Attend XDA's Second Annual Developer Conference, XDA:DevCon 2014!
5,772,636 Members 52,689 Now Online
XDA Developers Android and Mobile Development Forum

Secure Deletion

Tip us?
 
mike_1983
Old
#1  
Member - OP
Thanks Meter 0
Posts: 40
Join Date: Aug 2011
Cool Secure Deletion

A few weeks ago there was something on the UK news about smart phone data and how when you sell/recycle your phone most people leave accessible data on the phone after a factory reset. There was lots of trying to shock people (reading out text messages and browser history) but the solutions were barely discussed, all that was said was something like "There are programs that can overwrite your data"

So what do people do when they sell their android phone? I've seen an app in the play store called nuke my device, it basically overwrites the internal SD card then does a factory reset, I'm still not sure that would totally erase all data though?
 
Veeshush
Old
#2  
Veeshush's Avatar
Member
Thanks Meter 5
Posts: 31
Join Date: Feb 2014
I know all about methods for PC hard drives, but I too wouldn't mind knowing how android systems should be handled.
 
mike_1983
Old
#3  
Member - OP
Thanks Meter 0
Posts: 40
Join Date: Aug 2011
Yeah I know about PC Hard drives too. I have bought the nuke my device app from the play store, its cheap, I haven't used it yet!
 
Ryccardo
Old
#4  
Senior Member
Thanks Meter 123
Posts: 440
Join Date: Nov 2013
Location: Imola

 
DONATE TO ME
To block undeleters it's sufficient to fill space with "generic" data then delete the file

As for removing the chip and using an external programmers, some indeed expose raw memory over the pins (MTD chips) and there's no reasonable way to wipe the hidden areas (well, assuming you want a device that still works - otherwise there's the Cobra 6 method), others have on-chip mappers (all SD cards including eMMC) which can have a TRIM command -- which however has historically been a major cause of bricks on some controller firmwares...
Motorola International 8700 (first phone sold in Italy to send SMS) [half bricked] > Acer ? [returned] > Siemens S35i [good] > Samsung SGH-? [stolen] > Nokia 3220 [mostly still OK] > Motorola RAZR [still OK] > iPhone 3G S [2 batteries worn out] > iPhone 4S [I gave up after iOS 7, still has 10 months of warranty] > Samsung Ace 2 i8160 [won at Samsung giveaway, still works fine, CM10.1] > Sony Xperia U [modified Sony 2.3.7]
The Following User Says Thank You to Ryccardo For This Useful Post: [ Click to Expand ]
 
mike_1983
Old
#5  
Member - OP
Thanks Meter 0
Posts: 40
Join Date: Aug 2011
When I posted I was looking at some similar threads, someone made a program that deleted everything on the phone except the recovery (then you could flash another rom - I don't know if it overwrote or just deleted) I think it was for an Asus transformer tablet.

Whenever I've sold something before I have just connected it to my computer and written large files to all the available space. I don't have any sensitive data but I like to make sure everything is deleted before I sell something.

I'm surprised there's not more information/apps or whatever on this subject (wiping android) there's lots of programs for PC's to securely wipe drives. Some sites mention about encrypting the phone then wiping it, I guess that's the way to go.
 
repat
Old
#6  
Junior Member
Thanks Meter 1
Posts: 10
Join Date: Jul 2010
Location: Hamburg

 
DONATE TO ME
My first thought was too, that it must be different from hard drives.

My initial idea would be to encrypt everything. Luckily since Honeycomb, Android supports this out of the box(but it's not hardware based) So even if data can be restored, it'd be nonsense(if the manufactorer implemented it correctly). You could choose a strong password, because you won't need to remember it anyway since you wipe the phone afterwards.

I found this article that agrees with me androidcentral.com/securely-wiping-your-android-phone-makes-it-just-fine-sell-fud

Then there is this article on lifehacker: lifehacker.com/5808280/what-should-i-do-with-my-phone-before-i-sell-it

Money quote:

Quote:
Alternatively, there's the ultimate security tool if you're worried about someone pulling data from your phone: don't sell it.


A little off topic: Another solution would be to just store sensitive data on a SD card and remove it before selling. Plus you could use tools like EDS(Lite) to store sensitive data in container. Sync them via a cloud service and open them on your computer with TrueCrypt.
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes


How to Factory Reset your Samsung Gear Live Android Wear SmartWatch – XDA Developer TV

Do you want to Factory Reset your Samsung Gear … more

Get Your Special xda:devcon ’14 Hotel And Conference Rate While It Lasts

By now you’ve definitely heard about XDA’s … more

Google Chromecast Rootable Once Again!

Over the six months, theGoogle Chromecasthas gained a considerable amount of official functionality. … more

YAATA isn’t Just Another Android Texting App

Although our mobile devices today are capable of executingnearly every task we normally … more