
Some phones, like an up-to-date GrapheneOS on a supported Pixel, may resist forensic imaging after first unlocking but the information is in memory so there could potentially be zero days or other exotic methods of obtaining the data.
A duress wipe lets you know 100% that the data is not accessible.
Back up and wipe your phone before you cross the border. That way if they want to look at it, feel free to hand it to them. When you get back home, restore the backup.
Also consider getting a throwaway phone if they try to keep it.
What law did he break? Vs the warrantless search that is breaking the law. If only the supreme court didn't give them a pass.
Search without a warrant is valid at the border.
Or within 100 miles of it. Including all international airports. That just soh appens to be like 80% of the population or something.
It does not include airports. People need to stop repeating that
https://www.aclu.org/know-your-rights/border-zone
So I've learned :(
Without a warrant, it's literally his phone to do with it what he pleases. Baffled that that's not the end of the conversation.
Assuming we lived in a rational world with a fair and impartial justice system, and not one that exists to funnel money from the working class into the Epstein class and kill or imprison everyone that makes that less easy.
https://www.cbp.gov/travel/cbp-search-authority/border-search-electronic-devices
You'll be surprised by what you don't know.
well they have the "border search exception" so at the border, no, they generally do not need a warrant for "routine searches" of electronic devices. Fucked up, but that is the law on the books and US courts have virtually always upheld it when it comes up.
Oh, because they are outside US borders they claim not to need a warrant, but that doesn't stop them using US law to prosecute him though.
That's like assuming unicorns will protect all that is good and sugar is effective weight loss
Well yeah. Hence the second half of that sentence.
I think the supreme court has said they can search phones without warrants at the border and points of entry, so airports.
You can't be compelled to give them your password, but you can be compelled to use your biometric ID. Clear as mud.
What's a warrant?
A judge issues a warrant when there is an active criminal investigation. If there's no investigation, no warrant.
Oh, that's not how it works in the united States. Is this some commonwealth legal thing?
It is how it works inside the united states. It's just they claim that because he was on the flight side of the airport, he wasn't inside the US.
Thanks but I live here and it's not basically ever.
Cops either use a pretense tools like a drug dog to establish probable cause for the search they want or do parallel construction after they've already built the general structure of a case, usually tracing things to a valid cause for search, usually via coached informant.
Or its ice and they can just do whatever they want.
You're living in a fantasy world and your delusional ignorance is real danger is worrying. Please never approach or speak to me in person.
Did you stop reading at that point?
That's not how it works. I'm not sure that's how it's ever worked. You're living in a fantasy. Warrants are not a meaningfully real thing.
The headline is wrong.
There, fixed.
GrapheneOS should update the duress passcode to load a dummy profile like Only Key’s Plausible Deniability Feature.
Loading any profile allows the operating system access to root privileges, and opens potential for user privilege escalation.
The profiles are independently encrypted with a key derived from the user's profile PIN. If the other profiles are not logged in then their keys are not in RAM (and they get zeroed beforehand so they can't be read out of unallocated memory).
Even if the bad guys get root via a LPE in a dummy account there are no keys to find and the profiles' storage are not mounted.
You couldn't trust the device after that however, who knows what kind of persistent spyware they could have installed.
Then it should delete the data while loading a dummy profile
That would be an interesting proposition... under duress load profile x and delete all other profiles, apps, settings and keys.
Or maybe a lighter version of the duress pin that just loads the fake profile (or alternate profile) but leaves the other(s) intact.
If you're just handing your phone over for a border pig to swipe through before waving you through that might be adequate.
It depends on whether you believe forensics can recover the data when handed over. So make it a setting
Yeah I was thinking of this as a half measure. But less secure than just wiping
This is fucking stupid. If I delete something on my phone while I'm on vacation am I going to prison because the border patrol might have wanted to look at it?
That's not really how the law works. You're not making a comparable analogy. You sitting at home or in a hotel room is legally not remotely the same as when you're being actively searched by a federal agent.
This is more like if the a police officer is about to do a pat-down search of someone, and they reach into their pocket, grab something, and rapidly swallow it.
You can destroy your property in normal circumstances whenever you please. If you delete a file in the privacy of your own home, odds are you're not doing so for the purposes of evading law enforcement. However, if you do it literally seconds before law enforcement is about to get a hold of it, it's pretty unambiguous that you're trying to destroy evidence.
