userdata
Latest
iPhone 2.0 software securely erases user data
The fact that the iPhone doesn't securely erase user data when you select "Erase All Content and Settings" has prompted a lot of hand-wringing (and given rise to a lot of complicated manual workarounds) as people get ready to flip their old phones and upgrade to the iPhone 3G, but it looks like there's a simpler solution coming: AppleInsider says the iPhone 2.0 software now securely erases user data. The process is apparently similar to Leopard's Secure Erase Trash feature, and it'll unlink data and overwrite it with random bits, making your personal info impossible to recover. Of course, that'll take some extra time -- you're looking at an extra hour of progress bars in your life. That's not so bad -- and if it keeps anyone from checking out our super-embarrassing 80s pop playlists, we're all for it.[Thanks, Mark]
How to completely erase user data from an iPhone, part two: command-line edition
Steve might have finally made with the iPhone 3G yesterday, but as we've mentioned before, would-be upgraders have a slightly bigger dilemma than just shaking down the couch cushions for an extra $199: getting their user data securely erased from their old iPhones. Simply hitting "restore" still leaves your data in an accessible state, and while we've covered ways to do a three-pass wipe with iTunes playlists, Jonathan Zdziarski has posted up a set of instructions for getting at your flash from the command line and wiping it directly. Sure, you'll have to jailbreak your phone and it'll take at least an hour or so -- but hey, you've got a month to kill anyway, right?
RIM changes course, promises to keep Indian Blackberry network secure
Although several Indian news outlets reported last week that RIM was preparing to let the Indian government monitor the domestic Blackberry network, it appears that the outcry has prompted the company to change course and announce that it's committed to "serving security-conscious businesses in the Indian market." That's a big reversal from the rumored plan, which would have allowed Indian security agencies access to the network in exchange for taking the blame for any leak of user data. Of course, not everything's quite settled yet: the Indian government is still demanding that RIM furnish "satisfactory answers" to its security questions, and RIM told the AFP that there are some other ways for "government to take care of security concerns" without elaborating further. Based on RIM's enterprise-heavy statements and refusal to comment on the consumer service, we'd guess that enterprise customers will probably get to keep their networks locked down, but that consumers shouldn't expect their messages to be secure. Not the best compromise, but we'll see how this all plays out.
RIM allows Indian government to monitor Blackberry network
Well, it took longer than 15 days to reach a resolution, but apparently RIM is going to back down and allow the Indian government to monitor the Blackberry network in that country. What's worse, it appears that RIM was more interested in covering its own ass than protecting user data during the negotiations: the only concession the company received from the Indian government was a promise that it won't be held liable if there's a leak of users' personal information. Yeah, that ought to provide a sparkling incentive to keep things safe. There's no word on when monitoring might begin, but we've got a feeling privacy-loving Indians might suddenly be in the market for a new smartphone.[Thanks, Rishab J.]
How to "format" an iPhone to clear your data completely
We briefly mentioned using junk data to overwrite the iPhone's flash as a last-ditch method of securely clearing off your user data yesterday, and although we were half-joking, that's more or less your only option until Apple provides a proper secure erase feature. Security researcher Rich Mogull has helpfully laid out the steps for you, and they're basically what you'd expect: restore your iPhone, don't sync any personal data to it, and then manually transfer three different playlists large enough to fill the flash. Essentially you're doing a manual three-pass overwrite, which is pretty much exactly the long and tedious process it sounds like -- but we wouldn't dream of selling or giving away our iPhones (or any other phone with personal data on it) without struggling through it.[Via Hack A Day]
Refurbished iPhones are an excellent source of previous users' data
It looks like you might have to think twice before flipping that old iPhone on eBay when the 3G version finally hits -- it appears that restoring the phone doesn't actually erase the contents of the flash, meaning that your data is available to anyone with the proper tools until it's overwritten. Making matters worse, it appears that Apple doesn't do a low-level format when refurbishing iPhones either -- an Oregon State Police detective was able to use forensic software to pull files, emails, and screenshots off an out-of-the-box refurbished iPhone. This actually shouldn't be surprising to anyone -- we've seen several utilities that access "deleted" portions of storage -- but since Apple doesn't provide users direct access to the iPhone's filesystem, it's basically impossible to clear your personal data off the device short of restoring and filling the disk with junk data. Hopefully iPhone 2.0's Exchange-based "remote wipe" feature is a bit more secure, eh?[Via TUAW]
