Hacker News new | ask | show | jobs
by URSpider94 3315 days ago
If you read the article, there is no "tell" that 1Password is in Travel Mode. The only impact is that most of your passwords are missing from the password vault, but the agent would have no way of knowing what's missing. It's not like it pops up a big "Travel Mode" banner.
3 comments

Customs read these articles just like us. What if they ask you if travel mode is turned on? Will you lie?
I was thinking this (and no I wouldn't lie to customs), but the second half of the article details how to let a remote administrator enforce these policies, ie blame your employer for wanting to secure their data from unauthorised access.

Of course the real answer is to avoid the business hostile USA (or at least the border)

The definition of "border" is surprisingly vast too -- if you're within 100 miles of any "external boundary". Two thirds (!) of Americans live within this "border" area.

https://www.aclu.org/other/constitution-100-mile-border-zone

This is a bit of an exaggeration, which has frequently been de-bunked. In brief, if you didn't recently cross a border, then immigration officials have no special powers within this zone.

There is, however, a "functional equivalent" of the border in every international airport that grants ICE these powers over arriving citizens (which makes sense).

https://constitutioncenter.org/blog/does-a-constitution-free...

Does it matter? Just say "yes", and your employer / the account manager should be the only one that should be able to disable it.
Yes, how can they prove anything?
At a guess, subpoena 1password for account and timestamp info on use of travel mode to catch someone in lying to a federal agent.
That's the part I didn't get thought. If there is no way to tell then how exactly do you turn it off? (At some point, you want to turn it off after all)

If there is any kind of setting that lets you control travel mode, border control could just make it standard procedure to change that setting.

In the article, the author mentions that you enable/disable travel mode online. Sadly, it doesn't look like this applies to those of us who have 1Password without a monthly subscription.
So, if they're already in the business of demanding your passwords (otherwise this whole thing is irrelevant), why don't they just ask you to log into your 1Password account and see if you're in travel mode there?
They could, which is why I'd recommend not having your 1Password password with you. Disable travel mode once you return home.
It doesn't really matter. If you're an American citizen, you can just refuse and they have to let you enter. They might confiscate your device, but they can't turn you away from the border.

And if you're not a US citizen, "I'm not physically able to unlock the account right now" doesn't buy you anything. There's no obligation that says if you do all you can physically do to accommodate their wishes, that you get to enter. If they want access, you either grant access or you get back on a plane. The only thing not having your 1Password credentials with you does is remove the choice of which you want to do.

You can only change that setting by logging into their website. The setting is not available in the app itself.
Well, they might have sigint indicating that you have Gmail account, a Facebook account and a WhatsApp account, for example.