The naked #selfie: how safe is a factory reset on your Android phone? Not very
Antivirus and mobile security firm Avast! says it's unveiled major holes in Google's Android operating system after extracting masses of personal data from phones that had been factory restored.
Avast! bought 20 secondhand Android phones on ebay. And, using commercially available forensic tools, they recovered data that should have been deleted when the previous user wiped the phone. The antivirus and mobile security firm based in the Czech Republic found thousands of emails, contact details, SMS text messages, selfies and other photos - some of a very intimate nature indeed. "Most people don't think of their smartphone as a computer," says Avast!'s chief marketing officer, Chris Benham. "But the problem is all of us are increasingly using our mobile devices as a replacement for our traditional computers," he says. "We do online banking. We store family pictures. We store bank applications and other things that we would have used to have done on our computers, and which we're now doing on our devices." Erase all data? The problem, says Benham, is that on the secondhand phones Avast! bought, this data was still there, even though the user had selected "factory reset" which suggests everything would be erased. "By having the option of erasing all the information, it creates the perception that you have deleted it and removed it because you can't visibly see it," Benham explains. "But the reality is that all you've done is remove the pointers to the information. The information itself is still stored on the device." The phone overwrites your data in time as the new user adds their data - such as their photos and contacts. Your data meanwhile - as sensitive or embarrassing as it may be - could still be retrieved. Naked selfies "We found about 40,000 photos, about 1,500 photos of children, thousands of Google searches, thousands of contact records, emails. So a lot of personal and private information," says Jude McColgan, president of the company's mobile division. Avast! says the photos included 750 images of women in various states of undress, and 250 photos of "what appeared to be the previous owner's manhood." "The risk to individuals - who think that they're otherwise deleting all of their personal information - is that if you give it to your mother, or you sell it, somebody really has quite an easy capability to go through digital forensics and get your stuff, get your personal information," McColgan says. Google criticism Google, which developed Android, was quick to criticize Avast!'s findings. The 20 phones tested, said the company, were running older versions of the Android mobile operating system. For the last three years, says Google, Android has featured an encryption tool that renders old data unrecoverable after a factory reset. However it's not a default setting, and presupposes considerable tech savvy on the part of the user. Avast! says it was puzzled by Google's response, as some of the phones were running fairly recent versions of Android. Some critics, however, described Avast!'s "naked selfie exposé" as little more than a PR stunt. The firm is trying to make the transition from a leading antivirus software company with more than 218 million users worldwide to a mobile security firm. Publicity stunt? "I think it was a nice idea and they did a great job," says Jan Klesla, a journalist covering the IT business with the leading daily, "Hospodarske noviny". "This factory wipe is something users rely on, and now they're trying to tell people that they should pay more for their mobile security. And this PR I think will help," says Klesla. Avast! offers a mobile security app - which is free - as well as a premium service offering additional benefits, for which you pay a fee. Some of these features are pretty nifty. Their anti-theft app, for instance, will snap a photo of the thief who tries to unlock your phone - and email it to you. Sledgehammer solution But as far as protecting your data is concerned, no solution is 100 percent effective. Apple users are definitely at an advantage as iOS, unlike Android, is not an open platform - everything is encrypted. But that doesn't make your wiped data unrecoverable if you lose, sell or pass on your phone. It is merely more difficult to extract. Experts like Jan Klesla advises users to save everything on a memory card - and take the card out when you sell your phone. And of course some will resort to the ultimate security solution - a slab of concrete and a sledgehammer.
Android
Android_(operating_system) Android_(robot) Android_(film) Android_(TVXQ_song) Android_(board_game) Google_Play Android_software_development Android_version_history Dalvik_(software) Albert_(comics) Android_fat_distribution Android_Oreo Android_2 Android_Donut Android_Open_Source_Project Methyltestosterone
Antivirus
mobile security firm
Avast!
Avast Avast!_Recording_Company
Google
Google Google_Search Google_(verb) Google_Translate Google_Nexus Alphabet_Inc. Google_Books Google_Chrome Google_Play Google_Search_Appliance Privacy_concerns_regarding_Google Google_Cloud_Platform Google_Maps Google_tax Google_Ad_Grants Google_plus
Android
Android_(operating_system) Android_(robot) Android_(film) Android_(TVXQ_song) Android_(board_game) Google_Play Android_software_development Android_version_history Dalvik_(software) Albert_(comics) Android_fat_distribution Android_Oreo Android_2 Android_Donut Android_Open_Source_Project Methyltestosterone
Avast!
Avast Avast!_Recording_Company
Android
Android_(operating_system) Android_(robot) Android_(film) Android_(TVXQ_song) Android_(board_game) Google_Play Android_software_development Android_version_history Dalvik_(software) Albert_(comics) Android_fat_distribution Android_Oreo Android_2 Android_Donut Android_Open_Source_Project Methyltestosterone
ebay
Czech Republic
Czech_Republic Czech_Republic_national_football_team Czech_Republic_men's_national_ice_hockey_team List_of_non-marine_molluscs_of_the_Czech_Republic ISU_Junior_Grand_Prix_in_the_Czech_Republic Czech_Republic_men's_national_junior_ice_hockey_team A1_Team_Czech_Republic Recognition_of_same-sex_unions_in_the_Czech_Republic Football_Association_of_the_Czech_Republic Czech_Republic_national_under-21_football_team Czech_Republic_Fed_Cup_team Czech_Republic_Davis_Cup_team Czech_Republic_national_under-19_football_team Czech_Republic_national_basketball_team Czech_Republic_women's_national_football_team Czech_Republic_national_speedway_team
SMS
SMS Master_System Text_messaging SMS_(2008_film) SMS_(illustrator) Seiner_Majestät_Schiff Shiva_Manasulo_Shruti Civil_Movement SMS_(hydrology_software) Austro-Hungarian_Navy SMS_language Social_networking_service Synchronous_Meteorological_Satellite SMS_(band) Youth_Party_–_European_Greens Hierarchical_storage_management
Avast!
Avast Avast!_Recording_Company
chief marketing officer
Chris Benham
Chris_Benham
Benham
Benham-class_destroyer Benham,_Kentucky Benham_Park Benham_(automobile) Benham,_Indiana USS_Benham_(DD-796) William_Benham_(zoologist) USS_Benham_(DD-397) Andrew_E._K._Benham
Avast!
Avast Avast!_Recording_Company
Benham
Benham-class_destroyer Benham,_Kentucky Benham_Park Benham_(automobile) Benham,_Indiana USS_Benham_(DD-796) William_Benham_(zoologist) USS_Benham_(DD-397) Andrew_E._K._Benham
Google
Google Google_Search Google_(verb) Google_Translate Google_Nexus Alphabet_Inc. Google_Books Google_Chrome Google_Play Google_Search_Appliance Privacy_concerns_regarding_Google Google_Cloud_Platform Google_Maps Google_tax Google_Ad_Grants Google_plus
Jude McColgan
Avast!
Avast Avast!_Recording_Company
McColgan
Google
Google Google_Search Google_(verb) Google_Translate Google_Nexus Alphabet_Inc. Google_Books Google_Chrome Google_Play Google_Search_Appliance Privacy_concerns_regarding_Google Google_Cloud_Platform Google_Maps Google_tax Google_Ad_Grants Google_plus
Google
Google Google_Search Google_(verb) Google_Translate Google_Nexus Alphabet_Inc. Google_Books Google_Chrome Google_Play Google_Search_Appliance Privacy_concerns_regarding_Google Google_Cloud_Platform Google_Maps Google_tax Google_Ad_Grants Google_plus
Android
Android_(operating_system) Android_(robot) Android_(film) Android_(TVXQ_song) Android_(board_game) Google_Play Android_software_development Android_version_history Dalvik_(software) Albert_(comics) Android_fat_distribution Android_Oreo Android_2 Android_Donut Android_Open_Source_Project Methyltestosterone
Avast!
Avast Avast!_Recording_Company
Android
Android_(operating_system) Android_(robot) Android_(film) Android_(TVXQ_song) Android_(board_game) Google_Play Android_software_development Android_version_history Dalvik_(software) Albert_(comics) Android_fat_distribution Android_Oreo Android_2 Android_Donut Android_Open_Source_Project Methyltestosterone
Google
Google Google_Search Google_(verb) Google_Translate Google_Nexus Alphabet_Inc. Google_Books Google_Chrome Google_Play Google_Search_Appliance Privacy_concerns_regarding_Google Google_Cloud_Platform Google_Maps Google_tax Google_Ad_Grants Google_plus
Android
Android_(operating_system) Android_(robot) Android_(film) Android_(TVXQ_song) Android_(board_game) Google_Play Android_software_development Android_version_history Dalvik_(software) Albert_(comics) Android_fat_distribution Android_Oreo Android_2 Android_Donut Android_Open_Source_Project Methyltestosterone
Avast!
Avast Avast!_Recording_Company
Google
Google Google_Search Google_(verb) Google_Translate Google_Nexus Alphabet_Inc. Google_Books Google_Chrome Google_Play Google_Search_Appliance Privacy_concerns_regarding_Google Google_Cloud_Platform Google_Maps Google_tax Google_Ad_Grants Google_plus
Android
Android_(operating_system) Android_(robot) Android_(film) Android_(TVXQ_song) Android_(board_game) Google_Play Android_software_development Android_version_history Dalvik_(software) Albert_(comics) Android_fat_distribution Android_Oreo Android_2 Android_Donut Android_Open_Source_Project Methyltestosterone
Avast!
Avast Avast!_Recording_Company
Jan Klesla
daily
Hospodarske noviny
Hospodářské_noviny Hospodárske_noviny
Klesla
Avast!
Avast Avast!_Recording_Company
Apple
Apple_Inc. Apple Apple_Records Apple_Corps Apple_(album) Apple_Store Malus Apple_(symbolism) Apple_Pugetsound_Program_Library_Exchange Apple_II_series App_Store_(iOS) Apple_III List_of_apple_cultivars Apple_(automobile) Apple_juice Ariane_Passenger_Payload_Experiment
iOS
IOS Ios Cisco_IOS App_Store_(iOS) Input/Output_Supervisor IOS_version_history IPad Apple Investors_Overseas_Service IOS_8 IOS_7 Mobile_app_development Smartphone
Android
Android_(operating_system) Android_(robot) Android_(film) Android_(TVXQ_song) Android_(board_game) Google_Play Android_software_development Android_version_history Dalvik_(software) Albert_(comics) Android_fat_distribution Android_Oreo Android_2 Android_Donut Android_Open_Source_Project Methyltestosterone
Jan Klesla
Android
Android_(operating_system)
iptc::20000170 slot::keyword topic::business type::entity type::misc type::product
Avast!
Avast
iptc::20000170 slot::keyword topic::business type::company type::entity type::organization
Google
Google
iptc::20000170 meta::redo sector::20000231 slot::keyword topic::business type::company type::entity type::organization
Jude McColgan
gender::male iptc::20000170 slot::keyword topic::business type::entity type::manager type::person
Chris Benham
gender::male iptc::20000170 slot::keyword topic::business type::entity type::manager type::person
Jan Klesla
gender::male topic::media type::entity type::journalist type::person
Antivirus
topic::none type::role type::value
mobile security firm
topic::none type::role type::value
ebay
EBay
meta::todo
Czech Republic
Czech_Republic
topic::none type::entity type::gpe type::gpe0 type::location
SMS
SMS
iptc::13000000 topic::science type::entity type::misc type::technology
chief marketing officer
topic::none type::role type::value
daily
topic::none type::role type::value
Hospodarske noviny
Hospodářské_noviny
topic::media type::entity type::media type::organization
Apple
Apple_Inc.
iptc::20000170 sector::20000231 topic::business type::company type::entity type::organization
iOS
IOS
iptc::20000170 topic::business type::entity type::misc type::product