Free Republic
Browse · Search
General/Chat
Topics · Post Article

Skip to comments.

Flawed Android factory reset leaves crypto and login keys ripe for picking - LINK ONLY
Ars Technica — LINK ONLY | May 21, 2015 | by Dan Goodin

Posted on 05/21/2015 7:46:40 PM PDT by Swordmaker

An estimated 630 million phones fail to purge contacts, e-mails, images, and more. LINK ONLY DUE TO COPYRIGHT LIMITATIONS:

Ars Technica — Flawed Android factory reset leaves crypto and login keys ripe for picking


TOPICS: Business/Economy; Computers/Internet
KEYWORDS: fanboisrejoice

1 posted on 05/21/2015 7:46:40 PM PDT by Swordmaker
[ Post Reply | Private Reply | View Replies]

To: Swordmaker

And so it begins.

By the way, they prefer to be called cybernetic organisms.

2 posted on 05/21/2015 7:55:10 PM PDT by ClearCase_guy ("It's not easy being drunk all the time; everyone would do it, if it were easy.")
[ Post Reply | Private Reply | To 1 | View Replies]

To: Swordmaker
So to Hell with recycling your cell phones, hd's, etc. Let them sink into molten iron like the chip in Terminator II.

Thumbs up, cyber bro's!

"I am an American fighting man. I serve in the forces which guard my country and our way of life.
I am prepared to give my life in their defense."

3 posted on 05/21/2015 8:03:28 PM PDT by ConorMacNessa (HM/2 USN, 3/5 Marines RVN 1969 - St. Michael the Archangel, defend us in Battle!)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Swordmaker
Amateur Hour.

What a dumb mistake.

4 posted on 05/21/2015 8:18:07 PM PDT by dayglored (Listen, strange women lying in ponds distributing swords is...sounding pretty good about now.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: dayglored; ShadowAce; ~Kim4VRWC's~; 1234; Abundy; Action-America; acoulterfan; AFreeBird; ...
This one is serious. . . Computer researchers have discovered that Android's built-in in routines for doing a "Factory Reset" of their devices is so flawed it allows the retention of contacts, e-mails, images, and more on phones, tablets, and other devices that people sell, give away, or dispose of that they think have been properly erased. This includes passwords, encryption keys, login credentials, cookies, text messages, compromising photographs, and the master Google token used for access to Google Mail and calendars.

An estimated 630 MILLION Android Devices are affected by this flaw!

Do not trust the Factory Reset option to wipe your Android Device when disposing of it. . . find an assured and trusted erasing method or destroy your device instead! — PING!


Android Device Users' Data at major risk when their device is
sold, donated, given away, handed down, or traded in.
Factory Reset does NOT erase the user data!
Ping!

If you want on or off the Mac Ping List, Freepmail me.

As we continue with the Freepathon, I challenge the members of the Apple ping list to each donate at least $10 each to the latest Freepathon. I HAVE donated $100. Many members of the Apple Ping list are already rising to the challenge. Join them. Let's show the power of the Apple Ping list in supporting Freerepublic!

If you have ordered an Apple Watch,
MAKE A DONATION TO THE FREEPATHON!

5 posted on 05/21/2015 8:22:21 PM PDT by Swordmaker ( This tag line is a Microsoft insult free zone... but if the insults to Mac users contnue...)
[ Post Reply | Private Reply | To 2 | View Replies]

To: Swordmaker
This really will reduce the Android marketplace in favor of iPhones.

Such an amazing problem to still have on fully encrypted Android phones and with people (thinking) they are safely wiping them before selling them.

People will need to destroy these phones and not sell them.

Also amazing is that so few Android phones can ever have security fixes or upgrades. The manufacturers want you to simply “buy new.”

Apple phones get free fixes for four or more years.

6 posted on 05/21/2015 8:28:59 PM PDT by ConservativeMind ("Humane" = "Don't pen up pets or eat meat, but allow infanticide, abortion, and euthanasia.")
[ Post Reply | Private Reply | To 1 | View Replies]

To: dayglored; ShadowAce
What a dumb mistake.

According to the article this applies to Android from version 2.3 all the way up to version 4.3 which is the highest they've tested. . . but I wonder if they tested Android 5.0 Lollipop, if they'd find the same thing? If they'd found such a huge flaw in the older versions and fixed it, they are bound by law to have reported this flaw in the older versions, and they have NOT. I suspect they did not find and fix it in 5.0.

However you look at it, there are according to them at least 630 million devices at risk! Android 4.4 Kitkat is at about 40% adoption and 5.0 Lollipop is around 4%. . . so over 50% of Android users are for certain vulnerable.

I am pinging the Apple users to this article. . . a lot of them do use Android devices and need to know they need to find a secure method to wipe the data off their devices before they dispose of them. I suggest you ping the Windows/Microsoft people as well for the same reason. ShadowAce, ditto for you to catch the Linux users.

