Slashdot is powered by your submissions, so send in your scoop

 


Forgot your password?
Close
typodupeerror
×
Privacy United States Your Rights Online

Customs Officials Have Copied Americans' Phone Data at Massive Scale (washingtonpost.com) 75

Posted by msmash from the closer-look dept.
SpzToid writes: U.S. government officials are adding data from as many as 10,000 electronic devices each year to a massive database they've compiled from cellphones, iPads and computers seized from travelers at the country's airports, seaports and border crossings, leaders of Customs and Border Protection told congressional staff in a briefing this summer. The rapid expansion of the database and the ability of 2,700 CBP officers to access it without a warrant -- two details not previously known about the database -- have raised alarms in Congress about what use the government has made of the information, much of which is captured from people not suspected of any crime. CBP officials told congressional staff the data is maintained for 15 years.

Details of the database were revealed Thursday in a letter to CBP Commissioner Chris Magnus from Sen. Ron Wyden (D-Ore.), who criticized the agency for "allowing indiscriminate rifling through Americans' private records" and called for stronger privacy protections. The revelations add new detail to what's known about the expanding ways that federal investigators use technology that many Americans may not understand or consent to. Agents from the FBI and Immigration and Customs Enforcement, another Department of Homeland Security agency, have run facial recognition searches on millions of Americans' driver's license photos. They have tapped private databases of people's financial and utility records to learn where they live. And they have gleaned location data from license-plate reader databases that can be used to track where people drive.
This discussion has been archived. No new comments can be posted.

Customs Officials Have Copied Americans' Phone Data at Massive Scale More

Customs Officials Have Copied Americans' Phone Data at Massive Scale

Comments Filter:

  • Right (Score:5, Funny)

    by Kernel Kurtz ( 182424 ) on Thursday September 15, 2022 @04:35PM (#62885465)

    adding data from as many as 10,000 electronic devices each year to a massive database they've compiled from cellphones, iPads and computers seized from travelers at the country's airports, seaports and border crossings...run facial recognition searches on millions of Americans' driver's license photos. They have tapped private databases of people's financial and utility records to learn where they live. And they have gleaned location data from license-plate reader databases that can be used to track where people drive.

    On the bright side they are quite concerned about the security of your TikTok data.

    • Re: (Score:3, Insightful)

      by DJGreg ( 28663 )
      I think they are quite concerned that your TikTok data will be locked away in a server in China where they can't access it. It has nothing to do with keeping your data safe.

  • The ability... (Score:1, Funny)

    by Anonymous Coward

    "the ability of 2,700 power-tripping pigfuckers whose mothers should have had an abortion to..."

    There! Fixed the summary!

  • Surprise! (Score:4, Insightful)

    by registrations_suck ( 1075251 ) on Thursday September 15, 2022 @04:42PM (#62885489)

    This is shocking and was completely unforeseeable.

    I just can't believe it!

    • Re:Surprise! (Score:4)

      by Brain-Fu ( 1274756 ) on Thursday September 15, 2022 @05:05PM (#62885543) Homepage Journal

      I wonder how this database compares to the one Microsoft has built from all its spying on users of Windows 10 and 11.

      • Microsoft has cameras on the badge readers of every door to their offices. They are using their own employees to train their facial recognition software, and by working for Microsoft, you consent to your face being used to train an AI! On the bright side, this gives them a pretty diverse set of faces to use for training the AI, so it's less likely to fail to recognize black faces like facial recognition has done in the past.

        • Re:Surprise! (Score:5, Informative)

          by Required Snark ( 1702878 ) on Thursday September 15, 2022 @06:59PM (#62885755)
          Surprise!

          The lack of diversity in the tech workforce means that Microsoft using it's employees as test subjects reinforces bias in training based biometric algorithms. When the test set is primarily a bunch of white guys what else do you expect?

          The Problem of Bias in Facial Recognition [csis.org]

          NIST found that demographic factors had a much larger effect on false positive rates—where differences in the error rate between demographic groups could vary by a factor of ten or even one hundred—than false negative rates—where differences were generally within a factor of three. Differences in false positive rates are generally of greater concern, as there is usually greater risk in misidentifying someone than in having someone be incorrectly rejected by a facial recognition system (as when your iPhone doesn’t log you in on the first try). NIST found that Asians, African Americans, and American Indians generally had higher false positive error rates than white individuals, women had higher false positive rates than men, and children and the elderly had higher false positive rates than middle aged adults.

          • Re: (Score:2)

            by Arethan ( 223197 )

            Nuh uh! They already trained a different AI on how to apply blackface to all those input photos!

        • Re: (Score:2)

          by Plugh ( 27537 )
          No to mention the MS AI watching every keystroke you type into Outlook mail. It wants to correct your grammar, and helpfully predict your next words. Fuck MS and its AI

  • Dr Mr Wyden (Score:3, Insightful)

    by usedtobestine ( 7476084 ) on Thursday September 15, 2022 @04:44PM (#62885497)

    Please join your colleagues in congress and emasculate DHS and CBP by allowing them to only interact with non-citizens, and restrict them to 2 miles of US land borders with other countries, and 2 feet from the customs windows at international airports located within the U.S.

    • Re: Dr Mr Wyden (Score:4, Insightful)

      by mars-nl ( 2777323 ) on Thursday September 15, 2022 @06:56PM (#62885747)

      Never understood why Americans ("citizens") think basic human rights only apply to them and not to those other couple of billion humans ("non-citizens") that are not born in the land of the free.

      • CBP seem to have a growing role as an army on the streets of the US though, look at Uvalde; the high speed chase, the people even the hyper-militarized police force call in when they want to "go in heavy"

      • Re: Dr Mr Wyden (Score:4, Insightful)

        by pjt33 ( 739471 ) on Friday September 16, 2022 @06:07AM (#62886525)

        Simple: they consider all foreigners to be sub-human. It's the same way that a bunch of slave-owners could sign a document proclaiming it self-evident that liberty is an unalienable right of all men.

      • While the American theory of government is that governments have enumerated powers and people have unenumerated rights, there are in fact a few legal distinctions between citizens and non-citizens in the US. Most relevant to the current topic, under American law an American citizen cannot be denied entry into the United States.

      • Some do, and there's some truth to the allegations of racism in the other replies you've gotten. For others, such as myself, it's more of a recognition that, however noble our intentions might be, our government's authority should stop at our border, authorized foreign bases, our flagged ships at sea, etc. I personally think that we should protect *human* rights inside our borders, whether the people involved are citizens or not. I'd also LIKE for other countries to do the same for their citizens... but tha

  • Only concerned about their own data (Score:4, Insightful)

    by bustinbrains ( 6800166 ) on Thursday September 15, 2022 @04:59PM (#62885535)

    There's plenty of criminal activity done on the cellphones of those serving in Congress. That puts "raised alarms in Congress" in a whole new light.

    • That's the way it's gotta be though. All politicians are always evil. It's in the nature of the job that good people get pushed out right at the gate. So, the best thing we can do is keep them invested in the consequences of their decisions, so that things that harm us harm them too. And, of course, transparency as to their activities.

  • equivalence? (Score:5, Insightful)

    by sound+vision ( 884283 ) on Thursday September 15, 2022 @05:35PM (#62885597) Journal

    "if you aren't burglarizing anyone, you have nothing to worry about with them imaging your phone."

    --Slashdot commenters in the article about the lady's rape kit DNA being kept

    • Re: (Score:2)

      by quenda ( 644621 )

      "if you aren't burglarizing anyone, you have nothing to worry about with them imaging your phone."

      --Slashdot commenters in the article about the lady's rape kit DNA being kept

      A false equivalence. The burglar scum was caught by her ID. The airport equivalent would be retaining your fingerprints, which the US has been doing for 20 years.

      Retaining phone data would be more like if rape victims homes were searched routinely for stolen property, but that is not remotely what happened.

      • Re: (Score:2)

        by quenda ( 644621 )

        A false equivalence. The burglar scum was caught by her ID. The airport equivalent would be retaining your fingerprints,

        p.s. nothing I said should be interpreted as defending the use of victim DNA for prosecution. Both are wrong to me.
        But the two cases are sufficiently different that I can respect the opinions of those who disagree.
        GP (sound+vision) should be able to make a better argument, rather than just mocking others.

    • Objectively, not wrong.

  • You know what they say (Score:3)

    by Locke2005 ( 849178 ) on Thursday September 15, 2022 @05:42PM (#62885619)
    Customs officials always have the best porn!
  • Never encounter a Customs Official. The data is safe.

  • These types of things is why.. (Score:4, Interesting)

    by luvirini ( 753157 ) on Thursday September 15, 2022 @06:44PM (#62885733)

    .. one of the companies we work with have separate travel laptops and phones that people are to take when they go abroad.

    • I have 2 sacrificial external drives where 12v is wired to the data pins. The PC has lcd screen inverter tied to usb ports. A fake 2TB usb stick completes the garbage trick. So far, my Goodwill bin sale laptop has never been examined. I know the epoxy resin will make the disk drive hard to remove!
  • I hope somebody will have the cash to sue them until it reaches the supreme court. Scanning luggage of course makes sense but copying data from the phone is the analog of photocopying documents stored in a suitcase.

  • if this was about china doing this, who does this routinely and never ever hid the fact that they massively do this, i would expect 3 digit post numbers and several flame subthreads.

    but it's about the us government, which is all about civil and individual rights, and about american citizens, and nobody seems to give a fuck ...

    mmmmmkaaaaay ...

    • Re:22 replies? (Score:5, Insightful)

      by evil_aaronm ( 671521 ) on Friday September 16, 2022 @12:32AM (#62886263)
      It seems like every iteration of government eventually reverts to fascism. Fascism is the simplest, lowest maintenance form of government. In America's case, we're willingly devolving, and though a handful of us recognize what's happening, too many are blissfully ignorant, or, worse, are willingly applied as useful idiots to speed the process.

      In the 1770s, the Founding Fathers said, "This is some gnarly bullshit, man, and we need some cool rules!" And thus they established the Constitution, with its 4th Amendment specifically outlawing this kind of behavior. They specifically guarded against unwarranted searches and seizures because the English were notorious for just breaking into a household, and swiping whatever, and arresting whomever they wanted. "Due process? Lol. Fuck that." And the people said, "Lo! This Constitution is good and will protect us from abusive government." But it didn't last long because it never does. As time goes by, the impetus, the underlying reason for these Amendments are forgotten, or some good and honest souls on the Supreme Court decide that the government should have the benefit of "just this one little loophole. It's for the greater good." And pretty soon, it's just, "Fuck the Constitution," and we end up in a fascist state, again. Tell me we're not largely there already. The cops can do just about anything - reminiscent of Red Coats - and they get a free pass from any accountability due to "qualified immunity," which is something made up by the SCOTUS in 1967.

      Like I said, some of us recognize this, but we're a leaf against the tide. And it's a testament to the power of propaganda that you can get a person to loudly complain about those evil Chinese doing nefarious things like this, while applauding the same behavior from their own government. Useful idiots are the lubrication that aids gravity in pulling every government back down to it's lowest form.

      • Re: (Score:2)

        by Zak3056 ( 69287 )

        they get a free pass from any accountability due to "qualified immunity," which is something made up by the SCOTUS in 1967

        I agree that qualified immunity is a ridiculous construct created by the supreme court (and completely at odds with existing federal law) but as awful as qualified immunity is, it's not what you claim. It is not a "free pass from any accountability" but rather prevents law enforcement officers who violate your rights in ways that are not "clearly established" violations (which is even more fucked up) cannot be sued personally for civil damages.

        Contrary to popular belief, qualified immunity does not protect

        • Contrary to popular belief, qualified immunity does not protect cops from criminal liability, nor does it shield their employer (city / county / whatever) from civil liability.

          https://www.cpr.org/2022/09/15... [cpr.org]

          So, do you s'pose we'll see a criminal indictment announced soon? Why was the cop allowed to resume patrol so shortly after this unnecessary shooting? I'd like to believe your sentiment, but we see far too many of these killings, and far too little accountability. Prosecution and actual jail time are a rare thing, such that they are newsworthy in themselves.

          • Re: (Score:2)

            by Zak3056 ( 69287 )

            I don't disagree with you here about police accountability, but the problem you're describing has nothing to do with qualified immunity. The problem is with prosecutors who simply don't indict police officers for conduct that is absolutely criminal.

      • Re: (Score:1)

        by 0xG ( 712423 )
        But this is to *protect children* so it's OK, right?
        If you don't think so you are a pedophilia...

      • Re: (Score:1)

        by 0xG ( 712423 )
        But this is to *protect children* so it's OK, right?
        If you don't think so you are a pedophile...
        ps fuckn autocorrect

  • Apple should buy Customs (Score:3)

    by thesjaakspoiler ( 4782965 ) on Thursday September 15, 2022 @07:29PM (#62885819)

    then Customs can just access Apple's iCloud backups straightaway.

  • The data lifetime (Score:1)

    by Anonymous Coward

    CBP officials told congressional staff the data is maintained for 15 years.

    Which is as long as the program has been running: since iOS phones became a thing in 2007 and Android the year after.

    Next year the retention period will be 16 years. They don't have any processes in place to actually clean up and expunge this data, they just keep adding to it.

  • 10,000 electronic devices each year

    So, this is just a small amount that a big deal will be made of, because it is a government agency involved. This would seem to be a TARGETED attack, rather than a general-purpose one, since more than 10,000 people pass through customs PER DAY.

    Granted, it's interesting, but it is a rather specific number of people involved. Was someone who is important to the congressman involved?

    • This. 2.9 million passengers pass through US airports every day. 927 million annually. 10,000 per year is one in every 100,000 passengers. That's extremely targeted.

      https://www.bts.gov/newsroom/f... [bts.gov]

      • Re: (Score:2)

        by Zak3056 ( 69287 )

        GP is correct that this is not a general collection, but your numbers are wrong and probably off by at least an order of magnitude. Of those 2.9 million passengers, the vast majority are domestic and not international, and of the international travelers, only those coming into the US interact with CBP--the US does not do exit visas.

