Free Republic
Browse · Search
News/Activism
Topics · Post Article

Skip to comments.

Buyers Scour eBay For Data-Rich Hard Drives
TechWeb News ^ | Jan 30, 2006 02:40 PM | Gregg Keizer

Posted on 01/31/2006 3:10:34 PM PST by Lokibob

 
 
Buyers Scour eBay For Data-Rich Hard Drives

They're looking for drives that haven't been wiped clean and contain valuable data.




Buyers on eBay troll the online auction site for used drives in the hope that the platters haven't been wiped clean and contain valuable data, including credit card numbers, a researcher said Monday.

Simson Garfinkel, a postdoctoral fellow at the Harvard's Center for Research on Computation and Society, has been buying used hard drives on eBay since 2001, then analyzing the data he finds on some of the devices.

Of the 236 drives Garfinkel bought, 7 contained more than 300 recoverable credit card numbers; one from had more than 11,000 unique account numbers that he could retrieve.

That's because only 19 percent of drives he acquired had been wiped clean. The majority of previous owners had either not touched the drives or had only run the DOS commands FDISK and FORMAT, which actually leave data on the drive so users with simple diagnostic tools can read the information.

Some eBay buyers are sniffing for such drives. "I think that many drives sell for more than their market value," on eBay, Garfinkel said in an e-mail interview with TechWeb. The only explanation: they're playing the possibilities, and expect there's data on some of the drives they buy.

Garfinkel even tracked down the original owners of the 7 credit card-packed drives, using basic detective work such as analyzing the most common e-mail addresses on the platter and/or reviewing intact Word documents for clues.

The drive with 11,609 unique credit card numbers came from a medical center, which had also disposed of another drive with 81 additional numbers that Garfinkel purchased. Other drives came from an ATM (with 827 unique numbers), a supermarket (1,356 numbers), and an auto dealerships (498 numbers).

By Garfinkel's calculations, about 1,000 used drives are sold daily on eBay. Using his findings -- 3 percent of the drives he purchased contained more than 300 recoverable credit card numbers -- about 30 of those devices have confidential financial information.


TOPICS: Crime/Corruption; Miscellaneous; News/Current Events
KEYWORDS: diskdrive; ebay; identitytheft
Navigation: use the links below to view more comments.
first previous 1-2021-4041-6061-8081-98 next last
To: jdm
I always crash-land a Cessna into mine.

To erase mine, I

1. Hire a blonde.

2. Give her a bottle of white-out

3. Have her erase on the screen anything she finds on the hard drive.

:-)

41 posted on 01/31/2006 3:49:46 PM PST by peyton randolph (As long is it does me no harm, I don't care if one worships Elmer Fudd.)
[ Post Reply | Private Reply | To 18 | View Replies]

To: Lokibob

Once upon a time a government agency sent our company something they later wished they had not sent. The agency sent a team to oversee "cleanup" of a server disk drive and a couple of days of backup tapes.

"Cleanup" involved a 50 gallon drum, several gallons of diesel fuel, and a blowtorch.

"Cleanup" was complete when the ashes were raked out into the gravel of the parking lot.

Obviously, the agency was not the Environmental Protection Agency.


42 posted on 01/31/2006 3:51:09 PM PST by Natty Bumppo@frontier.net (The facts of life are conservative -- Margaret Thatcher)
[ Post Reply | Private Reply | To 1 | View Replies]

To: supercat
[It would have to be a REALLY strong magnet.]




That is true, I was only half serious in my comment. I personally wouldn't trust a quick magnet "wipe" with sensitive data I didn't want others to see.

But I did this exact thing a few months ago. I removed an older 40GB hard drive from a computer and replaced it with a 120GB drive and was going to reuse the smaller drive in a different computer. When I picked up the old drive I realized I had put it RIGHT ON TOP of an upside down 15" Peavey Scorpion speaker I was working on a few days earlier.

My computer wouldn't recognize the drive after that and Cladera was stumped as well.
43 posted on 01/31/2006 3:51:20 PM PST by spinestein (All journalists today are paid advocates for someone's agenda.)
[ Post Reply | Private Reply | To 31 | View Replies]

To: doug from upland
Would a bonfire work?

If you start it with a few pounds of thermite.

The best option is Darik's Boot and Nuke which will securely erase all data on a hard drive. It writes random data to every sector on the disk, so all data will be overwritten.

44 posted on 01/31/2006 3:54:26 PM PST by MediaMole
[ Post Reply | Private Reply | To 2 | View Replies]

To: spinestein

Cladera = Caldera


45 posted on 01/31/2006 3:55:42 PM PST by spinestein (All journalists today are paid advocates for someone's agenda.)
[ Post Reply | Private Reply | To 43 | View Replies]

To: MeneMeneTekelUpharsin

The eBay community forums/chat has a Q&A forum for members to help each other/share experiences.
That might be a good place to start.
http://chatboards.ebay.com/chat.jsp?forum=1&thread=21


46 posted on 01/31/2006 4:01:12 PM PST by visualops (www.visualops.com)
[ Post Reply | Private Reply | To 33 | View Replies]

To: supercat
It would have to be a REALLY strong magnet. Hard drive heads generate extremely powerful magnetic fields over a very small area very close to the surface of the disk

Roger that. I've tried with bulk erasers and other magnets, no go. Just not strong enough.

