❌

Reading view

Mullin on heat ray weapon: ‘We’re always evaluating technology on the border’

Department of Homeland Security (DHS) Secretary Markwayne Mullin said Wednesday that the department is “always evaluating technology on the border” after receiving a military-grade heat ray from the Pentagon. CNN reported that the heat ray — officially called the Active Denial System — emits an invisible beam of electromagnetic waves which can reach a little…

  •  

What Is PHP? Why Are Government and Business Websites Going Offline?

A critical security flaw in the programming language underpinning much of the web has prompted a global rush to patch vulnerable systems.

© Vincent West/Reuters

A programmer in Guernica, Spain, on Thursday, working on PHP code, software used throughout the internet.
  •  

Portuguese councils and hospitals caught in worldwide website security alert

Portuguese councils and hospitals are among 29 public bodies identified as using outdated website software, amid an international security alert over flaws that could allow hackers to take control of

The post Portuguese councils and hospitals caught in worldwide website security alert appeared first on Portugal Resident.

  •  

PHP Security Flaw Sets Off Global Rush to Patch, Leaving Websites Offline

Governments and businesses around the world scrambled to prevent hackers from exploiting a vulnerability in PHP, a popular programming language.

© Geert Vanden Wijngaert/Associated Press

Prime Minister Rob Jetten of the Netherlands in Brussels last week. He said that his cabinet was closely monitoring the online vulnerability caused by a security flaw in PHP.
  •  

Yet another financialised peace initiative from the Witkoff-Kushner stable

Instead of prioritizing stakeholder profit, the Witkoff-Europe combo should address Eurasian security architecture and NATO-Russia-China frontiers to gain traction in Moscow.

Join us on Telegram, X, and VK.

Contact us: info@strategic-culture.su

Back in December 2025, U.S. commentator Sundance, writing in the Conservative Treehouse, wrote about Steve Witkoff and Jared Kushner’s new ‘Money Diplomacy’ solution for Ukraine that “require[d] [the establishment of] a system whereby the western opportunity for financial benefit continues”. From this perspective, the U.S. negotiators would “propose a long-term plan for continued financial benefit”.

From their current language it appears that Witkoff and Kusher are still confident they can construct a financial reward system for western banks, investors, politicians and Ukraine officials that will retain the benefits of war without the ancillary ingredient of bloodshed.

As Sundance noted —

“If the U.S. delegation can pull this off, then Russia can gain the territory they want, corrupt Ukraine officials can keep skimming investment money, the EU can retain the power it wants to extract financial payments, American politicians can use the “long-term recovery projects” for money laundering, and quasi-public/private investment banks can benefit from the exploitation of Ukraine resources”.

From this evident New York real estate worldview, all other issues — territorial boundaries, security and NATO’s encroachment into Central Asia’s security architecture — are but ‘downstream details’ “to the stuff that really matters, the money”.

Monetary diplomacy, however, has not brought a solution for Ukraine (nor for that matter, for Gaza either). Nonetheless, Witkoff has a new plan that David Ignatius has outlined in his column at the Washington Post.

Ignatius highlights that despite the recent Ukraine “flap” over its targetting of Russian refineries, “the U.S. and Europe are moving toward a joint peace proposal that would deliver financial and security benefits to both Ukraine and Russia as a baseline for a territorial settlement that falls short of both sides’ war aims”. In other words, ‘a sweetener’ dangled to persuade the sides to stop bombing each other’s refineries and to open the path for this ‘new’ initiative.

If Zelensky agrees to halt refinery attacks, “we’re back in, and we go to Moscow”, an American official told Ignatius.

In gist, the 4-point plan envisages a generous reconstruction framework to meet “Zelensky’s myriad cash needs”; security guarantees for Ukraine equivalent to NATO’s Article 5; the economic integration of Russia, Ukraine and Europe through an energy deal — “This might consist of a pipeline carrying Russian oil and gas to Europe with Ukraine and Russia splitting the profits. Such a pipeline could sharply reduce European energy costs”, a U.S. official said. In addition to providing Russia with “long-term access to the European energy market”, a peace deal would specify how and when existing economic sanctions on Russia would be removed.

The final point – wait for it — would be a ceasefire along the existing front line, or the ‘line of control’.

It seems extraordinary: The U.S. and Europeans negotiate amongst themselves, seemingly oblivious to the explicit statements issued by the Russian side.

Oil and gas would be supplied by Russia to the needy Europeans who voluntarily forsook their earlier cheap Russian supply, who are trapped by their own decisions and who denigrate Russia at every opportunity. And with the profits to be “split” with Ukraine? No way will Russia accept such a one-sided proposal.

FM Lavrov said at the UNGA no ceasefire under any format. That means that any negotiations would have to take place under fire, and Putin has suggested that even then, he would ‘think twice’ about starting any negotiations (whether under fire or not).

Putin’s spokesman Dmitry Peskov confirmed just last week that “piecemeal solutions and agreements” would prevent a comprehensive settlement from being reached; a “freeze” of the conflict would not help either —

“[Ukraine] is a highly complex matter, and the settlement must be comprehensive … We need a solution for future generations — one that is guaranteed and safeguarded against setbacks”.

It seems that the Europeans have not grasped that a Korean-style cessation of hostilities (as argued by General Kellogg) along a front where two militaries face each other is a recipe for precisely no solution. It has been 73 years since the Korean War was frozen by armistice. Nothing has changed.

The repeated return to this mantra of a ceasefire along line of contact, rather than solution first; ceasefire last, shouts out to the Russians that the West wants to keep Ukraine in the locker-room for the time when a platform from which to exert pressure (again) on Russia in the future is to be jacked-up.

The fatal flaw to this initiative is its cultural deafness. For Witkoff and Kushner it may be “all about the stuff that really matters – money” — but that is not the case for Russia.

If the Witkoff-Europe combo recalled Russian history, they would understand why, for Russia, security, security, security comes top.

Walter Munchau cautioned just this week that “the Ukraine war risks escalating” —

“We should be under no illusion about a war with Russia. We are absolutely not in a position to win. Whose bond markets are going to be blown up first? Who is going to run out of interceptor missiles first? … On every [count] — military, energy, finance — Europe is at a disadvantage. That’s not all. There is a relatively plausible scenario in which Ukraine and Iran merge into a single West Eurasian war — and become the ultimate proxy conflict between the U.S. and China”.

If, instead of putting continued ‘stakeholder’ grift first, with its mechanism to ensure “that the western opportunity for financial benefit continues”, the Witkoff-Europe combo chose rather to address the fundamentals to the conflict — the deeper question of a Eurasian security architecture; the definition of where exactly the frontier that separates NATO security interests from those of Sino-Russian interests physically lies — they might find a more receptive audience on their next trip to Moscow.

Alas, circumscribing NATO’s extent is not possible – as things stand.

  •  

A.I. Discovered a Critical Vulnerability in PHP, a Coding Language Behind Many Websites

The disclosure heightened concerns about A.I.’s potential to upend cybersecurity unless shortcomings are addressed.

© Annegret Hilse/Reuters

The website for the French government was temporarily unavailable on Wednesday amid hacking concerns stemming from major bugs in a piece of software used widely across the internet.
  •  

EU Moves to Rewrite GDPR and Cookie Rules in Major Digital Regulation Overhaul

The European Union has taken a significant step towards revising its digital regulatory framework after member states agreed proposals to amend the General Data Protection Regulation (GDPR), simplify cookie consent requirements and overhaul cybersecurity reporting obligations.

The Council of the European Union adopted its negotiating position on Wednesday, 21st October, clearing the way for negotiations with the European Parliament once MEPs establish their position.

The measures form part of the European Commission’s Digital Omnibus package, introduced in November 2025, and represent one of Brussels’ most substantial attempts to simplify the regulatory obligations imposed on businesses operating across the single market.

Changes to GDPR and personal data rules

The proposed reforms would modify several provisions of the GDPR, which has governed the processing of personal data across the EU since May 2018.

Rather than replacing the legislation, the Council wants to clarify existing obligations, particularly those concerning pseudonymised information, requests for access to personal data and the use of information in scientific research.

The agreed position retains the existing definition of personal data while introducing provisions intended to clarify when pseudonymised information can be linked to an identifiable individual.

Companies would also benefit from simplified procedures for handling manifestly unfounded or excessive data requests and from reduced information requirements in certain low-risk circumstances.

Another proposed change would extend the deadline for notifying authorities of personal data breaches, while establishing more consistent reporting templates across the EU.

For multinational companies, which currently navigate different interpretations of data protection obligations by national authorities, these provisions could reduce compliance costs and administrative duplication.

However, the changes have raised concerns among European privacy regulators.

In a joint opinion published in February, the European Data Protection Board and European Data Protection Supervisor warned that parts of the Commission’s original proposal could create legal uncertainty and undermine existing protections.

They were particularly concerned about proposals affecting the definition of personal data and the Commission’s potential role in determining when pseudonymised information falls outside GDPR requirements.

The Council’s decision to retain the existing definition addresses part of that debate, although the final legislative text remains subject to negotiations.

Fewer cookie banners for internet users

One of the most visible changes would affect the consent notices encountered by Europeans when visiting websites.

Under the Council’s proposal, additional categories of cookies and similar tracking technologies could be used without obtaining explicit consent, provided the relevant legal conditions are satisfied.

The proposed exemptions include technologies necessary to deliver a service, maintain device security or conduct audience measurement.

For website operators, publishers and online businesses, the changes could reduce the number of consent requests displayed to visitors and simplify technical compliance.

The current system has generated extensive legal disputes over whether consent is genuinely voluntary and whether tracking technologies collect information beyond what users have authorised.

EU Today has previously examined the enforcement of these obligations, including a Belgian court ruling concerning the legality of the advertising industry’s consent framework.

The latest proposal would not abolish consent requirements for commercial tracking or behavioural advertising. Technologies falling outside the permitted exemptions would remain subject to the applicable privacy rules.

Cybersecurity reporting and artificial intelligence

The package also addresses the growing number of reporting obligations imposed on European businesses under overlapping cybersecurity legislation.

The Commission originally proposed a single European reporting mechanism for certain data and cybersecurity incidents.

Member states have instead agreed to establish national entry points, supported by an EU-level information system and provisions for coordinating cross-border notifications.

The Council’s position would also clarify the legal grounds for certain uses of personal data in artificial intelligence systems and introduce safeguards for processing sensitive information in specified circumstances.

These provisions follow increasingly complicated disputes over the application of European privacy legislation to AI development and automated decision-making.

As EU Today reported in its coverage of a major GDPR enforcement case involving Uber, automated processing already presents substantial compliance risks for companies operating within the bloc.

Competitiveness drives regulatory reform

The Commission estimates that its wider digital simplification initiative could save European businesses up to €5 billion in administrative costs by 2029.

The initiative reflects pressure from European governments and business organisations to reduce the regulatory fragmentation that makes operating across multiple EU jurisdictions more expensive.

The Digital Omnibus is part of a broader legislative programme influenced by the competitiveness reports produced by former Italian prime ministers Enrico Letta and Mario Draghi.

Under the Council’s negotiating mandate, several existing data-related rules would also be consolidated, while provisions governing the protection of trade secrets would be strengthened.

The European Parliament must now determine its negotiating position before formal discussions between the institutions can begin. Until the legislation is agreed and adopted, existing GDPR, cookie consent and cybersecurity requirements remain in force.

  •  

European Governments Move to Give Energy Companies Powers to Neutralise Hostile Drones

France, Germany, Austria and Poland are expanding or reviewing the authority of critical infrastructure operators to defend facilities against drones, raising legal and operational questions over the growing role of civilian companies in national security.

European governments are reconsidering who should be authorised to intercept hostile drones as energy companies and critical infrastructure operators confront an increasingly serious threat to electricity networks, transport systems and other essential facilities.

France has already introduced legislation permitting approved operators to deploy counter-drone systems, while Germany is reviewing similar arrangements and Austria has announced plans to extend certain protective powers to infrastructure companies.

Poland has moved further by authorising designated security units to disable or destroy drones entering restricted areas around important energy installations.

The changes reflect concerns that national police and armed forces cannot provide permanent protection for every substation, power station, railway facility or pipeline against relatively inexpensive unmanned aircraft.

France establishes a new approach

In August 2026, the French parliament approved legislation allowing authorised operators of critical infrastructure and their contractors to detect, jam and intercept drones near designated facilities.

The legislation followed a series of reported drone incursions over sensitive locations, including military installations.

Under the French approach, operators of strategically important infrastructure may eventually use approved counter-drone systems without relying exclusively on the immediate intervention of military personnel.

Potential beneficiaries include electricity operators and organisations responsible for transport infrastructure.

French authorities are testing detection equipment, electronic countermeasures and interceptor drones at Brétigny-sur-Orge, south of Paris.

The programme examines systems capable of identifying approaching aircraft, determining whether they present a threat and initiating an appropriate response.

France intends to expand the protection of sites classified as strategically important, with further deployment planned during 2027.

The initiative would introduce responsibilities traditionally associated with military or police operations into the management of civilian infrastructure.

Germany and Austria reconsider existing restrictions

Germany is examining the legal conditions under which private companies and infrastructure operators could participate in active counter-drone operations.

At present, responsibility for neutralising threatening aircraft remains primarily with the competent public authorities.

The debate has intensified following security incidents involving unmanned aircraft, including the discovery of an explosives-laden drone near a Ukrainian cargo aircraft at Leipzig/Halle airport in August.

German authorities attributed the incident to Russia, an allegation Moscow denied.

The German government’s review concerns not only the equipment that companies may possess but also whether trained security personnel should be permitted to deploy countermeasures without waiting for a separate police authorisation.

Austria announced plans in September to extend comparable powers to selected critical infrastructure operators, including major energy companies.

The government has acknowledged the practical limitations of protecting a large number of widely dispersed installations using state security personnel alone.

Poland has already established restricted drone zones around sensitive energy facilities, with designated security units authorised to intercept aircraft entering those areas under applicable national rules.

Electricity networks face particular risks

Electricity infrastructure presents a difficult security problem because essential installations are distributed across extensive geographical areas.

Transmission operators manage thousands of kilometres of high-voltage lines, while substations, transformers and switching stations connect generation facilities to consumers.

A successful attack against critical equipment can produce consequences extending well beyond the immediate site.

Large power transformers are particularly difficult to replace. Manufacturing, transporting and installing specialised equipment can require lengthy preparation, making rapid recovery uncertain after serious damage.

European utilities have traditionally concentrated on physical security, maintenance and restoring services after technical failures or accidents.

The spread of drones creates additional demands for surveillance, early warning and the ability to respond before an attack reaches its target.

Russia’s repeated strikes against Ukraine’s electricity infrastructure have demonstrated the extensive disruption that attacks on power systems can cause.

European governments are now evaluating how comparable vulnerabilities could be exploited against their own networks.

Who bears responsibility for an interception?

Giving civilian operators access to counter-drone equipment raises unresolved legal questions.

Electronic jamming can interfere with communications and navigation systems beyond the targeted aircraft. A drone brought down over an industrial or residential area could injure members of the public or damage surrounding property.

Security personnel must also determine whether an unidentified drone is hostile, operating unlawfully or simply present because of an error by its operator.

A mistaken interception could expose infrastructure companies to compensation claims and other legal consequences.

European governments must therefore establish who can authorise an intervention, which countermeasures are permitted and how responsibility is allocated when damage occurs.

There is no uniform European approach.

Some operators support expanding their protective powers, while others argue that the use of force should remain the responsibility of the state.

Finland’s national electricity transmission operator, Fingrid, has expressed reservations about transferring such authority to energy companies.

The position reflects a wider concern that infrastructure operators should concentrate on maintaining essential services rather than assuming responsibilities for armed or coercive security operations.

A growing European security market

The regulatory debate is developing alongside a rapidly expanding market for counter-drone technology.

Manufacturers are offering equipment that integrates radar, optical sensors, electronic detection and software capable of classifying possible threats.

Interceptor drones and electronic countermeasures are increasingly being designed for use around civilian infrastructure rather than exclusively on military installations.

German defence company Rheinmetall has reported growing interest from private infrastructure operators in counter-drone protection.

However, the technology is advancing faster than the legal frameworks governing its use.

The immediate challenge for European governments is to establish protective arrangements that allow rapid intervention while preserving clear accountability.

A counter-drone system can identify an approaching aircraft within seconds. Determining who is authorised to stop it remains a matter for national law.

  •  

The Feds Took $460,000 From This Arizona Convenience Store Owner and Never Explained Why

Mario Ayala | Institute for Justice

On a Tuesday morning in February 2025, federal agents descended upon Ayala's Mini Market, a convenience store in Glendale, Arizona, that offered check cashing, money transfer, shipping, and cellphone repair services along with standard items such as groceries, snacks, sodas, and cigarettes. The agents, who worked for the Internal Revenue Service (IRS) and the Department of Homeland Security (DHS), seized three computers, five cellphones, and business records, plus about $460,000 in cash and checks. They did not say why.

Twenty months later, the store's owner, Mario Ayala, still has not received a definitive answer to that question. Nor has the government told him what it plans to do with his property or how he can try to get it back. That Kafkaesque situation is unconstitutional, Ayala's lawyers at the Institute for Justice argue in a motion and memorandum they filed on Tuesday in the U.S. District Court for the District of Arizona. The motion seeks the return of the property seized from Ayala's business, saying there is no legitimate reason for the government to keep it.

"The government can't take your stuff, disappear, and then never explain itself," says Institute for Justice attorney Betsy Sanz. "For over a year and a half, the government has been holding Mario's money and property. This prolonged seizure violates the Fourth Amendment and federal law. The government cannot hold onto your property indefinitely without explanation so it can eventually take it permanently using civil forfeiture."

The raid on Ayala's store happened while he was visiting his ailing father in Mexico, who died a couple of months later. After Ayala's wife and son called to tell him what had happened, he rushed back to Arizona, where he tried to figure out why his business had been targeted by the IRS and the DHS. That was harder than you might think.

Ayala "has heard nothing from the government since they raided his business and seized his property," Sanz and her colleagues note in their memorandum. When the agents left, they told Ayala's son that "the business would receive a letter within thirty days," the memorandum says, but "no letter came," and the government "has not told Mario why it took his property or why it refuses to return it."

The agents left a one-page inventory of the property they took, including the computers, cellphones (two of which belonged to Ayala's customers), documents, and currency, although it did not specify the amount of money. They also left the first page of a warrant signed by a federal magistrate judge, which contained no information about the crime they were investigating or the property they were authorized to seize. It referred to attachments that might have clarified those points, but the attachments were missing.

Ayala still has not seen those attachments. But on the same day the agents raided his store, they also searched 18 other businesses in the Phoenix area, all of which offered money services. Judging from the warrants served on three of those other businesses, which were signed by the same magistrate judge at the same time on the same day as the warrant for Ayala's Mini Market, the legal justification for the searches was suspected violations of 31 USC 5324, which makes it a felony to "structure" a financial transaction with the intent of "evading" federal reporting requirements.

The Bank Secrecy Act requires that financial institutions report cash transactions involving more than $10,000 to the Financial Crimes Enforcement Network (FinCEN). Although that mandate is aimed at money laundering, someone can be guilty of structuring even without evidence of any other crime if he deliberately tries to avoid triggering a FinCEN report by breaking up a transaction into amounts below the threshold. As far as Ayala can tell, the search of his store was based on nothing more than suspicion of structuring.

If so, Ayala's lawyers argue, the IRS agents who participated in the raid violated a 2019 federal law that bars the agency from seizing money when structuring is the only suspected crime. Congress passed that law in response to IRS forfeiture abuses highlighted by the Institute for Justice. "For the IRS to legally seize property based on a structuring offense, it must also have an added suspicion of some other criminal act," Sanz et al. note. "Yet the IRS seized Mario's property, apparently on the sole suspicion of a structuring violation."

That is not the only legal problem with the seizure. Assuming the government plans to seek forfeiture of Ayala's money based on an alleged connection to criminal activity, it missed a crucial deadline. The Civil Asset Forfeiture Reform Act (CAFRA) requires the federal government to notify property owners of attempted forfeitures within 60 days of the seizure. That deadline passed a year and a half ago, and Ayala still has received no such notice.

"This notice is crucial because it informs a property owner that the government intends to forfeit his property and triggers his ability to respond by filing a claim or administrative petition," Ayala's lawyers note. If the government fails to meet that requirement, CAFRA says, it "shall return the property."

The government can seek extensions of the CAFRA deadline "only if there is reason to believe that notice may have an adverse result," such as "endangering the life or physical safety of an individual," "flight from prosecution," "destruction of or tampering with evidence," "intimidation of potential witnesses," or "otherwise seriously jeopardizing an investigation or unduly delaying a trial." None of those conditions applies in this case, Sanz et al. say, and their client "is unaware of the government seeking any such extension here."

Another possible rationale for keeping Ayala's property is that the government needs it as evidence in a criminal investigation. But his lawyers argue that the seized items "have no independent evidentiary value."

The government "cannot claim that it is holding the cash as evidence of the suspected structuring offense, because the government—in the usual course—does not continue to hold the physical cash it seizes but rather promptly deposits it," the memorandum says. "To prove the suspected offense here, the government would present evidence documenting the amounts and frequency of transactions and evidence that the defendant intentionally evaded reporting requirements. No fact the government must prove to establish a structuring offense becomes more or less provable by the government's continued possession of Mario's money."

Although "the checks and business documents that the government seized from Mario may at first have had some evidentiary value," Sanz et al. say, it could have long since returned the originals and kept copies. As for the computers and cellphones, "the government has had ample time to extract and copy" any relevant information.

While the benefits of keeping Ayala's property seem highly dubious, the cost to him has been severe. The seizure of the checks and currency wreaked havoc with his business model, which relies on money received for transfers to cash checks, which in turn are scanned and used to pay the companies that handle the transfers.

"The search and seizure of Mario's property upended his business," the memorandum says. "He had to keep his business closed until March 1, 2025, to replace the seized computers and to figure out how they could keep the business open. He took $50,000 of his own money out of the bank so that he could keep cashing customers' checks. When that ran out, the business had to stop cashing checks for a long time, losing customers."

Ayala "also had to come up with $112,097.20 to pay the money transmitters to cover the balance that had accrued while he was away," his lawyers add. "Since all the cash and cashed-but-unscanned checks had been seized, Mario needed to pay this money to the transmitters on his own. Though he did ultimately pay back all the money transmitters over the following month, the consequences of the raid damaged Mario's business relationship with one of the money transmitters he had formerly worked with, InterMex. Today, the business can no longer offer InterMex as an option for money transfers."

Ayala's business "is now finally stable, but it is still not doing as well as it was before the raid," Sanz et al. say. "Mario has changed the way he runs his business because of the raid. He now scans every customer's cashed check to send it to the money transmitters as soon as it is cashed, rather than collecting [checks] and scanning them together as they previously did. He constantly worries that his business will be targeted again."

In the 20 months since the raid, the government has not filed a forfeiture action or even notified Ayala that it intends to do so. Nor has it filed any criminal charges related to the seizure, as far as Ayala knows. "The government has no lawful reason to retain
Mario's property," his lawyers say, "and this Court should exercise its equitable jurisdiction to order its return."

The motion relies on Federal Rule of Criminal Procedure 41(g), which says "a person aggrieved by an unlawful search and seizure of property or by the deprivation of property may move for the property's return." The U.S. Court of Appeals for the 9th Circuit, which includes Arizona, has adopted four criteria for granting such a motion: whether the government "displayed a callous disregard for the constitutional rights of the movant," whether "the movant has an individual interest in and need for the property he wants returned," whether "the movant would be irreparably injured by denying return of the property," and whether "the movant has an adequate remedy at law for the redress of his grievance."

All of those factors count in Ayala's favor, Sanz et al. argue. Ayala's interest in the property and the injury he is suffering are clear, as is the absence of any other remedy. As for the first criterion, "the government can neither forfeit Mario's property nor justify holding it as evidence, so its continued retention is unreasonable under the Fourth Amendment," the memorandum says. "And its nearly 20 months of silence, without any notice or any forum in which to contest the seizure, offends due process. At every turn, the government has 'callous[ly] disregarded' Mario's constitutional rights."

Ayala immigrated to the United States from Mexico in 1991 and struggled for years to make a go of his business, which was successful enough at the time of the raid that he planned to open a new location devoted to cellphone repair. That plan is now on hold because of the financial difficulties caused by the seizure.

"This business is my American Dream, and the government took years of my hard work without telling me what I did," Ayala says. "This raid hurt me and my family. I hope this lawsuit gets my money back and helps make sure this doesn't happen to anyone else."

The post The Feds Took $460,000 From This Arizona Convenience Store Owner and Never Explained Why appeared first on Reason Magazine.

  •  

Homeland Security Lied About Child Porn To Search Activist's Phone

A locked smartphone | Illustration: Africa Images/Envato (AI-modified)/Flowertiare/Dreamstime

One of the unfortunate quirks of the American system is that you can't lie to the government, but the government can lie to you. Samuel Tunick found himself on the receiving end of this setup last year at Atlanta International Airport. When agents from the Department of Homeland Security (DHS) asked for his phone password, he allegedly gave them a self-destruct code that wiped his data. Tunick now faces five years in prison for destroying evidence.

It turns out that the feds were lying to Tunick the entire time. A new court filing, first reported by 404 Media, shows that the DHS had sent out an order to seize Tunick's phone over his involvement in environmentalist protests in Atlanta. When he landed at the airport, however, agents told Tunick that they were looking for "kiddie porn" and he would be allowed to leave with his phone if he cooperated. They also repeatedly denied him access to his lawyer when he asked.

"There can be no real debate that if law enforcement had acted similarly elsewhere in Atlanta, their actions would be unconstitutional. But the government says it was entitled to act this way because Mr. Tunick was returning from an international vacation" in the Dominican Republic, his lawyers wrote in the filing, which includes internal DHS communications and excerpts from his interrogation video.

U.S. law recognizes a "border exception" to Fourth Amendment privacy rights, allowing federal agents to search incoming travelers for contraband. U.S. Customs and Border Protection (CBP) claims that this exemption also allows them to hold travelers for questioning and search their electronic data. Tunick's case reveals just how widely the agency stretches this loophole.

