this post was submitted on 17 Aug 2023
211 points (100.0% liked)

Technology

37742 readers
72 users here now

A nice place to discuss rumors, happenings, innovations, and challenges in the technology sphere. We also welcome discussions on the intersections of technology and society. If it’s technological news or discussion of technology, it probably belongs here.

Remember the overriding ethos on Beehaw: Be(e) Nice. Each user you encounter here is a person, and should be treated with kindness (even if they’re wrong, or use a Linux distro you don’t like). Personal attacks will not be tolerated.

Subcommunities on Beehaw:


This community's icon was made by Aaron Schneider, under the CC-BY-NC-SA 4.0 license.

founded 2 years ago
MODERATORS
 

Summary

  • The Marion County Record newsroom in Kansas was raided by police, who seized two cellphones, four computers, a backup hard drive, and reporting materials.

  • A computer seized was most likely unencrypted. Law enforcement officials hope that devices seized during a raid are unencrypted, as this makes them easier to examine.

  • Modern iPhones and Android phones are encrypted by default, but older devices may not be.

  • Desktop computers typically do not have encryption enabled by default, so it is important to turn this on manually.

  • Use strong random passwords and keep them in a password manager.

  • During the raid, police seized a single backup hard drive. It is important to have multiple backups of your data in case one is lost or stolen.

  • You can encrypt USB storage devices using BitLocker To Go on Windows, or Disk Utility on macOS.

  • All major desktop operating systems support Veracrypt, which can be used to encrypt entire drives.

Main Take-aways

  • Encrypt your devices, drives, and USBs.

  • Use strong random passwords and password manager.

  • Have multiple backups.

top 33 comments
sorted by: hot top controversial new old
[–] Gormadt 33 points 1 year ago* (last edited 1 year ago) (1 children)

And don't forget to use encrypted messenging apps like Signal.

And do your research into which apps, programs, etc have the best encryption.

[–] gamey@feddit.rocks 7 points 1 year ago (2 children)

I vouch for Veracryp, Signal, Matrix and your favorite Linux Distro, can't beat those tools!

[–] blackstrat@lemmy.fwgx.uk 5 points 1 year ago (2 children)

If you're not a world leading cryptographer and security expert then you vouching for something isn't worth much. It's just repeating others opinions without having done the work to verify these tools are as good as they claim. Any or all of these could have issues and weaknesses that you don't know about.

[–] gamey@feddit.rocks 4 points 1 year ago

Yes I don't understand the exact mechanisms but I did my research and no one could verify all of those huge codebases, we have experts in public so normal people can do their research and no I don't have to read every line and understand the mathematical formular to recommend secure tools...

[–] RickRussell_CA 1 points 1 year ago

Although you don't have to be smarter than the experts, just smarter than police. Few local PDs can bring the kinds of resources to bear to do a decrypt on a properly encrypted data store.

Obviously if you're pissing off major state actors, all bets are off -- they are probably already surveilling you and saw you type your password through a zoom lens pointed at your window, or worse.

Don't forget delta chat.

[–] r00ty@kbin.life 23 points 1 year ago (1 children)

Encrypted cloud backup! They can take my drives, but the data is encrypted on the cloud.

[–] jarfil 17 points 1 year ago (2 children)

The cloud is someone else's computer, they can take that too.

[–] TheHalc@sopuli.xyz 6 points 1 year ago (1 children)

Sure, but there's not much they can do about it if things are properly encrypted, for example using DKE on M365.

[–] jarfil 5 points 1 year ago* (last edited 1 year ago)

properly encrypted, for example using DKE on M365.

Wouldn't call that properly encrypted... but either way, when they lock you out "pending an investigation", that's no longer a backup.

[–] slacktoid@lemmy.ml 2 points 1 year ago (1 children)

Get a storage space. put servers in it. profit.

[–] snowbell 1 points 1 year ago (1 children)

I considered this a while back but it is hard to find a place that stuff doesn't get stolen from and has power available in some form.

