That doesn't help for the kind of search happening here. If the traveler refuse to give the agent the access demanded, they would be denied entry. We need courts to protect the privacy so that you have the right to say no.
They don't want to implement something that's only effective against low-level attackers because it would give their users a false sense of security and wouldn't be robust for situations involving any mid-level or advanced attacker. It would also be quickly documented so low-level attackers would be able to find out about it easily once it became common knowledge.
There's a lot of discussion about it you can search "deniability" on their GitHub issue tracker or socials.
You could allow the user to define an arbitrary number of pins with and allow the user to select which app to show for each. Then you could never know if you got everything if you want to check the phone.
Suggest it on the issus tracker if you think you have a good idea. The thing you have to understand is that it will always leave a forensic trace that can be detected on the SSD.
But if you get caught, the consequences could be disastrous. For the person whose phone it is, you could get a lifetime ban from the US or charged with a felony. For the developer of a such a feature, the feds are very likely to come after them too (I think there's a strong 1st amendment case, but I wouldn't like to have to fight it in court!)
Comments
You deserve a secure device: https://grapheneos.org
That doesn't help for the kind of search happening here. If the traveler refuse to give the agent the access demanded, they would be denied entry. We need courts to protect the privacy so that you have the right to say no.
Unless you have a US passport
I still don’t get why there’s no way to set up a second pin that unlocks the phone but hides sensitive apps and data.
They don't want to implement something that's only effective against low-level attackers because it would give their users a false sense of security and wouldn't be robust for situations involving any mid-level or advanced attacker. It would also be quickly documented so low-level attackers would be able to find out about it easily once it became common knowledge.
There's a lot of discussion about it you can search "deniability" on their GitHub issue tracker or socials.
You could allow the user to define an arbitrary number of pins with and allow the user to select which app to show for each. Then you could never know if you got everything if you want to check the phone.
Suggest it on the issus tracker if you think you have a good idea. The thing you have to understand is that it will always leave a forensic trace that can be detected on the SSD.
This is great, so long as you don't get caught.
But if you get caught, the consequences could be disastrous. For the person whose phone it is, you could get a lifetime ban from the US or charged with a felony. For the developer of a such a feature, the feds are very likely to come after them too (I think there's a strong 1st amendment case, but I wouldn't like to have to fight it in court!)