EFF, ACLU Sue Over Warrantless Phone, Laptop Searches at U.S. Border
eff.org
eff.org
I want to be let into Canada without issue, so am taking a burner smartphone connected to a non-critical gmail account that is plausibly-maybe my "real" personal one. But not really. The maximum threat to me is detention, or more likely, refused entry. If I am asked to unlock the device, I will.
Crossing back into the US, I am less concerned. If I am asked to unlock the device, I will NOT. The maximum threat to me is semi-indefinite detention, and I know at the end of it, I can reach out to the EFF to seek representation in a larger action.
Does anyone else have any tips/tricks/ideas here? I realize trying to subvert any Canadian border search is not a good idea, but it's a good middle-grounds vs. "don't go to Canada" or "give them all your private data", I think. On the other hand, I am willing to be more stringent with the US border because (A) I am a citizen, I cannot be refused entry, and (B) this is a cause I would like to participate in, so invite any negative outcome caused by my refusal to unlock the device or share any logins.
Thanks for willing to take one for the team but be prepared to be put on a "troublemaker" list and be harassed, time and time again at border crossings.
The trick is to not worry about it so much. In fact, I'd say that worrying and looking nervous would make it more likely that you would be searched.
I live on the US/Canadian border (on the US side) and go over probably 2 or 3 times per month. I regularly drive from New York state to Ottawa (going through Canadian customs), then fly into the US (through US customs) and then back again through Canada (Canadian customs again) driving home to the US (US customs again) with no problems. It's closer than the nearest commercial airport to me in the US and even with the customs delay, much more convenient. I also just go over to have fun in Ottawa and Montreal regularly.
My vehicle has been searched 3 times in probably 6 years. My phone has always stayed with me, in my pocket, un-searched.
I have only ever personally heard of one case of someone having their electronics searched, and the extent of the search was Canadian customs using the Windows search to look for files with "boy" or "girl" in the filename -- presumably looking for child porn.
To be clear, I'm not saying this doesn't ever happen, or that it will 100% never happen to you, but the chances are very, very slim that they'll even ask you more than a few questions, let alone do any sort of search. Your mileage may vary, of course.
On whose part? The border patrol, so that the pool of potential plaintiffs is large? Or by the EFF and ACLU, choosing a diversity of plaintiffs to represent?
https://www.cbp.gov/newsroom/national-media-release/cbp-rele...
189,594,422 people processed at the US border between October 2016 and March 2017 with 14,993 electronics searches.
0.008% of people processed had electronics searched.
https://en.wikipedia.org/wiki/List_of_international_airports...
CBP is claiming that they searched, on average, less than one phone per day in each airport? Give me a break.
Their claim is probably the number of times they've done some kind of deep analysis with forensic tools. Surely the number of times a border guard casually looked through emails and texts is far higher.
---------
That number sounds reasonable to me. CBP has no reason to hide their activities because they believe they are faithfully enforcing the law.
Electronic searches are not something agents do casually; federal agents do very few things casually on the clock. They're far too busy.
Typically it has to be either a decision in advance (targeting a specific person) or a big set of warning signals at once that create a suspicious profile.
I could be wrong about this; I don't have personal experience. But I've discussed these sorts of cases with friends who are federal agents and prosecutors.
If one "searches" a safe, and finds inside a paper with some random characters on it, the safe has been searched. The paper was there, it was discovered, the interior of the safe was viewed. The meaning of the characters may not be understood, but the safe was searched.
If one "searches" a phone, and finds inside some random pattern of bits, why is the search "not completed" until the bits are deciphered into something the agent understands?
It seems to me that the act of searching doesn't imply understanding what was found, yet for some reason all the public discourse - including legal analysis! - is predicated on the idea that "searching" a phone means deciphering its digital contents.
It is far from settled that searching the electronic records of citizens just because they're crossing a border is a faithful enforcement of the law. That's precisely what this lawsuit aims to disprove.
That being said, I agree that the number is likely accurate. CBP is not regularly searching electronic devices.
>I have only ever personally heard of one case of someone having their electronics searched, and the extent of the search was Canadian customs using the Windows search to look for files with "boy" or "girl" in the filename -- presumably looking for child porn.
