Border Phone Searches Are a Real Threat Model Now
A US citizen is facing felony charges for deleting data from his phone at a border crossing. The wrinkle: he was using GrapheneOS and gave the agent a Duress PIN, which means the phone wiped itself when the agent entered that PIN. So technically the agent triggered the wipe. The comment thread was full of practical advice: buy a burner, wipe before crossing, don't bring your real device.
This story landed alongside the Defcon anti-surveillance tools thread getting a second-chance bump, covering ESP32-based Bluetooth trackers, Stingray detectors, and other privacy hardware. The two threads together paint a picture of a community that is now treating border crossings and public surveillance as active threat surfaces, not hypothetical ones.
The GrapheneOS angle is worth noting specifically. A privacy OS doing exactly what it was designed to do is now the basis for felony charges. That's a chilling signal for anyone who treats their security setup as a personal choice with no legal consequences.
So what?
If you or your team travel internationally with work devices, this is now a liability question, not just a privacy question. Policies around device hygiene at borders, travel-specific devices, and what data lives locally versus in the cloud are worth formalizing before someone's laptop becomes evidence.