        • Yeah good point and I realized too late that TFA actually has the most relevant number: ..."more than 179 million people traveled that year [2021] through U.S. ports of entry."

          So not off by an order of magnitude, but much less than 900 million. Nonetheless your chances of being in the 10,000 group is really small.

          Given *how* targeted it is, I would be more interested in knowing what about those 10,000 devices made CBP want to steal/store their data. E.g. were these people whose passports had been flagged f

  • I sometimes have to fly via places like the USA and it's always a debate as to what to do about my data.
    I mean, we all carry phones and even in the airport, we're going to need that phone.

    Is it feasible to wipe the phone on every border crossing? Is it feasible to have a quick wipe option before handoff? Is it more practical to reduce what data is actually on the phone? What's the best practice here for passing through China, for example?

    - logout of your password manager, for example
    - logout of any apps tha

    • If this is a real question, one should use a disposable dumb phone for every international trip. I am guilty of not always doing that and, so far, to the best of my knowledge, have not had my devices imaged. Well they haven't been imaged at the border by US CBP or the equivalent in any country I've visited. Whether somebody broke into my hotel room at night to image my devices, I don't know. But likely not since I'm not very important.
      • You only need to use a burner phone/computer when you visit a police state like the US (they have about 15 different Federal police agencies, plus a few for every one of more than 50 states). Most everywhere else on the planet is fine.

      • This is the perfect example of not doing any threat modelling at all, and just lazily defaulting to the easy answer.

  • From what I recall iphones security copy is encrypted and they couldnâ(TM)t open it without the apple accoun credentials +2 factor auth. I donâ(TM)t know how it works with android but I bet they canâ(TM)t make copies or canâ(TM)t read them if the phone uses iOS.
    • They can read everything. If they cant read it NOW, they can in a month or three, NSO keeps on coming out with zerodays every month - like clockwork - outstanding breaches, and some CVE's would win prizes and cash for ingenuity. I am sure NSO would sell a virtual phone emulator, and you just add data. As far as one is aware, Apple does not allow you to change your keys and re-encrypt your backup. Same for Android. Ideally you should be able to blank your private keys, go through airport customs - who could
      • Zero days apply to *devices* and usually *operating systems*. They aren't coming out with zero-days that break the encryption of backups or at least not that we know of. So new exploits don't give access to old backups. That doesn't reduce the scope of the concern here, but we should at least be factually correct.
        • Just like your phone was unlocked and in their hand. With timestamped original messages, there is material to break encryption - after shortcuts have been added. https://googleprojectzero.blog... [blogspot.com] Factually correct means being aware. Strangely, Apple is now introducing a secure mode, perhaps a nod that the surface area is too huge to contain. There was also a patch to the closed blob binary of the phone modem for Android. This month was indeed, a true eye opener for security professionals.
          • Knowing part of the plaintext does not (necessarily) lead to an easier to break encryption. If it does, the algorithm is flawed. What you are describing, though, is not a zero-day exploit. If the phone is unlocked in their hand, they don't need to break any encryption to get your data. And Apple even offers the option of unencrypted backup if you don't have health data. The zero-days are useful in that maybe they can be exploited for an information leak that helps with cracking an encryption algorithm.

  • Shocking! (Score:2, Insightful)

    by VeryFluffyBunny ( 5037285 )
    This is shocking, I say. Shocking! The idea that Chinese-owned corporations might do the exact same things as American-owned corporations is outrageous & unacceptable!

  • ....They have detained serving US military personnel whilst demanding access to military issue secure laptops that they have no right to access whatsoever ... ...and if they accessed they could be charged with espionage

  • If you are an American citizen, and customs say "let me have your phone" - surely you have the right to refuse? I mean, you are returning to your own country. They cannot (afaik) deny you entry. After they have checked your passport, legally you can "no thanks" to any further questions or processing, and walk past the checkpoint.

    Of course, the tin-pot dictators will not want to accept that. Likely you will be forcibly detained for a few hours, just to assert their power. However, if some reasonable number

  • I upgraded my iPhone to iOS 16 yesterday and had forgotten about the extreme privacy mode. After seeing the summary, I looked and found how to engage said mode. Now I just need to remember it the next time I travel and return internationally, not that I had a problem last time, but I won't give them the opportunity.

  • Here's the context: You have a 4th Amendment right against searches of, among other things, your "papers", without a warrant. This is to stop the king from hassling enemies using the government's power of investigation. Such people tend to be more powerful and wealthy people themselves, and probably have violated some law or other if you look closely enough.

    Which is the goal of the king: to hurt opponents.

    But the government asserts a power to look through all the papers you carry when you enter the coun

Slashdot Top Deals

Pascal is not a high-level language. -- Steven Feiner

Close