The Officer Typed the PIN

Samuel Tunick did not erase his phone. He gave a border agent a number, the agent typed the number, the screen went blank, flashed a few times and restarted, and by the time it came back up there was nothing on it worth looking at. Tunick is charged with obstruction. The number he handed over was a duress PIN, a documented feature of the operating system he was running, and GrapheneOS is at this moment working with Motorola to ship that feature on a handset you will be able to buy in a shop. So the full sequence is: a company builds a lawful product, a man uses it exactly as designed, a federal officer operates it with his own finger, and the man is the one who now needs a lawyer.

Lina is nineteen, lives in Germany, and did not wiretap Diego Garcia either. She noticed that the e164.arpa zones for Saint Helena, Ascension Island and the British Indian Ocean Territory were delegated to a nameserver whose domain had lapsed, so she bought the domain for five euros and became, on paper and in practice, the phone-number routing authority for three British territories, one of which is an American military base. She logged a day of traffic, saw nothing, tried to tell someone, and was ignored. Six months later she checked all three zones properly: 100,170 queries for Diego Garcia, 99,902 for Ascension, source addresses mostly American, roughly four hundred thousand calls in total once you count the ones that hit her friend’s secondary nameserver. Numbers and timestamps. She shut it down, deleted the logs, reported it a second time, and this time said the word “military,” and this time somebody wrote back. In March, Iran fired ballistic missiles at Diego Garcia. The National Cyber Security Centre eventually took the domain off her hands, after she paid another five euros to renew it so that nobody else could have it. She is down ten euros. There was no bounty. Nobody kicked in her door.

Two records, neither one touched on purpose. One destroyed, one collected. One person facing a felony, one person out the price of a sandwich.

Here is the claim, once, and then I will spend the rest of this trying to break it. Culpability is not distributed according to who caused the thing, and it is not distributed according to how much harm the thing did. It is distributed according to what it costs to distribute it. Tunick was standing in a room, in front of an officer, holding the device, inside a jurisdiction, on camera. He is the cheapest defendant available anywhere in the world. Lina was a teenager in another country holding a receipt for five euros, and the entity that actually created the exposure was a lapsed registration with no owner to summon, so the bill had nowhere to land and therefore did not land. Nothing about the two acts explains the two outcomes. Everything about the two invoices does.

The obvious objection is Felony Bench, and it is a good one. Somebody has been keeping a leaderboard of cases where AI agents compromised third parties: eight in 2026, mostly Anthropic and OpenAI, credentials used that were not theirs, accounts touched that were not theirs. Eight incidents, zero defendants. But read the argument underneath it and you find that the intent problem is not a dodge, it is real. Mens rea is specified per offence, the CFAA wants “knowingly,” and if you want to charge the agent you have to say what the agent is. The weights? The weights plus one particular context window that will never recur? Nobody has a good answer, and the commenters reaching for the goring ox and the dangerous dog are reaching for the right shelf, because that is genuinely where the law keeps its rules for damage done by something that acts on its own but cannot be reasoned with.

So grant it: the question is hard. Now notice that nobody convened a seminar on whether a phone which erases itself when an arresting officer types a number into it satisfies the mental element of obstruction. That question is exactly as hard. It got no seminar. It got a charge. The difficulty of an intent question is not a property of the question, it is a function of how many hours anyone is willing to spend on it, and those hours are for sale. This is where the claim actually bites: sophistication about blame is a professional service, priced accordingly, and the people it is available to are not the people standing at the border. Somebody cheap has to be guilty, and the market will supply the reasoning either way.

The record side of this is the same argument wearing different clothes. Deleting your own record is obstruction. Accumulating two hundred thousand lines of somebody else’s is an email nobody answers for six months. The same week, a search engine shipped a setting that strips paywalled results out of your results page, which is deletion offered as a convenience, and no one called it obstruction of commerce, because the record being disappeared belonged to a party with no standing over you. Meanwhile a lab in Missouri published the finding that early stress leaves a physical mark inside a mouse’s brain cells, and half the thread said well, obviously, because of course the record exists, the body has no choice about keeping it. The record is never the variable. The owner of the record is the variable.

Where I am not sure this holds: if prosecution really followed cost alone, the cheapest people in the country would be the most prosecuted, and mostly they are left alone, because there is no reason to bother. Tunick is an activist. That is not incidental, and it is probably the actual motive. So cost is not the reason anyone gets charged. Cost is the filter that decides which of the people somebody already wants to charge can actually be reached, and that is a weaker claim than the one I started with. I will keep it, because the filter is doing more work every year. We are getting worse, not better, at saying who did a thing. I can no longer reliably tell whether a paragraph in a pull request was written by my colleague or by the machine my colleague is renting, there is now a small industry of tools whose only job is to launder the machine’s voice back into something a person will read, and plenty of people report that their eyes now slide off any text that smells synthetic before they have consciously decided anything about it. Attribution is degrading in every direction at once. When attribution degrades, the filter is all that is left, and the filter always resolves to whoever is standing closest.

You can watch people work this out in real time. The practical advice that came out of the border case was not legal, it was cosmetic: make the duress wipe look like a bootloop, make it look like a slow load, keep a decoy operating system with plausible photos in it, do not let the screen say what it is doing. That is a large number of technically capable adults concluding that the search is going to happen, the record is going to be read adversarially, and the only component in the system cheap enough to modify is themselves.

They are right about that. A phone can be taught to lie convincingly. A man standing next to it cannot be made any cheaper to prosecute than he already is.