DHS Introduces Rules for Airport Laptop Checks

[Sabre]

Full Article
Full Guidelines

The new guidelines are intended to provide more "transparency and accountability" for the laptop searches, said Matt Chandler, DHS spokesman.
The guidelines require CBP to complete a search of an electronic device within five days and ICE to complete a search within 30 days. In addition, agents must take additional steps to inform and educate travelers about the searches, and the DHS Office for Civil Rights and Civil Liberties will conduct an assessment of the policy's impact on civil rights within 120 days, Chandler said.

[complacent]

I think a writer for Gizmododo called it a "Shit sandwich with nicer bread."

This is another ugly, difficult policy... the definition of "private thought" is the ugly part (imho).

[Libra Monkee]

TrueCrypt FTW

[zaxrex]

Riddle me this;

CBP has asserted that it can search all files, including financial documents and Web browsing history, on travelers' laptops and electronic devices "absent individualized suspicion."

seems to be at odds with this

The agency does need probable cause that a crime has been committed to seize a device.

So they can search your crap for no reason, but if they don't let you take it with you after questioning, then thy need to show probable cause for seizure?

I don't get it. But then again, it is the government.

[Sabre]

TrueCrypt FTW

While it protects your data, it doesn't stop them from arresting you

Zak: Ain't that some shit.

[Libra Monkee]

^^^Isn't there like a duress mode of some kind? I separate password you put in that makes it look decrypted but it really isn't?

[Mr Kleen]

encrypt all data and send it to the cloud, then wipe the laptop from orbit.
it's the only way to be sure...

[complacent]

encrypt all data and send it to the cloud, then wipe the laptop from orbit.
it's the only way to be sure...

the second your data hits the cloud, your legal expectations to privacy and anonymity go out the window.

basically given the current rules, the only way to keep your data safe is to leave it in your home, period.

your "home" can't even be a car or a mobile home... i've been doing a bunch of reading on this. it's a very ugly catch-22.

*begin rant*

for a reeeely long time in this country, search and seizure have been allowed/used at all border entry points. since planes now go anywhere and land anywhere, airports are considered border entry points.

this has always included us citizens. i believe it is fair that as a sovereign country, we should be allowed to monitor what is brought into and taken out of our borders. this is a resonable concept that is adopted the world over. there is no avoiding this.

the only thing open to debate (IMHO) is what constitutes one's private thoughts. a safe, for example, does not. a briefcase does not. basing their decision on the previous two statements, computers don't count either. as more and more of an individual's life is created/maintained on computers (bank statements, health records, etc) folks like the EFF are arguing the concept that a person can no longer contain/maintain all of their "private information and thoughts" without the aid of a computer. If they succeed, there will be some form of a leg to stand on concerning computers and privacy. Currently, the courts do not see it this way. Things are even worse in places like England.

This is an issue that needs to have very clear definitions because it will impact all of us for years to come. Imagine a Johny Mnemonic-style senario: Is the data (in his head) subject to search (it is a hard drive), or is it considered private thought? A bit off, but needs to be planned for.

It's big. It's ugly. We should all pay real close attention.

*end rant*

[Sabre]

^^^Isn't there like a duress mode of some kind? I separate password you put in that makes it look decrypted but it really isn't?

Yes, but hidden volumes are not so hidden in my book.

Even with all that has been said above, I still use Truecrypt for a lot of things.

Re Cloud: Colin hit the nail on the head. You are "releasing" your information to the world at the point. I still like the idea of doing a full backup and naming it "JessicaAlbasLostSexyMovies.rar" though

[zaxrex]

Why would you want to overwrite that file?

[complacent]

^^^Isn't there like a duress mode of some kind? I separate password you put in that makes it look decrypted but it really isn't?

as a slightly funneh aside, the "duress" password isn't recoverable... I now know this.