That's the crucial difference here legally. Plausible deniability does not exist when you're destroying something because a police search is imminent.
Or maybe you just don't want some cop to see your dick pics. If they had anything on this dude they wouldn't have needed to go through his phone.
I am explaining how the law works and the assumptions behind it. The law assumes that if you were embarrassed about your dick pics, that you would delete those before the officer is right about to search you.
The laws assumptions are bullshit.
What color are you and how far left are your politics?
Should have been born a child fucking billionaire if you don’t want to be sentenced to prison for 30 years.
I always forget that "choose better parents" one weird trick. ;-)
It's like pulling yourself up by the bootstraps. So obvious. Just because it is impossible to do is no excuse.
It’s bullshit but with the current laws. Back up your phone before you head home wipe it before going through border control, and restore your backup when you get home.
That's what I do but evidently that pisses them off
Their mood isn't your responsibility. Carrying a blank phone is perfectly legal.
Nah, they just lube up the rubber gloves and fist you, checking in case there's a micro SD stashed up there. You should still make your flight if you relax.
And thats why you dont travel to countries with ropey regimes
We don’t need hyperbole here …. If authorities have a legal reason to search and you interfere with that, destruction of evidence is a crime. Delete all you want …. Right up until authorities claim the legal reason to search. Usually that takes a warrant: investigators must convince a judge there is a good reason
This also includes “when entering the country”. It always has. There’s nothing new here. There are so many things the current administration does to violate rights and due process, but this isn’t one of them.
The slippery slope here is “or within 100 miles”, but that wasn’t a factor here either
Have to disagree with that one. Simply entering a country is not justification for searching someones phone. I don't care what the law says. People have a right to privacy.
Not since 2001 they don’t.
They do, just because the government says otherwise doesn't make it true.
Yes, it does. Thats what governance means.
I’m not saying I agree with it, just that it’s always been so
You literally said they are not violating rights by doing this.
He’s saying that right was taken away by George W Bush.
Governments cannot take rights away. They can only infringe upon them. They are rights. Not privileges.
Then clearly you’re talking about deontological rights and they’re talking about legal rights and both wasting your breath
as far as I understand, they were not there to serve a warrant. he was crossing a border and the feds are claiming that the 4th amendment doesn't apply because he hadn't yet crossed into America.
border patrol was essentially using a loophole to preemptively collect potential evidence (they'll figure out what to charge him with after they see his phone contents). he's a political activist against a cop city, they were obviously trying to do him dirty.
they were not serving a search warrant. they were abusing what should be an illegal search at the border in order to silence those who speak out against govt overreach.
So the important takeaway is to delete your phone before customs. Presumably you have an encrypted backup you can restore without too much effort
If he wasnt in the US how can the US claim he violated a US law?
The US claims jurisdiction over its citizens wherever they are.
Which isn't necessarily a bad thing, because it means you can be prosecuted in the US for stuff like going to Thailand and sexually abusing children there.
So the law applies, but protection under the law does not.
Isn't all law essentially derived from powers granted by the constitution?
If the powers granted by it to enforce a law are applicable when not within the US then then it very reasonably ought to apply to any and all amendments.
But, reason is on the extinction list with the magafascists. (And all LEO)
In addition, the law that he's charged with relates to knowingly destroying property that the police have a warrant to sieze.
There is no precedent of it being applied to border searches where they may not even have reasonable suspicion of a crime and can stop people for questioning on a whim.
The State has absolutely no claim over your personal property at that point and destroying property that the police hope and dream of siezing isn't the same as destroying property where they've demonstrated probable cause to a judge.
This argument from the border patrol that you can be arrested for destroying data that is in your possession without ever been given due process and 4th amendment protections isn't supported by precedence.
Finally a sensible reply. Quite a few NAZI bootlickers here. They’re the first the sign up it seems.
Good to know thanks
My hot take: the officer wiped the phone. With their own hands. They're just stupid.
The law isn't that stupid.
that was the issue I was going to bring up. If the officer wants to try varuous pin numbers how is it the owners responsibility as to what the phone does.
My phone is set to automatically wipe after X number of incorrect pin attempts. If I just kept telling law enforcement the wrong pin number because I cant remember it exactly, what is the difference if the phone wipes. Once the phone is out of my hands how can I be responsible for what the phone does? (Assuming I dont issue a remote wiping command)
Hotter take: The phone was empty when he handed it over. There was nothing to delete.
It doesn't look like anything to me.
“If you can’t tell, does it matter?”
If they succeed I guess in the future an officer could delete your phone to save face then blame it on you.
Those of us who have asked to avoid the cancer box and been subjected to a subjectively punitive pat-down and fashion show experience are already anticipating just that. Yay!
(And for added fun, call it a cancer box. Wow, when you get that one TSA who only has bad days will you get a great speech as well)
Why do you call it a cancer box? I've been through plenty of them and never seen anything to indicate they're unsafe. Then again, we also used to let people x-ray their feet in shoe stores, soo...
Yeah, they are masters of parallel construction. ( Aka lying)
Parallel construction is a way to present evidence illegally obtained by coming up with a plausible-seeming other way it was found.
So, rather than saying "we illegally stopped and searched the defendant" they'll get an "informant" (sometimes paid, sometimes coerced) to swear that they tipped them off beforehand.
Yeah... lying
It's a form of lying, but with a specific meaning.
Like how the 9th (or 8th, depending on how you're counting) Commandment says to not bear false witness. That doesn't mean that people following an Abrahamic faith cannot lie... just that they can't lie in that one specific way.
Land of the "free"...
Land of the free™
Free to get fucked over
Bend over, bend over
Don’t travel to fasist country. Problem solved.
It's where he lives. He's a citizen and was returning home from DR.
He already got out! Should have stayed
If only it was as easy as it is simple
👆 cannot be overstated. My family refuses to leave or I'd be in Europe right now. I'm from there and have a house there. Do not come here.
Keep in mind we have our fascists too, and the morons that vote for them.
What a shithole
And I'll do it again.
The border control can search any phone within 100 miles of the border. It's bullshit
Also worth noting that since this includes coastline, it means basically 2/3 of Americans are deprived constitutional rights.
https://en.wikipedia.org/wiki/Border_search_exception#/map/0
99% of Canada lives within 100mi of the US border, and armed agents have invaded Canada to kidnap a Canadian for 'breaking' an American law as a Canadian not breaking any Canadian laws, on Canadian sovereign soil, so they can render that person to America and convict there.
Holy shit do you have a link to the story? That's insane.
And international airports.
And any point of entry, airports
To be fair, a duress pin is definitely a good thing to have if you're being mugged, but using it to deliberately destroy data when it's been seized by a lawful authority is guaranteed to land you in serious trouble pretty much anywhere. Whether the border agents were, in fact, a lawful authority, and whether they had a lawful reason to seize his phone are very different questions.
The much more sensible approach is to either have a separate phobe for travelling, that has nothing you care about on it, or wipe your phone before you travel, and spend a little time building up an innocuous history on it, without putting anything you care about on it. Anything you absolutely must have access to while you're away can be stored, encrypted, online, and you can remember the details to retrieve it.
Curious, why the innocuous history? Just to reduce friction?
"Where's your REAL phone?!? We'll strip search you for your real phone!"
Pretty much. A compketely blank phone is a clear sign that it's wiped, and why would you do that, unless you have sonething to hide, hmm? A phone with a couple of weeks of boring use, maybe a few photos of nice sunsets, a few messages, a take-out ordering app, some boring history in the web browser, and maybe a login to a social media account that follows some celebs and an old school friends or two who don't seem to post any more, just says you got a new phone a while back and you're fairly boring.
Obviously, if they actually have something on you, or they want to pin something on you, those precautions won't actually help much.
Not a lawful authority.
He was flight side at the airport. So either:
US border patrol are considered a lawful authority as they are granted their powers by the federal government and are federal law enforcement officers. They are charged with enforcing US laws, including immigration laws, at the border and in any US state or territory.
From their point of view, they are well within their rights to seize and search his phone, and he interfered with their duties by destroying the data on the phone. Whether that should be the case is a different matter.
The fact that we're discussing ways to sneak past the fascist border guards, by getting very lawyerly with a bunch of fiddly rules they don't actually give a hoot about, is kind of a big hint that we've already lost our liberties to a degree we are reluctant to acknowledge.
This guy was singled out for his political opinions. Border patrol held him as a political prisoner, and when we read the story about him, we all see only too clearly that this could be any one of us.
