Free Technology Newsletters
» All 33 InfoWorld Newsletters
Technology & Business Daily
 
InfoWorld
 
   

Laptop Searches And Insecure Borders

By Ed Foster, Section The Gripelog
Posted on Mon Feb 11, 2008 at 12:46:52 AM PDT

One of the few things that all Americans can agree on these days is that we need more secure borders. But does that mean when entering the country we must all submit to a search not only of what's in our luggage, but what's in our heads? That's the question raised by recent news stories regarding the U.S. Customs and Border Protections (CBP) practices when searching laptops and other electronic devices.


Last week the Asian Law Caucus and the Electronic Frontier Foundation filed a lawsuit over a disturbing pattern of CBP border searches experienced by a number of travelers, some of them U.S. citizens and mostly all of Middle Eastern or Asian descent. The travelers reported they had been subjected not only to lengthy searches but to wide-ranging interrogations by CBP agents about their religious and political beliefs. Along with the obvious religious and racial profiling concerns, the two civil rights groups want the CBP to reveal its policies for searching laptops, MP3 players, mobile phones, and other devices. Some travelers report that CBP agents copied their personal and business information, demanded passwords to see files containing trade secrets of their company, or even insisted the devices had to be checked to see if they had any pirated content.

How far can customs officials go in demanding access to electronic files? Ironically, the one recent case where CBP agents had clear justification for their actions is the one where the law seems to be restraining their hand. A Canadian citizen's laptop was seized at the border when border agents saw evidence that it had child pornography on it. But the CBP has been unable to access the suspect files because they are PGP encrypted. A grand jury subpoena to force the accused to reveal the encryption keys was blocked by a judge because it would violate the Fifth Amendment right not to incriminate oneself.

So at least in some circumstances, it would seem that being forced to divulge information inside your head, like a password, is not constitutional. On the other hand, Customs officials often make the argument that searching a laptop is no difference in essence that going through the contents of a briefcase, and no one doubts that CBP agents have the right to do that at the border. And if, for example, border guards have good reason to think a particular individual is an active terrorist, of course we'd all want the contents of his laptop examined in detail.

But what about when the CBP has only bad reasons for the search, like racial profiling or a name indiscriminately added to a watch list? And what if it's not terrorism or child pornography that you are suspected of, but having pirated music files on your iPod or an ungenuine copy of Windows on your hard drive? And how practical is it for CBP agents to spend hours looking for digital contraband of any sort being hand-carried into the country when a thousand-fold of that same content can be entering the country via the Internet every instant.

When the same frequent business traveler is stopped time and time again to be subjected to these excruciatingly prying searches, it's hard to escape the belief that there's at the very least something misguided about the CBP's approach. Yes, international border guards have always had the right to search the contents of a briefcase, but in this country at least the purpose shouldn't be to find out who your friends are or what religion you practice.

Clearly there are some very big and very knotty issues underlying all this, such as how we balance national security needs with our rights to privacy. We can't begin to answer such questions here, but perhaps we can at least try to say what the CBP's policies such be when it comes to searching laptops and other devices. We can all agree those who protect our borders need the right to see what anyone is bringing into the country, but how do we keep them from trying to see what's in our head as well?

What do you think? Post your comments below or write Ed Foster at Foster@gripe2ed.com.

< More Games Rebate Baiters Play | TaxCut Takes Privileges for Granted >


Display: Sort:
Laptop Searches And Insecure Borders | 13 comments (13 topical) | Post A Comment
Content immaterial[ Reply to This ] (none / 0) (#1)
by Fushigi on Mon Feb 11, 2008 at 07:16:24 AM PDT

The comparison to a briefcase scan is a red herring; scanning the contents of a brief case is like scanning a computer's directory/files, but there's nothing to say a printed document can't be encrypted as well. Does the CBP have the right to demand decryption keys for a printed document?

Ultimately, whether the content of the encrypted files is legal or not is not the issue. The emotional arguments behind it (kiddie porn, terrorist plans, etc.) are all irrelevant to the 5th amendment issue. If a person is suspected of nefarious activities they can be flagged for further investigation without any rights violations. Or just be turned away at the border.

Ed mentions the slippery slope - kiddie porn today, RIAA enforcement arm tomorrow. Indeed, should people be forced to reveal their secrets to the State, there's no telling what the State will do with that information. In addition, while we know what is legal today, that doesn't mean the same content will be legal tomorrow.

