Two unique privacy solutions

By Simon Black · 23 comments

Here’s the scene… you’ve just landed and are making your way through immigration. Bleary-eyed and a bit disoriented, the portly fellow behind the desk singles you out for ’secondary screening,’ and you are whisked away to the catacombs of the Customs service.

At this point, it really doesn’t matter what country you’re arrived to… until you clear customs and immigration, you’re in no man’s land.  For customs officials, anything is fair game, including laptops and personal effects.

I have written before about this practice by the US Customs and Border Protection agency, but frankly just about every government in the world reserves similar powers to protect its borders against the terrorist and criminal elements.

Computers can be confiscated, inspected, and even copied in order for immigration agents to make a determination whether or not to let you in the country. It doesn’t normally happen very often, at least in civilized places… but the mere possibility is enough to make me want to take some precautions.

One very elegant solution that I have discovered is through diplomatic channels.  There are nations, for example, which actually sell appointments to official diplomatic posts, such as Ambassador or Honorary Consul.

According to the 1963 Vienna Convention on Consular Relations, an official diplomatic bag, which would include a laptop briefcase, shall not be opened or detained by foreign inspectors, even when the diplomat is merely in transit.

In other words, the convention allows diplomats with official credentials to enjoy freedom from unreasonable searches and seizure, even in immigration no-man’s land.

Official diplomatic programs are perfectly legal… though not exactly well-advertised. Prices range from $25,000 to over $100,000, depending on the post and the country of issuance.

Get in touch with me if this sounds interesting and I can point you in the right direction.

Another solution to protecting your information is to use a software package that will lock down your hard drive against unauthorized access.

I recommend TrueCrypt (www.truecrypt.org), which comes in both a Mac and Windows version.  It’s free, and one of the best encryption platforms out there.

TrueCrypt will create a ‘virtual encrypted disk’ that will completely secure your hard drive, or an external device like a USB drive.  It even has the ability to create a ‘hidden’, encrypted operating system so that when you turn on your computer, a ‘dummy’ system will be displayed, and the real system will be hidden beneath it.

If this sounds scary, try TrueCrypt out on a external device like a USB memory stick. You can back up important files on this device and lock them down like Fort Knox.

Share this article using the links below:
  • Digg
  • Facebook
  • E-mail this story to a friend!
  • TwitThis
  • del.icio.us

{ 23 comments… read them below or add one }

1 Marquelle November 4, 2009 at 4:20 am

Diplomatic credentials for sale?!

I’ve got to save up for that!

Reply

2 Christine November 4, 2009 at 4:28 am

Does the Dimplomat program include a diplomatic passport?

Reply

3 Dk November 4, 2009 at 11:56 am

Nice Idea. I was looking around and found these two sites, legal firms that do passport/residency, business formation work. does anyone have any experience with them ?

Reply

4 craig November 5, 2009 at 6:22 pm

I am very much interested in Official Diplomatic Programs because I am planning to travel aboard… Could you please tell and show me how to do this…

Reply

5 craig November 5, 2009 at 6:26 pm

Could I buy a Diplomatic Passport also and price or is that included with the Official Diplomatic Program? I look forward to hearing back from you!
Thank you for your time!

Reply

6 andy November 5, 2009 at 7:13 pm

Hi Simon,

I am interested to get more informations about the diplomatic passports.

Best Regards,Andy

Reply

7 dennis dale stevenson November 5, 2009 at 8:35 pm

i am “getting in touch” to have all the info on this program–official diplomatic programs for sale–countries involved etc–does one have to be a citizen of said country?

Reply

8 Judy November 5, 2009 at 9:36 pm

The information on the diplomatic status sounds interesting, please send additional information. Also, what is your opinion of SkotiaBank (ScotiaBank)?

Reply

9 Chris November 6, 2009 at 12:36 pm

I too am interested in obtaining overseas diplomatic documents. Out of curiosity, have you done this yourself?

Reply

10 Simon November 6, 2009 at 12:51 pm

I would greatly appreciate receiving information on how one may obtain diplomatic status. Thank you.

Reply

11 Steve November 6, 2009 at 2:54 pm

I am interested in receiving more information about the Official diplomatic program.

Thanks

Reply

12 daffyd November 6, 2009 at 7:06 pm

please include me on your list of whom to reply to concerning consular positions.

thank you for your attention

Reply

13 craig November 7, 2009 at 11:18 am

Have not heard back yet pertaining to the Official Diplomatic Program please respond looking forward to your info.

Thank you!

Reply

14 SyrinxV November 7, 2009 at 5:49 pm

Presumably, one would need to have citizenship in a country in order for them to grant you diplomatic credentials … ?

But it’s an intriguing, out-of-the-box idea for dealing with the airport security nazis. Hmm, I wonder if US diplomats would be exempt from the illegal warrantless searches at US airports. But knowing the federal govt, they’d probably want all your personal information, a retina scan, fingerprints, and a DNA sample first.

Also, thanks for the TrueCrypt recommendation, I’ll definately keep that in mind for the next time I travel overseas with my laptop.

Reply

15 Alfred November 7, 2009 at 10:35 pm

I’am interested in the Official Diplomatic Program. Looking forward for your reply. Warmest Regards.

Reply

16 charles November 8, 2009 at 4:51 am

Thanks for the info Simon. I am interested in the Official diplomatic programs. Also the diplomatic pouches in order to ship gold bullion undetected.

Please contact me if you have further information

Cheers Simon

Reply

17 David Templeton November 8, 2009 at 2:22 pm

Yes, I would like more info on the diplomatic passport option…

Reply

18 Tom November 9, 2009 at 4:40 pm

I would also like more information on diplomatic posts “for sale.”

Reply

19 Michael November 10, 2009 at 3:42 am

Hello Simon, As a frequent international entrepreneurial traveller, I am quite interested in information re obtaining a diplomatic passport.
Thank you and love your blog.
Regards,
Michael

Reply

20 TM November 12, 2009 at 6:43 pm

Hello
We almost got to be ambassadors through an investment one time. It did not however pan out. My husband and I are very interested in obtaining diplomatic passports. We travel extensively and already have a dual passport along with residency in two different countries. We are currently looking at a home to purchase in Uruguay. I am not that computer savvy so if you do contact me please tell me how to answer you without making my address available to the whole newsletter list. You did write me once and when I replied to the address it was sent from I never got a return email. I didn’t know how to write you without making my reply public.

Reply

21 allessa garrett November 13, 2009 at 4:02 am

I am very interested in obtaining diplomatic status, as I am considering second and third passport program, while leaning toward a long term goal of renunciation. Any guidance or assistance you can provide will be greatly appreciated.

Reply

22 Roger November 15, 2009 at 11:16 am

Beware of the “evil maid” attack:

“Evil Maid” Attacks on Encrypted Hard Drives

Earlier this month, Joanna Rutkowska implemented the “evil maid” attack
against TrueCrypt. The same kind of attack should work against any
whole-disk encryption, including PGP Disk and BitLocker. Basically, the
attack works like this:

Step 1: Attacker gains access to your shut-down computer and boots it
from a separate volume. The attacker writes a hacked bootloader onto
your system, then shuts it down.

Step 2: You boot your computer using the attacker’s hacked bootloader,
entering your encryption key. Once the disk is unlocked, the hacked
bootloader does its mischief. It might install malware to capture the
key and send it over the Internet somewhere, or store it in some
location on the disk to be retrieved later, or whatever.

You can see why it’s called the “evil maid” attack; a likely scenario is
that you leave your encrypted computer in your hotel room when you go
out to dinner, and the maid sneaks in and installs the hacked
bootloader. The same maid could even sneak back the next night and
erase any traces of her actions.

This attack exploits the same basic vulnerability as the “Cold Boot”
attack from last year, and the “Stoned Boot” attack from earlier this
year, and there’s no real defense to this sort of thing. As soon as you
give up physical control of your computer, all bets are off. From CRN:
“Similar hardware-based attacks were among the main reasons why
Symantec’s CTO Mark Bregman was recently advised by ‘three-letter
agencies in the US Government’ to use separate laptop and mobile device
when traveling to China, citing potential hardware-based compromise.”

PGP sums it up in their blog. “No security product on the market today
can protect you if the underlying computer has been compromised by
malware with root level administrative privileges. That said, there
exists well-understood common sense defenses against ‘Cold Boot,’
‘Stoned Boot.’ ‘Evil Maid,’ and many other attacks yet to be named and
publicized.”

The defenses are basically two-factor authentication: a token you don’t
leave in your hotel room for the maid to find and use. The maid could
still corrupt the machine, but it’s more work than just storing the
password for later use. Putting your data on a thumb drive and taking
it with you doesn’t work; when you return you’re plugging your thumb
into a corrupted machine.

The real defense here is trusted boot, something Trusted Computing is
supposed to enable. And the only way to get that is from Microsoft’s
BitLocker hard disk encryption, if your computer has a TPM module
version 1.2 or later.

In the meantime, people who encrypt their hard drives, or partitions on
their hard drives, have to realize that the encryption gives them less
protection than they probably believe. It protects against someone
confiscating or stealing their computer and then trying to get at the
data. It does not protect against an attacker who has access to your
computer over a period of time during which you use it, too.

Reply

23 James December 7, 2009 at 3:25 pm

Yes I would love information on obtaining diplomatic positions, passports, etc. Please advise - thank you!

Reply

Leave a Comment

Previous post: Five reasons you should consider China as a place to live and do business

Next post: Why the only direction for Thailand is up