Protip: be careful what's on your phone

[STD]

For those of you who don't know what you're looking at, this is a screenshot of Testdisk in operation, which is an excellent piece of software for data recovery.

It's viewing the photos folder on the memory card of my phone. I deleted all the photos, so the photos folder appears empty. But SHOCK HORROR, Testdisk is still showing that the files still reside on my memory card. With a single keystroke I was able to recover these photos (read this if you don't understand why.)

I think it should be common knowledge that once you empty the trash (or Recycle Bin) on your computer, the files can still be recovered, and the smart people out there know to use a secure erase on sensitive files (including photos, etc.)

BUT, I think a lot of people neglect to do the same thing with their phone. The problem is made worse by the fact that most phones don't support a secure erase function. So you may delete photos, copy or Bluetooth things off your phone, but there can still be crap from years ago sitting on it. Think about it: is there anything on YOUR phone that could get you into trouble if the police got their hands on it? What about getting somebody else in trouble?

The solution is to plug it into your computer, access the memory card from there, and do a secure wipe of files. You can do a secure wipe of free space on the memory card to clear out files that were previously insecurely deleted.

One final problem is that the built in flash storage on most phones can't be accessed via plugging the phone into a computer (easily, at least), which means it's a really bad idea to use the built in memory on your phone to store any sensitive files or photos. Keep in mind that this memory is usually the memory that stores call logs and sent/received SMS messages.) A way to clear out that memory would be to fill it up with a large file (for example, set the video recorder of the phone to save to built in memory, and then set it recording until the memory is full (with the data from the new video file, therefore overwriting the previous data), then delete the video file.

EDIT: Really important update. Read this thread:
http://www.zoklet.net/bbs/showthread.php?t=216326

In summary, you can't just perform an overwrite on a specific file on flash memory (thumb drives, memory cards, built-in phone memory, stuff like that, and I'd expect solid state hard disks too.) Why can't do you that? Because it doesn't work. Explanation is in the thread linked to. You need to format and secure erase (or zerofill) the *entire* flash drive. An even better alternative is to encrypt the drive, if possible, as soon as you get it and never once store a piece of sensitive information on it while the entire drive is unencrypted. And encrypting a drive is good too because it means even if you get a faulty sector (or the drive gets smashed to pieces) in the future that you can't read or write data too, it's encrypted so it doesn't really matter. That takes into account the fact that forensics can often recover data from a few bad sectors on a drive.

So new moral of the story, just encrypt your drive as soon as you get it. And if you do store something shady on an unencrypted flash drive or memory card, secure wipe the entire card.

[testas]

Nice add, thanks. This is as shocking as when I found out the iPhone records everywhere you go in an unencrypted file on the phone.

[¤Tømmÿ Ver¢ettî¤]

cool man, just dl'd that. gonna see what i can find on my phones SD card. one problem tho, when it asks to select the type of partition, what do i choose? i would think a little phone sd card would be the 'non' option? correct me if im wrong. i have an LG phone if that makes a difference.

[idgaf]

I'm ghetto and I don't have a phone. But I will keep this in mind when I get one.

[STD]

Originally Posted by ¤Tømmÿ Ver¢ettî¤

cool man, just dl'd that. gonna see what i can find on my phones SD card. one problem tho, when it asks to select the type of partition, what do i choose? i would think a little phone sd card would be the 'non' option? correct me if im wrong. i have an LG phone if that makes a difference.

Most memory cards are formatted with FAT, so use "Intel - Intel/PC partition".

[¤Tømmÿ Ver¢ettî¤]

well, that worked. but how do i actually see the pics?
if you could make a tutorial video that would be amazing bro.

[STD]

Originally Posted by ¤Tømmÿ Ver¢ettî¤

well, that worked. but how do i actually see the pics?
if you could make a tutorial video that would be amazing bro.

Open them like any other picture, if that doesn't work, it means that the file was partially overwritten by something. Technically there's still ways to view the remaining image, but I can't quite remember them that well right now since I've started drinking for the night. Will test out some stuff tomorrow..

[sepht]

Originally Posted by idgaf

I'm ghetto and I don't have a phone. But I will keep this in mind when I get one.

i have a cheap old ghetto phone that i never use except for emergencies

someone or something calls me at least once a day

sometimes i answer and its always a telemarketer

this leads me to act like a total nutcase (maybe because i am a nutcase) at them because i dont give a fuck

despite all that they keep calling

why do they keep calling me?

WHY?!

[OcEaNEyEz]

God dammit

I hope no one discovers that video where I suck off a horse and decapitate a goat

[Fluffy_Rabbitz]

Originally Posted by OcEaNEyEz

God dammit

I hope no one discovers that video where I suck off a horse and decapitate a goat

You fucking unfunny fuck.

[SteamPunk]

Subscribing.

Because I'm too lazy to click the "subscribe to this thread" button.

[OcEaNEyEz]

Originally Posted by Fluffy_Rabbitz

You fucking unfunny fuck.

Sorry that I did not amuse you, you fluffy faggot

[theinvader]

damn, since everyone actually takes pictures of every crime they hypothetically commit.

[vovka351]

lol... I resist the temptation by not having a smart phone...

Actually, I'm sure there's some good crypto packages for android, no?

[¤Tømmÿ Ver¢ettî¤]

i wanna run it on my computer, is there a way to have it only search a certain area? or can it only search the whole partition?

[TLV]

PROTIP. If you ever get pulled over, a cop can put you in handcuffs and search your phone without a warrant. Take the battery out and put it in your locked glove box. They need a warrant to search that. And if they have a warrant you are probably getting fucked anyways.

Or just don't have incriminating shit on your phone in the first place.

[Dark Lord]

Protip for the dumbasses: if you overwrite the data from your phone, don't do it with a CP vid.

[zuperxtreme]

Also, if you have a Smartphone, be wary of "Carrier IQ", which pretty much logs all you do on your phone. IM's, calls, keylogging, etc: http://mashable.com/2011/12/01/carrier-iq-faq/

They're on most phones, btw.

Install a custom ROM if you can.

EDIT: To find out for Android users: https://market.android.com/details?i...eve.loggingkey

[-SpectraL]

Originally Posted by TLV

PROTIP. If you ever get pulled over, a cop can put you in handcuffs and search your phone without a warrant. Take the battery out and put it in your locked glove box. They need a warrant to search that. And if they have a warrant you are probably getting fucked anyways.

Or just don't have incriminating shit on your phone in the first place.

The cops and narcs even have a hand-held scanner now which they wave near your phone and it captures everything on it.

"In less than two minutes the device can extract all of your information. Where you've been, who you've talked and it can even pull up those old messages you thought were deleted. “Generally speaking for something like a cell phone or laptop police need a warrant,” Steinbock. According to Michigan State Police the device is only used if a search warrant is issued or the driver gives consent. Officers cannot access the information on a cell phone without physically having the cell phone."

source: http://www.northwestohio.com/news/st...4#.Tvt1TXoXFJE

[The Creator of Life]

Any help for us iphone users?

[¤Tømmÿ Ver¢ettî¤]

is there a way to get it to recover JUST pics? its doing ddl files, txt documents, xml files, and bunch of other shit. i just want pics

[-SpectraL]

Originally Posted by The Creator of Life

Any help for us iphone users?

There's still a memory card in the IPhone. You probably can't get at it without disassembling the casing, but it's there. Every device has a memory card.

(edit) oh, wait... I think I remember there's a special tool you use to get at the card on an IPhone and it comes with a new IPhone in the box.

[¤Tømmÿ Ver¢ettî¤]

In less than two minutes the device can extract all of your information. Where you've been, who you've talked and it can even pull up those old messages you thought were deleted. “Generally speaking for something like a cell phone or laptop police need a warrant,” Steinbock. According to Michigan State Police the device is only used if a search warrant is issued or the driver gives consent. Officers cannot access the information on a cell phone without physically having the cell phone.

so let me get this straight, they admit that their scanner can get all the data off your phone, but also say 'oh we cant see anything unless we have you phone'
then why do they have the scanner? fuck lying pigs

[-SpectraL]

Originally Posted by ¤Tømmÿ Ver¢ettî¤

so let me get this straight, they admit that their scanner can get all the data off your phone, but also say 'oh we cant see anything unless we have you phone'
then why do they have the scanner? fuck lying pigs

The way I read it from the watchdog groups all they have to do is drive up beside you and hold the device in their lap and turn it on and they can empty your phone into their handheld device at will in 100 seconds. It gives them a list of all devices in range (much like a wireless network list), they select the device... hit the ENTER key, and it all comes right over through the air. They can also use a similar device to turn your ignition off (and many other things like apply brakes, turn, accelerate, etc.) in your vehicle by remotely accessing the computer under the driver's seat.

[¤Tømmÿ Ver¢ettî¤]

yeah except theirs nothing electronic about brakes. so that not even feasible. there you go with the exaggerations again.

EDIT: and the computer is usually in the dash somewhere, typically in the middle towards the floor. i know toyota 4runners have them under the seat. maybe all toyotas. nissans and mitsubishi have them in the dash

[FNIC]

The only person that would be concerned with shit like this is Child porn viewers. So fuck all of you everyone that posted in here is now on suspect CP list. Sick bastards I hope you end up in prison and get buttfucked.

[iMagiNation]

Originally Posted by FNIC

The only person that would be concerned with shit like this is Child porn viewers. So fuck all of you everyone that posted in here is now on suspect CP list. Sick bastards I hope you end up in prison and get buttfucked.

lol that's not true you fascist fuck

[FNIC]

Originally Posted by iMagiNation

lol that's not true you fascist fuck

Yes it is. Either that or graff writers. Im sure non of you write graff on that large of a scale to go through all that bullshit to remove pics..
The only kind of images that will get you in trouble are CP and dead bitches that you weird fucks killed.
End of story. I hate sick fucks like yall.

[Rizopas]

Originally Posted by FNIC

Yes it is. Either that or graff writers. Im sure non of you write graff on that large of a scale to go through all that bullshit to remove pics..
The only kind of images that will get you in trouble are CP and dead bitches that you weird fucks killed.
End of story. I hate sick fucks like yall.

Didn't you pork a huge fat bitch and recorded it on video once, as well as recorded another video of you jerking your tiny cock shouting "Silverfuck!". Choloniggers gonna nig I guess.

Either way I hate how, as days go by, privacy is becoming more and more hard to obtain and securing your information is getting harder. It's kind of scary to think anything, like this post, will be permanently stored somewhere for many, many years.

[¤Tømmÿ Ver¢ettî¤]

Originally Posted by -SpectraL

Wrong. Every powered control on a modern car is controlled through the vehicle's on-board computer, which is 99 times out of 100 under the driver's seat. It has convenient backdoors built into it as well.

brakes arent power controlled, its a mechanical thing. electronics dont require fluid. brakes do. maybe newer cars they add a electronic controlled brake controller of some sort, but ive never heard of it. thats why i drive 90s tuners. computer doesnt have control over nearly as muhc. thank god. fuck smart technology on cars. and no, 99 out of 100 times its in the dash. especially cars that have electronic seats. less room under them than sliding seats.

[Rizopas]

Kinda makes you miss the days where everything was mechanical, manual and analog don't you think?

[-SpectraL]

Originally Posted by ¤Tømmÿ Ver¢ettî¤

brakes arent power controlled, its a mechanical thing. electronics dont require fluid. brakes do. maybe newer cars they add a electronic controlled brake controller of some sort, but ive never heard of it. thats why i drive 90s tuners. computer doesnt have control over nearly as muhc. thank god. fuck smart technology on cars. and no, 99 out of 100 times its in the dash. especially cars that have electronic seats. less room under them than sliding seats.

Wrong. The brakes can be commandeered remotely by radio transmission...

It sounds like a Hollywood movie: cybercriminals in a van use a laptop to hack wirelessly into the computer-controlled systems of the car on the road ahead. In seconds the target car's engine, brakes, and door locks are under their nefarious control.

In May, a team of researchers reported that they succeeded in hacking into the onboard computer networks that controlled the engine, brakes, and door locks, among other systems. This latter study was done physically – not wirelessly – by connecting into a vehicle's computers.

source/proof:
http://abcnews.go.com/Technology/sci...3#.TvuqLHoXFJE

[STD]

Wow I got a lot of typing to do...

Originally Posted by vovka351

Actually, I'm sure there's some good crypto packages for android, no?

Probably should be...

Originally Posted by TLV

PROTIP. If you ever get pulled over, a cop can put you in handcuffs and search your phone without a warrant.

I'm pretty sure they can't do that in Australia, at least, until they have probable cause. But that's the problem with taking about legal stuff here, it varies so much all over the world and there's a lot of grey areas.

Originally Posted by Dark Lord

Protip for the dumbasses: if you overwrite the data from your phone, don't do it with a CP vid.

True story bro.

Originally Posted by -SpectraL

The cops and narcs even have a hand-held scanner now which they wave near your phone and it captures everything on it.

"In less than two minutes the device can extract all of your information. Where you've been, who you've talked and it can even pull up those old messages you thought were deleted. “Generally speaking for something like a cell phone or laptop police need a warrant,” Steinbock. According to Michigan State Police the device is only used if a search warrant is issued or the driver gives consent. Officers cannot access the information on a cell phone without physically having the cell phone."

source: http://www.northwestohio.com/news/st...4#.Tvt1TXoXFJE

That sounds a bit iffy, at first I wasn't sure how it could work, but I guess you can consider that a phone is always trying to hold a connection with the cellular network and that signal can certainly be hijacked, but it's a bit of a stretch to imagine them being able to hijack a GSM signal or something and actually read data off the device. Maybe it identifies your phone based on the cellular connection and grabs the info from the cell provider, but I'd expect they'd either need a warrant or consent for that (to do it legitimately.) Either way thanks for posting that, it's scary stuff...

Originally Posted by The Creator of Life

Any help for us iphone users?

Not really, LOL. Apple has always sucked as far as anything to do with encryption goes. But I know you can encrypt iPhone backups, does anybody know if you can encrypt all the data in the iPhone? You know, I'll actually Google that now...

Originally Posted by ¤Tømmÿ Ver¢ettî¤

is there a way to get it to recover JUST pics? its doing ddl files, txt documents, xml files, and bunch of other shit. i just want pics

Originally Posted by -SpectraL

Yes, you can set a filter on the scan so it only pulls in certain file extensions.

^^ What Spectral said. Photorec should have come with Testdisk, and you can select which file types you want to recover.

(sorry, STD... I'm all done...) Please proceed.

lol. <3

Originally Posted by ¤Tømmÿ Ver¢ettî¤

brakes arent power controlled, its a mechanical thing. electronics dont require fluid. brakes do. maybe newer cars they add a electronic controlled brake controller of some sort, but ive never heard of it.

I know there's electronic throttle control these days, I'd bet there's also some kind of similar thing for brakes in some modern cars. With EBD (electronic brake force distribution) there's certainly electronics doing their thing in some parts of the system in some cars...

[STD]

OK, iPhones: As usual, Apple isn't very forthcoming about what they call "data protection" which they say is supported in everything from the 3GS and onward.

https://support.apple.com/kb/HT4175

Originally Posted by Apple

Data protection enhances the built-in hardware encryption by protecting the hardware encryption keys with your passcode. This provides an additional layer of protection for your email messages and attachments. Third-party applications can use the data protection APIs in iOS 4 and later to further protect application data.

What encryption algorithm? Not a lot of detail...

http://nakedsecurity.sophos.com/2010...ne-encryption/

Originally Posted by Sophos

The author of the message noted that when he plugged in his iPhone 3GS to a Ubuntu 10.4 (Lucid Lynx) workstation he was able to access some of the data without authenticating to the phone or OS.

.....

On initial examination all that is required to access the "user content" areas of a fully encrypted iPhone is Ubuntu. No passcode required. Since we do encryption here at Sophos I was a bit startled by this as any proper encryption should have the keys protected by some sort of passphrase that is required in order to access the protected volume.

Many have pointed out that the most sensitive information is still unavailable like SMS history, email, address books, etc. After seeing the phone boot without the passcode though, I thought there may be more of a story to this.

^^ Also states that Apple uses AES-256 for encryption. It's not full disk though, if you can access some of the data, and I bet if they ran Testdisk over the iPhone or a hex editor they'd find at least fragments of text messages left over on the memory. I'm not a fan of encryption systems that only encrypt part of a drive... you can never be sure that a file, even a temporary one created by the system that then gets immediately deleted by the system without you knowing, has been stored outside of the unencrypted area.

http://www.wired.com/gadgetlab/2009/...ne-encryption/

Originally Posted by Wired

Wondering where the encryption comes into play? It doesn’t. Strangely, once one begins extracting data from an iPhone 3GS, the iPhone begins to decrypt the data on its own, he said.

[iMagiNation]

Originally Posted by FNIC

Yes it is. Either that or graff writers. Im sure non of you write graff on that large of a scale to go through all that bullshit to remove pics..
The only kind of images that will get you in trouble are CP and dead bitches that you weird fucks killed.
End of story. I hate sick fucks like yall.

Your total lack of creativity and imagination does not mean that everyone is into child pr0n. I can think of a gazillion things I'd take photos of (at least in theory, to later put on a secure computer or something) that I wouldn't want other people finding.

[¤Tømmÿ Ver¢ettî¤]

Originally Posted by -SpectraL

]
http://abcnews.go.com/Technology/sci...3#.TvuqLHoXFJE

If sending a spurious "low pressure" messages doesn't sound exactly like Mission Impossible, the work of other researchers yielded potentially more-serious vulnerabilities. In May, a team of researchers reported that they succeeded in hacking into the onboard computer networks that controlled the engine, brakes, and door locks, among other systems. This latter study was done physically – not wirelessly – by connecting into a vehicle's computers.

so your wrong, they cant hack your brakes. only things that send wireless codes. they'd have to have a hard wired connection to your ECU to do that

[STD]

Originally Posted by iMagiNation

Your total lack of creativity and imagination does not mean that everyone is into child pr0n. I can think of a gazillion things I'd take photos of (at least in theory, to later put on a secure computer or something) that I wouldn't want other people finding.

Exactly. Like, somebody could send *unsolicited* child porn to your phone. Then you've got child porn in your possession on your phone. What if they police ended up with your phone then and found insecurely deleted CP there?

And another point... say you view CP on the internet, maybe your friend sent you a trick link for the lulz. Say your web browser cached the page and temporarily stored it on your hard disk (or this could even be on your phone's web browser, now that I think about it.) Now say your browser deletes the cache, or cookies, or whatever, as it does as per normal for temporary files. Problem is, these files are deleted insecurely, they data is still sitting on your drive.

One final kind of related thing, say you've got a sensitive 1,000KB text file or whatever type of file saved on an unencrypted drive. Now say you edit it and delete some of the contents so it's just 250KB in size, and then re-save it. Now you've got a 250KB sensitive file. Now you perform a secure erase on it. Your problem: you've only done a secure erase on the final form of the file, the 250KB version of it. The 750KB that you edited out of the original is still residing on the drive, and won't be securely erased as part of the file, because it's no longer a part of the file. Solution: store everything secure on a fully encrypted disk.

[STD]

OK, just added a really really important update to my original post.

[shopping cart for brains]

Originally Posted by SteamPunk

Subscribing.

Because I'm too lazy to click the "subscribe to this thread" button.

123