Privacy
Don’t want your laptop strip-searched?
Encryption might keep Homeland Security away from your files. Or you could just not take your data across a border in the first place.
Late last month, I opened an e-mail from my friend in Paris, and the first thing I saw was
—–BEGIN PGP SIGNED MESSAGE—–Hash: SHA1
PGP is encryption software that’s been around since 1991. When I asked him why he was using it, he told me his company had been talking to the CIA for a while about its technology and he’d just gotten used to encrypting all his e-mail.
I started writing about all things encryption before 1991, when the development of PGP first made public the conflict between my right to privacy and government’s right to intercept criminal communication. It’s been hammer and tongs between the encryption/privacy community and the government ever since.
Still, I can count on zero hands the times I’ve actually encrypted an e-mail or a file. I don’t know exactly why. It seems like it’s never been easy enough to do to make it practical. Plus it’s not as if I’m carrying around state secrets on my MacBook.
But I’m beginning to think there’s another good reason not to encrypt. On Friday, I saw a post on Dave Farber’s Interesting People list that gave me that sick, déjà vu feeling. It was a post from Ohio State University law professor Peter Swire — a copy of his testimony to the Senate Judiciary Subcommittee on the Constitution, called “No, You Can’t Search My Laptop.” Swire was responding to recently disclosed policies from the Department of Homeland Security that allow agents to confiscate, copy and examine the contents of anyone’s laptop as they cross a border, whether or not they are suspected of breaking a law.
The Washington Post ran a story the same day. Here’s the lead:
Federal agents may take a traveler’s laptop computer or other electronic device to an off-site location for an unspecified period of time without any suspicion of wrongdoing, as part of border search policies the Department of Homeland Security recently disclosed.
Also, officials may share copies of the laptop’s contents with other agencies and private entities for language translation, data decryption or other reasons, according to the policies, dated July 16 and issued by two DHS agencies, U.S. Customs and Border Protection and U.S. Immigration and Customs Enforcement.
Holy crap.
Swire notes that agents at the border are going further than just taking image copies of people’s hard drives. They’re actually demanding passwords and encryption keys so they can examine the contents.
Of course, they promise to destroy the copies and the keys as soon as they’re done — as long as they don’t find anything illegal, like a downloaded song you didn’t pay for — so no security worries there, right? There’s no such thing as a crooked customs or Border Patrol agent.
This gives government agents access to information they would never get by opening up your suitcase. In addition to e-mail, spreadsheets, documents and personal financial information like credit card receipts and photos, nowadays they can also listen to your stored Skype calls and voice mails.
Not to mention that just having encrypted data on your hard drive causes suspicion, or at least throws down the gauntlet. If you were looking for illegal stuff and you ran into a file that looked like this,
qANQR1DBwU4D/TlT68XXuiUQCADfj2o4b4aFYBcWumA7hR1Wvz9rbv2BR6WbEUsy ZBIEFtjyqCd96qF38sp9IQiJIKlNaZfx2GLRWikPZwchUXxB+AA5+lqsG/ELBvRa c9XefaYpbbAZ6z6LkOQ+eE0XASe7aEEPfdxvZZT37dVyiyxuBBRYNLN8Bphdr2zv z/9Ak4/OLnLiJRk05/2UNE5Z0a+3lcvITMmfGajvRhkXqocavPOKiin3hv7+Vx88
wouldn’t you immediately need to know what it said? It could be a conspiracy! It could be a list of child pornographers! It could be a copyrighted magazine article! It could be a bootleg Led Zepplin video!
Urgh.
So I figure the best solution is to encode your files rather than encrypt them, so that you could hide your stuff in plain sight. If agents don’t know something is encrypted and it looks innocuous, they won’t compel you to give them the key. “Here’s your laptop, ma’am. Sorry for the inconvenience.”
This idea made me think of steganography, an alternative to PGP-style encryption. While the message — “PERSHING SAILS FROM NY JUNE 1″ — might look like the gibberish above when encrypted, the same message, coded with a form of steganography that uses the first letter of each word, would read,
PRESIDENT’S EMBARGO RULING SHOULD HAVE IMMEDIATE NOTICE. GRAVE SITUATION AFFECTING INTERNATIONAL LAW. STATEMENT FORESHADOWS RUIN OF MANY NEUTRALS. YELLOW JOURNALS UNIFYING NATIONAL EXCITEMENT IMMENSELY.
(Thanks to Gary Kessler’s steganography site for quick access to examples.)
But traditional steganography won’t work for laptop travelers who aren’t trying to move one or two short secret messages. Most of us just don’t want some random government agent to be able to make a copy of our entire electronic brain every time we cross a border.
What I want is something that automatically takes all my files and recodes them, so that they look and read like something else entirely — like Proust, maybe, or better yet, Kafka.
I want “Hey, Amy, when are you coming to pick up Season 7 of Buffy?” to read,
“Someone must have been telling lies about Josef K., he knew he had done nothing wrong but, one morning, he was arrested.”
That would be sweet. And there are oceans of public domain text ripe for the codin’, thanks to Project Gutenberg …
But, alas, no such program exists. And even if it did, that does not solve our problems today. Unfortunately, the solution to the present insanity may be not to move our data across borders at all.
The very sensible Mark Seiden, a legendary computer security expert who is now at Yahoo, told me that stego is “not a good thesis” for protecting laptops.
His suggestion? “Leave everything on a server, encrypted.” That way you don’t have to carry it across the border, and as long as you know you’ll have a network connection, you can get to it once you get where you’re going. This protects travelers not only from overzealous customs agents, but makes losing a laptop or having it stolen a mere inconvenience, rather than a security nightmare.
Because apparently we are living in Josef K.’s world now, where criminals and customs agents are just different versions of the same thing.
Who owns your tweets?
A judge's decision to uphold a subpoena for an Occupy arrestee's Twitter account raises serious privacy issues
Malcolm Harris (inset) and Occupy Wall Street protesters on the Brooklyn Bridge. (Credit: Sam Margevicius/AP/Daryl Lang) I tweet a lot. Sometimes I feel like I tweet more often than I have face-to-face conversations — and therein lie multiple issues that will not be addressed here (but perhaps one day, in therapy). However, in the course of constructing these 140-character-or-less nuggets of opinion, information or political agitation, never did I give much thought to whether these tweets were mine. It turns out they’re not, in the eyes of the law. For all the clamor about Twitter’s revolutionary potential in the Middle East, we have a reminder right here in New York of its revolutionary limitations.
Continue Reading CloseNatasha Lennard covers the Occupy movement for Salon. A British-born, Brooklyn-based journalist, she has been covering Occupy Wall Street since before the first sleeping bag was unrolled in Zuccotti Park. One of the first journalists arrested at an Occupy action, she has managed to enrage Andrew Breitbart, Rush Limbaugh and Glenn Beck. You can follow her on Twitter (@natashalennard), and email her any Occupy updates/videos/ideas to natasha.lennard@gmail.com More Natasha Lennard.
The drones are coming — to America
Congress has opened up U.S. airspace to the drone industry -- and your privacy is about to be at risk
(Credit: Salon) A drone is probably heading toward your personal airspace soon. With Congress requiring the Federal Aviation Administration to simplify and expedite drone applications from U.S. police departments by May 15, industry and watchdog groups agree: It won’t be long before cops and first responders put them into action.
Thanks to a law passed without much public debate in March, the FAA must allow law enforcement agencies to operate small drones (i.e., less than 4.4 pounds) at altitudes of less than 400 feet. “The demand is huge,” says Catherine Crump, an attorney for the American Civil Liberties Union. Michael Toscano, president of the Association for Unmanned Vehicle Systems International, a trade group, says there are nearly 19,000 law enforcement entities in the United States, of which only 300 now have aerial surveillance capacities.
Continue Reading Close
Jefferson Morley is a staff writer for Salon in Washington and author of the forthcoming book, Snow-Storm in August: Washington City, Francis Scott Key, and the Forgotten Race Riot of 1835 (Nan Talese/Doubleday). More Jefferson Morley.
The spread of “Suspicious Activity Reporting”
Suspicious Activity Reporting asks citizens to keep an eye out on their neighbors -- and it's spreading
(Credit: Warren Goldswain via Shutterstock/Salon) Crime in Los Angeles is a gritty enterprise, and donning an LAPD badge has historically involved getting your hands dirty. Long before the New York Police Department was spying on Muslim students, the LAPD was running a large-scale domestic spy operation in the 1970s and ’80s, snooping on and infiltrating more than 200 political, labor and civic organizations including the office of then Mayor Tom Bradley. Today, the LAPD isn’t quite so aggressive, but it still employs a directive titled Special Order 1, which permits police officers to deem what is “suspicious” and then act on it.
Continue Reading CloseUzma Kolsy is an activist and freelance writer based in Southern California. She is the former Managing Editor of InFocus News, the largest newspaper in California serving the Muslim American community. More Uzma Kolsy.
The rise of Facebook Nation
The social network has become as big and powerful as a country -- and it's time its citizens got a constitution
(Credit: ponsulak kunsub via Shutterstock/Salon) When David Cameron became Britain’s prime minister, he made an appointment to talk to another head of state — Mark Zuckerberg. Yes, that Mark Zuckerberg: the billionaire wunderkind, the founder of Facebook. At the meeting at 10 Downing Street, Prime Minister Cameron and Facebook president Zuckerberg discussed ways in which social networks could take over certain governmental duties and inform public policymaking.
A month later, Zuckerberg and Cameron had a follow-up conversation, later posted on YouTube. Cameron, dressed in suit and tie, chatted with Zuckerberg, who wore a blue cotton T-shirt. “Basically, we’ve got a big problem here,” Cameron pointed out to Zuckerberg, describing the U.K.’s financial woes.
Continue Reading CloseLori B. Andrews is a professor at Chicago-Kent College of Law and the director of the Institute for Science, Law and Technology. She is the author of 14 books, including "The Clone Age: Adventures in the New World of Reproductive Technology." More Lori B. Andrews.
NYPD eyed U.S. citizens in intel effort
Police reportedly monitored Americans under no suspicion of wrongdoing, simply because of their ethnicity
A uniform from the NYPD is displayed during a special service to commemorate the 10th anniversary of the Sept. 11 terrorist attacks, at a church in New Plymouth, New Zealand, Sunday, Sept. 11, 2011. The US team will play Ireland in their opening Rugby World Cup game later today. (AP Photo/Dita Alangkara)(Credit: AP) The New York Police Department put American citizens under surveillance and scrutinized where they ate, prayed and worked, not because of charges of wrongdoing but because of their ethnicity, according to interviews and documents obtained by The Associated Press.
The documents describe in extraordinary detail a secret program intended to catalog life inside Muslim neighborhoods as people immigrated, got jobs, became citizens and started businesses. The documents undercut the NYPD’s claim that its officers only follow leads when investigating terrorism.
Continue Reading ClosePage 1 of 21 in Privacy