A few hours before Tunick landed, Homeland Security Investigations (HSI) agent Travis Mcghie emailed the CBP station in Atlanta with his photo and information, stating that he is under investigation for "suspected terrorist activities." (Tunick is involved in Save the Atlanta Forest, also known as Stop Cop City, a protest movement against a local police training center.) The email asked CBP to "conduct a 100% baggage exam, retain all electronics and collect passcodes," stating that the HSI will be at the airport to conduct an interrogation.

Pulled into the secondary screening room, Tunick "almost immediately" told CBP officers that "I don't really want to speak without a lawyer any more," according to the filing, which cites the interrogation tape. He would ask for a lawyer multiple times.

The agents asked Tunick if he had "kiddie porn" on his phone and stated that "because you're refusing to talk, we have the authority to go through your phone to see what we're looking for." One of them, Latoya Castro, told Tunick that "either you can give us your password so that we can go through it no problem, or you can refuse to do that, unfortunately, we will have to seize your phone."

Both of those statements were a lie, of course. The HSI's email had asked CBP to take Tunick's phone, whether or not he cooperated.

The lie about child porn may not only have been meant to intimidate Tunick. While there are contradictory lower court rulings about the border search exemption, some courts have ruled that the CBP can only search electronics for "digital contraband," or files that are themselves illegal. A search for child sex abuse material would be on stronger legal ground than a search for mere evidence of other crimes.

Tunick was using GrapheneOS, a secure phone system that allows users to set both a real password and a "duress password" that wipes out all data when entered. The interrogation tape shows his phone appearing to reset after he gave the officers a passcode. HSI agent Nathan Burnham and FBI agent Andrea Coble then entered the room.

"You are not under arrest. Once these gentlemen are done with you, pursuant to your entry into the country, you're free to leave," Burnham said, referring to the CBP officers.

Tunick's lawyers argue that the judge should throw out the phone password Tunick provided and everything that resulted from entering it as an "involuntary" response made under "unlawful interrogation," because the CBP agents did not read Tunick his Fifth Amendment rights and ignored his multiple requests to consult with his lawyer before answering their questions.

The CBP claims that secondary screening at the border doesn't count as a criminal investigation, so detainees don't have the same rights as criminal suspects. "Since the international arrivals inspection is an administrative function, CBP policy and federal regs do not permit the presence of lawyers during secondary examinations," a spokesman told Reason earlier this year.

But Tunick's lawyers insist that his experience was "far outside" a normal border crossing: He was accused of a serious crime to his face, faced an investigation for a different serious crime he didn't know about, and clearly could not leave the situation until he gave information to government agents.

"I hope people understand that the charges against me are meant to intimidate people against protecting their data and their privacy, and the government hopes to set a precedent that no one has the right to privacy," Tunick told 404 Media. 

Defend the Atlanta Forest, the movement that Tunick is involved with, has been a major nuisance for authorities in Georgia. Protesters attacked and burned construction equipment throughout 2022, and police shot a protester in 2023 under unclear circumstances, claiming that they were fired at during a raid.

The Trump administration has brought down the federal government against the movement. In June 2026, the Department of Justice brought federal charges against two alleged arsonists, citing National Security Presidential Memo 7, which directs the feds to go after left-wing domestic terrorism.

But beyond the email line about "suspected terrorist activities," there is no indication of what specific crimes the feds suspected Tunick of, or why they suspected him. And the whole setup of the interrogation was designed to hide those answers. In fact, instead of charging Tunick under typical obstruction or evidence-destruction laws, federal prosecutors chose a rarely-used statute that doesn't require them to disclose what the underlying investigation was about.

"Many times the government wants to highlight what it was trying to investigate because that ups the stakes on what the defendant was doing," former prosecutor Daniel Richman told The New York Times. "This is a case where I think they're trying to avoid exactly that by focusing only on the destruction, and not what the investigation was about." 

The post Homeland Security Lied About Child Porn To Search Activist's Phone appeared first on Reason Magazine.

  •  
❌