it's as long as you're not doing anything wrong you don't have to worry about it Then once changed the definition of what wrong means.

If you're not a criminal you don't have to worry about it That's for your safety Then they changed the definition of what a crime is

Don't kid yourself. That's what they want. They're slowly testing to find out how much they can get away with. Would you have imagined that the nation would quietly sit back and allow what's been done so far ten or twenty years ago? Just because there have been large protests doesn't mean anything. Congress should have been outraged on both sides at this madness, but one side only cares about winning (so they like it) and the other is completely feckless.

If it walks like a duck, and quacks like a duck.. might just be a duck.

I don’t believe those living “normal lives” in East Germany or the Soviet era considered the police to be evil and invasive the way we do today.

At what point? It's easy to say when we mention the Stasi or the Nazis that we're comparing it to the end game they had going, but the transformation was a bit of process.

The US steals more data and conducts more illicit monitoring of people in a day than the Stasi ever could in a year. Its just that the Stasi lived in an analog world, so you had lots of PHYSICAL material leftover for people to point at in faux horror.

Even now, the US is busily deploying electric shock gloves whose main selling point, DIRECT FROM THE MOUTHS OF LAW ENFORCEMENT, is that they allow pain to be administered to enforce "compliance", without leaving any real evidence.

And they are being trialed in Nebraska. On ... SCHOOL CHILDREN.

(and to complete the dystopian joke, check out the name of the company selling these Dr Doom gloves)

Whats that you hear? Howls of outrage & dissaproval from the denizens of "The Land of the Free" (tm)?

Err, no. Its just the wind blowing leaves around.

You sir are the proverbial frog who has been in the pan so long, he doesn't realise he's being boiled alive

I also do find americans to be utterly naive regarding this slide towards fascism, and I live here so don't bother trying to explain it to me.

You only saw the end result regarding the "universe as what the Stasi was doing", obviously you didn't pay attention to the road getting there.

the stasi were spying on people and putting them in jail. what exactly is your claim about the difference? is it a difference in distinction or a difference in degree?

What we hear about is far from comprehensive, and many of the atrocities won’t be unveiled or investigated until the next decade.

The Epstein cover up shows they’re used to keeping secrets.

I’m not sure why we’re pretending there’s not a convicted felon in charge of the entire system.

Fascism marches on in full swing.

Canada is moving further from US, not closer. Canadians who support Americans are in the minority at the moment.

I'm not sure how a new US president would be able to turn it around.. further more, what's to say that the president thereafter will follow suit? How about the next 5?

It's becoming more obvious every day. And yeah, people in 1910 watched Europe dominate the world for about 1500 years. Yet it came to an end.

If you want to Speedrun the collapse, vote for trump. He sure is making a good job right now with diplomacy, lack of long term planning and just getting all your allies to hate you.

Overall as a country, undoubtedly. However, a vast majority of Americans are worse off than a decade ago.

A lot of wealth was created, relatively little went to the people though.

[1] I'm not defending the behavior of border control here, but I also don't think we need to overreact to this one example which is exactly what is happening.

I'm pretty sure that barring shenanigans we'll get an D president next time. I'm also pretty sure that we're kicking many cans (economic and otherwise) down the road that are set to blow up during the next administration so that we'll likely be back here again in 2032 with an R. Remember, after Watergate Carter was able to win in 1976 because people were tired of corruption - at the time most people thought that another R administration wouldn't happen for a couple of decades at least. But Reagan(R) won just 4 years later in 1980.

I'm also pretty sure that given the goldfish memory that most American voters have that a hereditary Trump dynasty isn't at all off the table. Look at the Philippines: they have a Marcos in power again. Look at Peru: they've got a Fujimori in power again.

I’ve mentioned it in the past as well - all actions look like a knee-jerk reactions and hail marys to try to regain the power.

It has already lost. America lost in Vietnam. Lost in Afghanistan. Turned Middle East into a humongous mess. Now losing badly in Iran. The only "wins" it had were against Countries where odds were already heavily in its favor (in other words invading tiny countries that did not have the technological wherewithal or the will necessary to fight back).

> 10y later they're richer than ever

The rich are richer than ever yes. Ask any common American citizen and he/she will come chasing after you for saying this.

> its companies have global dominance of the most world-changing technology of the last 20y. I just don't think "the collapse" is coming anytime soon.

That dominance is fast eroding. America itself has ended globalization. It is retreating from many crucial positions: like when it comes to cross-border payments, protecting freedom of navigation in high seas, deals that it had previously negotiated with all countries of the World, unable to protect allies in the Middle East and even in South East Asia, not delivering on defense commitments with partner nations... the list goes on and on.

> If anyone's interested in a friendly wager, my email is open. I'll happily go 1:1 odds that America will have a new president come 2029 and the country will still remain the world's richest and most powerful.

None of us believe America will collapse by 2029 and that there wouldn't be another President (unless Trump is really stupid enough to go down that route which I don't think he will). But by 2045? Yeah absolutely is possible.

You are undoubtedly correct that at some point there will be new leadership in the US.

Politics makes leadership change a possibility. Biology makes it an inevitability.

But I don't think the evidence is very strong that switching from one man to a different man, even if the new man wears a blue hat instead of a red hat, will make that much difference against capital and its surveillance state.

This isn't a false equivalence "both sides" argument. I'd greatly prefer the blue hat over the red hat.

But the blue hat only makes the underlying forces of late capitalism a little slower and a little less vicious, while simultaneously legitimizing that system.

The USSR is a great example: it took 65 years to fall, and the collapse didn't bring it to anything particularly good.

The guy doesn't have the stomach for real totalitarianism. Just populism, corruption, and weakening the country.

This is a popular sentiment, not a statement of historical fact. Arguments both for and against this are credible.

“ he has been ensnared by National Security Presidential Memorandum-7, or NSPM-7, a sweeping directive issued by President Trump last September that expanded the definition of domestic terrorism to include crimes like getting in the way of immigration enforcement. His prosecution is one of the earliest known instances of the federal authorities charging a person with destroying evidence using a program designed to wipe a device clean after a specific code is entered.”

So, while “no privacy at the border” has always been a thing, the re-categorisation of this as “domestic terrorism” is new.

unclear as to where you got this number

1) Nazi Germany, following debt/inflationary collapse of Weimar Republic.

2) Bolshevik Revolution, following WWI induced debt collapse of Tsars.

3) French Revolution, following debt collapse of Monarchy.

Now where are we? 40 trillion in debt. The interest is $1.1 trillion the amount added to it yearly is $2.1 trillion. The entirety of a government spending would need to be wiped out just to keep it where it is.

If you had the books that got burned, you’d know the cycle, and the fact that electing democrats isn’t gonna change a damn thing.

I have exactly zero expectations of real consequences to Trump. He has far too much popular support for that to be realistic. But I will say that everybody else in his regime better hope he writes them a broad preemptive pardon before he leaves office because the teflon only works for him.

Not a snowflake’s chance in hell unless the DSA metaphorically push the doddering old guard down the stairs.

Where's the Project 2028 book?

Is there anyone credible putting together the Executive Orders to undo the stack of shit, is anyone putting together a short list of District Attorneys to interview on January 21, etc?

In terms of the ending, East Germany was nearly an ideal case. The state just sort of gently fell over. The country got absorbed into a friendly neighbor. There wasn't much loss of life, no widespread destruction.

Then there's East Germany's predecessor state, which ended because it decided to wage war on half the world, and its people bore the consequences. Millions dead, cities wrecked, occupation by foreign armies, the country carved up. "This too shall pass" isn't always a good thing.

Or look at the state that created and sustained East Germany. Borne out of violent revolution, decades of repression, collapse, turmoil, economic hardship, brief flirtation with democracy, de facto dictatorship, no end in sight.

My biggest worry with the US right now isn't the government itself. It's that so many people want this government. Voting doesn't help when the voters want the bad stuff. We could have a very different government in another two years if the people want it. I'm not convinced they do. If they do I'm not convinced that sentiment will last. We already went through this once, and the "actually, let's not give the shitheads power" sentiment fell apart by the next election.

> And no, it doesn't have to take 40 years to right the ship, so long as people get their heads out of their asses and vote.

so then you admit the outcome here is contingent/conditional. do you understand that means we are already in dire circumstances if the outcome isn't certain?

One of the laws that's enforced pretty well in the USA is the protection against unreasonable search. Most of the time, a search requires showing a judge evidence that the search is more likely than not to reveal evidence of a crime. Exceptions are narrow and specific; the government's options to punish someone who refuses to decrypt data at the border are limited to brief detention and seizure of the medium.

Not yet tested is the idea that erasing data on the spot satisfies the purpose of the border search exception, which is to prevent importation of things that are illegal to import. This case might address that question.

Americans aren't standing up against this, but they might have considerably more interest if the government was instead trying to ban encrypting data in cloud storage for everyone.

There's also just the fact it's ridiculous I can't have a spare phone ready to go in a few minutes and get it back exactly as I left it.

[0] https://en.wikipedia.org/wiki/ESIM

> It's the same thing. They punched in a code, they are presented with a wiped phone.

No, the behavior between the two is in fact visibly and obviously different.

The regular passcode unlocks the phone. The duress passcode reboots the phone and resets it. I know this because this is literally what previous articles said happened when they entered the passcode in regards to this case.

See for yourself:

https://www.youtube.com/watch?v=jcgnBjHOK2g

It doesn't even care about plausible deniability.

Best you can get away with is lack of suspicion. Have a secondary phone with some standard apps on that you use now and then so theyhave a history and just look like you are just not a technical person and read novels on dead trees instead. A lot of work but likely works.

They don't get any indication that there was data there to be deleted, and you don't just factory reset but flash w an image of a clean phone that's been used. It has apps, it has accounts, it looks to the untrained eye (because that's who's looking at it) like a phone that was used normally by someone who has done nothing wrong.

The transfer and backup system are pretty much the same mechanisms.

Restoring is probably order of ~1 hour to go through all the setup. Then some hours to sync any data and updates that need to be redownloaded, apps reinstalled, etc.

Perhaps less likely to go wrong than my original proposal when living normal life, as it might wipe if the BLE signal randomly gets lost.

It would be nicer if you could leave phone in cage during security, and remove beacon while loading airport trays ("remove all electronics from their cases..."). the only chance for a failure mode is only when you're going through security, and have the fob outside its case..

But you'd need to be able to leave your phone in the faraday cage pouch while going thru security, which is only ok if they don't notice... (maybe they commonly don't notice small faraday pouches aren't empty... Maybe they wouldn't if you had a secondary mobile device...)

Isn't that the same issue here that resulted in felony charges? Border agent was given a duress PIN and wiped the phone for the owner. Now owner is charged.

Regarding the motivation for usbkill mentioned in the article: I too was motivated to think on this stuff in relation to my sense of injustice around Ross Ulbrecht, and wanting to think of some way that someone in his position could avoid getting caught. One creative variant in my thinking involved embedding the BLE beacon inside a rubber ball that could be launched and lost track of. Or maybe embedded in heel of a shoe and ditched in transit haha

They're also now well aware of the GrapheneOS duress PIN/password feature. It was designed to work against an attacker aware of it by acting as a deterrence. If they're aware of the feature, it discourages them from trying to coerce a PIN/password and attempt to unlock with it. We aren't fond of features depending on an attacker being unaware of them and this isn't one of those.

Pixels have a high quality secure element enforcing a maximum of 20 unique attempts to derive the encryption keys for each separately encrypted profile. There's also very aggressive rate limiting between the attempts. It filters out duplicate attempts by temporarily remembering the previous 5 unique attempts to make the rate limiting more usable. A misremembered PIN/password repeatedly entered over and over will only use up 1 attempt.

Android does have standard support for enabling wiping after N attempts and an open source app can be used to set a configurable limit rather than specifically after 10.

(That's one of the reasons why it's trivially easy for foreign visitors to China to bypass the Great Firewall.)

If you were on wifi, that's notably interesting.

There are vendors that sell the technology to adversarially access phone data, the "Before First Unlock" is the safest state a phone can be, but it's not infallible. The safest option is to have a burner or factory-reset phone with nothing on it, even if the hack succeeds.

A compromise to this is that many phones have a "lockdown" mode, where it isn't fully off but refuses to accept biometrics until a code/pattern is used to bring it to a more day-to-day mode.

It's less-secure than being fully off, but it also means if you do need to access your phone you can do so more-quickly.

The important wrinkle is that CBP’s published policy expressly guarantees that a person being admitted as a U.S. citizen won’t be denied entry solely because CBP couldn’t inspect the device. It doesn’t give lawful permanent resident (green card holders) that same explicit statement. Instead, it says refusal by a “foreign national” can be considered in an admissibility determination.

It's actually been on the books for a while (decades at least) that customs can search you at the border without a warrant even if you are a citizen.

This case seems to have become a big 'Trump bad' poster child (people are calling the US East Germany in these comments...), but if this exact scenario happened at least in the last two decades (I found an example upholding the searches from 2004) then it would at least be possible to charge them with deleting evidence. Even this probably would have been nothing if he refused to give up his password, not being required to provide a password has been upheld for years. They can seize your phone for some time but I'm unsure on the times they ask and then just let you move on when they find out your a citizen.

A proper burner phone has basic usage on it. Link it to a Gmail account you don't use for anything else so you can have your ridesharing apps on it. Just enough for travel purposes, but nothing else.

If you really have to, have some social media accounts on it too and give them a basic amount of usage. Snap photos of the country you went on the trip to, etc.

Why would the bomb squad trust the box owner to help them defuse it? To understand the issue, you have to construct a proper analog.

Briefly: no.

Less briefly: <https://news.ycombinator.com/item?id=49060780> and <https://news.ycombinator.com/item?id=49060716> (from the grapheneos HN account directly).

Reliably deleting data at the scale of the whole data partition, a secondary user or a Private Space is fully supported but requires a reboot or shutdown to truly complete it.

After wiping key derivation material needed to obtain the key encryption keys in multiple ways and wiping the encrypted disk encryption keys, the OS can still access the data. It still has data in the page cache, in registers and elsewhere. There are still a bunch of system processes with data tied to what was removed. The OS is still fully functional after the nearly instant wipe of everything needed to recover the data again. It can still access all data other than what's encrypted with hardware keystore keys and not currently decrypted.

The wiping process for the duress PIN/password is completed with a shutdown which tears down everything, zeroes memory and provides at least a small time window where the hardware is powered off too. A reboot would also work and the boot process has explicit zeroing of memory, registers, etc.

We decided to use shutdown for the duress PIN/pasword but a reboot is a valid approach too. Our locked device auto-reboot timer feature we first shipped in 2021 relies on the zeroing done by GrapheneOS for both the process of the OS tearing down and then again during booting to return the device to Before First Unlock state.

> also create a semi plausible artificial profile to hide the deletion event.

It isn't feasible to fool forensic software so it largely wouldn't work against state actors. It nearly certainly wouldn't have helped in this situation in the news. They aren't reliant on a non-technical person sifting through a phone. They'll just hook it up to a laptop and follow the data extraction procedure which involves enabling ADB. The software is aware of GrapheneOS can guide people through dealing with anything different about it. They've had a lot of trouble with extraction via ADB for GrapheneOS since the vulnerabilities they exploit via ADB keep getting patched or blocked it exploit protections but it isn't realistic to block extraction with them having the PIN/password. They could just enable the encrypted backup service in the OS instead and then use CLI tools to extract the data from there with the seed phrase. They don't do that because they want everything rather than only nearly all app data. They also have special code to deal with apps such as Signal with their own layer of data encryption since the data taken from their app data directory is nearly all useless by itself.

There's also quite a difference between wiping and rebooting into a not very plausible environment with decoy data set up by the user in advance compared to not properly wiping and giving access to a decoy profile. Bear in mind the OS can still access nearly all data after the wipe until a reboot. It could make a best effort attempt at purging as much as possible from memory, but the OS is not designed to continue functioning with all of the data disappearing. It can't just wipe all loaded encryption keys without crashing and rebooting anyway. It also has a ton of data still around in caches and elsewhere. We don't want to just do a best effort job cleaning up as much as we can but rather reliably prevent recovering any of the deleted data.

We could definitely add a duress PIN/password which wipes only specific secondary profiles, reboots and has the device still functional with whatever data was in the main user still there. That's a feature we can add, but it's important to note that it will not hide that there was deletion of data. It's easy to detect, and it's not feasible to hide that it happened. Many steps can be taken to make it less obvious, but it will still be easy for software aware of it to detect. Even a massive overhaul designed to perfect it would not address the SSD itself giving away what happened for more advanced analysis.

We aren't going to add a decoy profile compromising the security of the device and providing a way to recover data in a state where it isn't at all unrecoverable yet. We did already plan to consider a 2nd duress PIN/password which only wipes specific secondary profiles, but we need to make it clear that it cannot stealthily wipe them to users.

A duress code might let me wipe my phone when someone holds a gun to my head and demands I unlock it. Problem is, there’s still someone holding a gun to my head.

but that's not the point, the point is to not wind up in court by presenting a phone that no long contains evidence but seems plausibly like your phone so doesn't arouse suspicion

> Tunick provided this code to an agent, who entered it on the phone, after which “the screen went blank, flashed several times and the phone appeared to restart.”

You know, the same way we would be rightfully outraged if Apple was allowing applications to turn on the web cam without signaling to the user that the camera is engaged.

That’s all aside from the fact that Hungary was run by authoritarian minded people. But just as I think it should be illegal for cameras installed in glasses to work without an indicating light, I don’t see how this recording light situation you are describing is really such a highlight of Orban’s excesses.

Forgive my ignorance, but how is any of this true? Frontier LLM labs are practically begging governments to tell them how to act, the most profitable class of technology company is surveillance-focused (like Flock and Palantir) precisely because the government money is ubiquitous and unquestioning, and everyone else is "donating" money as fast as they can and getting blanket legal indemnification in return.

*https://www.nbclosangeles.com/news/local/la-family-120-days-...

*https://www.militarytimes.com/news/your-military/2026/08/20/...

I'm reading Stefan Zweig right now, he was a prolific Jewish author from 1890s until his suicide in 1942, living as an exiled Jew from Austria in South America. He has written many words, over a century ago, that would support your claim.

The current situation is a result of a nearly unanimous Washington consensus regarding this issue. Not one party vs another.

Of course, Snowden gave us definitive proof back in 2013 that 'rights' were being systematically violated for arbitrary purposes. But, no one dares be objective about world events lest they accidentally seed territory to their enemy! "But we can use that for XYZ if we get in!" says the American with glee.

If Americans could be honest with themselves, they would realize national collapse is imminent within a decade. The only path forward is treating those around you with respect such that community is preemptively fostered before it is invariably required for survival.

But this case is pretty clearly about negative rights (preventing the government from doing something) which based on the original Bill of Rights is pretty clear.

> The right of the people to be secure in their persons, houses, papers, and effects, against unreasonable searches and seizures, shall not be violated, and no Warrants shall issue, but upon probable cause, supported by Oath or affirmation, and particularly describing the place to be searched, and the persons or things to be seized.

> The border search will include an examination of only the information that is resident upon the device and accessible through the device's operating system or through other software, tools, or applications. Officers may not intentionally use the device to access information that is solely stored remotely. To avoid retrieving or accessing information stored remotely and not otherwise present on the device, officers will either request that the traveler disable connectivity to any network ( e.g., by placing the device in airplane mode and disabling Bluetooth and Wi-Fi connections) or where warranted by national security, law enforcement, officer safety, or other operational considerations, officers will themselves disable network connectivity. Officers should also take care to ensure, throughout the course of a border search, that they do not take actions that would make any changes to the contents of the device.

and

> Passcodes or other means of access obtained during a border inspection will only be utilized to facilitate the inspection of devices and information subject to border search. Passcodes or other means of access may not be utilized to access information that is only stored remotely. Passcodes or other means of access should only be recorded by the officer in a temporary format and should not be uploaded into CBP systems. Passcodes or other means of access recorded by the officer will be deleted or destroyed when no longer needed to facilitate the search of a given device.

The premise that the law doesn't apply because you're not in the country is false. The constitution applies generally everywhere to all Americans, it's just that what's regarded as reasonable differs during a border search. IANAL, so just my lay opinion on this. Just to validate this, it's only because the constitution exists that the border authorities have any legal basis in doing inspections.

Also, that constitutional protections are suspended within 100 miles of a land, sea, or air border.

So in the article situation, the guy is a protestor and presumably suspects he’s going to be targeted by the police for it. He’d keep that stuff isolated from his usual activity. There’d be no need to generate convincing fake activity.

Certainly more of a hassle than having a PIN that can destroy everything.

When the administrative enforcement bureaucracies want to harass you they'll hit you with some ruinously expensive civil fine BS. No court will give a crap about you until you've exhausted a bunch of appeals, which you of course appeal to the same agency that's trying to screw you. Only after years of that (and invariably legal fees, because you can't go it alone), do you sue them and get to see a real courtroom. But even then, this is a civil matter, not a criminal one, so all your rights have been nerf'd and there's a hundred years of precedent and case law that tilt things in their favor. If you get lucky, they'll settle and you'll only be out a few tens of thousands for the ordeal.

Evidence with regard to which investigation?

Although then you get a possible delay of undefined duration, additional questioning and seizure of your device.

I'm curious, is there any case law from the pre digital age regarding people forced to open their briefcase and let the border guard read all their documents at a port of entry?

And that alone is already a pretty scandalous problem. If the law is not stated in a way that ordinary people can understand, how the hell are they supposed to obey it? Those who cannot afford the highly paid law explainers are basically locked out of society.

The Constitution is written in plain English. And for the most part, Supreme Court decisions are written in plain English that any reasonably literate US citizen can understand. Yes, the law has technicalities and terms of art just like any other profession.

But one of the most damaging mentalities in modern times is the idea that the common man is incapable of understanding the law at even a basic level. This is flat-out not the case. Which leads to the follow-on problem: people who think lawyers have the ability to cast magic mumbo-jumbo spells that "get their clients off on a technicality" somehow. The best quote I ever heard about that from an attorney was "any time someone says a person 'got off on a technicality,' you can pretty much just safely replace that in your head with 'had their constitutional rights egregiously violated.'"

Yes, there are problems. Qualified immunity is a problem. Prosecutorial misconduct can be a problem. Abuse of discretion at the border is a problem. But that's different from doomerism about the entire justice system to the degree Very Online people express it.

My fondest border experience was many years ago when entering France; this was before the UK had joined the EU. (Our later exit was dumb, IMO.)

Anyhow, a youngish officer - probably mid-20s or so - examined my passport while asking questions, in perfect English. His voice was even and his demeanour calm and professional. Then he took a step back, closed my passport and put it in his pocket. A few seconds later, he started laughing and said: "The look on your face. Priceless. Welcome to Paris."

He really had me and I saluted him for that.

[0] https://arstechnica.com/tech-policy/2020/02/man-who-refused-...

> Courts have generally found that compelling individuals to provide their numeric or alphanumeric passcode is potentially testimonial under the Fifth Amendment, as it forces the defendant to reveal “the contents of his own mind.” In Re Grand Jury Subpoena Duces Tecum 670 F.3d at 1345; see also U.S. v. Apple MacPro Computer, 851 F.3d 238 (3d Cir. 2017). It is analogous to compelling production of the combination to a wall safe, which is testimonial, as opposed to surrendering the key to a strongbox, which is not. See Doe v. U.S., 487 U.S. 201, 220 (1988). However, even if a court finds that providing the passcode is “testimonial,” it may still fall under the “foregone conclusion” exception

https://www.nacdl.org/Content/Compelled-Decryption-Primer

In short, you can't be compelled to give up the code in a dragnet attempt to find evidence against you (e.g. a boarder guard can't riffle through your text messages to see if you might have done something illegal), but if it's already certain that particular evidence exists on the device as a result of other evidence, they may be able to compel you to give up your passcode.

Note though that the cases where this has come up are very few and far between, and there isn't a super clear overriding precedent to follow.

In general though, the best choice here is to say nothing at all and work with a lawyer to figure out how to proceed.

We were talking about an attacker taking an image of the SSD prior to it being wiped not helping them because information needed to derive the key encryption keys is gone from the secure element. It similarly doesn't help them to do a brute force on a server farm since they're rate limited by the secure element. It only allows 20 attempts and has rapidly increasing delays between those. There's also hardware bound key derivation but that only helps improve the strength of a decent password. The secure element rate limiting makes even a random 6 digit PIN highly insecure unless an attacker can exploit the secure element.

OP is talking about just backing up what you need off-phone and then wiping it.

I would not present a phone to customs that had clearly just been wiped.

It is pretty clear to me that law enforcement conspired to abuse a border crossing to effect basically an unconstitutional search ("fishing expedition"), which it would never have gotten a warrant for.

This is them being spiteful after that whole thing failed. Note how law enforcement basically admits this on the record. The whole thing is a disgrace; every decisionmaker involved in this should be sacked immediately.

funny reading this (don't disagree) and then also reading on HN how China is "bad" this is some gestapo shit but not surprising that it is getting normalised ...

Issuing 'burner phones' and laptops to staff visiting countries such as China or the USA is now SOP for many companies handling sensitive data, including mine.

Don't think this isn't unusual.

A couple weeks before your trip, factory reset whatever burner phone you're planning on using and swap your SIM card over. Install a few basic apps you wouldn't mind them looking through. Enable hotspot/tethering, and connect your other phone via Wi-Fi.

For a couple of weeks, use the burner as much as you can with what is available on it. When you're driving, us the maps app for GPS. Make and receive some calls, ignore some spam calls. Read the news. Get a few inane text messages conversations going, etc.

When you travel, leave your regular phone at home and take the burner. When it's searched at the border, it has enough activity to pass most initial smell tests. If asked, you dropped your other phone and didn't have time to get it fixed before your trip, this is one a friend lent you.

This has worked for me. Never _actually_ into anything illegal, but just apparently had a suspicious vibe about me or something because every time I crossed the border into or out of the country I was spending 4-5 hours getting searched. Didn't need someone going through my entire life going back decades every time--once was enough.

At the end of the day, it's always best to just not have anything "bad" on your devices. People have been caught up for all numbers of "innocent" reasons (pictures of their kids in the bathtub, ancient photos in their albums of themselves doing illegal things such as drugs or underage drinking, text messages or browser history disparaging politicians the border guard may support, porn in your history) that can give a border guard in a bad mood good reason to ruin your day.

I personally don't want my phone data hoovered in and analyzed or marked, even though I don't really have anything to hide. I don't care enough to do anything about it, but if I did I would probably have a second travel phone with a curated amount of data, apps, accounts, etc.

This is where machine-like personal consistency is deeply important to opsec. Not just for technical reasons, but for legal reasons also.

If you wipe your phone before every national border crossing and restore it after every border crossing as a part of your standard procedure for travel, it will be much harder for a prosecutor to argue that you have ever done so in anticipation of some particular search. If your employer's security policy mandates doing so, that is even more evidence against anticipating a specific search. If a large body of infosec/cybersecurity professionals advise a wipe/reset of your phone before any and all international travel, that is further evidence for defense.

The truth is that the Democrats have no appetite for dismantling the security state because Republicans would screech that they were making Americans less safe and Democrats would rather not have that fight than make a counterargument for civil liberties and Constitutional values.

https://www.congress.gov/bill/104th-congress/house-bill/2202

https://www.congress.gov/bill/104th-congress/house-bill/3610

It's easier than ever to check legal assertions before you post instead of posting incorrect information.