Site Sponsor:

mcafee_logo.gif
line

Now Available:

Featured Resource:

line

Newsletter

Email Address:


line

Ask the Expert

Have a question for our resident expert? Email your questions to Dan or post a comment to the blog.

« Microsoft IE 7 is Out, Now Pay Attention | Main | Quick Study - Messaging Security Policies »

Smartphones and Not So Smart Information Leaks

It's hard to deny the advantages of smartphones: email, Internet access, databases of contacts, and oh yes, a phone. One of the downsides of smartphones is that as computers, they are subject to security attacks, like malware. The Washington Post ran a story over the weekend about another problem: inadvertently disclosing data. Even users that "delete" data can leak information because the information it's not really gone after all.

The article goes on to describe the kind of information discovered from smartphones purchased from eBay, including "one company's plans to win a multimillion-dollar federal transportation contract, e-mails about another firm's $50,000 payment for a software license, bank accounts and passwords, medical prescriptions, and receipts for utility payments." Like deleting a file on your computer, deleting information from smartphones flash memory just removes a reference to the information, it does not overwrite it. For that, you need to do a factory reset or similar operation.

WirelessRecycling.com's Cell Phone Eraser Tool has instructions for many models.

An earlier posting argued for better user training. Here is a case in point.

TrackBack

TrackBack URL for this entry:
http://www.realtime-websecurity.com/type/mt-tb.cgi/99

Post a comment

(All comments are approved by site leader before appearing here. Thanks for commenting!)

line

Dan Sullivan's Bio:

Dan Sullivan is a systems architect with 20 years of IT experience that includes engagements in enterprise security, application design, and systems architecture. His experience includes a broad range of industries, including financial services, manufacturing, government, retail, gas and oil production, power generation, and education. Dan’s security-related project work has ranged from requirements analysis for enterprise information security to designing and implementing security for database applications and enterprise portals. Dan has written about information security and other enterprise information management topics for Business Security Advisor, DM Review, Intelligent Enterprise, and E-Business Advisor. You can contact Dan at: dan_sullivan@realtimepublishers.net