As far as anyone knows, the CP thing was an excuse, a lie. The authoritarians aren't following the rules, the rules exist to serve as excuses to hurt us. There isn't going to be some magic combination of smartphone hygiene and "I know my rights" phrases that will let us escape targeting by the most corrupt cops in the country.
That first paragraph is really powerful. Cool i parrot it around? I think that needs to become common sentiment.
I'm not sure any law force agency in the US is lawful anymore.
and people have gotten in trouble for that, too, for having a travel phone, a phone that was too clean, etc etc.
Because its not about the phone. Its about stealing data. pictures for facial recognition, contacts so they can map groups, communications so they can search for whatever bullshit excuse they want to string people up.
This isnt about law. its not about protection people/the country.
Its about being fascist dicks to undesirable groups of people. Aint seen one motherfucker on the epstein list, one motherfucking CEO, or any trump cockface have their phone seized by border patrol to steal any data.
The fifth amendment applies to this because he was a US citizen. He had every right to not give them his pin and it would only be destroying evidence if charges had been pressed. In this case some butt hurt border guard just really wanted to look at his vacation pictures or some shit.
The charge wasn't destruction of evidence, but destruction of property, probably for exactly the reason you mention. He could certainly have arguwd with the agent, but he certainly wouldn't be getting on the flight if he did, and I suspect he'd be lucky to walk out of the airport without being arrested. As I said in another comment, this isn't something you can beat at the point of application, it needs to be cut off at the root.
Ooo so wiping data is destruction of property now? That means data is property.
Let's apply that to Microsoft for the times their updates wiped user data, to apple when you take the phone in for a screen repair and they "had" to wipe your data, to Sony for deleting movie collections, and all the data collectors for stealing property....
The crux of those scenarios you outlined doesn't hinge on weather or not data is property. Their arguments are that it isn't YOUR property.
The 4th applies, too.
Third option: Refuse to give your phone credentials unless these fascist pigs have a warrant or provide you with a lawyer.
Then they will just deny you entry into the country
He's a US Citizen. Legally they cannot deny him entry into the country.
Trump Administration: "No"
The guy from the article was referred to as "a US man," so I'm assuming he has US citizenship.
The border cannot legally deny US citizens from entering the US. But they can do all sorts of other things, like detain or delay or prosecute people for not complying.
Unless they're going to see real repercussions for doing so, get definitely can do whatever they want. Rules and laws only matter if people care enough to follow them and enforce them. All they have to do is pretend the person didn't comply, and now they've got all the authority in the world to anything they want, regardless of what it says in the law books. Just look at what ICE is doing to US citizens; border patrol knows they can do all of that, too.
What about give them the wrong pin, they initiate the device wipe, then you say they did it intentionally?
That is what happened. The accused told the boarder agent the duress pin when asked. The agent entered the pin that initiated the wipe.
Could make a difference at trial, didn't stop the case prior to the arrest.
Then a lot of it could come down to the wording the officer used. If they just asked 'what's the passcode' then the person DID give them a passcode.
That's what happened
As far as I understand, from their point of view they have the lawful right to seize and inspect your phone. You could certainly refuse to hand it over, but that would certainly lead to incarceration or worse, with no positive outcome for you or society. It's one of those things that you're bot going to beat at the point of application, vut needs to be cut off at the root.
Sure. They can look at the outside of the hardware all they like. But if they can't access the data on it, that's (Constitutionally-speaking) purely their problem, not ours.
My understanding is that, for the purposes of inspections during border crossings, that is not the case. Also, remember that the border agent can decide, for pretty nuch any reason, that you're not getting on the flight, and, I'm sure, can add a note to your record to suggest to agents on other flights that they stop you too.
US citizens have an unequivocal right to re-enter the county regardless of where they have been, how they returned, how long they were gone, or what they were doing. This was already determined by the Supreme Court in United States v. Wong Kim Ark (1898).
US citizens have an unequivocal right to enter the country, eventually, just not necessarily on a flight they booked (or any flight in the next few weeks, until the goons are done with them....)
I admit, I didn't check, but if he was stopped on returning, then yes, he must be allowed in. He'd then be arrested.
The other two issues are that he was allegedly repeatedly denied access to a lawyer when asked and not read his Miranda rights. Given how border patrol has acted lately, this is incredibly plausible and will hopefully lead to the motion to throw out the case being granted.
