PDA

View Full Version : Holy Shit



Her454
08-31-2006, 12:19 PM
Sold Cell Phones Share Your Secrets
AP Finds It's Difficult To Fully Erase Info
WASHINGTON -- The married man's girlfriend sent a text message to his cell phone: His wife was getting suspicious. Perhaps they should cool it for a few days.
"So," she wrote, "I'll talk to u next week."
"You want a break from me? Then fine," he wrote back.
Later, the married man bought a new phone. He sold his old one on eBay, at Internet auction, for $290.
The guys who bought it now know his secret.
The married man had followed the directions in his phone's manual to erase all his information, including lurid exchanges with his lover. But it wasn't enough.
Selling your old phone once you upgrade to a fancier model can be like handing over your diaries. All sorts of sensitive information pile up inside our cell phones, and deleting it may be more difficult than you think.
A popular practice among sellers, resetting the phone, often means sensitive information appears to have been erased. But it can be resurrected using specialized yet inexpensive software found on the Internet.
A company, Trust Digital of McLean, Va., bought 10 different phones on eBay this summer to test phone-security tools it sells for businesses. The phones all were fairly sophisticated models capable of working with corporate e-mail systems.
Curious software experts at Trust Digital resurrected information on nearly all the used phones, including the racy exchanges between guarded lovers.
The other phones contained:
One company's plans to win a multimillion-dollar federal transportation contract.
E-mails about another firm's $50,000 payment for a software license.
Bank accounts and passwords.
Details of prescriptions and receipts for one worker's utility payments.
The recovered information was equal to 27,000 pages -- a stack of printouts 8 feet high.
"We found just a mountain of personal and corporate data," said Nick Magliato, Trust Digital's chief executive.
Many of the phones were owned personally by the sellers but crammed with sensitive corporate information, underscoring the blurring of work and home. "They don't come with a warning label that says, 'Be careful.' The data on these phones is very important," Magliato said.
One phone surrendered the secrets of a chief executive at a small technology company in Silicon Valley. It included details of a pending deal with Adobe Systems Inc., and e-mail proposals from a potential Japanese partner:
"If we want to be exclusive distributor in Japan, what kind of business terms you want?" asked the executive in Japan.
Trust Digital surmised that the U.S. chief executive gave his old phone to a former roommate, who used it briefly then sold it for $400 on eBay. Researchers found e-mails covering different periods for both men, who used the same address until recently.
Experts said giving away an old phone is commonplace. Consumers upgrade their cell phones on average about every 18 months.
"Most people toss their phones after they're done; a lot of them give their old phones to family members or friends," said Miro Kazakoff, a researcher at Compete Inc. of Boston who follows mobile phone sales and trends. He said selling a used phone -- which sometimes can fetch hundreds of dollars -- is increasingly popular.
The 10 phones Trust Digital studied represented popular models from leading manufacturers. All the phones stored information on "flash" memory chips, the same technology found in digital cameras and some music players.
Flash memory is inexpensive and durable. But it is slow to erase information in ways that make it impossible to recover. So manufacturers compensate with methods that erase data less completely but don't make a phone seem sluggish.
Phone manufacturers usually provide instructions for safely deleting a customer's information, but it's not always convenient or easy to find. Research in Motion Ltd. has built into newer Blackberry phones an easy-to-use wipe program.
Palm Inc., which makes the popular Treo phones, puts directions deep within its Web site for what it calls a "zero out reset." It involves holding down three buttons simultaneously while pressing a fourth tiny button on the back of the phone.
But it's so awkward to do that even Palm says it may take two people. A Palm executive, Joe Fabris, said the company made the process deliberately clumsy because it doesn't want customers accidentally erasing their information.
Trust Digital resurrected erased e-mails and other information from a used Treo phone provided by The Associated Press for a demonstration after it was reset and appeared empty. Once the phone was reset using Palm's awkward "zero-out" technique, no information could be recovered. The AP already used that technique to protect data on its reporters' phones.
"The tools are out there" for hackers and thieves to rummage through deleted data on used phones, Trust Digital's chief technology officer, Norm Laudermilch, said. "It definitely does not take a Ph.D."
Fabris, Palm's director of wireless solutions, said the company may warn customers in an upcoming newsletter about the risks of selling their used phones after AP's inquiries. "It might behoove us to raise this issue," Fabris said.
Dean Olmstead of Fresno, Calif., sold his Treo phone on eBay after using it six months. He didn't know about Palm's instructions to safely delete all his personal information. Now, he's worried.
"I probably should have done that," Olmstead said. "Folks need to know this. I'm hoping my phone goes to a nice person."
Guy Martin of Albuquerque, N.M., wasn't as concerned someone will snoop on his secrets. He also sold his Treo phone on eBay and didn't delete his information completely.
"I'm not that kind of valuable person, so I'm not really worried," said Martin, who runs the www.imusteat.com Web site. "I guarantee that three-quarters of the people who buy these phones don't think about this."
Trust Digital found no evidence thieves or corporate spies are routinely buying used phones to mine them for secrets, Magliato said. "I don't think the bad guys have figured this out yet."
President George W. Bush's former cybersecurity adviser, Howard Schmidt, carried up to four phones and e-mail devices -- and said he was always careful with them. To sanitize his older Blackberry devices, Schmidt would deliberately type his password incorrectly 11 times, which caused data on them to self-destruct.
"People are just not aware how much they're exposing themselves," Schmidt said. "This is more than something you pick up and talk on. This is your identity. There are people really looking to exploit this."
Executives at Trust Digital agreed to review with AP the information extracted from the used phones on the condition AP would not identify the sellers or their employers. They also showed AP receipts from the Internet auctions in which they bought the 10 phones over the summer for prices between $192 and $400 each.
Trust Digital said it intends to return all the phones to their original owners, and said it kept the recovered personal information on a single computer under lock and disconnected from its corporate network at its headquarters in northern Virginia.
Peiter "Mudge" Zatko, a respected computer security expert, said phone owners should decide whether to auction their used equipment for a few hundred dollars -- and risk revealing their secrets - or effectively toss their old phones under a large truck to dispose of them.
What about a case like the Lothario whose affair Trust Digital discovered?
"I'd run over the phone," Zatko said. "Maybe give it an acid bath."

ratso
08-31-2006, 12:21 PM
I'm a dead man...

Her454
08-31-2006, 12:24 PM
I'm a dead man...
LMAO........... YOU AND HALF THE PEOPLE ON THE BOARDS.
Better start praying........................ :rollside:

RitcheyRch
08-31-2006, 12:26 PM
I better go searching for directions for my old phone.

Rexone
08-31-2006, 12:28 PM
http://www.***boat.com/image_center/data/500/732sledge-hammer.jpg

Sleek-Jet
08-31-2006, 12:29 PM
LMAO........... YOU AND HALF THE PEOPLE ON THE BOARDS.
Better start praying........................ :rollside:
I guess a burial at sea is the best way to get rid of a cell phone then... :D :crossx: :idea:

RitcheyRch
08-31-2006, 12:29 PM
That works.
http://www.***boat.com/image_center/data/500/732sledge-hammer.jpg

Her454
08-31-2006, 12:34 PM
I guess a burial at sea is the best way to get rid of a cell phone then... :D :crossx: :idea:
(Im so glad Jordy's in Vegas with no access)............Im on about cell phone #10 and just about all of them are in 60feet of water or on the freeway somewhere in a million pieces. I hope. :rolleyes:

Tom Brown
08-31-2006, 12:35 PM
http://www.***boat.com/image_center/data/500/732sledge-hammer.jpg
Way to go all OGShocker on your cell phone's ass. :cool:

Sleek-Jet
08-31-2006, 12:43 PM
(Im so glad Jordy's in Vegas with no access)............Im on about cell phone #10 and just about all of them are in 60feet of water or on the freeway somewhere in a million pieces. I hope. :rolleyes:
glub glub... to Davey Jones locker with ye.... arrrggghhhh....

Do F150's Float?
08-31-2006, 12:51 PM
We're all going to hell... LOL :crossx:
I was just suprised it said "shit" in the title? did they quit monitoring that stuff?

Her454
08-31-2006, 12:54 PM
We're all going to hell... LOL :crossx:
I was just suprised it said "shit" in the title? did they quit monitoring that stuff?
I used the workaround. :rollside:

topless
08-31-2006, 01:11 PM
I used the workaround. :rollside:For a second there I thought you said reacharound. LOL

Rexone
08-31-2006, 01:16 PM
I used the workaround. :rollside:
Shit is acceptable. It's only ****, **** ***, ****, ****, and ******** that are prohibited.

Her454
08-31-2006, 01:17 PM
Shit is acceptable. It's only ****, **** ***, ****, ****, and ******** that are prohibited.
You forgot ***********. :rollside:

Sleek-Jet
08-31-2006, 01:23 PM
Shit is acceptable. It's only ****, **** ***, ****, ****, and ******** that are prohibited.
Once again, I am in awe of the bizarre morality imposed here on ***boat... :)

Devil's Advocate
08-31-2006, 01:27 PM
Shit is acceptable. It's only ****, **** ***, ****, ****, and ******** that are prohibited.
Cool...then I'll let it fly....shit, shit, SHIT, sHiT, SHIT , shit shhhiiiiiitttttt, SHit, shitttttt...
Just had those to get off my chest..whew. :crossx:

Her454
08-31-2006, 01:33 PM
Once again, I am in awe of the bizarre morality imposed here on ***boat... :)
There is MORALITY on ***boat? Prove it.

ratso
08-31-2006, 01:34 PM
There is MORALITY on ***boat? Prove it. :rollside:
More like Moral Decay...

Sleek-Jet
08-31-2006, 01:41 PM
There is MORALITY on ***boat? Prove it.
I give you the word ****....
see, stars... :rolleyes:
but I can post a pictures of a pair of bolt ons with pasties and that's alright..
Like I said, bizaare... not that there is anythig wrong with it, just weird the lines in the sand we draw around here.

tamalewagon
08-31-2006, 01:42 PM
You mean we can't say **** on this forum?

topless
08-31-2006, 02:01 PM
You mean we can't say **** on this forum?No but I heard you can say shit.

Goad
08-31-2006, 02:08 PM
this is all too common now-a-days....people being careless with their personal information....everyone has the "it wont happen to me" mentality. its pretty sad.
I do computer network security for a well know pharmasutical company and I hear about the stupid things people do all the time.....losing their laptops, USB thumb drives, PDA's, Cell Phones, etc...not to mention 70% of the people in the world have no idea how to secure their home wireless network.
As soon as a credit card company looses track of a backup tape, the media screams about it, but the average person doesnt do a damn thing to protect their own data themselves.
Irony.

lucky
08-31-2006, 02:19 PM
this is all too common now-a-days....people being careless with their personal information....everyone has the "it wont happen to me" mentality. its pretty sad.
I do computer network security for a well know pharmasutical company and I hear about the stupid things people do all the time.....losing their laptops, USB thumb drives, PDA's, Cell Phones, etc...not to mention 70% of the people in the world have no idea how to secure their home wireless network.
As soon as a credit card company looses track of a backup tape, the media screams about it, but the average person doesnt do a damn thing to protect their own data themselves.
Irony.
Well Shit , i better call the bank and tell them to cancel my debt :)

Ziggy
08-31-2006, 02:21 PM
(Im so glad Jordy's in Vegas with no access)............Im on about cell phone #10 and just about all of them are in 60feet of water or on the freeway somewhere in a million pieces. I hope. :rolleyes:
:p I had no idea about the things you like until recently....Outer casing was banged up pretty good but the battery was still charged :p

socalmoney
08-31-2006, 03:22 PM
nobody thinks of flash memory as being the same as the hard drive on your computer. People have asked me to to resurrect deleted images from CF cards not understanding that when I do, I can see a lot more than just the one they wanted back. I learned of a person at work who liked to have more than one in bed in the off hours. Put me in a weird position. That was a few years ago. Needless to say I warn everyone now who asks me for help.

Rexone
08-31-2006, 03:59 PM
Just had those to get off my chest..whew. :crossx:
well...
oh never mind.... :rollside:

HM
08-31-2006, 04:31 PM
You can say gay midget.
But you can't say WH0RE. :D

beaverretriever
08-31-2006, 04:36 PM
That is why you want to use a company that utilizes SIM (Cingular, T-Mobile). That way your info stays with you.