[ Reply to This ]



Stop the madness[ Reply to This ] (none / 0) (#2)
by Anonymous User on Mon Feb 11, 2008 at 08:25:18 AM PDT

Either repeal the 4th amendment (and maybe the rest of the bill of rights for good measure) or fire the TSA and stop the border patrol's random searching. There used to be rule of law in this country.

"The right of the people to be secure in their persons, houses, papers, and effects, against unreasonable searches and seizures, shall not be violated, and no Warrants shall issue, but upon probable cause, supported by Oath or affirmation, and particularly describing the place to be searched, and the persons or things to be seized."

Stepping across the border or onto an airplane is not "probable cause".

[ Reply to This ]



Related "Security" Intrusion[ Reply to This ] (none / 0) (#3)
by srynas on Mon Feb 11, 2008 at 08:47:28 AM PDT

Since Ed's post raises the issue of how far a government agency can go in inspecting your computer, there is a somewhat similar intrusion being floated by the content industry. According to TechDirt the content industry is proposing the use of "filters" to prevent "illegal" file sharing of copyrighted material. The title of this particular TechDirt story is "RIAA Says Copyright Filters Could Be Put In Anti-Virus Software". Here is another similar TechDirt article A Modest Proposal: ISPs Should Stop Any Activity That Hurts A Business Model.

If any of these proposals actually materialize Ed would get a virtual landslide of gripes.

While most of Ed's post deal with complaints following a product's purchase, there is a wealth of proposals being floated by both the government and private industry that seek to deprive us our rights in the use of our computer equipment. I hope that Ed will have more stories focusing on this issue.

[ Reply to This ]


Why carry data across the border on a laptop?[ Reply to This ] (none / 0) (#4)
by swwhite on Mon Feb 11, 2008 at 10:06:19 AM PDT

If I had any data I did not want a customs inspector to see, I would put it on a CD and have it hand-delivered to my destination by a uniformed official of the federal government, for 41 cents an ounce. Or, I could email it to myself, upload it to personal web site space at my ISP, put it on a flash memory card in my camera, put in a USB stick in my toothbrush case, anything besides carry it in a laptop computer. So I wouldn't object to anyone searching my laptop since I would have nothing to hide, but searching laptops is going to catch only the dumbest criminals. (Not that they shouldn't be caught, of course.)

[ Reply to This ]


private vs. company data[ Parent | Reply to This ] (none / 0) (#9)
by Anonymous User on Tue Feb 12, 2008 at 02:32:56 AM PDT

You maybe can try this with your private data, but if you are working for a global company and are a frequent traveller, your company would even forbid to store your data anywhere else than on the company's laptop Harddrive.

[ Parent | Reply to This ]


Notebook searches[ Reply to This ] (none / 0) (#5)
by eljefe99 on Mon Feb 11, 2008 at 10:43:27 AM PDT

If you don't want to run the risk of your notebook being ssearched, don't bring it. That should be simple enough so that even the people who bitch about it can understand.

[ Reply to This ]


Not a realistic option[ Parent | Reply to This ] (none / 0) (#8)
by LasVegan on Mon Feb 11, 2008 at 02:13:11 PM PDT

Most people who cross borders with laptops do so because they need their machine at their destination. It's also rather stupid as it will only catch stupid criminals. Anyone with any sense will know that such searches are possible and they'll put the data elsewhere.

[ Parent | Reply to This ]


It's much worse than that[ Reply to This ] (none / 0) (#6)
by Anonymous User on Mon Feb 11, 2008 at 10:55:52 AM PDT

It's unfortunately much worse than Ed has portrayed.  Customs can take your laptop away to copy the contents, promising to return it in several weeks, and sometimes failing to return it.

http://www.washingtonpost.com/wp-dyn/content/article/2008/02/06/AR2008020604763.html

It's obviously not about blocking information - child pornography and terror plans can cross the border in seconds.  This is just an element of neocon plans to install fear and spy on everyone.

Furthermore, even if a customs official mishandles, loses or even outright steals your data, you have no recourse:

http://www.nytimes.com/2008/01/23/washington/23scotus.html?_r=2&th&emc=th&oref=slogin&oref=slogin

Welcome to Soviet Union 2.0.


[ Reply to This ]



Remember kids...[ Reply to This ] (none / 0) (#7)
by Anonymous User on Mon Feb 11, 2008 at 12:08:18 PM PDT

Even at Customs (assuming you are a US national) you have the right to remain silent, and you need not answer any questions put to you. Asking to call your lawyer invokes your right to counsel; they must stop questioning you. Also, in any interaction with law enforcement, politely decline to consent to a search. If they take your laptop, well, you do have a backup of your data, don't you?

[ Reply to This ]


Time for the next step...[ Reply to This ] (none / 0) (#10)
by Anonymous User on Tue Feb 12, 2008 at 08:00:57 AM PDT

Lenovo, Dell, and others are now offering laptops with an optional encrypted hard drive. No password = no access.

While I don't forsee a personal need for this, I'm still tempted to go that way with my next laptop --if stolen, it will at least prevent any data from being seen or used, and if I do travel with it, I can refuse to give my password, while still allowing the TSA to turn it on to say "Yup, it's a working laptop all right".

I value my right to privacy. It's a shame any of us have to go to these lengths to ensure it, but it has been proven to us time and time again that governments will not respect that right, regardless of what the law says.

[ Reply to This ]



No password, no entry[ Parent | Reply to This ] (none / 0) (#11)
by Anonymous User on Tue Feb 12, 2008 at 11:28:25 AM PDT

Sorry, customs can demand passwords and deny entry if you don't comply.  The cases on this are still being litigated, with one encouraging lower court ruling, but the pundits seem to think that customs will get its way on appeal.  Their argument seems to be that the fourth amendment applies within the US but not at the point of entry - otherwise they wouldn't be able to search your suitcase for that fifth of scotch.

I once visited East Germany while it was still communist.  The border crossings were nowhere near as stupid as the US has become in recent years.

[ Parent | Reply to This ]



Use encryption...[ Parent | Reply to This ] (none / 0) (#12)
by Anonymous User on Thu Feb 14, 2008 at 09:13:42 PM PDT

While I haven't tried it yet, TrueCrypt sounds like a great free choice. There's an option where you can create a "double-encrypted" that contains two passwords--one that'll open your important-looking "plausible deniability" files, and the other that opens your "real" data.

[ Parent | Reply to This ]


crazy guy rambling[ Reply to This ] (none / 0) (#13)
by Anonymous User on Tue Feb 26, 2008 at 01:27:34 PM PDT

These controversies happen because your government thinks it owns you. It always, always, always thought so and is now finally realizing we do not agree. Neoconservatism is an inevitable consequence of this stance. When the government SCARES you with CONTROL they become real TERROR-ists. You can terrorize people with actions and words, and the government knows this because it functions in a state where actions and words are the same. We do not. Therefore it can fool us.

[ Reply to This ]


Laptop Searches And Insecure Borders | 13 comments (13 topical) | Post A Comment
Display: Sort:
Recent Entries
Of Apple, Psystar users, and copyright
0 comments

The suspicious death of XP support
23 comments

Is the Do-Not-Call list not working?
34 comments

Threads of copyright abuse
11 comments

Google should defy court order
4 comments

Bill Gates and PC history
25 comments

More The Gripelog...

Submit a gripe
About the Author
Email Ed Foster

Help Ed and his readers build these projects:
The Gripewiki
The EULA Library

Login
Make a new account
Username:
Password:

Live Gripes
Has AOL Changed Their Ways?
15 comments

A Nestle SweeTarts Conspiracy
14 comments

AT&T Kills "Bad" Username
27 comments

DESPERATE! AOL HAS TAKEN OVER MY COMPUTER
48 comments

parkingticket.com SCAM on refunds
25 comments

Don't let Net Enforcers Ruin Your Day.
15 comments

More Live Gripes...

Sign up for my newsletter

To have my column automatically e-mailed to you, submit your email address in the form below. Of course, I will not turn your address over to any other party or send you any unrequested e-mail.

Infoworld Blogs

Recomended Sites
The AFFECT Coalition
Electronic Frontier Foundation
Electronic Privacy Information Center
Free Software Foundation
HearUsNow.org
Public Knowledge
StopBadware.org

Jeff Angus
Ben Edelman
Dan Gillmor
Bob Lewis
Brian Livingston
Freedom to Tinker
Lawmeme
PC World's Techlog
SunBeltSoftware Blog
Troubleshootsers.com

Rss Feeds
How this works
 Top News 
 Columnists 
 Tech Watch 
 Test Center Reviews 
 Applications 
 App Development 
 E-Business Solutions & Strategies 
 End-user Hardware 
 Networking 
 Operating Systems 
 Platforms 
 Security 
 Standards & Protocols 
 Storage 
 Telecommunications 
 Wireless 
 Web Services 

 

create account | faq | search