The DOJ is prosecuting a Cop City protester for allegedly providing CBP with a “duress” passcode that wiped the contents of his GrapheneOS phone
Concern over US effort to prosecute Sam Tunick, accused by authorities of wiping his phone using GrapheneOS
The GuardianTimothy Pratt
Context & Ripple Effects
The case joins a long-running conflict over compelled access to encrypted devices. Earlier coverage of a ruling that barred compelled disclosure of phone passwords makes the alleged use of a duress code consequential beyond the device itself: it raises whether authorities can treat a privacy feature’s activation as incriminating conduct.
It also follows reporting that the FBI sought to exploit protesters’ phones to map protest networks, placing this prosecution at the intersection of protest policing, border-device searches, and secure mobile software.
First-order effects
Sam Tunick must defend against a DOJ theory that allegedly triggering a GrapheneOS wipe function after a CBP demand can support criminal prosecution.
CBP’s handling of the phone and the alleged passcode event become central evidence, while GrapheneOS’s duress and data-wipe features receive intensified legal scrutiny in this case.
Second-order effects
Civil-liberties lawyers and device-security providers will closely assess whether the government’s theory effectively penalizes users for deploying anti-access features, especially where password compulsion is contested.
Investigators seeking access to protesters’ devices may face sharper evidentiary disputes over device state, user intent, and whether a wipe was deliberate rather than an ordinary consequence of security controls.
Third-order effects
If courts accept criminal liability tied to activating a device’s protective feature, the practical boundary between lawful encryption and alleged obstruction could narrow, encouraging more litigation over secure-device design.
The case is part of a broader contest over whether governments can obtain usable data from encrypted phones without compelling secrets; the ultimate effect will depend on the facts proved and any judicial rulings.
The trend: Encrypted-device access is increasingly being tested not only through demands for passwords, but through prosecutions and forensic disputes over the security features that frustrate access.
""It's concerning - and sends the message that [GrapheneOS] is criminal by default," said Christophe Boutry, a cybersecurity and surveillance expert. Boutry and Bill Buddington, senior staff technologist at the Electronic Frontier Foundation, both said they had not seen a simila…
Fucking wild. Really only increases my desire to switch to Graphene. — “The US Department of Justice is attempting to prosecute an Atlanta resident in connection with the movement against the police training center known as Cop City because he had GrapheneOS on his phone”
New, by me: The Justice Department is prosecuting an American for allegedly providing U.S. border agents with a “duress” passcode that wiped the contents of his phone when they entered it. We've confirmed the phone was running GrapheneOS. — Read more: https://techcrunch.com/..…
The US Department of Justice is attempting to prosecute an Atlanta resident in connection with the movement against the police training center known as Cop City because he had GrapheneOS on his phone, an open-source operating system that enables users to enter a passcode and wipe…
BREAKING: The D.O.J Accuses Atlanta Resident, Samuel Tunick, Of Using A ‘Duress’ Password To Wipe His Phone During A Border Search In Rare Case Testing Privacy …