Residual Data on Used Equipment - Revision history

Simsong: /* Hard Drives */

2013-01-30T15:27:22Z

‎Hard Drives

Simsong: /* See Also */

2013-01-30T15:13:36Z

‎See Also

Simsong at 18:47, 12 June 2012

2012-06-12T18:47:38Z

Simsong: /* Hard Drives */

2012-04-26T13:26:59Z

‎Hard Drives

Simsong: /* Hard Drives */

2010-12-08T23:32:53Z

‎Hard Drives

Simsong: /* See Also */

2009-12-10T05:23:50Z

‎See Also

Simsong at 22:49, 21 November 2009

2009-11-21T22:49:08Z

Simsong: /* Media Accounts */

2009-11-21T22:48:42Z

‎Media Accounts

BigDunc: /* Used Hard Drives */ link has been removed from youtube

2009-10-24T18:07:00Z

‎Used Hard Drives: link has been removed from youtube

Simsong: /* Used Hard Drives */

2009-09-25T07:12:06Z

‎Used Hard Drives

@@ Line 31: / Line 31: @@
 *'''2009-07-30''': Reporters working for the PBS show Frontline on an article about electronic waste find hard drives in Ghana that contain "hundreds and hundreds of documents about government contracts" from a hard drive that had been previously used by a TSA subcontractor. The documents were marked "competitive sensitive" and covered contracts with the Defense Intelligence Agency. The hard drive was not encrypted.  [http://itworld.com/security/69758/reporters-find-northrop-grumman-data-ghana-market Reporters find Northrop Grumman data in Ghana market, Robert McMillan, IT World, June 24, 2009]
-*'''2009-09-23''': US DoD sells computers without cleaning them first. http://fcw.com/articles/2009/09/23/inspector-general-audit.aspx
+*'''2009-09-23''': The Inspector General of the United States Department of Defense issues a report about the widespread sale and return of equipment containing sensitive information. [http://www.dodig.mil/Audit/reports/fy09/09-104.pdf Report No. D-2009-104 September 21, 2009 Sanitization and Disposal of Excess Information Technology Equipment].
 *'''2010-12-08''': NSAS decomissions 14 computers with hard drives that "failed tests to verify data had been destroyed.'''  The drives turn up in a dumpster with sensitive information regarding the Space Shuttle. [http://www.theregister.co.uk/2010/12/08/nasa_disk_wiping_failure/ Reported By Dan Goodin in San Francisco, The Register, 8th December 2010]

@@ Line 70: / Line 70: @@
 =See Also=
-[[Residual Data]]
+* [[Residual Data]]
-[[Residual Data in Document Files]]
+* [[Residual Data in Document Files]]

@@ Line 2: / Line 2: @@
 You can find used hard drives on eBay, at swap meets, yard sales, and even on the street.
+=Popular Press=
 ==ATMs==
 * '''2009-11-21''': Robert Siciliano, a security consultant to Intelius.com and personal ID theft expert, buys an ATM machine for $750 from a bar in Boston. The machine comes with more than 1000 credit and ATM card numbers. http://www.theregister.co.uk/2009/11/18/second_hand_atm_fraud_risk/
@@ Line 51: / Line 51: @@
 * [http://news.yahoo.com/s/ap/20090127/ap_on_re_as/as_new_zealand_us_military_files NZ man's MP3 player holds US military files], Associated Press, Jan 27, 2009. A man from New Zealand bought an MP3 player at a thrift shop in Oklahoma that had 60 US military files, "including names and telephone numbers for American soldiers."
-==See Also==
+=Academic Publications=
 [[Residual Data]]
 [[Residual Data in Document Files]]

@@ Line 33: / Line 33: @@
 *'''2009-09-23''': US DoD sells computers without cleaning them first. http://fcw.com/articles/2009/09/23/inspector-general-audit.aspx
-*'''2010-12-08''': NSAS decomissions 14 computers with hard drives that "failed tests to verify data had been destroyed.'''  The drives turn up in a dumpster with sensitive information regarding the Space Shuttle. [http://www.theregister.co.uk/2010/12/08/nasa_disk_wiping_failure/ Reported By Dan Goodin in San Francisco, The Register,
+*'''2010-12-08''': NSAS decomissions 14 computers with hard drives that "failed tests to verify data had been destroyed.'''  The drives turn up in a dumpster with sensitive information regarding the Space Shuttle. [http://www.theregister.co.uk/2010/12/08/nasa_disk_wiping_failure/ Reported By Dan Goodin in San Francisco, The Register, 8th December 2010]
 th December 2010]
 ==Cell Phones==

← Older revision		Revision as of 23:32, 8 December 2010
Line 32:		Line 32:

	*'''2009-09-23''': US DoD sells computers without cleaning them first. http://fcw.com/articles/2009/09/23/inspector-general-audit.aspx		*'''2009-09-23''': US DoD sells computers without cleaning them first. http://fcw.com/articles/2009/09/23/inspector-general-audit.aspx
		+
		+	*'''2010-12-08''': NSAS decomissions 14 computers with hard drives that "failed tests to verify data had been destroyed.''' The drives turn up in a dumpster with sensitive information regarding the Space Shuttle. [http://www.theregister.co.uk/2010/12/08/nasa_disk_wiping_failure/ Reported By Dan Goodin in San Francisco, The Register,
		+	8th December 2010]

	==Cell Phones==		==Cell Phones==

← Older revision		Revision as of 05:23, 10 December 2009
Line 49:		Line 49:
	==See Also==		==See Also==
	[[Residual Data]]		[[Residual Data]]
		+	[[Residual Data in Document Files]]

@@ Line 5: / Line 5: @@
 =Media Accounts=
-==Used Hard Drives==
+==ATMs==
 There have been several incidents in which individual have purchased a large number of hard drives and written about what they have found. This web page is an attempt to catalog all of those stories in chronological order.

@@ Line 11: / Line 11: @@
 * '''2003-01''': [[Simson Garfinkel]] and Abhi Shelat at MIT publish a study in ''IEEE Security and Privacy Magazine''  which documents large amount of personal and business-sensitive information found on 150 drives purchased on the secondary market.
-* '''2006-06''': A man buys a family's hard drive at a fleamarket in Chicago after the family's hard drive is upgraded by Best Buy. Apparently somebody at Best Buy violated company policy and instead of destroying the hard drive, they sold it. [http://www.youtube.com/watch?v=pcyemfJ5H3o&NR Target 5 Investigation]
+* '''2006-06''': A man buys a family's hard drive at a fleamarket in Chicago after the family's hard drive is upgraded by Best Buy. Apparently somebody at Best Buy violated company policy and instead of destroying the hard drive, they sold it.
 * '''2006-08-10''': The University of Glamorgan in Wales purchased 317 used hard drives from the UK, Australia, Germany, and the US. 25% of the 200 drives purchased from the UK market had been completely wiped. 40% of the purchased drives didn't work.  40% came from businesses, of which 23% contained enough information to identify the company. 5% had business sensitive information. 25% came from individuals, of which many had pornography, and 2 had to be referred to the police for suspected child pornography.

← Older revision		Revision as of 07:12, 25 September 2009
Line 30:		Line 30:

	*'''2009-07-30''': Reporters working for the PBS show Frontline on an article about electronic waste find hard drives in Ghana that contain "hundreds and hundreds of documents about government contracts" from a hard drive that had been previously used by a TSA subcontractor. The documents were marked "competitive sensitive" and covered contracts with the Defense Intelligence Agency. The hard drive was not encrypted. [http://itworld.com/security/69758/reporters-find-northrop-grumman-data-ghana-market Reporters find Northrop Grumman data in Ghana market, Robert McMillan, IT World, June 24, 2009]		*'''2009-07-30''': Reporters working for the PBS show Frontline on an article about electronic waste find hard drives in Ghana that contain "hundreds and hundreds of documents about government contracts" from a hard drive that had been previously used by a TSA subcontractor. The documents were marked "competitive sensitive" and covered contracts with the Defense Intelligence Agency. The hard drive was not encrypted. [http://itworld.com/security/69758/reporters-find-northrop-grumman-data-ghana-market Reporters find Northrop Grumman data in Ghana market, Robert McMillan, IT World, June 24, 2009]
		+
		+	*'''2009-09-23''': US DoD sells computers without cleaning them first. http://fcw.com/articles/2009/09/23/inspector-general-audit.aspx

	==Cell Phones==		==Cell Phones==