549
US accuses American of allegedly wiping his phone using a 'duress' password during border search (techcrunch.com)
submitted 2 months ago by to c/technology@lemmy.world
138 comments fedilink hide all child comments
 

cross-posted from: https://lemmy.world/post/49853131

Feels to me like GrapheneOS did exactly what it should, passing the US border test with flying colours!

Funny part about this lawsuit: “With a little planning ahead of time, you can always download the data you need once you get to where you’re going,”

you are viewing a single comment's thread
view the rest of the comments
[–] 47 points 2 months ago* (14 children)

I imagine the best duress PIN is something you'd actually see a "normal" person set as a PIN, like their birth year or something innocuous and easy to remember (and easily believed by whoever's demanding your PIN), while their real PIN would be longer or more abstract.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 14 child comments
    •
  • [–] 19 points 2 months ago* (6 children)

    Honestly I would use a stupid basic one that someone might try and use if they were guessing. Like a duress pin of 1-1-1-1, 1-2-3-4 or 2-4-6-8. It gets the people who take the device and then try and break into it without your permission as it's almost certain they will at least try one of those three.

    Worst case scenario they ask you and you say what it is and they give you a blank stare of "really?..." it's not like they wouldn't try a pin you gave them.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 6 child comments
    •
  • [–] 24 points 2 months ago (3 children)

    I don't recommend a duress password of 1-1-1-1, because that could be set off accidentally.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 7 points 2 months ago (1 child)

    Or those common dumb ones could be attempted by someone just trying to snoop on your phone.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 3 points 2 months ago*

    that's sort of the point of it being super basic. The intent is you want it to be tried before they somehow manage to get your actual pin, or give up and try to force you to provide it.

    if they put the pin in before you tell them a pin the argument for destroying evidence is weakened heavily as it isn't a you initiated thing.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 3 points 2 months ago (2 children)

    Sounds dumb to give it out, but mine is my normal 8-digit pin, just backwards. It's easy to remember and seems like a legitimate PIN.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •