Australians who won't unlock their phones could face ten years in jail
nakedsecurity.sophos.com
nakedsecurity.sophos.com
> It covers [...] device vendors [...] as long as they have "a nexus to Australia"
> But what if the suspect stores the keys themselves? In that case, the government would pull out the big guns with a second kind of order called a technical capability notice. It forces communications providers to build new capabilities that would help the government access a target’s information where possible.
> What if the communications provider doesn’t want to help? Then they could face penalties from the government, or "injunctions or enforceable undertakings".
Yeah, right. But the precedent is alarming, because what is happening (and you see it with other "pro law enforcement" or "pro privacy" legislation too) is governments are giving themselves broad enforcement powers to ask for things and then only using it when push really comes to shove. This they-can-but-they-probably-won't approach towards enforcement is dangerous as it removes predictability in favor of government subjectivity. What does it mean in practice? It can mean that while Samsung or Apple would give them the middle finger resting on their size/leverage, a smaller company can't do that. So the enforcement agencies proportionalize their punishments to the amount tolerable without citizen backlash.
Everyone should just remember this tactic when we go around praising laws with big punishments for big companies just because we happen to like the spirit of the law. And also remember this when people call us stupid for questioning subjectivity of statute enforcement or the lack of statute enforcement in general when new versions of these laws are crafted.
Another very concerning law is about "fixated persons", which was bought in with big budgets and huge teams of detectives solely dedicated to going after lone wolf terrorists, so far the only person charged is a former mining executive who was a respected lawyer and Head of Compliance at one of Australia's biggest gas companies (One of the largest gas exporters in the world.)
She turned whistleblower on some corrupt deals and environmental coverups involving certain fracking leases and the government. After contacting the Mining Minister about it over the space of a few months, instead of investigating, the Minister referred her to the police, she was then deemed a "fixated person", which involved incarceration without charge, being taken to a mental institution and forcibly injected with anti-psychotic drugs for months. Eventually a judge decided she could go home. All media coverage of it is banned in Australia until the trial is finished, which has been postponed at every hearing for over a year now, time heals all wounds I guess.
It's naive to think that those in power wouldn't abuse such laws. I'm all for giving police the powers they need and perhaps even more as long as there is transparent oversight and it's targeted, but the complete opposite is happening in many places on Earth right now. Monsters flourish in the darkness.
The mainstream media are highly aware of the case, they are all legally blocked from mentioning it until the trial is finished.
A good article on the fixated persons unit by a QLD lawyer: https://independentaustralia.net/life/life-display/queenslan...
http://www.blotreport.com/australian-politics/are-the-though...
[1] https://independentaustralia.net/life/life-display/queenslan...
[0] https://www.gofundme.com/barrister-needed-for-fiona-wilson
Holy shit. Maybe I'll stop complaining about the US plastering the names of the accused all over if this is the alternative.
So it’s actually inverted outcomes from what you described, secret is normally good, (with obvious exceptions, such as the case in point) and public is normally bad.
Yet it seems to be abused here in order to protect cozy relationships between a certain big business and the government. Whistleblowers proven correct should be held up on a pedestal and highly respected, not thrown to the wolves with little chance of future employment.
This will obviously never happen because it's far more lucrative to draw trials out for years.
[1] https://en.m.wikipedia.org/wiki/Political_abuse_of_psychiatr...
The moment, I hope things are improving and people become more involved and don't stand for this ..., things like these pop up as a form of disillusionment.
Her mistake I guess was contacting the minister or the minister's circle, who are probably in on this?
P.S. It seems the whistle-blower protections in Australia are ... lacking to say the least. Anyone care to pitch in? I can find a bunch of articles with horror stories.
http://mobile.abc.net.au/news/2018-06-28/witness-k-and-berna...
A while ago the name of a senior state politician was pending trial on child pornography charges, there was a massive undertaking to ensure his name never got mentioned in print for the few months before trial.
Process for any whistleblowers:
- Don't go to your boss
- Don't go to the authorities
- Don't go to anyone who may be remotely suspected of having any involvement or benefit from the activities
- Research how to protect your identity online (this is a bit recursive, as researching how to protect your identity online may set off flags if you are suspected as the whistleblower)
- Burner phone
- Burner laptop
- Burner email address(es)
- Tor
- public wifi (know where the cameras are in the area and make sure you're unrecognisable on them, stake it out in winter when it's more acceptable to have your face covered with a scarf or something)
- Contact a respected journalist that's NOT in your local area
- Try to make sure the journalist has the facility to allow documents to be transferred by a SecureDrop system or similar
Australia's federal political-class appear to be deep in the pockets of mining companies given the extent of the resistance to renewable energy. I'd almost consider it naive to go to a politician about any kind of mining-related corruption in Australia.
Edit: Just noticed CPAHem's post saying it was QFTAC that got Fiona Wilson 'committed'. The Q stands for Queensland. To give you an idea of how protective the Queensland political class is of the mining and energy status quo, they're trying to get a NEW Coal Power Plant built in Queensland, and they have enough power behind them that the Federal Government is not flat-out saying no. There are no banks, Australian or otherwise, willing to fund the building of a new coal power plant because it's so far from financial viability that even existing coal power plants are shutting down because they can't compete on power prices.
But it's entirely _optional_ to use. They cannot prove there is a second password.
Which means you shouldn't install any such software unless you're going to have those hidden partitions and are willing to let LE have access.
At the end of the day, the fact that you have this sw installed will make it fair to infer that you are using this feature. You can disagree, but it's what the courts say that matters here, not what I say.
There is no plausible deniability here, really.
There are also use-cases that don't include a hidden partition, ex: I keep private code repositories in a veracrypt partition to protect them in the event of laptop theft while not avoiding the perf hit of full disk encryption. There's no need for the hidden partition / plausible deniability for a use-case like that.
You are industiguisable from someone who has 9.
What, are the police just going to keep you in jail? What if you really ARE innocent? Jail for life then, because they didn't find anything incriminating?
Edit: "didn't seem to catch on" I mean you can't do this with popular products like FileVault.
https://www.truecrypt71a.com/documentation/plausible-deniabi...
The police can't just keep saying "we didn't find anything, therefore you MUST have ANOTHER double secret password!".
At that point you are indistinguishable from someone who is innocent.
Seriously, other people aren't dumb.
If you create a passworded partion, it adds a bunch of extra unused space, that MIGHT be another passworded partion, or might just be random empty space.
IE, maybe you have 3 passwords and 200 GB of extra space, or maybe it is actually 4 passwords and 150 GB of extra space that is random bytes.
These 2 situations are identical and cannot be differentiated.
The police tell you to access that 150GB of extra space, and it is impossible. Because it's random bytes, and there really isn't an extra partition.
"MIGHT be another password-protected partition"
->
"is a password-protected partition"
Imagine the situation where you really ARE innocent. Jail for life? Possible, but whether you are innocent or not doesn't change anything.
Yes, the police could just jail you for life or kill you. But that's ALWAYS the case. They'd do that to you anyway of you are innocent
BTW, someone posted this fascinating link in this thread: https://web.archive.org/web/20100820175505/http://iq.org:80/...
You might want to watch "Making a Murderer". Or, for the UK equivalent, have a look at the Cleveland Child Abuse Scandal (where social workers were asking children questions like "Tell us the truth, you're not going home until you tell us what Daddy did to you").
The police can, and do, subject people to coercive interrogation techniques. These techniques have been designed to extract a confession, whether you're guilty or not.
Even if you ARE innocent, it doesn't matter.
The point of security measures is to make you indistinguishable from someone who's innocent.
Yes, you can counter this by saying "well they'll jail you anyway, even if you ARE innocent". But that's a different discussion entirely.
They could unreasonably demand a working second password and incarcerate/torture you until you either provide one or die, but that's the next level.
"MIGHT be another password-protected partition"
->
"is a password-protected partition"I figure there is at least one good reason to include amenable "filler" in a "single-secret" file containing encrypted data: it means the size of the plaintext data cannot be inferred from the size of the file. So there is plausible deniability for having amenable "random" data present on that basis alone.
I'm not saying it's easy to extend this scheme to accommodate all environments and/or user experiences. As you say, you can't just e.g. have another partition sitting around full of nothing but suspicious random data.
>The government’s explanatory note says that the Bill could force a manufacturer to ... install government software on it
If the bill passes, using a phone purchased in Australia is no longer secure. I know my security threat model excludes manufacturer-installed root kits - is there a reasonable strategy for mitigating this risk? Buying a phone in the US and importing it yourself is one, but that seems very awkward.
edit: reading the actual text, there's some protection in section 317ZG, which prohibits the law from being used to cause "systematic weakness" or "systematic vulnerability", but explicitly carves out an exception for targeting specific devices. So for a specific example, the bill would allow the Australian government to compel Apple to secretly push an over-the-air update to backdoor a specific device of interest.
>The mere fact that a capability to selectively assist agencies with access to a target device exists will not necessarily mean that a systemic weakness has been built.
Yeah, the bill is definitely designed to allow exactly the scenario I described. They're after using the code-signing keys and technical expertise of device manufacturers and communication program developers to target individual devices with encryption backdoors.
>Likewise, a notice may require a provider to facilitate access to information prior to or after an encryption method is employed, as this does not weaken the encryption itself.
Definitely planning on backdooring devices and reading the messages pre-encryption and post-decryption.
They actually explicitly said that was the aim. From https://www.homeaffairs.gov.au/consultations/Documents/expla... :
> This includes accessing communications at points where it is not encrypted.
I am an Australian, and I have been listening to the Minister for months tell everybody they were going to do something about encryption, but then categorically ruling out weakening crypto with back doors. I wondered what he was on about. Now I know I guess.
In case it's not obvious, they aren't just targeting phones. Anything with an app store or automatic updates is fair game. So this includes Microsoft updating Windows and Edge, Google updating Chrome and Chromebooks, and of course all of Apple's products. They don't have the expertise to write the software bugs to do this of course - but the bill allows for this by making provision for forcing the tech companies to provide whatever technical assistance is required (and encourages them to go further by providing voluntary assistance).
I see a few comments here that seem to think that encryption on (eg, Signal, PGP, encrypted hard disks, bimetrics) will save you. The entire point of these provisions is to get to the data when it is not decrypted, which it must be if you want to use it. Nothing will save you on these devices - once the bug is installed they are an open book. Possibly more open than you imagine, as they can turn on the microphone, camera, gps without you knowing.
Since there are commercial organisations they are targeting, I expect once they roll over they will do it in the most efficient way possible. Which is to say I expect it will be automated - something like the law enforcement agency will provide a MAC or some other unique identified and a few minutes later the bug is installed and sending data back.
What that means it is will be highly centralised, meaning you can compromise just a few people and/or pieces of equipment and you have the keys to the entire thing. A spy machine that can track everyone - it's an impossibly attractive target. I can't imagine state actors like Russia or China not to turning a gift like that from the democracies into something useful.
They are arguably sticking to the letter their promise not to back door encryption, but in reality they are legislating a centralised system that can see even banking password, everything you read, and everything you say, and everywhere you have been. It's pretty much the same outcome.
Way to go, guys.
Yes. To be clear, Telstra has installed devices of mass surveillance. So, this new bill is about undoing the 'snowden world' as you suggest.
From this article: https://theintercept.com/2016/10/23/endace-mass-surveillance...
This clearly shows how an Australian company was giving assistance in the construction of the hardware for a NZ company, Endace: https://theintercept.com/document/2016/10/23/medusa-weekly-s...
"Both prototype boards have been returned to Sourceman in Aussie with DDR memory issues and PCB baord issues" [Their typo].
Telstra has Endace hardware installed for the purpose of monitoring Australians: https://theintercept.com/document/2016/10/23/sprint-endace-l...
"The packet capture abilities... sold to Telstra"
After getting over the initial shock of the implications, I put my engineering hat on and then it was "of course there are LEA racks, you idiot". I presume when the TIA was written (1979) getting a tap involved filing a request with Telecom who then raised a work order for some department, and it wormed it's way down the management layers until some worker was directed to install the thing. If I was in charge of optimising that process, I too would have created LEA Racks, filled it with gear and told the LEA's "here, you look after it, and try not to bother me again".
I'd be amazed if the process hasn't been automated to the extent ASIO doesn't now have a button in Canberra somewhere they can press to tap phone or internet connection. There is no doubt in my mind commercial forces will mean Apple, Google and Microsoft go down the same road. Someone who had a hand in drafting this bill has dreams of a future where the old telephone line taps will become part of ancient history - it's all done via bugs installed at the touch of a button onto the end users devices.
I doubt their idea of utopia will last for very long. The likes of Russia and China must be delighted with the idea of democracies building a surveillance of the likes they could only dream about, and then handing it to them on a platter by just leaving it in control of just few humans easily manipulated with social engineering hacks, and a few machines they can focus enormous resources at cracking.
That's if it lasts that long. It's trivially easy to bypass now by simply using Open Source. The timing is bad for them as Debian has just added the final nail making that all possible by creating the first ecosystem using repeatable builds.
If anyone is wondering why Open Source is the solution - it's because the root cause of the problem is they are putting control in a central choke point. Compromise that choke point in a way that no one notices you have own whatever it controls. The people in charge believe they can fix that by heavily fortifying the choke point. But as the saying goes, every man has his price, as oddly does every computer and every SIM. If you are centralising, you are making the worth of what the choke point controls higher and higher, then eventually you will hit that price. They have created something that can reveal every banking password, every confidential email discussing corporate takeovers worth billions, all trade secrets and government secrets.
Open source solves that (as indeed did world the TIA was born into with its work orders involving many people) by making the cost scale. Over time there are thousands of programmer looking at the source in Debian - that's why it's called Open. You have to compromise every one of those programmers.
What will be the end of this? Will the technology evolve so much the government won't be able to win no matter what it does and surrender? Or are they going to ban encryption, non-vulnerable computers and everything that could stand in the way of prosecuting people they don't like?
Encryption plus a hidden volume (the existence of which cannot be proven) provides the ability for someone to 'unlock' the phone but still not provide access to the real data.
It would be quite difficult to ban encryption without causing a ton of other problems.
I read something similar to that in "Rainbows End: A Novel with One Foot in the Future" by Vernor Vinge. A really interesting take on the soon to be future of 2025.
They can't accuse you of refusing to unlock something whose whereabouts are unknown and, indeed, whose very existence is only alleged.
Practically speaking, this is not a long jump to suggesting "don't think any banned thoughts", which obviously gets ugly fast.
It seems that regulating encryption and privacy and agreeing to use regulated devices has parallels to agreeing to a breathalyzer when operating motor vehicle, when implemented correctly. Of course, that ideal implementation has a ways to go.
We will always need to balance privacy with the need to reduce suffering. Libertarian ideals don’t apply universally, given the variety of human behaviors.
US police officer Daniel Holtzclaw used his position as police officer and specifically search power to rape women. [4] It took years before the police was even willing to investigate the claims. YEARS, plural.
Who runs child services ? Pedophiles, at least in Norway [1] (and yes, that guy had used his power to get children "allocated" to him, and of course, the government decided to let that guy go, immigrant mothers however, must lose their children and get beaten up more than once in the progress. Same for the kids by the way. Why ? Well the decision was made by someone who "enjoyed child porn" for > 20 years)
The Australian police is at least partly run by criminal torturers [2] (note, aside from this happening, they also have a bit of a reputation that they're doing this, so don't think this is an isolated incident).
In the Netherlands, mental patients were thrown in solitary, and the government "can't find anyone who ever did that". [3]
In Belgium, the most notorious unsolved crime of the country, the "Brabant killers"/"Nijvel gang", famous for extremely violent attacks against supermarkets who killed almost 40 people in the process, is strongly suspected to at least partially consist of police officers, maybe entirely. [5] (one of the suspects is an ex-policeman, and the reactions of the police to the investigation defy all reason)
What is difficult to see is that, of course, positions of power attract criminals. That means a lot of criminals work for the police. A lot of paedophiles work for schools, or as priests (though not any more), and for child care, and child institutions. A lot of bullies, racists, torturers and rapists work for mental health institutions. Besides, does anyone seriously think so many paedophiles worked for the church because they liked Jesus ?
Governments don't want global thought control. Governments have police/military working for them and they pay them ... in status, in control they get over others. They want to get the criminals working for the police. That means that it's a system explicitly designed to let these people in, and the price is that the police, child care, mental health, ... bully, torture and rape.
The government can then as described in the Australia example, use this as a weapon against individuals, and they frequently do. That's why governments want to expand this power, and reduce the options people have to complain about these actions.
That's why the power of these institutions must be tightly controlled and minimized, and they must be prevented from exercising such powers without tight oversight.
The government doesn't want to do that, because that would limit their own power as well. Look at the australian case mentioned above: these laws mean that the government can just destroy individuals that are a threat or a nuisance to them. On the other hand it takes away one of the main reasons people become police officers: they want power, and of course people who want power ... use it. Here's some links to the most egregious cases.
[1] https://www.bbc.co.uk/news/resources/idt-sh/norways_hidden_s...
[2] http://www.abc.net.au/news/2018-04-03/melbourne-police-on-vi...
[3] https://tbinternet.ohchr.org/Treaties/CAT/Shared%20Documents...
There are a few that do, but not many.
https://www.techrepublic.com/article/how-to-use-the-oneplus-...
I am not a lawyer, and I haven't read the document in detail. There are three places where penalties of 10 years in jail are mentioned:
- 64A (Person with knowledge of a computer or a computer system to assist access etc.), which comes under the "Schedule 2: Computer Access Warrants etc"
- 3LA(5) which comes under "Schedule 3: Search warrants issued under the Crimes Act 1914"
- 201(A) (Use of electronic equipment at other place), which comes under "Schedule 4: Search warrants issued under the Customs Act 1901"
10 years in jail appears to be a penalty for not unlocking your phone when a warrant has been issued to do so. As long as a warrant is required, I don't really have a problem with this, it doesn't seem to be an unreasonable extension into the electronic world from the analogue. Warrants already exist to search your house and everything in it - that's pretty much the biggest privacy invasion you could have, but it requires paperwork and sign-off by "certain parties".
(The trustworthiness of those doing the paperwork and the "certain parties" signing-off on warrants is a separate argument as that's not "new" to this change in legislation).
It doesn't appear that you could get thrown in the clink for 10 years for refusing to unlock your phone during a random traffic stop.
Happy to hear why my take on this may be wrong though.
If the heat hasn't told you they want your phone, there's nothing legally stopping you from destroying your own property if you see them coming...
Foot + phone + ground = destroyed phone
But, with enough resources they could still read the memory in the phone even if it was smashed.
Yes, the conductivity of electrolytes in solution will tend to short out conductive pathways in the short term, and contribute to corrosion of exposed metals later on.
Because if the government or anyone sufficiently powerful is actually after me, the first thing I'm going to do is throw my phone down the garbage disposal and blindly dd all my hard drives with zeros.
"I was angry at losing a game of Pocket Tanks and I have anger management issues"
If they were able to get the phones contents from some other avenue then destroying the phone had no purpose.
They can make your life pretty fucking miserable while that's going on though.
And the innocence tax is pretty high. Most people on HN can afford good lawyers. What's the going rate for a good criminal defence team for a year?
Immediately cause your mobile device to self-immolate on demand!
It still seems like a nice idea, but it doesn't really give you plausible deniability.
Having that as an option would be useful.
I don't want the "bad guys" getting away with their activities either, but I don't want some jackass in a volatile country to obtain my confidential data because the authorities are too incompetent to store it securely on their servers. It's just begging for identity theft and black-mail. Time and time again we've been shown that even the most sensitive data can't be secured properly (e.g. Equifax, Google, Yahoo, Anthem, NSA/CIA hacks and leaks).
I also don't want some corrupt cop having a bad day make up an absurdly false reason to go through my private life. It's bad enough with people getting drugs planted by corrupt cops; authorities just can't be trusted and there is no proper oversight to make sure they're acting ethically.
The only way to fight this is by developing tools to counteract these measures in a reasonably intelligent manner. Hidden multi-layer partitions, hidden "remote" hosts, encrypted decoys that show faux private content so it appears you're cooperating when real content is hidden, etc.
(You don't vote, you don't count.)
If you don't vote, your peers don't vote. You transfer your power to other people. Think of NRA. It is a small relatively movement. But if they say to their members go vote X, 100% of them are voting X. This conviction makes a difference. Even if they have 200 votes say, those 200 people are going to make sure everyone around them is going to vote appropriately. And the numbers stack. Also, as usual in the U.S. call your representatives, create a group and take legal action through courts, etc.
You have other tools in your belt too, which you mention. These are the "oh shit". But you wouldn't want 20 years from now, to have to use them, or go to jail for using them, because they were illegal.
You literally have better odds of winning the powerball than your vote having any effect on the outcome of a general election. Even if it did, the people put in office are worried about themselves and the people they owe money to -- not your opinions.
That's necessary but not sufficient. It's also necessary, in a representative democracy, for a candidate to exist that has a compatible stance on enough (for some definition thereof) policies and few enough incompatible stances.
Arguably, such a candidate must also have a reasonable chance of being elected.
https://arstechnica.com/tech-policy/2017/03/man-jailed-indef...
You absurdly oversimplified the situation, which is the criticism, please address that.
refuse to give your password: detained indefinitely
forget your password: should be released immediately
These guys, for example: https://en.wikipedia.org/wiki/Kids_for_cash_scandal
There's less protection for fingerprint based unlock mechanisms and the like. It's not "something you know", so they're free to compel you to provide it.
That still leaves forcing manufacturers to insert backdoors in all devices, which as far as I know can only be made tamper evident by open sourcing (and using reproducible builds for) all security critical software and hardware.
And never carrying another one again?
Watch this happen.
People are way too paranoid. Nobody cares about what you do with your phone.
Sometimes I feel like the upper classes of society (especially hypocrites who have money and a reputation to protect) are projecting their fears on all other classes. Then like fools, the honest proletariat adopts all these ridiculous fears as their own.
I'd strongly recommend to use secure passwords and maybe a password manager. Further, I'd recommend using different aliases and email addresses for different websites, or at least keeping email addresses private where possible.
Whether this is an attempt at trolling or not, I am not sure, but I believe many people, especially those somewhat removed from marginalized populations, also hold this viewpoint.
I advise those that hold this viewpoint to see the excellent video, "Don't Talk to Cops". This should not be seen as an indictment of the many good people that work in law enforcement, but rather one of a system that incentivizes convictions over actual guilt or innocence.
