In my (European) country now we can have a digital copy of the driving license on the phone. It specifically says that it’s valid to be presented to law enforcement officers during a check.
I saw amazed in the beginning. They went from limited beta testing to full scale nationwide launch in just two months. Unbelievable. And I even thought “wow this is so convenient I won’t need to take the wallet with me anymore”. I installed the government app and signed up with my government id and I got my digital driving license.
Then yesterday I got stopped by a random roadblock check and police asked me my id card. I was eager to immediately try the new app and show them the digital version, but then because music was playing via Bluetooth and I didn’t want to pause it, i just gave the real one.
They took it and went back to their patrol for a full five minutes while they were doing background checks on me.
That means if I used the digital version, they would had unlimited access to all my digital life. Photos, emails, chats, from decades ago.
What are you are going to do, you expect that they just scan the qr code on the window, but they take the phone from your hand. Are you going to complain raising doubts? Or even say “wait I pin the app with a lock so you can’t see the content?”
“I have nothing to hide” but surely when searching for some keywords something is going to pop-up. Maybe you did some ironic statement and now they want to know more about that.
And this is a godsend for the secret services. They no longer need to buy zero day exploits for infecting their targets, they can just cosplay as a patrol and have the victim hand the unlocked phone, for easy malware installation
Immediately uninstalled the government app, went back to traditional documents.
Pretty sure they’re not supposed to take your phone. The point of a digital document is that you don’t have to hand in anything. Scan the QR code and they can run as many background checks on the data they want. You’ll still have your phone.
Not supposed to != wont. Police regularily do things that they arent supposed to and as long as people naively consent by giving their phone they can get away with whatever they want i would think.
Then sue them. You have the right.
In my country you cant Sue, only complain. But you complain to the instance you complain about. Eg police is handling complaints about the police. Besides that. For most people sueing isnt something you just do
Of course you can. You said you live in Europe.
Unless you live in Russia or the Vatican, that means your country has signed the European Convention on Human Rights, of which article 8 commits it to respecting your privacy.
So, sure, you’re not going to bother suing. It’s not that important to you. But let’s go easy on the helplessness of “In my country you can’t do that”. Yes. You can do it.
Wonder why you are getting downvoted as this is a perfectly legitimate point. Are they just not in Europe or something?
Or who knows, they really could be in the Vativan, stranger things have happened. But I don’t know why they would mention those circumstances without qualification that they are special circumstances. Kind of burying the lede there.
Good luck lmao
In Brazil, the officer just uses their own phone to scan a validation QR on the ID app, at no point your phone leaves your hand and in a few seconds the officer has what they need. Shouldn’t this be the case in the EU? AFAIK the officers only take your physical ID to check the number, so if you’re using the app they shouldn’t need to confirm that as the info is already validated
Isn’t it impressive that we in Brazil sometimes create the best and most simple solutions to problems, but no one will imitate us and will keep insisting in their problematic systems, because we are the third world and supposedly can’t get anything right? It’s sad when we end up replacing our own good things, because even we think we’re inferior in everything and can’t come up with a good solution for anything.
Say what you will about the country, but gov.br and PIX put everything else to shame and no one even came close to something like that
I love SUS too.
I’m sure it doesn’t come across the same in Portuguese, but I think naming a government service SUS is pretty funny.
deleted by creator
For all that Russia is an imperialist police state, our e-government services are pretty slick too
As op said, the whole point is to get you to hand your phone over unlocked. Thats the point.
But you’re not handing your phone over, it stays in your hand and if there’s a QR code to scan they’ll scan it with the phone in your hand
That’s not why the system was created
I believe EU also requires that you give up login credentials if they are biometric in nature. Meaning if you use a fingerprint reader or face unlock you are required to provide that to law enforcement when asked. So either way if they want your phone’s contents they can get it.
They need a warrant or probable cause for that, but yes they can compel it unlike a password. It’s still a search and needs to be lawfully done in the first place.
Yea but that wasn’t the point of me pointing it out. The point was that they don’t need to resort to such measures in order to clandestinely acquire your unlocked phone.
I wonder if they are referring to this, or to an EU equivalent of it:
The U.S. Court of Appeals for the 9th Circuit has ruled that police officers can compel a suspect to unlock their phone using a fingerprint without violating the Fifth Amendment’s protection against self-incrimination.
Right, but they can’t just do it without reason which he was implying, and he replied to me with
“Yea but that wasn’t the point of me pointing it out. The point was that they don’t need to resort to such measures in order to clandestinely acquire your unlocked phone.”
In this case he was on parole where they have the right to search him. That mention of blood draw etc, you’re already under arrest and they can search your person anyway.
I’m not aware of any law where a cop can walk up to you on the street and demand they unlock your phone with biometrics and search it without cause.
On re-reading that other guys comments, they just make no sense. You are right to draw your distinction, because this thread is being strangely vague on details and trying to encourage conspiratorial thinking without specifics.
That said, I think the core concern can be rephrased in a way that gets at the essence, and to me there’s still a live issue that’s not relieved simply by noting that this requires probable cause.
What’s necessary to establish probable cause in the United States has been dramatically watered down to the point that it’s a real time, discretionary judgment of a police officer, so in that respect it is not particularly reassuring. It can be challenged after the fact in court, but it’s nevertheless dramatically watered down as a protection. And secondly, I don’t think any of this hinges on probable cause to begin with, because this is about the slow creep normalization of surveillance which involves changes to what’s encompassed within probable cause itself. The fact that probable cause now encompasses this new capability to compel biometric login is chilling even when you account for probable cause.
And moreover, I think there’s a bigger thematic point here about a slow encroach of surveillance in special cases that eventually become ubiquitous (the manhunt for the midtown shooter revealed that practically anyone in NYC is likely to have their face scanned, and it was a slow-creep process that got to that point), or allow the mixing and matching of capabilities in ways that clearly seem to violate privacy.
Another related point, or perhaps different way of saying the same thing above, is that this should be understood as an escalation due to the precedent setting nature of it, which sets the stage for considering new contexts where, by analogy to this one, compelled biometric login can be regarded as precedented and extensions of the power are considered acceptable. Whatever the next context is where compelled biometric login is considered, it will at that point no longer be a new idea without precedent.
That said, I think the core concern can be rephrased in a way that gets at the essence, and to me there’s still a live issue that’s not relieved simply by noting that this requires probable cause.
Well ya. The whole thing is really fucked in the first place. It’s very disturbing that it was ruled they can compel biometics in any circumstance.
In a far off future, this ruling would probably even allow a mind reading device to figure out a PIN, which would be protected, because they didn’t force you to say it, and reading electrical signals isn’t really any different than reading ridges on a finger.
They went as far here in Ukraine as making some services exclusive to those who have the app. The official government app for digital documents and services, Diia, also has stupid integrity check, which makes it unable to be installed from Aurora Store, which makes me cut out from such services, because I don’t have Google Services installed. By the way, there are Google trackers in the app.
Yeah, welfare here is mostly app/phone based. You can technically get around it, but it requires visiting a dwindling number of centres very regularly and waiting in long queues.
The IRS (tax authority) in the US has Google trackers loaded into the DOM including pages listing your Social Security number too, yikes.
Yup, if you hand them your unlocked phone they can look through it.
They don’t need to take your phone with them. They literally can just scan the code, because it sends all the info to their screen, that they were gonna look up anyway.
No way the government implemented an app for this use case. That’s extremely inefficient.
I thought you actually tried, that they took your phone?
Illinois at least passed a law to limit the consent given when using a digital ID with a police officer such that they’re ONLY allowed to use it for ID and not snooping, but that’s the only state to do so.
https://www.eff.org/deeplinks/2024/10/should-i-use-my-states-digital-drivers-license
But do you trust them to follow the law? I certainly don’t.
Couldn’t these apps also use the Android/iOS’ wallet manager which allows handing it over unlocked while the phone is “closed” (not necessarily locked, though…)?
I don’t know if they could, because they will probably compromise all information into the wallet.
But it’s a good idea. I hope that it can be implemented like you said in a secure way.
On iOS you can enable Guided Access and restrict what one can do, for example disable touch and lock it to an app, until you enter a Code. I imagine Android will have something similar.
This obviously doesn’t protect against electronic forensics, but it does protect against just opening different apps and searching through the phone manually.
Yes, Android has app pinning. But they still have access to anything the app gives them.
They can see my ID on the phone. But if they want to take it, then no, I don’t have that ID on me. But then, I live in the US where digital ID isn’t valid.
It is valid in some states. OP raises an excellent point. I live in the U.S. and have the digital ID on my phone, but I won’t be handling it to law enforcement. I’ll make sure I have the physical copy when I’m driving.
You can block off certain sections of the screen, or disable touch completely. If all the info they need is on the screen just make it so they can’t tap anything.
Digital licence is all I have used for about 7 years. Police here are careful never to reach for a phone as they can’t legally. You display the licence and give it a shake to animate it and they copy the number down in their notebook. If the police ever did illegally take a phone I would wipe it and replace it and lodge a complaint.
They may have similar protections in Europe. People often post opinions on social media without checking facts. I get why on commercial social media where everything is rage bait. But i don’t know why people can’t take a few minutes to check local laws before posting here.
Probably because I live in America but we don’t trust police to not do something just because they’re not supposed to. They do it all the time here.
Why is nobody mentioning that by installing it and authenticating, there is sweet fuck all you can do to stop them tracking your movements and downloading your whole address book so they can see who you Associate with?
Taking the phone isn’t the problem if they are already in it.
You have to explicitly allow that, at least on android. However, most people hit allow and don’t think anyways :/
Oh nice, no contacts or internal storage stuff!
There are camera and location permissions listed. AFAIK my ID card doesn’t have those.
Camera also means microphone access.
I think that might just be to scan qr codes. And unless you’ve got a very shitty phone, that camera can’t run without the app being active.
You do close your apps, right?
Yeah, I do.
Gud gud
iOS too. Permissions can even be given only while the app is active if it “requires” them, or for location for example an approximate one is sufficient.
Yep, but there was some news about that recently. Apparently their security doesn’t quite work as it should. Perhaps that’s been fixed by now, but then again, Apple does not have a great reputation there.
In most phones it is possible to set permissions (to contacts, locaton, etc) for every app.
Honestly, I wouldn’t worry about all the comments discussed here. Mainly because the governments already have access to everything and I mean EVERYTHING. They will get a subpoena in under a minute if they want to check something regarding your digital life. Not condoning it, just a fact of present life.
Mainly because the governments already have access to everything and I mean EVERYTHING.
There’s limits, largely around the speed and accuracy by which data can be ingested and processed. You can look for everyone somewhere sometimes and someone everywhere sometimes and someone somewhere at any time, but it takes a ton of digital resources to monitor everyone everywhere all the time. For the data to be meaningful it has to be interpreted.
Manned checkpoints allow local state actors to make decisions in near-real time relative to immediately present information. The classic example is someone with a stale warrant or notice on their record. The sheer volume of delinquents makes pursuing every individual troublesome, but as soon as a known offender steps across a checkpoint the police can pounce on the individual offender in that instance. If you’ve got a five year old traffic ticket, a police officer can be in your face about it as soon as they run your ID.
fwiw, my state’s mobile id app doesn’t even ask for the location permission. so maybe some, but it’s not universal
Hi, Your dedicated local Secret Service agent here.
We don’t need your smartphone to access your data. We have surveillance equipment for that. That is why we can scan the qr code of your ID app and do the checks we need.
If you want us not to track you, you need a degoogled smartphone and use cash exclusively. Also you could use a vpn while you browse the interwebs, but we ll still be, eventually, able to see where you browse.
