Wiping a Smartphone Still Leaves Data Behind

KindMind writes "To probably no one's surprise, wiping a smartphone by standard methods doesn't get all the data erased. From an article at Wired: 'Problem is, even if you do everything right, there can still be lots of personal data left behind. Simply restoring a phone to its factory settings won't completely clear it of data. Even if you use the built-in tools to wipe it, when you go to sell your phone on Craigslist you may be selling all sorts of things along with it that are far more valuable — your name, birth date, Social Security number and home address, for example. ... [On a wiped iPhone 3G, mobile forensics specialist Lee Reiber] found a large amount of deleted personal data that he recovered because it had not been overwritten. He was able to find hundreds of phone numbers from a contacts database. Worse, he found a list of nearly every Wi-Fi and cellular access point the phone had ever come across — 68,390 Wi-Fi points and 61,202 cell sites. (This was the same location data tracking that landed Apple in a privacy flap a few years ago, and caused it to change its collection methods.) Even if the phone had never connected to any of the Wi-Fi access points, iOS was still logging them, and Reiber was able to grab them and piece together a trail of where the phone had been turned on.'"

doesn't sound like built in wipe was used

[Anonymous Coward]

Did the previous owner use the "erase all content and settings" feature of that phone? Or just restore it. That would have been using the built in tool and would have overwrote the data. http://support.apple.com/kb/ht2110

Newer phones

[Selfbain]

I'd be more interested to see if he can still do it on a newer model. The earlier models of iPhones were well known to have poor security.

There is an app for that ...

[perpenso]

After erasing the contents fill the 3G with music to overwrite, then erase again?

Pretty sure the filesystem in iOS can have partially empty blocks. I'd make a copy of my music, then run find . -type f -print0 | perl -n0e 'truncate($_, -s $_ >> 13 13)' to make sure that all the files were rounded off to 4096 bytes first.

I just thought to check for apps that wipe storage, there are several. I should have known there was an app for that. :-)