Caveat Venditor, Used USB Drive Owner

• URL: http://arxiv.org/abs/2006.11354v1
• Date: Fri, 19 Jun 2020 20:20:29 GMT
• Title: Caveat Venditor, Used USB Drive Owner
• Abstract summary: People sell used USB drives online -- presumably either their own or drives others have lost. This raises some interesting questions, such as whether sellers know how to ensure that private data is erased. Using forensic analysis, it was found that a great deal of private and sensitive information remained on many of the drives.
• Score: 0.6445605125467572
• License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/
• Abstract: USB drives are a great way of transferring and backing up files. The problem is that they are easily lost, and users do not understand how to secure or properly erase them. When used to store private and sensitive information, this constitutes a risk that users may be unaware of. Consider that people sell used USB drives online -- presumably either their own or drives others have lost. This raises some interesting questions, such as whether sellers know how to ensure that private data is erased before they relinquish the drive to an unknown buyer, and whether sellers use these drives in an attempt to compromise an unwary buyer's device. Governments do indeed issue advice about the risks of used mobile media, but we do not yet know whether this advice is reaching, and being heeded by, the general public. To assess the situation, a sample of used USB drives were purchased from eBay sellers to determine, first hand, what was on the drives. This acts as an indicator of actual security-related behaviours to answer the questions posed above. Using forensic analysis, it was found that a great deal of private and sensitive information remained on many of the drives, but there was no trace of malicious software. More effective ways of enlightening the public are needed, so that private data is not unwittingly leaked via sold used media.

Related papers

• Auditable and Transparent Fully Authenticated Disk Encryption via USB Storage Interposition [0.0]
  Full Disk Encryption (FDE) has become increasingly important in the last decades due to the evident confidentiality concerns.<n>In most systems, encryption is provided by an operating system driver, through which the user can transparently access the encrypted disk.<n>We explore an alternative approach: the use of an intermediate USB device placed between the host system and the external hard disk.
  arXiv  Detail & Related papers  (2026-07-14T12:42:17Z)
• Linux disk encryption and self-encrypting drives -- A case study on Opal2 drives security [0.0]
  Opal2 self-encrypting drives provide hardware-based disk encryption serving as an additional layer of protection.<n>This paper presents a case study of real-world Linux integration of Opal2 drives and the security of Opal2 firmware.
  arXiv  Detail & Related papers  (2026-07-13T13:45:59Z)
• The Reverse File System: Towards open cost-effective secure WORM storage devices for logging [0.0]
  Write Once Read Many (WORM) properties for storage devices are desirable to ensure data immutability.<n>We introduce Socarrat, a novel, cost-effective, and local WORM storage solution that leverages a simple external USB device.<n>Socarrat significantly reduces the attack surface and ensures that even privileged attackers cannot modify or erase stored data.
  arXiv  Detail & Related papers  (2025-09-22T16:19:08Z)
• In Search of Lost Data: A Study of Flash Sanitization Practices [0.0]
  Poor sanitization practices have been reported for second-hand hard disk drives.<n>Data has been found on original storage devices based on flash technology.
  arXiv  Detail & Related papers  (2025-05-20T08:15:23Z)
• Fingerprinting and Tracing Shadows: The Development and Impact of Browser Fingerprinting on Digital Privacy [55.2480439325792]
  Browser fingerprinting is a growing technique for identifying and tracking users online without traditional methods like cookies. This paper gives an overview by examining the various fingerprinting techniques and analyzes the entropy and uniqueness of the collected data.
  arXiv  Detail & Related papers  (2024-11-18T20:32:31Z)
• USBIPS Framework: Protecting Hosts from Malicious USB Peripherals [0.46040036610482665]
  This paper focuses on building a security framework called USBIPS within OSs to defend against malicious USB peripherals. We first present a behavior-based detection mechanism focusing on attacks integrated into USB peripherals. We then introduce the novel idea of an allowlisting-based method for USB access control.
  arXiv  Detail & Related papers  (2024-09-19T15:48:52Z)
• Understanding crypter-as-a-service in a popular underground marketplace [51.328567400947435]
  Crypters are pieces of software whose main goal is to transform a target binary so it can avoid detection from Anti Viruses (AVs) applications. The crypter-as-a-service model has gained popularity, in response to the increased sophistication of detection mechanisms. This paper provides the first study on an online underground market dedicated to crypter-as-a-service.
  arXiv  Detail & Related papers  (2024-05-20T08:35:39Z)
• Nyon Unchained: Forensic Analysis of Bosch's eBike Board Computers [0.0]
  The Bosch Nyon series of board computers are cutting-edge devices from one of the market leaders in the eBike business. We conducted an in-depth forensic analysis of the two available Nyon models released in 2014 and 2021. On a first-generation Nyon device, Telnet access could be established by abusing a design flaw in the update procedure. It was possible to forge the data on the device and transfer it to Bosch's servers to be persisted across their online service and smartphone app.
  arXiv  Detail & Related papers  (2024-04-19T13:03:14Z)
• Protecting User Privacy in Online Settings via Supervised Learning [69.38374877559423]
  We design an intelligent approach to online privacy protection that leverages supervised learning. By detecting and blocking data collection that might infringe on a user's privacy, we can restore a degree of digital privacy to the user.
  arXiv  Detail & Related papers  (2023-04-06T05:20:16Z)
• Privacy Explanations - A Means to End-User Trust [64.7066037969487]
  We looked into how explainability might help to tackle this problem. We created privacy explanations that aim to help to clarify to end users why and for what purposes specific data is required. Our findings reveal that privacy explanations can be an important step towards increasing trust in software systems.
  arXiv  Detail & Related papers  (2022-10-18T09:30:37Z)
• Analysis of Longitudinal Changes in Privacy Behavior of Android Applications [79.71330613821037]
  In this paper, we examine the trends in how Android apps have changed over time with respect to privacy. We examine the adoption of HTTPS, whether apps scan the device for other installed apps, the use of permissions for privacy-sensitive data, and the use of unique identifiers. We find that privacy-related behavior has improved with time as apps continue to receive updates, and that the third-party libraries used by apps are responsible for more issues with privacy.
  arXiv  Detail & Related papers  (2021-12-28T16:21:31Z)
• A Non-Intrusive Machine Learning Solution for Malware Detection and Data Theft Classification in Smartphones [0.06999740786886537]
  Successful mobile malware attacks could steal a user's location, photos, or even banking information. There is a need besides just detecting malware intrusion in smartphones to also identify the data that has been stolen to assess, aid in recovery and prevent future attacks. We propose an accessible, non-intrusive machine learning solution to not only detect malware intrusion but also identify the type of data stolen for any app under supervision.
  arXiv  Detail & Related papers  (2021-02-12T13:31:27Z)
• A vision for global privacy bridges: Technical and legal measures for international data markets [77.34726150561087]
  Despite data protection laws and an acknowledged right to privacy, trading personal information has become a business equated with "trading oil" An open conflict is arising between business demands for data and a desire for privacy. We propose and test a vision of a personal information market with privacy.
  arXiv  Detail & Related papers  (2020-05-13T13:55:50Z)
• MAGNETO: Fingerprinting USB Flash Drives via Unintentional Magnetic Emissions [4.588028371034406]
  USB flash drives are one of the most common attack vectors used to gain unauthorized access to host devices. In such a way, an attacker can steal sensitive information via the USB-connected devices, as well as inject any kind of malicious software into the host. We propose a framework to verify the authenticity of a USB flash drive, rooted in the analysis of its unintentional magnetic emissions.
  arXiv  Detail & Related papers  (2020-02-14T08:09:54Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.