At any moment in time, it we are breaking so many laws because of how the laws are written. It's illegal to speed. Who has never done that? A cop can pull you over. If the cop is having a bad day, and asks you to do something you don't want to, and you argue, now you're resisting arrest, which is another crime. And then for how many people has the next step been imprisonment and/or death due to an altercation that all started from a thing nearly everyone does almost every day?
The government does not need more powers to find more people guilty of crimes that shouldn't even be illegal. There are already too many people in jail and too many people dead due to a justice system that, sadly, skews far away from actual justice.
Perhaps others' lives are too uneventful. In these here parts of Western Europe we had 3 dictatorships active within the last 50 years (up to ~1980 -- Spain, Portugal, Greece), including torture and everything. Easter Europe had worse up to 1989. All could come back quite easily.
And even in other parts of Western Europe there was mass surveillance of political opposition, lots of cases against activists, hundreds of thousands of people against the political establishment (e.g. in Italy), mafia, etc.
Not everywhere is like rural Iowa.
Free speech affects my ability to improve society. Right to privacy affects my ability to cover my own ass.
Without protection of privacy - very few people will exercise their free speech when things get hard.
That said I understand people who are afraid that loss of privacy would be asymmetric but I don't think that would happen. Celebrities and public figures will always have less privacy than everyone else.
If Trump wants to know your tax returns - he will. You don't know his, no matter how much you want to.
And anyway, Trump insist he could murder someone and give himself a pardon. You can't. So, even if the information flow is symetric - the consequences aren't.
Actually this isn't the most important reason for privacy.
Privacy and other basic rights do very little for me as an random law-abiding dude. I don't break laws, so don't have any reason to cover my ass. I don't have much to say, so not being allowed to express my opinion doesn't seem like that big of a deal. Even in the doomsday scenario where evil totalitarian dictator takes over the country and mass-surveils everyone and otherwise stomps on our rights, it probably won't be that big a deal to lowly me.
The most important reason for protecting individual privacy is to protect the future of society and civilization itself. The average dude in Nazi Germany and Pol Pot era Cambodia probably barely noticed his loss of individual rights as far as daily life was concerned. Mass surveillance enables mass control, and the worst atrocities in history have all happened in environments where individual rights - including privacy - were disregarded. It's bigger than just me. It's about protecting society itself and giving my children a decent world to live in.
If we want to preserve these rights we can't just appeal to their utility for the individual.
What's right and wrong changes every few decades. Not too long ago a guy was jailed and pushed to suicide because he was gay. In UK.
There are countries today, where you can be put in a concentration camp for being gay (Chechnya Republic in Russia).
There are people that had to escape USA because they warned people of government institutions abusing the law (see Snowden for 1 example).
There are people killed in Mexico for protesting against drug cartels and corruption in government protecting them.
Liberal and paceful France sent spies to put a bomb and explode ecologists' ship that was protesting against nuclear tests in international waters. Later New Zaeland caught the spies, and France blackmailed them to release the spies threathening war.
It's pretty common for nice democratic governments to do EVIL things. It's even more common for non-democratic, or non-liberal governments to do that. Most of the time you're fine, because government ignores most people. But the law is concerned with protection of the few that wouldn't be fine.
> So if you don't unlock your phone, it's an admission of guilt.
Even medieval inquisition had higher standards than that. They tortured people, but at least they required them to admit the crime. You don't even want that. Congratulations.
Well it sounds like the Australians who will put you in a cage for 10 years for not unlocking your phone very much do care what you do with it...
I understand the evidence indicates that some people do choose not to unlock their phones on demand by police, even when they are innocent. You can interpret that as an admission of guilt if you like; this puts you in the same moral boat as police who write up a confession for someone and then fake their signature, because they just know the guy is guilty.
You can say what you think all you like, but the evidence is against you.
This is provably not true. In fact, you need to come up with evidence proving that there is NOTHING to lose by unlocking your phone.
Everyone has done something wrong, often to the point of theoretically being felonies.
https://mic.com/articles/86797/8-ways-we-regularly-commit-fe...