[–] slacktoid@lemmy.ml 1 points 1 year ago

That puts a wrench into that plan

[–] argv_minus_one 14 points 1 year ago (2 children)

If you encrypt your device, and dirty cops like these decide they want in, they'll just toss you in the slammer and forget about you until you either cough up the password or die of dehydration. Either way works for them.

[–] marco 17 points 1 year ago (1 children)

Similarly when you cross a border... you don't have to give them you password, but they can just keep you for a few days. Also note:

Currently, police officers have the authority to demand that you unlock your mobile phone using face recognition and fingerprint identification. When unlocking your phone, police officers have no right to demand that you disclose your passcode or pattern.

https://esfandilawfirm.com/can-police-unlock-your-phone/

[–] argv_minus_one 19 points 1 year ago (2 children)

They can also kill you where you stand with total impunity, so I'm not sure I see how these limitations of their supposed rights are at all meaningful.

[–] marco 4 points 1 year ago (1 children)
[–] argv_minus_one 10 points 1 year ago* (last edited 1 year ago)

Law enforcement routinely makes demands that are intentionally impossible to comply with, such as the deadly game of Simon Says that was played by the officers who murdered Daniel Shaver.

It's like a cat playing with its prey. The prey is not intended to survive.

[–] RickRussell_CA 2 points 1 year ago

It's layers on an onion. Every extralegal step they take provides a possible mitigation if you go to trial.

Obviously, if they straight up murder somebody, that's a whole different problem. But in general, you should invoke your rights at every step of the process, so that if they trample over those rights you'll have an argument in court to get evidence or charges thrown out.

[–] Laitinlok@discuss.tchncs.de 3 points 1 year ago (2 children)

No I won't give the password

load more comments (2 replies)
[–] Laitinlok@discuss.tchncs.de 13 points 1 year ago (2 children)

Bitlocker only support win 10/11 pro or above, most devices are shipped with win 10/11 home which doesn't have the capability. Linux supports full drive encryption using LUKS.

[–] Frederic 2 points 1 year ago

Yup, my win10 and win11 have bitlocker on. They dual boot with Linux, FDE on them too.

[–] RickRussell_CA 1 points 1 year ago

Well, you can work on a Veracrypt partition.

[–] binaryphile@kbin.social 12 points 1 year ago

Offsite backup

[–] intensely_human@lemm.ee 10 points 1 year ago (2 children)

So encryption really matters, totally agree. Protection at all times.

But I’m also curious about this story. Why are the police raiding a newspaper and seizing computers? That is sketchy as hell.

[–] RickRussell_CA 16 points 1 year ago (1 children)

Short version:

  • Police chief was accused of sexual impropriety, and the newspaper was investigating.

  • A prominent local restaurant owner got caught in a DUI and the newspaper got a tip and investigated. On investigation, they decided the story was not newsworthy.

  • Police raided the newspaper claiming that the DUI tip was the result of illegal computer hacking, and that they had to confiscate the computers to analyze for evidence of hacking.

  • The judge who signed the search warrant also had a history of DUI.

  • Critics believe that the police used this hacking claim as a thinly veiled excuse to cripple the newspaper and check to see what they really had on the chief.

  • Critics have also suggested that the police themselves may have leaked the information to set up the flimsy excuse for the search.

[–] intensely_human@lemm.ee 3 points 1 year ago

Thanks for the summary.

That is kind of what I suspected which is:

  • There was some conflict between the newspaper and local government
  • Government found some flimsy excuse to attack the newspaper

Overall that’s bad news. It implies the government’s gloves are coming off.

[–] plantstho 12 points 1 year ago

The paper was investigating the police chief.

[–] MonkderZweite@feddit.ch 2 points 1 year ago

Or only encrypt your sensutive data, having it in a encrypted cloud storage (rclone, cryptomator, such things).