Maybe instead of wiping the phone and restarting the duress pin should show a pre-selected number of apps and wipe everything else.
Reboot into Hannah Montana OS
Brb, just submitting a merge request on the Graphene git.
Sounds like the best of both worlds.
That wouldn't avoid the destruction of property charge, just (possibly) make it harder to notice. It sounds like it was the screen flashing and the phone restarting, which is probably necessary for a full wipe, that tipped them off.
The man was in duress and being forced to hand over his PIN while being denied access to legal counsel, that is the very reason for a duress PIN. I don't think the charge is even going to make it to real court, his defense has a great case for it to be thrown out.
The fact that he's in the news is a VERY good sign. In a real 3rd world shithole he would just disappear because he pissed off an unaccountable field goon.
(That's why arrest data is required to be public, despite the damage it does to the arrestee's reputation, BTW.)
It's a tough balance, it puts cops in a position to destroy someone's life with zero proof of any law being broken - like Paul Reubens...
Whilst, yes, he probably did feel under duress, he had a choice to make; hand over the phone, or wipe it and face the repercussions from doing so. Bear in mind, that from the agent's point of view, they had the lawful right to search his phone, so arguing duress will be tricky at best. In his position, I'd like to think I was comfortable handing over the phone because I'd wiped it before travelling.
Having said all that, yes, I agree that his defense has some strong arguments. However, if they decide to make an exame of him, those arguments wont do him much good.
While I am not entirely disagreeing, I have to a bit for anyone that can't bring themselves to say it (all sides should be heard).
I may have misread but I don't think he typed the PIN, as far as I understood they had already taken the phone and were insisting he give them the PIN without any access to a lawyer. Not only did he not wipe it, he only gave them the 'I'm in duress' PIN because he felt he was, if I'm on the jury it's innocent until proven guilty beyond a reasonable doubt.
We've got a lot of really shitty judges here
why even have some shit on your phone.
just have private stuff on some remote server
Even memes or slightly (to them) offensive comments or messages can land you in detention.
You would have to have zero messages, social profiles or anything like it on that phone.
And no references or logins to that private server.
Have to be careful, though. You need a curated social media presence...
Not having social media is considered suspicious in the US https://papersplease.org/wp/2025/05/30/us-state-dept-says-silence-or-anonymity-on-social-media-is-suspicious/
Even unlocking your phone lets them install spyware.
Can thy prove it though
This is the correct take. Its common across various business contexts: destroying evidence after you learn you are being investigated is big time illegal. If you destroy data, you better be able to demonstrate you did so beforehand (I.e. an expiration policy), or you don't have it in the first place (because sensitive data doesn't touch a given mobile device and all.). Dedicated device for travelling is the best idea.
You could also take a video of yourself wiping the device before travelling for security in case it gets stolen. (Not a lawyer disclaimer).
I love the utter badassery of this dude.
If anyone wants to watch a video on it and has five minutes, I whipped one up on my channel this morning.
Maybe check with a lawyer before doing stuff like that.
He asked for a lawyer several times
I was thinking he should have asked a lawyer prior to trying to go through customs. ie: a week ago.
The cops were trying to search him under duress, while denied legal representation, without being read his Miranda rights, and without a warrant. Why are you trying to blame the victim of this bullshit?
He's a US Citizen. He should be able to re-enter his own country without being subjected to this bullshit.
Some are saying cops, others are saying border agents. You consent to be searched if you cross the border in either direction. He should have consulted a lawyer prior so he knew what his rights were.
They were denied a lawyer.
I was thinking he should have asked a lawyer prior to trying to go through customs. ie: a week ago.
Yes because he's a fucking mind reader who should have thought beforehand that his rights would be tramped in his own country.
Shut the fuck up with your victim blaming bullshit.
It's a good idea to know the possible implications of your actions. That's just being reasonable. However, the 4th amendment says police need a search warrant, do there is nothing to prosecute.
Not how it works at the border
Which is why I would have consulted a lawyer before going to the border.
He is being charged with destroying "evidence" but he was never charged with anything in the first place. That is like saying deleting any files at home is a crime. I'd think forcing you to present evidence necessary to charge you with something would fall under the constitutional right against self-incrimination.