Now that this is known—and apparently it is fairly easy to get the data off of a factory reset phone or tablet—you just know the hackers and criminals will be mining the phones for the gems and gold that will pay off big time.

7 posted on 05/21/2015 8:35:56 PM PDT by Swordmaker ( This tag line is a Microsoft insult free zone... but if the insults to Mac users contnue...)
[ Post Reply | Private Reply | To 4 | View Replies]

To: ClearCase_guy
More like :


8 posted on 05/21/2015 8:42:03 PM PDT by Vince Ferrer
[ Post Reply | Private Reply | To 2 | View Replies]

To: ClearCase_guy

I’d like to be the first to welcome our Kate Upton and Jessica Biehl robotic Overladies, programmed for endless sex with humanoids, as long as they have ‘kill switches’ so they don’t break my **** off.


9 posted on 05/21/2015 8:45:43 PM PDT by tumblindice (America's founding fathers: all armed conservatives.)
[ Post Reply | Private Reply | To 2 | View Replies]

To: Swordmaker

I never turn in a phone when buying a new one, for tbis reason alone.

I toss em in my IT bone pile or I destroy them beyond recognition.


10 posted on 05/21/2015 10:03:56 PM PDT by Vendome (Don't take life so seriously-you won't live through it anyway-Enjoy Yourself ala Louis Prima)
[ Post Reply | Private Reply | To 1 | View Replies]

To: ConservativeMind
> This really will reduce the Android marketplace in favor of iPhones.

Maybe, maybe not. As one of the commenters on the ArsTechnica page wrote:

This research proves many (most?) android phones are vulnerable. It does not prove that other phones are safe. Has anyone given the same level of study and analysis to wiped iPhone or Windows phone or Blackberry and found them secure?
Apple and Microsoft would do well to demonstrate their (presumably) better results for the same challenge.

> People will need to destroy these phones and not sell them.

Correct. It's like trying to get a few bucks by selling an old computer that includes its hard drive. You'd be astonished how few people think to destroy the hard drive.

> Also amazing is that so few Android phones can ever have security fixes or upgrades. The manufacturers want you to simply “buy new.” Apple phones get free fixes for four or more years.

That's one reason I've got an iPhone rather than an Android. I want the security fixes to come to me and pester me to update. If I had to go and find them, I, like most other people, would tend to forget.

11 posted on 05/22/2015 7:08:15 AM PDT by dayglored (Listen, strange women lying in ponds distributing swords is...sounding pretty good about now.)
[ Post Reply | Private Reply | To 6 | View Replies]

To: Swordmaker; Abby4116; afraidfortherepublic; aft_lizard; AF_Blue; Alas Babylon!; amigatec; ...
Extra to the Windows List -- Android phone users beware: The factory reset... DOESN'T! ... PING!

You can find all the Windows Ping list threads with FR search: search on keyword "windowspinglist".

Thanks to Swordmaker for the heads-up!!

And let's see who can come up with a demonstration regarding post-reset data recovery on other (non-Android) phones.

12 posted on 05/22/2015 7:13:35 AM PDT by dayglored (Listen, strange women lying in ponds distributing swords is...sounding pretty good about now.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Vendome

Haha...me either...Someday when we are long gone our “bone pile” will be discovered


13 posted on 05/22/2015 7:45:12 AM PDT by goodnesswins (hey..Wussie Americans....ISIS is coming. Are you ready?)
[ Post Reply | Private Reply | To 10 | View Replies]

To: goodnesswins

Funny. I still have a couple Apple II, an 8088, a 46DX66 and on and on....


14 posted on 05/22/2015 8:16:10 AM PDT by Vendome (Don't take life so seriously-you won't live through it anyway-Enjoy Yourself ala Louis Prima)
[ Post Reply | Private Reply | To 13 | View Replies]

To: Swordmaker

Lollipop is a bad joke at best.

Verizon loaded it on my S5 as a
‘required upgrade’ and it stinks.


15 posted on 05/22/2015 11:03:12 AM PDT by editor-surveyor (Freepers: Not as smart as I'd hoped they'd be)
[ Post Reply | Private Reply | To 7 | View Replies]

Comment #16 Removed by Moderator

To: Swordmaker; dayglored
This is what the Microwave oven was invented for.
The Heating up of food is just a convenient accident. :)
17 posted on 05/23/2015 1:17:33 AM PDT by moose07 (Islam and the New Stone age: A book i've not yet written.)
[ Post Reply | Private Reply | To 16 | View Replies]

To: Swordmaker

Thank you for the heads up. My son has an Android phone and tablet. I use Windows.


18 posted on 05/23/2015 4:54:29 AM PDT by Excellence (Marine mom since April 11, 2014)
[ Post Reply | Private Reply | To 1 | View Replies]

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
General/Chat
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson