Analysis of Data Remaining on Second Hand ADSL Routers

Abstract

In theory, an ADSL router can provide an additional layer of security to a wired and wireless network through; access control, wireless encryption, firewall rule sets, and network event logging. An ADSL router may also contain the users' usage habits and broadband account credentials. However, end-users may be unaware of the intricacies of the security measures available and the potentially confidential information stored on their device. As a result a second hand ADSL router may contain a wealth of user-specific information if not wiped and disposed of in a secure manner. This paper shows the data that was acquired from a selection of second hand ADSL routers purchased during the first quarter of 2011. From the data acquired and analysed, individuals are not removing their personally identifiable information and are leaving confidential data which may lead to detrimental outcomes if misused. The paper also shows that end-user applied security on these devices was alarmingly low. Thus many consumers may fall victim to new and emergent Internet based crimes if the full security capabilities of their ADSL router are not applied.

Security and Privacy with Second-Hand Storage Devices: A User-Centric Perspective from Switzerland

“…In parallel, a different group conduct similar longitudinal studies that were more focused on portable second-hand devices, such as USB sticks [44,45] and memory cards [49][50][51][52]. They conclude that users fail to sanitize properly their devices and that no improvement can be observed, regardless of the number of available tools and the increase of regulations and publicity for raising awareness of users.…”

“…We present our findings with regard to the respondents' beliefs about their legal rights and obligations when they purchase secondhand storage devices. We split the "true" and "false" statements 49 and showed them in Figures 3a and 3b, respectively. For true statements, correct answers are colored in blue, corresponding to somewhat agree, agree, and strongly agree.…”

“…The statements are coded with numbers in the figures to be referred to in the following paragraphs and in Q13 in Appendix D (denoted with 'l'). 49 For some of the statements, the truth is in fact more nuanced and context dependent. First, we discuss results related to users' general perceptions of rights and obligations.…”