In my (European) country now we can have a digital copy of the driving license on the phone. It specifically says that it’s valid to be presented to law enforcement officers during a check.
I saw amazed in the beginning. They went from limited beta testing to full scale nationwide launch in just two months. Unbelievable. And I even thought “wow this is so convenient I won’t need to take the wallet with me anymore”. I installed the government app and signed up with my government id and I got my digital driving license.
Then yesterday I got stopped by a random roadblock check and police asked me my id card. I was eager to immediately try the new app and show them the digital version, but then because music was playing via Bluetooth and I didn’t want to pause it, i just gave the real one.
They took it and went back to their patrol for a full five minutes while they were doing background checks on me.
That means if I used the digital version, they would had unlimited access to all my digital life. Photos, emails, chats, from decades ago.
What are you are going to do, you expect that they just scan the qr code on the window, but they take the phone from your hand. Are you going to complain raising doubts? Or even say “wait I pin the app with a lock so you can’t see the content?”
“I have nothing to hide” but surely when searching for some keywords something is going to pop-up. Maybe you did some ironic statement and now they want to know more about that.
And this is a godsend for the secret services. They no longer need to buy zero day exploits for infecting their targets, they can just cosplay as a patrol and have the victim hand the unlocked phone, for easy malware installation
Immediately uninstalled the government app, went back to traditional documents.
They went as far here in Ukraine as making some services exclusive to those who have the app. The official government app for digital documents and services, Diia, also has stupid integrity check, which makes it unable to be installed from Aurora Store, which makes me cut out from such services, because I don’t have Google Services installed. By the way, there are Google trackers in the app.
The IRS (tax authority) in the US has Google trackers loaded into the DOM including pages listing your Social Security number too, yikes.
In Brazil, the officer just uses their own phone to scan a validation QR on the ID app, at no point your phone leaves your hand and in a few seconds the officer has what they need. Shouldn’t this be the case in the EU? AFAIK the officers only take your physical ID to check the number, so if you’re using the app they shouldn’t need to confirm that as the info is already validated
Isn’t it impressive that we in Brazil sometimes create the best and most simple solutions to problems, but no one will imitate us and will keep insisting in their problematic systems, because we are the third world and supposedly can’t get anything right? It’s sad when we end up replacing our own good things, because even we think we’re inferior in everything and can’t come up with a good solution for anything.
Say what you will about the country, but gov.br and PIX put everything else to shame and no one even came close to something like that
deleted by creator
For all that Russia is an imperialist police state, our e-government services are pretty slick too
As op said, the whole point is to get you to hand your phone over unlocked. Thats the point.
But you’re not handing your phone over, it stays in your hand and if there’s a QR code to scan they’ll scan it with the phone in your hand
That’s not why the system was created
They don’t need to take your phone with them. They literally can just scan the code, because it sends all the info to their screen, that they were gonna look up anyway.
No way the government implemented an app for this use case. That’s extremely inefficient.
I thought you actually tried, that they took your phone?
Yup, if you hand them your unlocked phone they can look through it.
Digital licence is all I have used for about 7 years. Police here are careful never to reach for a phone as they can’t legally. You display the licence and give it a shake to animate it and they copy the number down in their notebook. If the police ever did illegally take a phone I would wipe it and replace it and lodge a complaint.
They may have similar protections in Europe. People often post opinions on social media without checking facts. I get why on commercial social media where everything is rage bait. But i don’t know why people can’t take a few minutes to check local laws before posting here.
On iOS you can enable Guided Access and restrict what one can do, for example disable touch and lock it to an app, until you enter a Code. I imagine Android will have something similar.
This obviously doesn’t protect against electronic forensics, but it does protect against just opening different apps and searching through the phone manually.
Yes, Android has app pinning. But they still have access to anything the app gives them.
They can see my ID on the phone. But if they want to take it, then no, I don’t have that ID on me. But then, I live in the US where digital ID isn’t valid.
It is valid in some states. OP raises an excellent point. I live in the U.S. and have the digital ID on my phone, but I won’t be handling it to law enforcement. I’ll make sure I have the physical copy when I’m driving.
You can block off certain sections of the screen, or disable touch completely. If all the info they need is on the screen just make it so they can’t tap anything.
If you are on android you can use screen pinning. That way phone won’t get locked and bother the police but they can’t switch to any other app without your password.
But I don’t know how much I’ll trust an app by government. Maybe in Europe that app is Open source.
deleted by creator
The EU covid app was released on fdroid. I would trust it if it was open source, audited by a third party, and finally made available on fdroid.
deleted by creator
Fortunately fdroid does some checks. And the third party audit does some checks. Thats already a lot of others checking it.
(deleted content)
There’s a good chance they have a Cellebrite in their car and will copy your entire phone’s storage over.
And you’ll get a tinfoil hat as a reward
Yeah because the police using a commercially available and ridiculously cheap device to copy data from your phone is totally unbelievable. I must be the crazy one.
News flash, they’re not FBI tier ultra classified tools anymore, you can find them on eBay for less than $1000. There’s a good chance that’s cheaper than the phone you have right now. You think a police department who is already intent on scrolling through your phone while “checking your ID” wouldn’t just put one in every cruiser?
You think a government can ask a couple of dozen thousand, barely literate goons to do something like this without the word getting out within a week?
Yes, and phones have up to 1000gb of storage nowadays. It’ll take a minute :p
Not in Australia where it is illegal for the police to touch your phone.
They can compel you to reveal your password
without a warrantbut can’t touch your phone? Is that a state law?Dont we have a right to a lawyer and to not self incriminate? Surly they need a court order to compelled u to reveal ur password?
https://www5.austlii.edu.au/au/legis/cth/consol_act/ca191482/s3la.html
It does require a court order, but notably you do not need to be suspected of a crime.
Dont we have a right […] to not self incriminate?
Not that I’m aware of, but if you find otherwise, let me know!
It requires a magistrate to issue an order at least. But yeah seems we are fucked. Is there any way one could devise a method to which it is literally impossible for you to provide said information if u dont want? Like could u tie unlocking to somthing they cannot legally compell u to do without violating ur human rights?
Pit it on another phone that you keep in your car or another profile with nothing else on it
That sounds like carrying an ID card with extra steps.
Nah, I’ll just carry my ID card around.
Don’t get me wrong, it’s great that you figured this out. But why did you not consider this sooner? Wouldn’t it have been obvious that you would have to have the phone unlocked and that having a police person have any access to an unlocked device would be a real problem?
What’s obvious to you may not be obvious to other people?
Likewise, what’s obvious to you at one moment may not be obvious to you at another, simply because you’re thinking about the situation from a different angle.
- Do not have a mobile device
- Do not install anything proprietary or governmental on that device you don’t have
- Use borderline secure (GrapheneOS) OS on that device you don’t have and don’t unlock it if demanded unless your health and/or life is in danger
deleted by creator
That’s cute but as a rule when dealing with the government, physical access is root access
your phone isn’t safe from anyone unless it’s been restarted since last unlocked, and is reasonably new. they have exploits for after it’s been unlocked incl while things are pinned
I have the digital id in case i forget my physical one (despite not legaly being required to carry id) but its in an empty graphene os profile.
