FlyerTalk Forums

FlyerTalk Forums (https://www.flyertalk.com/forum/index.php)
-   Checkpoints and Borders Policy Debate (https://www.flyertalk.com/forum/checkpoints-borders-policy-debate-687/)
-   -   Why do US Customs search laptops? (https://www.flyertalk.com/forum/checkpoints-borders-policy-debate/502528-why-do-us-customs-search-laptops.html)

bpratt Dec 11, 2005 7:30 pm

Most folks reading this forum probably don't need to worry. Prior to the liberalization of crypto export rules, it was quite easy to have "controlled" software, for instance the domestic strength version of IE or PGP. But since about 2000 or so (can't remember for sure) all "commercially available" software has been legal for import/export to the US regardless of crypto strength.
It is still possible to have software or hardware designs on a laptop that are ITAR controlled, but if you're working on ITAR controlled non-commercially available products you should know it. Then what you do is get what's called a Carnet from Dept of Commerce, to allow export of this controlled material. Its a real pain to have to deal with the paperwork for this, or anything else to do with ITAR. I carried a Carnet for my notebook PC for a number of years, and can't ever remember encountering a Customs agent who seemed to know or care what it was for.
I'm not sure if other countries have changed their laws, for a number of years it was illegal to import too-strong crypto INTO France, for instance. But again, as long as you're a normal user of commercial products these days you should be OK.
It only took 10-15 years of the Internet being widely used for software downloads before the US Govt realized that prohibiting export of crypto software wasn't working, not to mention being of VERY dubious legality re: the first amendment. For example, the first edition of Bruce Schneir's canonical reference "Applied Cryptography" could be exported and sold worldwide, despite including all kinds of interesting crypto source code, but the CD containing the EXACT SAME CODE as in the book could only be included in US copies.
In many ways, ITAR as it was applied to computer software makes other US Customs/TSA policies look like the height of rationality.

Bob

PS: Sorry for the rant, but I had to work my thru this bureaucratic stupidity for way too long


Originally Posted by mbstone
One thing that nobody has mentioned is the International Traffic in Arms (ITAR) regulations. If you are a government contractor, or you work in the science or engineering fields, or you have advanced cryptographic software on your machine, or even if you aren't or don't, you might have information that is outlawed for export on your machine -- look up the ITAR regulations -- and you could be in deep water if such information is discovered.


AArlington Dec 11, 2005 7:38 pm


Originally Posted by bpratt
It is still possible to have software or hardware designs on a laptop that are ITAR controlled, but if you're working on ITAR controlled non-commercially available products you should know it.

Agreed. I'm all for upholding and enforcing rational laws rationaly. But would a Customs Inspector conducting an time-wasting, quota-filling investigation by simply fat fingering around Windows Explorer even know he was looking at blueprints for the new whiz-bang F999999 Super Turbo Charged hydroponic[sic ;)] Jet Engine versus the design for a windmill?

I'd love to try and explain the difference to one of these guys between "encoded" and "encrypted"...

cxn Dec 11, 2005 7:39 pm

You always need to remember, you have little to no rights going through customs. For me, I always declare what I have/buy. No longer do I buy any *legal* dvds outside of the US and bring them in. I watch them at the hotels and trash them.

Deeg Dec 11, 2005 7:39 pm


Originally Posted by AArlington
Now technical issues aside, let's look at the legal aspects here:
What if he declined to tell his password? Could Customs detain him? What if his machine required smart card or token based logon -- and he didn't have the token?

Can Customs "dump" somebody's phone (i.e. look at all the dialed/received calls on it)?

As for the first question, not really. The laptop could be detained and sent to a forensic lab, but only with reasonable suspicion that there was contraband inside. That would be hard to have unless it was part of an ongoing investigation or other items were found in the luggage, for example.

And I'm not going to comment on the second question. It's not fully settled yet either way.

Deeg Dec 11, 2005 7:42 pm


Originally Posted by AArlington
But would a Customs Inspector conducting an time-wasting, quota-filling investigation by simply fat fingering around Windows Explorer even know he was looking at blueprints for the new whiz-bang F999999 Super Turbo Charged hydroponic[sic ;)] Jet Engine versus the design for a windmill?

Wow. You seem to have a pretty low opinion of Customs Inspectors. I can assure you, however, that there are no quotas involved.

AArlington Dec 11, 2005 7:49 pm


Originally Posted by Deeg
Wow. You seem to have a pretty low opinion of Customs Inspectors. I can assure you, however, that there are no quotas involved.

Actually not, just take this with a grain of salt for dramatic effect in an anonymous internet board ;) (and please please don't add my name to "the list" :D).

Seriously though, I do have problems with agents (most of my experience is with TSA) that decide to screen my laptop with the explosive wipe simply because the line is moving slow (i.e. nobody in line but me, so they have the time to do the explosive screening). Sounds to me like the inspection in this case happened simply because the CBP guy was bored and the OP was first through the line. I think THAT sucks.

If they asked first before operating my machine I would have less of a problem. When they open the lid it automatically powers on from hibernate mode, then when they shut it again it sometimes gets hosed. They could simply ask before trying to operate my machine that costs more than they make in a month (I have an expensive laptop...)

So am I reading you right -- absent any other "probably cause" type evidence, these situations result in a power struggle between the citizen and the MAN but absent the citizen relenquishing the password, ultimately walks WITH their property in the end?

Added-- I actually appreciate the work Customs and other LE folks do when they act with respect and restraint and not on powertrips. Now if only they'd be a bit more polite with the "turn ya cell phone off" directed at other passengers (mine is off..),

Deeg Dec 11, 2005 8:00 pm


Originally Posted by AArlington
Actually not, just take this with a grain of salt for dramatic effect in an anonymous internet board ;) (and please please don't add my name to "the list" :D).

Oh, it's too late. I didn't put you on the no-fly...I did one better: mandatory body cavity searches. :p


Originally Posted by AArlington
If they asked first before operating my machine I would have less of a problem. When they open the lid it automatically powers on from hibernate mode, then when they shut it again it sometimes gets hosed. They could simply ask before trying to operate my machine that costs more than they make in a month (I have an expensive laptop...)

Fair enough request. Personally, I would ask you if there's anything flaky about your laptop before turning it on.


Originally Posted by AArlington
So am I reading you right -- absent any other "probably cause" type evidence, these situations result in a power struggle between the citizen and the MAN but absent the citizen relenquishing the password, ultimately walks WITH their property in the end?

I don't know if I'd say that categorically, but probably. Note that I said reasonable suspicion, which is a lower burden to meet than probable cause. I would think a criminal record for child porn would probably give reasonable suspicion, for example.


Originally Posted by AArlington
Added-- I actually appreciate the work Customs and other LE folks do when they act with respect and restraint and not on powertrips. Now if only they'd be a bit more polite with the "turn ya cell phone off" directed at other passengers (mine is off..),

I'll take that as a compliment and thank you. As for the attitude and power trip thing...all I can say is...you've been around plenty of travelers, right? And you've seen the pushy attitudes they can often have? Imagine putting up with that 8 hours a day every day! But I agree. Like any other job, you'll find your share of disgruntled employees who enjoy making life miserable for others.

AArlington Dec 11, 2005 8:09 pm


Originally Posted by Deeg
Oh, it's too late. I didn't put you on the no-fly...I did one better: mandatory body cavity searches. :p

Mental note -- lots of chilli before returning to the US next time!

I don't know if I'd say that categorically, but probably. Note that I said reasonable suspicion, which is a lower burden to meet than probable cause.
My mistake; I used those terms interchangable; Im no lawyer...

I would think a criminal record for child porn would probably give reasonable suspicion, for example.
Would convicted felons even be allowed in to most other countries? I thought most countries blocked this.

But absent any real suspicion (as named above) I dont think that failure to reveal ones password should be construed as hiding something -- in some cases, it could be construed as the citizen simply being a PITA or acting on principle. I'm curious if there have been any test cases on this.

Deeg Dec 11, 2005 8:18 pm


Originally Posted by AArlington
Mental note -- lots of chilli before returning to the US next time!

That is one way to ensure you get released by CBP as quickly as possible!


Originally Posted by AArlington
Would convicted felons even be allowed in to most other countries? I thought most countries blocked this.

Depends on what the convictions were. But very likely not. I was more referring to returning US citizens.


Originally Posted by AArlington
But absent any real suspicion (as named above) I dont think that failure to reveal ones password should be construed as hiding something -- in some cases, it could be construed as the citizen simply being a PITA or acting on principle. I'm curious if there have been any test cases on this.

I agree with your opinion. And I'm not aware of any test cases, but usually anything imaginable has happened at some point.

Doppy Dec 11, 2005 9:25 pm


Originally Posted by cxn
You always need to remember, you have little to no rights going through customs. For me, I always declare what I have/buy. No longer do I buy any *legal* dvds outside of the US and bring them in. I watch them at the hotels and trash them.

We only have "no rights" when we agree to give them up.

SPN Lifer Dec 12, 2005 2:19 am


Originally Posted by bdschobel
I imagine that people who indulge in child porn protect it reasonably well.

Many do not.

Originally Posted by PatrickHenry1775
As an attorney, I have some concerns about TSA searching documents and possibly waiving attorney-client privileged status of the documents. Any thoughts?

As an attorney, you undoubtedly know that a CBP search at the "functional equivalent of a border" is almost unlimited, while a TSA search is not. In either case, one would want to summon a supervisor -- someone chime in about the levels of TSA officer supervision -- and be sure to explain everything and document everything, including names. You might want to generally tell them about attorney-client files. It would be good to have documentation of your assertions, such as business cards, bar cards, copies of law degree, etc.

Keep in mind that it may be malpractice not to install password protection on a laptop and individual files within the laptop, lest it be stolen. As for waiver, presuming no further disclosure (by government LEOs) occurs, how would an opposing party know of the putative waiver? I don't think that is much of a concern.

Originally Posted by PTravel
What is "CBP"? Are you talking about a country other than the U.S.?

Are you an actual frequent flyer?

Originally Posted by GUWonder
CBP is Customs and Border Patrol part of DHS.

To be more precise, it is the Department of Homeland Security, Bureau of Customs and Border Protection. ;)

Originally Posted by Kremmen
If that is true, why is it the case? Someone inept (or malicious) could do massive damage to data without ones knowledge. They could do so even if you were watching, but knowing what needs to be fixed/recovered from backup would reduce the hassle factor enormously.

Because it is the "functional equivalent of a border." These are the agents of the sovereign you are talking about. At common law, the King could do no wrong. Modernly, you have various grievance procedures available in the very unlikely event of malice, or more common likelihood of incompetence. That is why it pays to be polite to these guys, and express your concerns in a manner that even dolts can understand.

Smart move on the backups. :cool:

Originally Posted by PTravel
Interesting. Without researching it to see if it's ever been tested, I'd say it is unconstitutional on its face, or at least unconstitutional as-applied if it is extended to anything other than obscenity.

I questioned your nationality, now I'm doubting your claimed occupation. It is the "functional equivalent of a border." There are many cases discussing border searches.

Originally Posted by Deeg
Customs, Immigration, and Agriculture merged into two agencies: CBP and ICE. Simple, eh? :D

Don't forget CIS.

Originally Posted by AArlington
Choose a password greater than 14 characters
Run Syskey in mode 2 for added protection -- essentially a double password, and choose one hard to remember. Do this and CBP will have an awfully hard (practically impossible) time getting into your machine unless you tell them your password.

The just to tick them off and waste their time, encrypt a bunch of random files with EFS -- they'll need your password to decrypt these, but they won't get your password unless you tell them...

See http://www.microsoft.com/resources/d...d_sec_xsst.asp for how to enable syskey.

Now technical issues aside, let's look at the legal aspects here:
What if he declined to tell his password? Could Customs detain him? What if his machine required smart card or token based logon -- and he didn't have the token?

Can Customs "dump" somebody's phone (i.e. look at all the dialed/received calls on it)?

It is certainly imprudent to use the same password for every single file. As posted upthread, you have to unlock things for inspection when requested. I'm not sure if one has to tell them a password, however, as opposed to supplying it. I would politely offer them that. "I find it hard to remember my various passwords, but my fingers type them automatically."

If they can't search your computer, they may decide to detain it instead. And the backlogs can be for months! :eek:

Yes, CBP can look at phone lists at the border.

Originally Posted by Deeg
The laptop could be detained and sent to a forensic lab, but only with reasonable suspicion that there was contraband inside. That would be hard to have unless it was part of an ongoing investigation or other items were found in the luggage, for example.

And I'm not going to comment on the second question. It's not fully settled yet either way.

This is a more detailed explanation than my thoughts. I'm interested to hear of some CBP hesitancy on the phones. Nevertheless, if secrecy is important, don't bring it to a border search.

Originally Posted by cxn
I always declare what I have/buy. No longer do I buy any *legal* dvds outside of the US and bring them in. I watch them at the hotels and trash them.

Why? :confused:

htb Dec 12, 2005 7:41 am


Originally Posted by AArlington
But absent any real suspicion (as named above) I dont think that failure to reveal ones password should be construed as hiding something -- in some cases, it could be construed as the citizen simply being a PITA or acting on principle. I'm curious if there have been any test cases on this.

The password? Where's the problem: just give the guest password. Most machines are multi-user machines, and many employees will not have the superuser' or administrator's password because the IT people are worried they could de-configure something.

I guess this situation could get you in real trouble when attempting to enter the US? (Assuming the guest password gets noticed in the first place.)

HTB.

P.S.: If I wanted to hide something, I could put it onto a 60 GB MP3 player in form of a couple of podcasts...

bocastephen Dec 12, 2005 9:13 am

I believe there is a clear distinction between a border search by customs and a police or TSA search. A border search is unlimited - they can do virtually anything they want, and there isn't anything you can do about, regardless of your nationality.

As far as the TSA, or any law enforcement agency, you are not required to show them anything of a personal nature, including your computer files, papers, books, etc...the TSA part is cut and dry - those things are way outside the scope of their search. As for law enforcement, you are under no obligation to show them anything unless they produce a warrant to seize your property as evidence in a criminal proceeding. I have witnessed a jackboot thug (aka, Broward Sherrif Deputy) at the FLL checkpoint rifling through a passengers papers and reading their daytimer - that was clearly illegal. I wanted to say something to the passenger after he cleared the checkpoint, but I couldn't find him. I would have happily volunteered myself as a witness in a civil trial against the BSO.

GUWonder Dec 12, 2005 9:20 am


Originally Posted by SPN Lifer
To be more precise, it is the Department of Homeland Security, Bureau of Customs and Border Protection. ;)

Yes, but as the poster was not up-to-date with all the changes, I thought it best to use the more popularly understood old names (even if not a perfect substitute or wholly accurate). ;)

That said, you are correct. :D

Deeg Dec 12, 2005 9:20 am


Originally Posted by SPN Lifer
Don't forget CIS.

Yeah, rather big oversight there. CIS took a bunch of employees and most of the bureaucracy!


Originally Posted by SPN Lifer
If they can't search your computer, they may decide to detain it instead. And the backlogs can be for months! :eek:

You know...I've been thinking about this one since it came up yesterday. I'm not sure there is a suspicion standard that has to be met after all. I mean, how is a "locked" laptop any different from a locked suitcase or car trunk? The latter requires no suspicion whatsoever to detain until opened, if I recall correctly.


Originally Posted by SPN Lifer
I'm interested to hear of some CBP hesitancy on the phones.

In my personal opinion, I think the problem stems from the fact that a phone list cannot possibly contain contraband. While it could provide actionable intelligence or possibly even evidence of past crimes, that was not the purpose of border search authority granted by Congress. Now that Customs folks also have Immigration authority, there are probably some valid reasons to look at phone lists (to verify stated purpose of travel, to make sure people aren't working here illegally, etc). But I'm not sure they'd fly with a US citizen.


All times are GMT -6. The time now is 12:40 pm.


This site is owned, operated, and maintained by MH Sub I, LLC dba Internet Brands. Copyright © 2026 MH Sub I, LLC dba Internet Brands. All rights reserved. Designated trademarks are the property of their respective owners.