47 posted on 01/31/2006 4:02:38 PM PST by Malsua
[ Post Reply | Private Reply | To 31 | View Replies]

To: spinestein
My computer wouldn't recognize the drive after that and Cladera was stumped as well.

I'm not positive, but I suspect it would be possible to demagnetize the drive motor without affecting the data on the drive. Recovery in that case would be difficult, but not necessarily impossible.

48 posted on 01/31/2006 4:04:43 PM PST by supercat (Sony delenda est.)
[ Post Reply | Private Reply | To 43 | View Replies]

To: supercat

After hearing about some nutcase putting magnets in his pockets and allegedly damaging government files, I did some homebrew experiments. Pinning floppy to plate, between two magnets , like poles, opposite poles ... No noticeable effect. I did not run this for an extend length of time.
Now if you want some very nice magnets crack open some old 5¼ full heights.


49 posted on 01/31/2006 4:06:42 PM PST by DUMBGRUNT ("Three pink elephants.")
[ Post Reply | Private Reply | To 31 | View Replies]

To: Lokibob

I wouldn't advise selling a hard drive on EBay. It's not enough money to be worth the risk.


50 posted on 01/31/2006 4:09:31 PM PST by Cicero (Marcus Tullius)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Lokibob

"The drive with 11,609 unique credit card numbers came from a medical center."

It should be a crime for any business - particularly medical - to sell computer equipment without first ensuring that all consumer data has been erased. A few days in jail for the good doctor would send the right message.

As for computer security, you are right about the sledgehammer. Data has been recovered from drives that have been submerged, i.e. tossed in the ocean, re-formatted, erased, etc. The only method that is 100% guaranteed is to obliterate the drive.


51 posted on 01/31/2006 4:11:21 PM PST by KingofZion
[ Post Reply | Private Reply | To 1 | View Replies]

To: Lokibob

When I have a used up, worn out drive, I take it apart and make wind chimes out of the platters (after running a magnet accross them).


52 posted on 01/31/2006 4:17:27 PM PST by AFreeBird (your mileage may vary)
[ Post Reply | Private Reply | To 1 | View Replies]

To: supercat

Understood that data recovery is possible...but difficult and/or time consuming.

In my case, it's not worth the trouble. I don't care about any data on the drive, and I have a box sitting in the corner containing about a dozen usable hard drives ranging in size from 10GB to 80GB. <?:^)


53 posted on 01/31/2006 4:19:10 PM PST by spinestein (All journalists today are paid advocates for someone's agenda.)
[ Post Reply | Private Reply | To 48 | View Replies]

To: MeneMeneTekelUpharsin

what would you do if the buyer gave you a neutral or negative feedback before you put yours in? Leave a negative feedback saying "this buyer gave me a negative feedback?"

Feedback withholding has always annoyed me, although I can see why you might.

</tangent>

Mrs VS


54 posted on 01/31/2006 4:20:07 PM PST by VeritatisSplendor
[ Post Reply | Private Reply | To 19 | View Replies]

To: AFreeBird

That puts a whole new meaning to the phrase "written in the wind".

And let me guess, you sell the wind chimes on ebay.


55 posted on 01/31/2006 4:22:12 PM PST by Lokibob (Spelling and typos are copyrighted. Please do not use.)
[ Post Reply | Private Reply | To 52 | View Replies]

To: AFreeBird

>>When I have a used up, worn out drive, I take it apart and make wind chimes out of the platters (after running a magnet accross them).

GRIN, I have one of those, the little funny shaped titanium thingies make neat sounds in the wind.


56 posted on 01/31/2006 4:35:51 PM PST by DelphiUser ("You can lead a man to knowledge, but you can't make him think")
[ Post Reply | Private Reply | To 52 | View Replies]

To: doug from upland
"Would a bonfire work?"

Not all the time:

http://www.pcmag.com/article2/0,1895,1911131,00.asp
57 posted on 01/31/2006 4:37:28 PM PST by djl_sa
[ Post Reply | Private Reply | To 2 | View Replies]

To: Lokibob
Best way to clean a hard drive is with a 5 lb sledgehammer.

Yeah, I agree. Even degaussing I'm not 100% sold on to that extent. I pull the HDs and break them before I give my used PCs away. HDs are cheap now and if someone wants them, likely they'll want a newer, better HD anyway.

58 posted on 01/31/2006 4:41:01 PM PST by Fruitbat
[ Post Reply | Private Reply | To 1 | View Replies]

To: wireman
From Staples.com - NEW Maxtor 60GB 7200RPM Internal Hard Drive $59.99

Why would anybody sell a used hard drive? And (aside from criminals) why would anybody buy one?

Precisely. This ain't '95 when HDs were expensive. They're cheap now.

59 posted on 01/31/2006 4:41:57 PM PST by Fruitbat
[ Post Reply | Private Reply | To 15 | View Replies]

To: jdm

That's a great idea. I have a spare that is practically unused that's almost as old as this one. I had one even older than this one, but I can't for the life of me remember what it was.


60 posted on 01/31/2006 4:55:12 PM PST by flada (Posting in a manner reminiscent of Jen-gis Kahn.)
[ Post Reply | Private Reply | To 26 | View Replies]


Navigation: use the links below to view more comments.
first previous 1-2021-4041-6061-8081-98 next last

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
News/Activism
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson