
If, like me, you’re hell bent on world domination, then you’re probably going to be using a lot of technology. You’ll be making your plans on the computer and storing them on your hard drive. You’ll be keeping photos of your weapons of unimaginable power on a USB stick. Your mobile will be full to bursting with the contact details of the evil scientists you’ve hired, not to mention all the text messages you’ve been sending to them.
Of course, the main problem with world domination is that, by and large, MI6 frown upon it. So now, you’ll have to get rid of all your gadgets and gizmos and all the secret data they contain. Thanks to the WEEE directive, recycling is a must, but it’s all that confidential data that you want to worry about.
You see, recycling old electronic equipment is quite straightforward if you use a company that does actually breakdown and recycle the components. Some places just ship it to Asia or Africa to be dismantled, which is just plain wrong and not only for environmental reasons.
Destroying the confidential data on your electronic equipment is not just about big businesses and corporations either. With technology becoming cheaper all the time, we are now giving away, or throwing away, our old gadgets. You probably don’t think twice about it, but how much of your life is stored on your hard drive, USB stick, or mobile phone? Names and addresses of your friends and family, birthdays, email addresses, photos and bank details are just some of the things you might find.
So what are you going to do before you sell, recycle or donate your old electronic gizmos? Simple, you delete all your old data. Use the “master reset” menu option on your old mobile phone; delete all the personal stuff from your hard drive and USB stick and don’t forget to empty the “recycle bin”. If you want to be extra careful, you might also format the hard drive.
Job Done...
Would it make you nervous if I told you that none of those things would actually erase any of the data from your old electronic equipment?
Master reset, delete or format, it all does pretty much the same thing. It marks the data as unwanted, which allows it to be written over. That’s all. The data itself is still there for the taking.
The technique, called Forensic Data Recovery, is used by law-enforcement types to catch paedophiles and other criminals who try to cover their tracks. However, its use isn’t restricted and it could just as easily be used to retrieve files that you have accidently deleted. In fact, a quick search on Google will bring up reams of Data Recovery packages, all easily available. It’s easy to see how a fraudster might use this same bit of technology to collect personal details from your old PC hardware.
Sometimes we make it even easier for the criminal fraternity. Identity fraud is on the up, and not deleting your data can make life very uncomfortable. A recent study by BT, Glamorgan University, Australia's Edith Cowan University and Sim Lifecycle Services showed how scary this can be. They picked up a BlackBerry that a corporate executive had dumped in his IT departments WEEE recycle bin. Instead of being recycled, the device was sold to a refurbisher and the study group bought it from them.
On the BlackBerry were details of clients, business plans, agendas, meetings, emails, his bank details and even pictures of his kids. All intact and unencrypted. He got lucky. Had someone other than this study group picked up his device, things could have been much worse.
Bend and Wipe
So if you’re going to recycle, what can you do? Well, there’s good news and bad news. First the good news:
Deleting files properly is very easy.
When you delete a file from your hard drive, what you are actually doing is allowing the computer to write over that area of the disc. Of course, modern discs have a hell of a lot of space on them with new drives having anything up to a terabyte or more. It could be months before that area of the disc is written over, so you need to get hold of a file shredder.
This simple bit of software is used in place of your normal delete option. Once installed you will either drag the file to the shredder icon or right click and select shred. Now instead of the usual delete procedure, the shredder will mark off that area of your disc. Next, it will write over that area, with binary numbers, up to 30 times. This obliterates any trace of the file that was once there and makes it impossible to reconstruct the information.
File shredders, such as SysShield, can be downloaded free from places like tucows.com along with many others. They will work just as effectively on USB sticks and rewritable DVDs/CDs as they do on hard drives. If you’re going to be donating any computer equipment, do yourself a favour and get a file shredder. This way, you can be sure that nothing will come back to haunt you.
For those of you thinking about offering WEEE recycling as part of your current service, you should check out Blancco. The industrial strength shredding software they offer does a very thorough job of eradicating all data from hard discs. Hit a drive with this and you can resell it as part of your WEEE commitment with no worries about old data popping up to embarrass you or your clients.
If the disc is damaged then data shredding software will be of no use. But you can be sure that if there is sensitive data on it then it can still be retrieved. Some people just like a challenge. In this case, you will need to degauss the drive. This involves passing it through a powerful electro magnet, which will destroy all data on the disc.
The downside of this is that the drive will no longer be usable and so can’t be re-sold. It’s possible to degauss a drive in such a way that it can be used again, but it’s quite complicated and just not cost effective. And with the price of hard drives coming down all the time, it’s just easier to wipe them and shred them.
Data shredding and degaussing is very much a belt and braces approach to confidential data destruction. But if you want to offer this service to your clients then it’s well worth offering both. You might even go the extra mile and take the GCHQ approach. The governments eavesdropping department regularly need to make sure that old computers and the like are properly wiped. To this end, their hard drives are data shredded, degaussed, bent in half and then physically shredded. You won’t be getting any secret info from that then.
So, the bad news. You now know how easy it is to wipe old files from computers and their associated discs. The same cannot be said of mobile phones.
These pesky devices are a law unto themselves and as mentioned previously, the master reset option doesn’t erase anything. Like deleting a file on a hard drive, all you’re doing is hiding the data and making it available to be written over. And, like a hard drive, anyone with the right equipment can retrieve all the data stored on your phone. Usually these people are in law enforcement but a well-connected criminal could do the same job.
Mind you, it isn’t particularly easy and they would have to be VERY well connected, so don’t get paranoid. Being careful is the name of the game. It is more likely that someone will swipe your phone from under your nose than take it from a recycle bin. And if you are going to recycle your phone do use the master reset, as most criminals are just too lazy to go to the trouble of data retrieval.
Annoyingly, it is possible to wipe all the data from a mobile, but manufacturers are rather secretive about the methods. Of course, GCHQ know how to do it and one or two companies who cater to governments and other paranoid types – but as it’s all covered by the official secrets act you won’t find it on Google.
Our friend the BlackBerry can be properly wiped though, if you know how. Hoorah for instruction manuals. And if you leave it on the train, you can even wipe the data remotely. This is just one of the reasons why they are popular with business users.
And Relax
Recycling waste electronic items is obviously a good idea but you really need to take care. You need to think about what you’re handing over to be recycled or reused. You really don’t have any idea where your old equipment will end up, or who will have access to your old files. So shred any data before recycling and remember, even formatting a hard drive isn’t reliable.
If you’re offering WEEE services as part of your business model then you’re taking on a lot of responsibility. Putting your customer’s minds at ease should definitely be at the top of your agenda. Investing in some quality data shredding software is a good start as it allows you to leave an audit trail for your clients. Degaussing machinery should be next on your list along with a good shredder.
And remember, don’t be paranoid, be careful.