Winnie_LDFeb 8
Durrell

Heading back to the U.S.? 🇺🇸

Stop deleting everything. A blank phone is a massive red flag to Customs. 🚩

I’ve updated the Travel Mode Protocol with new forensic protections based on 2026 learnings:

1️⃣ Android: Use the "Cold Switch" method. This keeps your main encryption keys out of RAM (BFU state).

2️⃣ iOS: You MUST Disable Face ID. This forces the "Hidden" folder to use a Passcode (which has 5th Amdt protection).

See the step-by-step guides attached 👇🏾

#Privacy #TravelTips #InfoSec

Feb 8 at 9:01pmMastodon for Android
Show threaddecapitaeFeb 9
@Durrell If you can though; avoid travel to the u.s. until the regime is stomped to dust and a global apology has been issued.
Show thread@ChrisCorrigan has movedFeb 9
@Durrell you say these are fact checked. Can you post your sources, please?
Show threadBruce ElrickFeb 9
@chriscorrigan @Durrell
No kidding. I would be very surprised if logging out of apps clears cached data for that app. Uninstalling, sure, but logging out?
Show threadDurrellFeb 9

@virtuous_sloth @chriscorrigan

You are right: "Logout" ≠ "Wipe." Cached images often persist on disk.

However, the "Cold Switch" (BFU State) neutralizes this.

When Powered Off (BFU), that cache is Encrypted. Even if the files exist, forensic tools (like Cellebrite) cannot read them because the decryption keys were wiped from RAM at shutdown.

Source on BFU/Encryption:

https://teeltechcanada.com/understanding-mobile-device-lock-states-in-forensic-extractions/

Understanding Mobile Device Lock States in Forensic Extractions - Teel Technologies Canada

Your name Your email Subject Your message (optional)

Teel Technologies Canada
Show threadDurrellFeb 9

@chriscorrigan
sources
☁️ Data: CBP Directive 3340-049A (Sec 5.1.2) prohibits accessing data stored solely on the cloud.
https://www.dhs.gov/sites/default/files/publications/CBP%20Directive%203340-049A_Border-Search-of-Electronic-Media.pdf

Bio: United States v. Brown (D.C. Cir. 2025). The court ruled that compelled biometric unlocking IS testimonial (5th Amdt violation), splitting from older 9th Cir rulings.
https://www.arnoldporter.com/en/perspectives/advisories/2025/03/when-your-fingers-do-the-talking

Forensics: The 'Cold Switch' puts the device in BFU (Before First Unlock) state, where encryption keys are not yet loaded in RAM.
https://teeltechcanada.com/understanding-mobile-device-lock-states-in-forensic-extractions/

Show thread@ChrisCorrigan has movedFeb 9
@Durrell thank you!
Show threadtkissingFeb 9

@Durrell Constitutional rights might have protected travelers under other administrations, but they barely work for citizens. Non-citizens were always at the mercy of CBP entering the USA and mercy has been banned by the Trump administration.

Traveling to the USA without a US passport is a terrible gamble, the price could be as high as your life.

*edit*: typos

Show threadtobozoFeb 9
@Durrell is it just me or is the term "un-decrypted" somehow un-deconfusing?
Show threadgunstickFeb 9
@Durrell and still today samsung does not offer multiple users. They probably remove it on purpose so they can promote their knox secure folder.
And sell more phones as one cannot have multiple such folders on one device.
Very shady practice
Show threadDurrellFeb 9

@gunstick

You nailed it. Samsung disables "Multiple Users" on phones to push Knox.

The Fix for Samsung: 🔌
Your only compliant mode is POWER OFF.
Do not unlock until you clear Customs. Unlocking loads keys into RAM (AFU), breaking your shield. This means your phone is a brick in line. 🧱

Why I use Pixel: 📱
Pixel allows "Guest Mode" from the Lock Screen (BFU).
Pixel: I can use Maps/Music while main data stays encrypted.

Samsung: Forces Unlock (AFU).

Show threadVissFeb 15
@Durrell so i shared these elsewhere and folks mentioned that gemini logo in the bottom right. are these gen ai?