![]() |
Most folks reading this forum probably don't need to worry. Prior to the liberalization of crypto export rules, it was quite easy to have "controlled" software, for instance the domestic strength version of IE or PGP. But since about 2000 or so (can't remember for sure) all "commercially available" software has been legal for import/export to the US regardless of crypto strength.
It is still possible to have software or hardware designs on a laptop that are ITAR controlled, but if you're working on ITAR controlled non-commercially available products you should know it. Then what you do is get what's called a Carnet from Dept of Commerce, to allow export of this controlled material. Its a real pain to have to deal with the paperwork for this, or anything else to do with ITAR. I carried a Carnet for my notebook PC for a number of years, and can't ever remember encountering a Customs agent who seemed to know or care what it was for. I'm not sure if other countries have changed their laws, for a number of years it was illegal to import too-strong crypto INTO France, for instance. But again, as long as you're a normal user of commercial products these days you should be OK. It only took 10-15 years of the Internet being widely used for software downloads before the US Govt realized that prohibiting export of crypto software wasn't working, not to mention being of VERY dubious legality re: the first amendment. For example, the first edition of Bruce Schneir's canonical reference "Applied Cryptography" could be exported and sold worldwide, despite including all kinds of interesting crypto source code, but the CD containing the EXACT SAME CODE as in the book could only be included in US copies. In many ways, ITAR as it was applied to computer software makes other US Customs/TSA policies look like the height of rationality. Bob PS: Sorry for the rant, but I had to work my thru this bureaucratic stupidity for way too long
Originally Posted by mbstone
One thing that nobody has mentioned is the International Traffic in Arms (ITAR) regulations. If you are a government contractor, or you work in the science or engineering fields, or you have advanced cryptographic software on your machine, or even if you aren't or don't, you might have information that is outlawed for export on your machine -- look up the ITAR regulations -- and you could be in deep water if such information is discovered.
|
Originally Posted by bpratt
It is still possible to have software or hardware designs on a laptop that are ITAR controlled, but if you're working on ITAR controlled non-commercially available products you should know it.
I'd love to try and explain the difference to one of these guys between "encoded" and "encrypted"... |
You always need to remember, you have little to no rights going through customs. For me, I always declare what I have/buy. No longer do I buy any *legal* dvds outside of the US and bring them in. I watch them at the hotels and trash them.
|
Originally Posted by AArlington
Now technical issues aside, let's look at the legal aspects here:
What if he declined to tell his password? Could Customs detain him? What if his machine required smart card or token based logon -- and he didn't have the token? Can Customs "dump" somebody's phone (i.e. look at all the dialed/received calls on it)? And I'm not going to comment on the second question. It's not fully settled yet either way. |
Originally Posted by AArlington
But would a Customs Inspector conducting an time-wasting, quota-filling investigation by simply fat fingering around Windows Explorer even know he was looking at blueprints for the new whiz-bang F999999 Super Turbo Charged hydroponic[sic ;)] Jet Engine versus the design for a windmill?
|
Originally Posted by Deeg
Wow. You seem to have a pretty low opinion of Customs Inspectors. I can assure you, however, that there are no quotas involved.
Seriously though, I do have problems with agents (most of my experience is with TSA) that decide to screen my laptop with the explosive wipe simply because the line is moving slow (i.e. nobody in line but me, so they have the time to do the explosive screening). Sounds to me like the inspection in this case happened simply because the CBP guy was bored and the OP was first through the line. I think THAT sucks. If they asked first before operating my machine I would have less of a problem. When they open the lid it automatically powers on from hibernate mode, then when they shut it again it sometimes gets hosed. They could simply ask before trying to operate my machine that costs more than they make in a month (I have an expensive laptop...) So am I reading you right -- absent any other "probably cause" type evidence, these situations result in a power struggle between the citizen and the MAN but absent the citizen relenquishing the password, ultimately walks WITH their property in the end? Added-- I actually appreciate the work Customs and other LE folks do when they act with respect and restraint and not on powertrips. Now if only they'd be a bit more polite with the "turn ya cell phone off" directed at other passengers (mine is off..), |
Originally Posted by AArlington
Actually not, just take this with a grain of salt for dramatic effect in an anonymous internet board ;) (and please please don't add my name to "the list" :D).
Originally Posted by AArlington
If they asked first before operating my machine I would have less of a problem. When they open the lid it automatically powers on from hibernate mode, then when they shut it again it sometimes gets hosed. They could simply ask before trying to operate my machine that costs more than they make in a month (I have an expensive laptop...)
Originally Posted by AArlington
So am I reading you right -- absent any other "probably cause" type evidence, these situations result in a power struggle between the citizen and the MAN but absent the citizen relenquishing the password, ultimately walks WITH their property in the end?
Originally Posted by AArlington
Added-- I actually appreciate the work Customs and other LE folks do when they act with respect and restraint and not on powertrips. Now if only they'd be a bit more polite with the "turn ya cell phone off" directed at other passengers (mine is off..),
|
Originally Posted by Deeg
Oh, it's too late. I didn't put you on the no-fly...I did one better: mandatory body cavity searches. :p
I don't know if I'd say that categorically, but probably. Note that I said reasonable suspicion, which is a lower burden to meet than probable cause. I would think a criminal record for child porn would probably give reasonable suspicion, for example. But absent any real suspicion (as named above) I dont think that failure to reveal ones password should be construed as hiding something -- in some cases, it could be construed as the citizen simply being a PITA or acting on principle. I'm curious if there have been any test cases on this. |
Originally Posted by AArlington
Mental note -- lots of chilli before returning to the US next time!
Originally Posted by AArlington
Would convicted felons even be allowed in to most other countries? I thought most countries blocked this.
Originally Posted by AArlington
But absent any real suspicion (as named above) I dont think that failure to reveal ones password should be construed as hiding something -- in some cases, it could be construed as the citizen simply being a PITA or acting on principle. I'm curious if there have been any test cases on this.
|
Originally Posted by cxn
You always need to remember, you have little to no rights going through customs. For me, I always declare what I have/buy. No longer do I buy any *legal* dvds outside of the US and bring them in. I watch them at the hotels and trash them.
|
Originally Posted by bdschobel
I imagine that people who indulge in child porn protect it reasonably well.
Originally Posted by PatrickHenry1775
As an attorney, I have some concerns about TSA searching documents and possibly waiving attorney-client privileged status of the documents. Any thoughts?
Keep in mind that it may be malpractice not to install password protection on a laptop and individual files within the laptop, lest it be stolen. As for waiver, presuming no further disclosure (by government LEOs) occurs, how would an opposing party know of the putative waiver? I don't think that is much of a concern.
Originally Posted by PTravel
What is "CBP"? Are you talking about a country other than the U.S.?
Originally Posted by GUWonder
CBP is Customs and Border Patrol part of DHS.
Originally Posted by Kremmen
If that is true, why is it the case? Someone inept (or malicious) could do massive damage to data without ones knowledge. They could do so even if you were watching, but knowing what needs to be fixed/recovered from backup would reduce the hassle factor enormously.
Smart move on the backups. :cool:
Originally Posted by PTravel
Interesting. Without researching it to see if it's ever been tested, I'd say it is unconstitutional on its face, or at least unconstitutional as-applied if it is extended to anything other than obscenity.
Originally Posted by Deeg
Customs, Immigration, and Agriculture merged into two agencies: CBP and ICE. Simple, eh? :D
Originally Posted by AArlington
Choose a password greater than 14 characters
Run Syskey in mode 2 for added protection -- essentially a double password, and choose one hard to remember. Do this and CBP will have an awfully hard (practically impossible) time getting into your machine unless you tell them your password. The just to tick them off and waste their time, encrypt a bunch of random files with EFS -- they'll need your password to decrypt these, but they won't get your password unless you tell them... See http://www.microsoft.com/resources/d...d_sec_xsst.asp for how to enable syskey. Now technical issues aside, let's look at the legal aspects here: What if he declined to tell his password? Could Customs detain him? What if his machine required smart card or token based logon -- and he didn't have the token? Can Customs "dump" somebody's phone (i.e. look at all the dialed/received calls on it)? If they can't search your computer, they may decide to detain it instead. And the backlogs can be for months! :eek: Yes, CBP can look at phone lists at the border.
Originally Posted by Deeg
The laptop could be detained and sent to a forensic lab, but only with reasonable suspicion that there was contraband inside. That would be hard to have unless it was part of an ongoing investigation or other items were found in the luggage, for example.
And I'm not going to comment on the second question. It's not fully settled yet either way.
Originally Posted by cxn
I always declare what I have/buy. No longer do I buy any *legal* dvds outside of the US and bring them in. I watch them at the hotels and trash them.
|
Originally Posted by AArlington
But absent any real suspicion (as named above) I dont think that failure to reveal ones password should be construed as hiding something -- in some cases, it could be construed as the citizen simply being a PITA or acting on principle. I'm curious if there have been any test cases on this.
I guess this situation could get you in real trouble when attempting to enter the US? (Assuming the guest password gets noticed in the first place.) HTB. P.S.: If I wanted to hide something, I could put it onto a 60 GB MP3 player in form of a couple of podcasts... |
I believe there is a clear distinction between a border search by customs and a police or TSA search. A border search is unlimited - they can do virtually anything they want, and there isn't anything you can do about, regardless of your nationality.
As far as the TSA, or any law enforcement agency, you are not required to show them anything of a personal nature, including your computer files, papers, books, etc...the TSA part is cut and dry - those things are way outside the scope of their search. As for law enforcement, you are under no obligation to show them anything unless they produce a warrant to seize your property as evidence in a criminal proceeding. I have witnessed a jackboot thug (aka, Broward Sherrif Deputy) at the FLL checkpoint rifling through a passengers papers and reading their daytimer - that was clearly illegal. I wanted to say something to the passenger after he cleared the checkpoint, but I couldn't find him. I would have happily volunteered myself as a witness in a civil trial against the BSO. |
Originally Posted by SPN Lifer
To be more precise, it is the Department of Homeland Security, Bureau of Customs and Border Protection. ;)
That said, you are correct. :D |
Originally Posted by SPN Lifer
Don't forget CIS.
Originally Posted by SPN Lifer
If they can't search your computer, they may decide to detain it instead. And the backlogs can be for months! :eek:
Originally Posted by SPN Lifer
I'm interested to hear of some CBP hesitancy on the phones.
|
| All times are GMT -6. The time now is 12:40 pm. |
This site is owned, operated, and maintained by MH Sub I, LLC dba Internet Brands. Copyright © 2026 MH Sub I, LLC dba Internet Brands. All rights reserved. Designated trademarks are the property of their respective owners.