This is horrible - not beacuse of the child porn aspect, but because Canada has draconian laws (though so do Britain, Aus and NZ) which mean that drawings are prohibited. Drawings of fictional characters, that is. I read a story, though mere anectode, I hope it is relevant - about a man who was arrested beacuse they found they found drawings in his cache. He didn't even like the material. A US citizen that was crossing the border and searched beacuse he looked "suspicious".
We should not excuse this violation of freedom of expression just because it happens/happened at the border. Canada has laws that it deserves to be called out on.
Really, have they? Is there a poll showing that? And does agreement on laws mean that the laws are therefore not draconian? I'm sure many in, for example, Saudi Arabia would think that homosexuality should be prohbited. Does this mean that it should be that way?
>fictional drawings of children are to be treated as crimeful as real ones
That's not what the law says.
Erm, I don't see how you'd be "subverting" the search. The purpose of a border search is to examine what you're bringing into the country. If you smoke marijuana at home but (prudently) don't try to bring some into Canada, that isn't subverting their search.
The latest time I returned to into the USSA (a while ago), I had an old laptop that I zeroed out the hard drive and physically moved it out of the computer. I figured this would leave the thugs with less justification to steal my things. However, I lucked out and was not actually subjected to an invasive inspection.
Also, I don't know what you've previously used this burner phone for, but any flash filesystem won't actually erase things when you delete them.
I am not saying no one should be worried, I am just saying OP should not.
An interesting solution is to give something else to the border to worry about. Something perfectly legal but that would focus their attention. Like a perfectly registered and legally transported gun. Or some flour in plastic bags. Or a bottle of whiskey.
I had a lot fewer issues crossing the border once I stopped being so organized.
When I checked in for my flight I didn't have my passport itself on me, just the number. The airline I was using asked for an expiration date. I remembered the month and year but not the day... So I just picked a day. When I cleared customs, the guy was so busy correcting the expiration date on the computer that he wasn't even listening to my answer to his questions.
On the way back, I was switching airlines, and the originating airline was unable to print me a boarding pass for the flight they'd put me on. When I got to customs and they asked for paperwork, they also asked for my boarding pass for my final flight. When I didn't have one, they sent me to get one from the airline and then literally waved me through when I came back.
Once I noticed this, I started to think back... The least hassle I've had clearing security was when I did dumb things like leave a lighter in my pocket when I went to the airport. As soon as they found the lighter, they just took it away and admonished me and sent me on my way.
For the most part, if you haven't given them a reason to be suspicious, once they find something it seems they stop looking.
That said, and I can' believe I have to make this disclaimer as it feels about as obvious as saying I'm against torturing kittens, but I am against the overreaching searches the EFF and ACLU are suing over here.
... And if they want to detain you, who gets to decide whether that happened?
The DHS/CBP regulations claim 100 miles from a border and/or international airport, but the Supreme Court has (so far) held that warrantless searches in this case apply only at borders and their functional equivalents. (https://en.wikipedia.org/wiki/Border_search_exception)
This assumes a sequence of events that never occurs in reality.
CBP / LEO attempts to detain you > The Law pops it's head out from behind a bush and wags it's finger > CBP / LEO sees this and thinks 'oh, of course, silly me, that's not allowed' > you go about your day.
In reality: CBP / LEO believes* they have sufficient reason to detain you > your day is fucked. They'll probably rough handle you, stomp on your head, and generally be degenerate asshats. There's no one present to advocate for and protect your rights.
[1] https://scholar.google.com/scholar_case?case=693326075362777...
[2] https://en.m.wikipedia.org/wiki/United_States_v._Martinez-Fu...
http://www.concordmonitor.com/New-Hampshire-interstate-borde...
As the article notes, essentially the entire state of New Hampshire falls within a the 100-mile border zone in which CBP claims no warrant is needed. Perhaps you should forward your HN comments to those officers to clarify what they are and aren't allowed to do in that zone.
Any number of courts can rule that a particular LEO activity is unlawful, but it seems to have very little effect on their actions henceforth. In my experience, so long as the officers believe they were acting lawfully there are typically no repercussions. Occasionally one might get put on leave with full pay while an investigation is carried out. What kind of disincentive is that supposed to be?
I definitely believe there needs to be a third party to police operations. Some sort of service tasked with keeping police behaviour in check, present to support the rights of the citizenry. Law enforcement officers shouldn't be allowed out alone.
This is in place already in many jurisdictions. The review board is almost always populated with former police rather than community members, ostensibly because they have better insight as to the challenges officers face on a daily basis. This is one of the reasons the cop in LA went mental a few years ago - because he was out of favor politically, his review board experience went sideways, while many of his peers had a decidedly different outcome for more egregious offenses. (I can't get into specifics because I don't actually remember them in detail).
It is a common case that officers are disciplined and that discipline is rescinded by the review board rather than strengthened. You can almost sympathize - when police are instructed to lie and behave unethically on a regular basis, it's bs to fire them when they make the news for it. The guys on the street are stuck between a rock and a hard place - having to satisfy their superiors, but the requirements for doing so would get them fired by any civilian review board. For instance, the pattern of ticketing soccer mom's at the beginning of every school year under a quota system would cause all kinds of issues under civilian review. But it happens all over the place and even though it's illegal, the practice nor it's practitioners will ever face consequences for it.
AFAICT from that article, they did not attempt warrantless searches on cars (or individual US citizens) that were not flagged by the dogs.
I encourage anyone operating a non-profit to consider setting up programmes like this; you'll get more visibility (from people virtue-signalling their donation), and it will attract new revenue from sociopaths.
Can't I just like a hoodie?
I think it's a great idea to entice more revenue by giving an option (a hoody) for people who are not interested in "purchasing" the above.
A mere cash donation to a petition-wielding activist would not have had the same resonance. At least several years later I still have a cool t-shirt.
It's not usually kosher to comment on voting here, but I think in this case it's worth making an exception to help keep you readable: I un-did my downvote of you because I hope that others who, out of innocent ignorance perhaps, currently share your position, will be able to read your comment (I don't want you to go to full invisibility) and then read and consider the responses to it.
I would advise anyone who agrees with this guy (abtinf) to really think it through a bit. The "regulation is bad therefore ALL regulation is bad" trap is easy to fall into. Even if you are a strict libertarian, net neutrality is a case where regulation is stopping really bad things from happening, and, though it sounds paradoxical, enabling MORE freedom, not less.
For example {hypothetical} "Net Neutrality gives alphabet-soup-agency a form of super-DMCA that I don't trust them to have"
Right. You're describing your own view there.
I'm fairly anti-regulation and I from what I understand, net neutrality is a (federal) regulatory solution to a problem created by explicitly by (state + local) regulation.
I honestly don't understand why people think that net neutrality is a better solution than a (currently non-existant) federal policy to remove state and local regulations that created ISP oligopolies which limited internet freedom in the first place.
Building things from scratch to compete with an established competitor at that scale is nearly impossible, you'd never see any new players entering the market if they had to build a new grid.
Why is net neutrality different?
>I honestly don't understand why people think that net neutrality is a better solution than a (currently non-existant) federal policy to remove state and local regulations that created ISP oligopolies which limited internet freedom in the first place.
You'd have to break up the oligopolies first, right?
(Yes, it's more complex than this; you'd have to be able to upload a manifest of what's in the bag and what it weighs to some service of that country's government, and then the country's embassy here would forward the manifest to the State Dept and they'd send you a sticker for your bag, etc.)
Countries get to limit the number of staff a foreign embassy is allowed to bring in, and they can kick folks out of the country.
Fun fact: for air travel, unescorted diplomatic pouches are taken into the care of the captain, and are kept in the cockpit.
[1] Article 27 Section 4: "The packages constituting the diplomatic bag must bear visible external marks of their character and may contain only diplomatic documents or articles intended for official use."
Multiple circuit courts have upheld the Government's right to do this, and that this right extends to electronic files and information. Only the Ninth has disagreed (United States v. Cotterman).
So my question is, shouldn't there be extroardinary consequences for breaking laws such as these?
Why does it appear so easy for government to get away with this? Is it a really bad thing thay constitutional rights are being easily trampeled on? It seems like a bad deal to me.
What if I asked about Guantanamo, the NSA, or wars without approval of congress? Are all of these failures of our Gov to observe our constitution issues of some kind of lack in clarity?
Fourth Amendment: > The right of the people to be secure in their persons, houses, papers, and effects, against unreasonable searches and seizures, shall not be violated, and no Warrants shall issue, but upon probable cause, supported by Oath or affirmation, and particularly describing the place to be searched, and the persons or things to be seized.
The word "unreasonable" in "unreasonable searches and seizures" introduces a full hectare of gray area.
The exact definition of "unreasonable" is subject to interpretation by the executive agencies and the courts. Search at the border for the purposes of detecting contraband has been considered reasonable from the moment Constitution was in force. Right now, we're finding just how far this can be stretched.
Is this really true, though? Would you be able to provide a sourced example of this -- Searching a person's personal effects and papers at the border, ideally in a case that went to the courts?
I poked around a bit, and while the first SCOTUS decision addressing this head on seems to be from 1977, it goes into more detail:
"That searches made at the border, pursuant to the longstanding right of the sovereign to protect itself by stopping and examining persons and property crossing into this country, are reasonable simply by virtue of the fact that they occur at the border, should, by now, require no extended demonstration. The Congress which proposed the Bill of Rights, including the Fourth Amendment, to the state legislatures on September 25, 1789, 1 Stat. 97, had, some two months prior to that proposal, enacted the first customs statute, Act of July 31, 1789, c. 5, 1 Stat. 29. Section 24 of this statute granted customs officials "full power and authority" to enter and search "any ship or vessel, in which they shall have reason to suspect any goods, wares or merchandise subject to duty shall be concealed . . . ." This acknowledgment of plenary customs power was differentiated from the more limited power to enter and search "any particular dwelling-house, store, building, or other place . . ." where a warrant upon "cause to suspect" was required. The historical importance of the enactment of this customs statute by the same Congress which proposed the Fourth Amendment is, we think, manifest. This Court so concluded almost a century ago. In Boyd v. United States, 116 U. S. 616, 623 (1886), this Court observed:
"The seizure of stolen goods is authorized by the common law; and the seizure of goods forfeited for a breach of the revenue laws, or concealed to avoid the duties payable on them, has been authorized by English statutes for at least two centuries past; and the like seizures have been authorized by our own revenue acts from the commencement of the government. The first statute passed by Congress to regulate the collection of duties, the act of July 31, 1789, 1 Stat. 29, 43, contains provisions to this effect. As this act was passed by the same Congress which proposed for adoption the original amendments to the Constitution, it is clear that the members of that body did not regard searches and seizures of this kind as `unreasonable,' and they are not embraced within the prohibition of the amendment."
(https://scholar.google.com/scholar_case?case=610713613239826...)
What about searches at security, be it by the TSA or otherwise? They're obviously very different (you can always opt-out and travel by another means), but I suppose one can both argue that they're a) reasonable and b) justified by contractual means (i.e., a requirement to pass through security before boarding).
Here's some more on this. http://scholarship.law.wm.edu/cgi/viewcontent.cgi?article=16...
Edit: Contraband can be both physical and digital. If the government can conduct searches for physical contraband then searches for digital contraband in certain circumstances like border crossings seems reasonable.
Also... Malware is not illegal. Using it can be.
This opens a door to unlimited search power at US borders against US citizens. There is already a 100-mile inland range where your can be searched without a warrant around our borders -- we are only going to make this worse by extending that range into all of our private digital data.
I posted a house/key analogy just now that may help clear up the distinction between physical and digital data search. Just to be clear, I'm actually ok with border guards physically inspecting my electronics. I am not ok with them compelling me to login to them, decrypt them, or otherwise hand them over my social media / banking logins / etc.
Keep in mind, we're talking about US citizens re-entering their own country here. I think this is a key point.
But there is no reason to search the devices of U.S. citizens and lawful permanent residents, who are already authorized to live and work in the U.S. These people would have no reason to break immigration law. And if the government is searching digital content for evidence of other unlawful activity, they should have to get a warrant.
Keep in mind that any digital content you can bring through a border port-of-entry, you can also just send it via the Internet.
It's one thing if a border guard inspects your house key you brought along, analyzes for dangerous substances, drugs, etc.
It's another if they clone that key and have someone drive out to inspect your house with it.
To me, your house in this scenario is your entire collection of private data accessible online / remotely (finances, taxes, possibly the private data of others -- possibly even portals to HIPAA/other PII data of a more commercial nature).
Assuming you agree that it is unfair to let the border search data outside of the phone, then it gets still more problematic.
One of the tricky aspects here is that it seems you can be detained / intimidated if you refuse to decrypt / unlock your device (as a US citizen re-entering your own country). I think you're getting at the idea that the phone/laptop is a physical device and should be searchable like any other object -- and, I think that's fairly reasonable. The problem is that the border guard can also "compel" you to decrypt that device / log in to it if you've put these measures in place. People have been forcibly detained for refusing to cooperate [1], even being put into a chokehold [2].
I respect that some amount of extra search power is required at borders -- but that power must be reasonably scoped (and in this case, I'd say it is not).
[1] http://www.cnn.com/2017/02/13/us/citizen-nasa-engineer-detai... [2] https://www.nbcnews.com/news/us-news/american-citizens-u-s-b...
You bring up a good point about HIPAA. I work in health care and we are allowed to keep a work email client on our phone provided that we keep control of our phone at all time (to keep PHI/HIPAA info safe). A border agent searching through my phone could be considered a HIPAA violation and would have to be reported. Not sure if anything would come out of it fine wise for the company but it would still be a nightmare for compliance.
Another interpretation is that you cannot possible obey the law. If the border guard has the legal right to demand access to the HIPAA protected data, and you can't legally give him access... then the law enforcement officials are forcing you to break the law.
With no punishment for them, of course.
There's one set of rules for normal people, and another for law enforcement. How does this keep me safe?
The problem with that is that they aren't a covered entity and thus shouldn't have access to the data. Because they aren't a covered entity HIPAA rules do not apply to them.
Giving access of that over to a government agent is like handing them a diary of everything you ever thought, a list of everyone you ever met, a record of everywhere you ever went, a list of every book you've ever read, a list of every medication you've ever taken, a list of every game you've ever played, a list of every off-color joke you've ever cracked with friends, etc.
Would you hand that over on paper?
Assuming you have perfect recall, and answer all of their questions truthfully, it will still take time for them to troll through all of your memories and actions.
They can do the same with a telephone / laptop in minutes.
Answer two: perfect recall
You can't recall everything perfectly, and you don't write everything down. So after a while, they won't have anything to go on. "What did you do in Thailand last Wednesday?" ... "I dunno, I got drunk with my friends?"
Versus "we searched your phone and you took pictures last Wednesday of someone who looks underage. Please turn around for the handcuffs".
In general, I have everything to hide from state actors with near-infinite resources, zero accountability, a deep understanding of the law (i.e. how to get you for almost anything), and their own personal agenda to push.
They should need to prove to me why they need to look at my stuff.
http://legal-dictionary.thefreedictionary.com/Paper
which are protected from being searched by the fourth amendment:
"The right of the people to be secure in their persons, houses, papers, and effects, against unreasonable searches and seizures, shall not be violated, and no warrants shall issue, but upon probable cause, supported by oath or affirmation, and particularly describing the place to be searched, and the persons or things to be seized."
(I quoted the modern legal definition of papers, but the proper thing to look up is the colloquial definition of papers at the time the constitution was written. Does anyone have a good reference for how the founders of the US would have used the word "papers"? It clearly included legal and accounting documents, but e.g. was it broader than that?)
Another big difference is the purpose of the search in the first place. We search for physically dangerous items to protect people, or unlawful items for customs reasons. The case for physically dangerous data and unlawful data is much less clear cut.
The real reason for searching your devices seems to be related to profiling you as a person in order to determine if they want to let you in, which is a completely different purpose than searching your bags.
If I carry a key to my home safe with me across an international border, that doesn't give the government the right to seize that key and search my safe but that's effectively what they're doing with digital searches.
Edit: Saw the downvotes, so just wanted to note that the linked post was submitted before this one, and hence this comment. Not that it matters. :)