Hacker Newsnew | past | comments | ask | show | jobs | submit | dmos62's commentslogin

Are you implying they knew that Iran would get bombed and would in retaliation bomb everyone across the Persian gulf?

There were rumours about those things, and some western countries issued travel advisories a few days before. Either way, Dubai is not a good place to go, no matter what bribed influencers tell you.

I’m implying that going anywhere in the Middle East (or a good deal of the world) has far more risk than going to the USA.

They definitely should have been aware that it's a significant risk. It can't be predicted with certainty, but it was pretty obvious that there's a good possibility of something kicking off. I occasionally take trips where flights connecting in Dubai would otherwise be a good option, but I won't do it. Partly because I'm the wrong ethnicity (yeah, UAE is buddy-buddy with Israel now... so was Iran before the revolution), but the risk of war breaking out is a big part it.

It's not like this is the first time in recent history that region has been somewhat unsafe for travelers. Or the second time, or third, or fiftieth.


An acquaintance had his phone taken away at a US airport by a border guard (or whatever you call them) for inspection. The guard went through his messaging apps, read chats. I understand the necessity for occasional physical searches for contraband or what have you, but reading private conversations is beyond what I can stomach. That, together with the infamous case of some guy being forbidden entry to US because he had the wrong meme on his phone, feels like Soviet Union bullshit. Actually, now that I mention this, reading my messages is fine compared to looking through my photos. I find it insane that this is happening in a first world country. I'm not a fan of hyperboles, but, man, this is just like what I'm told Soviet Union was like. I think I'll be skipping events in US for the next decade or so.

Even a single CBP employee scrolling through your texts feels like too much to me. But when they take your phone, they're making copies of all the content in the phone and as much as possible from any apps/websites you're logged into. And that permanently lives in a database which doesn't afford you even the very thin veil of protection against misuse that a US citizen might be granted.

It does all seem to be too much.


Curious, how do they make copies of everything? Do they just film the phone as they're scrolling it?

They plug the phone into a computer and use software to literally clone it, so everything on the phone. All logs, emails, messages, photos, contacts, deleted files if they’re recoverable, passwords, everything.

Would an iphone in lockdown mode have any resistance to this?

The latest iPhone model in lockdown mode would be super resistant. Lockdown mode is specifically engineered to protect against Cellebrite / Pegasus-level threats.

However, if you’re a noncitizen you might be refused entry, and if you are a citizen you might never see that phone again. The phone will be stored for years until/if Cellebrite finds a vulnerability in that iPhone model, and then it will be searched. Also the government might target your future phones for Pegasus-style remote attacks, so if you present your phone to CBP in lockdown mode, you may want to leave lockdown mode enabled forever.

Modern iPhones are very, very hard (impossible) to crack today if they’re locked down properly: strong password, biometrics disabled, and/or lockdown mode.


Very interesting. Are there any technical hindrances that prevent Android being the same ?

Slightly out of my depth, hopefully others weigh in.

Getting a very good lockdown mode requires both owning the entire stack (Apps + OS + Silicon) and being willing to sacrifice repairability (swapping chips/cameras/displays/touch controllers is a good way to help hack into a phone), and willingness to spend a lot of money on something that few people would actually pay for. Apple is the only company that's even positioned to take on this challenge.

AndroidOS has to work with a bunch of core functionality chips that Google/Samsung don't make. Having a bunch of different code paths/interfaces for a bunch of different SoC's, cellular modems, touch controllers, and cameras is not a winning recipe for security. Both Google and Samsung also use their own SoC's (Google Tensor G5, Samsung Exynos) but Samsung also uses a lot of Qualcomm Snapdragons ... and if you're using someone else's SoC there's no chance in hell of coming up with a proper "Lockdown Mode". Samsung or Google might be able to come up with a fully integrated solution someday, each have invested in parts of this. Beyond SOC's, Samsung has their custom silicon which helps them lock down security for their combo touch/display controller. Samsung has also invested a lot into customizing their Knox Secure Folder solutions (and everything else branded "Knox" as well, which is all mostly industry-leading for Android options). Google has the Pixel with their own Titan M2 security chip, and obviously they own the OS.

But it's a lot of work when so much of your engineering is dealing with changes that other companies are making. Google has to keep up with Samsung's hardware changes, because the tail wags the dog there, and Samsung spends a lot of engineering time figuring out how to deal with / customize / fork changes to AndroidOS that Google pushes (while the dog still wags the tail, too). Both have to deal with whatever Qualcomm throws at them for cellular modems, and it required a monumental effort/expense from Apple to only just recently bring up a replacement for Qualcomm's modems.


Thanks for replying. Such a comprehensive and well thought comment ought to have been a top standalone comment.

I don't think so, I use GrapheneOS and I think I can't even use the USB-C port for anything other than charging (which should be configurable).

Yes it’s resistant but then they can just deny your entry into the country.

You wish, they might just put you in a detension centre for a few weeks and take their own sweet time sending you back.

You are in legal limbo before you enter the country.


Presumably not if you’re a citizen but then, who knows

Right this was in the context of Canadians visiting - they can’t deny entry if you’re a US citizen but they can certainly make the entry uncomfortable.

I don't think we have access to all of the functionality of the devices, and all of the devices themselves, that are sold to governments.

They connect it to a little box that hacks into the phone and downloads everything. Search for "Cellebrite Universal Forensic Extraction Device (UFED)" or "Grayshift GrayKey". The border agent doesn't have to know anything about phones/computers, it's just "plug in, press button". With modern phones, they really only work if you unlock your phone before handing it to them, and they'll make you do that. If you don't unlock the phone and let them walk off with it for awhile, they'll refuse you entry into the USA and send you back.

US citizens are, of course, allowed in even if they refuse, but they will confiscate a citizen's phone in exchange for a custody receipt (Form 6051-D) and they are supposed to return it to the US citizen after they break into the phone / crack the encryption. If they can't crack it, they can choose to never return the phone to the US citizen. And it can be a very stressful situation in which citizens may not know what their rights are in the moment (or can't afford to replace their phone or lose access to it because how would you even get an Uber from the airport or coordinate a pickup if you don't have a phone).

You can choose to bring burner phones or make sure your phone is freshly factory reset, but if you're a non-citizen that can also be a reason to be refused entry, and if you are a citizen that can "get you on a list", leading to getting "SSSS" stamped on every boarding pass for every flight you take, in every country in the world, for the next many years. If your boarding pass gets "SSSS" written on it, you will get pulled aside by security and all your bags get individually hand-searched prior to every single flight (even transfers/connections/layovers).

Non-citizens are also sometimes asked for a list of your social media accounts and the passwords to their social media accounts. Refusing to provide your passwords can be used as a reason to refuse entry to the USA. If the USA believes you have a social media account that you failed to tell them about, that can also be a reason to refuse entry.

Also, as of recently, visitors from 38 countries have to post a ~$10,000 bond just to be allowed into the USA.

https://www.dhs.gov/sites/default/files/2023-09/Test_Results...

https://cellebrite.com/en/products/ufed/

https://en.wikipedia.org/wiki/Grayshift


This post alone should be a reason for tourism to the USA to drop to ~0%.

I've visited a lot of countries in my life but I've never been treated as rudely as on the US border.


I tried entering without a phone or anything other than the clothes I was wearing so they didn't have anything to search. So instead they got a warrant for a cavity search (I'm still chased by debt collectors for this, as I was brought by prisoner van to a private hospital) , because they can't stand to not have anything to look at. They will fuck with you ruthlessly if there isn't something for them to scrutinize upon entry.

Do a search for Cellebrite

This is one of the big reasons I won't travel to the US anytime soon, even for work events. I really don't want to be put in a situation where you have to give a border guard access to your phone or risk detention or a future travel ban.

That happened to a friend of mine in 2010 so it's not a new thing.

Yeah I've never travelled internationally with my regular devices. I keep my last gen phone, a cheap LTE/5G tablet and a Chromebook as travel devices with limited data that I wipe/reload before/after crossing borders.

Same. I don't think I've had a crash in 10+ years.

Same for me, it's simply never crashing for my day to day use. It doesn't mean there aren't idiosyncratic cases out there but anecdata can easily paint any number of pictures.

I'll just chime in to say that not everyone cares about the features you mentioned that much. Keyboard, touchpad, looks are the last things I think about when comparing laptops. Not to lessen your preferences, just to point out that there's a variety of viewpoints.

To make a different point, a regular consumer does not care about tech specs. They want a laptop that can browse the web, stream Netflix, and maybe open a Word doc. They will be more sensitive to hardware problems in my opinion. A janky touchpad is going to be annoying no matter what computer task you're doing. A wobbly keyboard will be the same. To me an average consumer is more interested in the "feel" of the computer rather than what it can do.

What features do matter to you?

Last time I was shopping for a laptop, I needed battery life, low glare, high screen brightness, rugedness was a plus. Cheapness is a good proxy for rugedness. Being able to upgrade/repair components is generally something I value highly too. Something that's made to be maintained, meaning opened, disassembled (and reassembled!), feels good to me.

What options do you see available on the market today that meet those needs? I agree that all of those are super nice to have

Used thinkpads and dell latitudes, battery and brightness aren't always what I'd like though. Frameworks and similar sound nice, but can't bring myself to pay the premium.

What features matter to you?


I have a framework and love it - repair-ability is exceptionally important to me, and I support it as often as I can.

That being said, I have a really specific use-case I have to fill right now: I travel all the time for work, and my work laptop already takes up a good amount of space, so I need something small and easy to use when I travel


I guess a lot hinges on what kind of work you need to do while travelling. I've been on tmux and vim for the longest time which works great over mosh, so almost any device worked for me, as long as I had an ok internet connection. Spent a summer working in a park, on an epaper tablet and a bluetooth keyboard. Good times.

Speaking of, I've recently started using a daylight therapy lamp 10k lumens @ 10-30cm for at least 20 minutes within 1 hour of waking up: the first few days, the effect is dramatic. Later, when the body is readjusted you don't feel it as vividly, but if I don't do it for a few days I can feel my mood and energy drop. I recommend everyone who doesn't get much light (bright enough to make you squint) in the morning try it.

Is this a mental health advice request or an invitation to rant? Serious question. We can do one of these, but not both, I think.

Are you sure rants aren’t (or can’t be) good for mental health?

An emotionally charged rant (what other kind is there?) is a projection. It can be good when you're overwhelmed and need to get through a crisis, but it's bad long term. That's how I see it, at least.

“It’s bad long term” is an unsupported assertion. Why do you believe it?

It's bad if it's all you do for the long term. You need to move on from it eventually.

The same is true for being overly positive all the time: toxic positivity. It's fairly obvious to say that something is bad if it's all you do. There's no particular reason to single out rants here.

In fact, IME people who do that often tend to have an attitude than leans toward the toxic positivity side.


Experience? Lying to yourself only seems to make things worse? It can be agonizing, and you rob yourself of agency. I'm surprised this is not self-evident. How do you see projections affecting people long-term?

70% of the world runs on Android. Do you think they get their banking information stolen every 6 months?

A quick search resulted in this: "Android malware saw a 67% increase in 2025, with over 40 million downloads of malicious apps targeting banking and stealing data, frequently hiding in "Tools" and utility apps on the Google Play Store."

So no, I don't think that's a small amount of risk, even if there's billions of Android users in the wild.

Especially considering how much money can be stolen from peoples bank accounts


A 67% increase of a 0.001% chance is just 0.00167%.

67% of android users in 2025 did not get their banking credentials stolen.


I think you need to check your math there. 40 million devices in 2 billion is 2%. Not 0.001%

Is the count 40 million devices or 40 million downloads? One imagines a world where malware downloads other malware.

Do people only ever download exactly one malware app?

A source for your claim would be helpful. Here's an alternative take, with source:

> In Q2 2025, the number of attacks involving malware, adware, and unwanted software decreased compared to Q1.

https://securelist.com/malware-report-q2-2025-mobile-statist...


Much of this could be solved if the base system simply came with basic utilities.

Windows XP had an audio recording app and most people didn't even have microphones. Now we have smartphones that don't have a way to record audio as a file or even write text notes built into the system, forcing you to use third-party tools that can be maliscious.


Comes with keep notes and the recorder app?

Default installed apps are often carrier dependent.

It is true that at certain points I have bought brand new Android phones that did not come with such basic utilities, including utilities that bargain priced feature phones were expected to have, like a sound recorder.

IIRC, the Droid Turbo 2 I got in 2016ish came with Android 2 and did not come with a sound recording app stock. It also did not have a file browser stock. This was a Flagship product. The flashlight was not included for long enough for the top ten app, a flashlight app, to be on a significant quantity of android phones and end up being a data harvesting operation.

https://www.ftc.gov/news-events/news/press-releases/2013/12/...


If you're willing to go through all this trouble, why not just become politically active? Don't underestimate what a motivated individual can do. All these public figures (or institutions) swaying the country back and forth are only people too.

Btw, an example of a person making a difference: https://www.youtube.com/garyseconomics

I would rather vote for a person from hackernews than any other politician right now tbh...

"both sides" still with this?

I was politically active in the USA, in the only way I believe can make any meaningful change: direct action, mutual aid.

The American political system is captured by two neoliberal (one now post liberal, fascist) parties, and you have to sell your soul to "accomplish" anything, only to watch it yet ratcheted away by your own party, or obliterated by the fascists.


The casualty-to-death ratio in Ukraine is surprising for modern times, especially on the Russian side. Counting civilians, Ukrainians, Russians, I can see the death count being close to 1M. Partisan sources already put Russian combat losses at around 1.2M personnel. Ukrainian losses might be more than half what Russian losses are. The 1M deaths estimate doesn't seem outlandish.

> This feels like a much bigger development than Russia-Ukraine.

Russia-Ukraine war is 1M+ combat casualties deep and is nowhere near finished. You are out of touch.


But russia-ukraine is also a much more contained war between 2 parties that will likely end in a stalemate.

The middle east is a much more tangled web of alliances and hatreds, i think the iranian regime falling would have much more harder to predict second order geopolitical effects.


> But russia-ukraine is also a much more contained war between 2 parties that will likely end in a stalemate.

The whole of Europe is affected, it might seem contained only if you live very far away. Every European country is affected in one way or another.

It's not a stalemate if Ukraine ends up losing 30% of its territory. That's Russian victory.


Ukraine will never de jure give up those territories and majority of nations will never recognize those as part of Russia. And it’s 20%, not 30%. Pre full scale war it was 7%, now it is 19%, so during the five years they’ve captured 12% of Ukraine's territory.

Russian goals were:

- Quick decapitation - fail

- Change of government - fail

- Prove that majority of Ukrainians are phone Russians and the moment greater Russia comes everyone will see that Ukraine is not a real state - fail

- Make second Belarus out of Ukraine - fail

- Stop NATO enlargement, Finland and Sweden joined NATO essentially doubling border with NATO - fail

- Dissuade Ukraine from joining EU and make it pro Russian first - fail

- Prove that Russia is a great military power on par with US that can topple regimes at will - fail

- Make Russia strategically independent- fail, Russia is now completely dependent on China

- Destabilize EU - fail, Europe is united like never under US/Russia/China threat

This war will enter history as one of the worst blunders.


> It's not a stalemate if Ukraine ends up losing 30% of its territory. That's Russian victory.

I'd call that both sides losing. Russia certainly did not achieve its geopolitical goals with that outcome.


I hope you're joking. This is such "Ukrainians are just Russians by a different name" logic. China, Belarus, and North Korea are deep in this conflict, so are all the European countries. There's no stalemate end to this war, only a temporary cease fire or the collapse of Russia.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: