full-disclosure - Re: Android wipe unreliable

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <CAH8yC8kjbpWwBv4NQzRf9e-Ov8_ZAy8rxXES5-Z1PHsDzypssg@mail.gmail.com>
Date: Sat, 31 Mar 2012 19:24:50 -0400
From: Jeffrey Walton <noloader@...il.com>
To: Jan Schejbal <jan.mailinglisten@...glemail.com>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: Android wipe unreliable

On Sun, Mar 18, 2012 at 1:46 PM, Jan Schejbal
<jan.mailinglisten@...glemail.com> wrote:
> We have discovered that the "wipe" function on Android does not reliably
> delete data on all devices. On a Nexus S running Android 2.3.6, we were
> able to recover user data after running a "wipe" both using the "factory
> data reset" from the menu and by wiping the device from recovery.
> ...

"Android Obscene (Can Be Seen),"
http://wirelessandmobilenews.com/2012/03/android-iphone-balckberry-security.html:

Owners keep a lot  personal information on cellphones, contacts, data
and even sexually explicit images. When you sell or lose a smartphone,
you should be cautious, but especially careful with Android
smartphones.
...

Siciliano bought used computers, thumb drives, smartphones and other
devices on Craigslist. BlackBerry and iPhone remote wipe and factory
reset removed all signs of the owners. On the five used Android
smartphones he found personal data, videos and was able profile the
owners.

Siciliano told Wireless and Mobile News that four Android smartphones
had been reset using the factory data reset function in Android.  On
the reset Android phones he was able to find PDF files, documents,
data and porn.
...

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/