23 ms·

I shut down my macbook before coming back to Canada and the agent threatened to confiscate it for a year. I unlocked it because it was purely a principle thing

I shut down my macbook before coming back to Canada and the agent threatened to confiscate it for a year. I unlocked it because it was purely a principle thing and a new laptop would've been expensive.

Muromec 1y ago
How do you know they didnt install a rootkit?
- jstasmltwngrl 1y ago
  He looked through my files in front of me.
  - redeux 1y ago
    I’ve always been mildly curious about this. When you say “looked through my files” what exactly do you mean? They opened finder and scrolled through the standard folders like downloads, documents, pictures, etc?
    - yencabulator 1y ago
      My laptop boots to a text-mode getty prompt, I wonder what would happen...
- angulardragon03 1y ago
  Persistence in modern macOS is only really possible in userspace, as the OS partition is immutable. There are only a handful of places this is possible, which are fairly easy to detect. Unless border agents are burning 0-days on random passersby, it’s fairly unlikely they installed anything persistent that can’t be removed.
throw0101d 1y ago
For the record (for Canada): * https://www.cbsa-asfc.gc.ca/travel-voyage/edd-ean-eng.html https://www.cbsa-asfc.gc.ca/travel-voyage/edd-ean-eng.html
- koolba 1y ago
  From that link (emphasis mine): > A CBSA officer will start with some questions before examining your personal digital device. To examine the device, the officer will first ask for the password. If the device is password-protected, they will write your password on a piece of paper. You are obligated to provide your password when asked. > Note Failure to grant access to your personal digital device may result in the detention of that device under section 101 of the Customs Act, or seizure of the device under subsection 140 (1) of the Immigration and Refugee Protection Act or under section 110 of the Customs Act. Well guess we’re not going to Canada again. It also never mentions them destroying the written down password.
  - HeatrayEnjoyer 1y ago
    It's a border crossing, required unlocking of devices is common practice including especially by the US. National sovereignty is supreme and countries have the right to implement whatever procedures they deem necessary before permitting entry.
    - koolba 1y ago
      Unlocking of devices is distinctly different than “write your password on a slip of paper”. Even if they shred the paper, the room for sure has CCTV video recordings so they’ll have a copy there as well.
      - xethos 1y ago
        Good thing all of us here are following (and extolling) the advice to never reuse passwords, espcially when ones device is in an evidence locker and subject to controlled access by authorized personnel
  - throw0101d 1y ago
    > Well guess we’re not going to Canada again. Or Australia: > Electronic devices held for forensic examination under section 186 of the Customs Act will be retained for no longer than 14 days, provided there is no content on any device retained which renders the device subject to seizure under Customs-related laws. If any device is subject to seizure, the examination of any associated retained devices may take longer than 14 days. * https://www.abf.gov.au/entering-and-leaving-australia/crossing-the-border/at-the-border https://www.abf.gov.au/entering-and-leaving-australia/crossi... Or every other country. You may be asked by a border agent from any country to unlock your electronic device. Feel free to not unlock or give your password of course: every country has a law about confiscation and/or not allowing you in.

Muromec 1y ago

How do you know they didnt install a rootkit?

jstasmltwngrl 1y ago
He looked through my files in front of me.
- redeux 1y ago
  I’ve always been mildly curious about this. When you say “looked through my files” what exactly do you mean? They opened finder and scrolled through the standard folders like downloads, documents, pictures, etc?
  - yencabulator 1y ago
    My laptop boots to a text-mode getty prompt, I wonder what would happen...
angulardragon03 1y ago
Persistence in modern macOS is only really possible in userspace, as the OS partition is immutable. There are only a handful of places this is possible, which are fairly easy to detect. Unless border agents are burning 0-days on random passersby, it’s fairly unlikely they installed anything persistent that can’t be removed.

throw0101d 1y ago

For the record (for Canada): * https://www.cbsa-asfc.gc.ca/travel-voyage/edd-ean-eng.html https://www.cbsa-asfc.gc.ca/travel-voyage/edd-ean-eng.html

koolba 1y ago
From that link (emphasis mine): > A CBSA officer will start with some questions before examining your personal digital device. To examine the device, the officer will first ask for the password. If the device is password-protected, they will write your password on a piece of paper. You are obligated to provide your password when asked. > Note Failure to grant access to your personal digital device may result in the detention of that device under section 101 of the Customs Act, or seizure of the device under subsection 140 (1) of the Immigration and Refugee Protection Act or under section 110 of the Customs Act. Well guess we’re not going to Canada again. It also never mentions them destroying the written down password.
- HeatrayEnjoyer 1y ago
  It's a border crossing, required unlocking of devices is common practice including especially by the US. National sovereignty is supreme and countries have the right to implement whatever procedures they deem necessary before permitting entry.
  - koolba 1y ago
    Unlocking of devices is distinctly different than “write your password on a slip of paper”. Even if they shred the paper, the room for sure has CCTV video recordings so they’ll have a copy there as well.
    - xethos 1y ago
      Good thing all of us here are following (and extolling) the advice to never reuse passwords, espcially when ones device is in an evidence locker and subject to controlled access by authorized personnel
- throw0101d 1y ago
  > Well guess we’re not going to Canada again. Or Australia: > Electronic devices held for forensic examination under section 186 of the Customs Act will be retained for no longer than 14 days, provided there is no content on any device retained which renders the device subject to seizure under Customs-related laws. If any device is subject to seizure, the examination of any associated retained devices may take longer than 14 days. * https://www.abf.gov.au/entering-and-leaving-australia/crossing-the-border/at-the-border https://www.abf.gov.au/entering-and-leaving-australia/crossi... Or every other country. You may be asked by a border agent from any country to unlock your electronic device. Feel free to not unlock or give your password of course: every country has a law about confiscation and/or not allowing you in.