BTW we don’t stop randomly ppl on roadblocks. You or your car or your route or all of the above was of concern for us.
They aren’t from the USA
deleted by creator
Actually you do have them in the us too now. It’s just only in nine states so far.
You guys have IDs? I thought that was only for drivers licenses… And no, those two are not from equal categories.
Ummm, yes, we do.
If you are on android you can use screen pinning. That way phone won’t get locked and bother the police but they can’t switch to any other app without your password.
But I don’t know how much I’ll trust an app by government. Maybe in Europe that app is Open source.
Wouldn’t trust a gov app in europe either. But then again i don’t trust any app and have them firewalled at least .
The EU covid app was released on fdroid. I would trust it if it was open source, audited by a third party, and finally made available on fdroid.
Ok this has some right for existence… Yet,just being oss isn’t always the point alone. Without checking the code myself I still just have to trust.
Fortunately fdroid does some checks. And the third party audit does some checks. Thats already a lot of others checking it.
Sure, but it’s still just trusting others. Ok,maybe it’s just my paranoia speaking…
For some reason that’s only a thing when navigation is set to buttons, when using gestures it’s not available. So yeah it’s a bit hard to go to settings, change the navigation mode, turn on pinning, pin the app and only then hand over the phone…
I also have my phone setup to gesture navigation. If I swipe up and click on app icon I see option to pin it.
Must be some OnePlus limitation or something.
You’re absolutely right about the danger of giving up your phone, if the police wanted to take it from you. By sticking with traditional documents you remove any pretense they might have to try. It is not a stupid call, it’s just less convenient - but then, security is always a compromise with accessibility.
I just double checked on my phone, on Android you can pin the current app, that limits access for the user to only that app. Unpinning requires you to essentially unlock the phone again. I wouldn’t hand my phone to a pig either, but if I pinned the app, it would be secure enough for a traffic stop.
For people with iPhone you can do this too.
Go to settings and pull down with your finger to get the search box to appear, then search for “Guided” and click “Guided access”.
Enable this setting as well as toggling “Accessibility shortcut”. Now you can open an app and triple click the lock button and select guided access.
Then on this screen you can press start in the top right or options in the bottom left to refine the controls, for instance:
- Side button
- Volume controls
- Motion
- Software keyboards
- Touch
- Time limits
Now the phone is locked in that app and to come out of it requires the passcode.
Thanks man. This is really useful whenever i need to show someone anything on my iphone.
No problem.
Yeah it’s great for giving your friends your phone if you don’t trust them not to try and fuck with you for jokes. Or if using it for playing music in a group gathering.
Even for children using the device. Particularly as you can set the volume and not give them the permission to change it.
Does this work well for the camera app when I’m filming the police
As others already stated there are solutions already to pin apps and to be honest, I feel I would not give the phone to a policeman like that.
On the other hand, what I’m more concerned about is giving the access to my phone’s data through different permissions to my government.
For example this is the list of permissions for the Hungarian government app: https://reports.exodus-privacy.eu.org/en/reports/hu.gov.dap.app/latest/#trackers
Nah, I’ll just carry my ID card around.
Not in Australia where it is illegal for the police to touch your phone.
They can compel you to reveal your password
without a warrantbut can’t touch your phone? Is that a state law?Dont we have a right to a lawyer and to not self incriminate? Surly they need a court order to compelled u to reveal ur password?
https://www5.austlii.edu.au/au/legis/cth/consol_act/ca191482/s3la.html
It does require a court order, but notably you do not need to be suspected of a crime.
Dont we have a right […] to not self incriminate?
Not that I’m aware of, but if you find otherwise, let me know!
It requires a magistrate to issue an order at least. But yeah seems we are fucked. Is there any way one could devise a method to which it is literally impossible for you to provide said information if u dont want? Like could u tie unlocking to somthing they cannot legally compell u to do without violating ur human rights?
