• We’re currently investigating an issue related to the forum theme and styling that is impacting page layout and visual formatting. The problem has been identified, and we are actively working on a resolution. There is no impact to user data or functionality, this is strictly a front-end display issue. We’ll post an update once the fix has been deployed. Thanks for your patience while we get this sorted.

A perfect example of stupidity

AnitaPeterson

Diamond Member
Thought I might share this story with you... as a reminder that even educated people can be stupid, and that our identity and privacy can be compromised by simple negligence.


There's a store near my workplace, where people buy electronic equipment. A few months ago, they started to collect unwanted/obsolete/broken electronics, for recycling purposes. Nothing wrong with it - it's a noble and worthy initiative, and more stores should do that.

I know the store and its employees fairly well. Often times, during lunch break, I stroll on that street, and sometimes I go in the store, to look at new toys. Almost invariably, I can't resist the temptation to look at what people discard. The employees are pretty open to anyone dropping stuff there, and they encourage those who can pick up stuff and repair it to do so. Again, it's a useful reuse/recycle policy, which everyone could benefit from.

Two days ago, I saw an external HDD in that bin, and it had FireWire connections, besides the usual USB. As it happens, I needed a FireWire enclosure, so I took the whole thing, thinking that, most likely, the HDD inside is busted, but I can rescue the enclosure.

It turns out there was nothing wrong with that external HDD. It was just old. Moreover, whoever owned it before, never bothered to wipe it clean - delete, reformat and so on. Lo and behold, I found a collection of music, a bunch of porn, and lots of pictures of the owner and his girlfriend, on a trip to Asia. And yes, there were also pictures of a more private nature, involving both of them.

I found PDF files with the guy's taxes, his address, his social insurance number, his girlfriend's address, email addresses, telephone numbers, family information, family pictures, and the list can go on....

Last, but not least - get this! - the guy's a computer science major, with excellent grades!

I am amazed at this sheer stupidity. There's so much harm one could do with all this data, yet it was just left out, for anyone to pick up.

I know some AT members preach total hardware destruction (shooting old HDDs with guns, microwaving them, smashing them with a sledgehammer and so on). Honestly, I cringe when I hear that. As long as the equipment's old, but still works, wanton destruction is senseless and wasteful. But from here to not even bothering to format discardable storage devices a few times, it's a long, long way.

After indulging in a few fantastic scenarios involving high-limit credit cards, blackmail, extortion and public humiliation, I sighed and formatted the HDD. But I just wondered, before doing that, if I shouldn't have e-mailed the guy, something along the lines of "Your name is XXXXX. Your birthdate is XXXX. Your social insurance number is XXXX. You live at XXXX. Your parents are XXXXX and XXXX. Your total declared income for last year was XXXXX. Your girfriend's name is XXXX. She lives at XXXX. She has a pet dog named XXXX. Her telehone number is XXXX. You are a graduate of XXXX. You are a computer science major, but have no clue about data security. Oh, and you have a small d!ck"
 
Maybe his mother threw it out without asking him. Happened to me when I went away to college (fortunately it was just a monitor and not a hard drive, but I have no doubt she wouldn't have erased anything if she had simply pitched all my computer parts).
 
BTW-I have some IDE hard drives lying around my house that are probably well over a decade old. I'd never throw those out. Wanton desctruction for the lot of them!
 
I am getting rid of two old computers this weekend, but the hard drives will be destroyed before being taken to the recyclers. There are just too many good data recovery programs out there and neither of these computers currently will boot, so it makes it tough to use DBAN or another truly secure formatting tool.

It is amazing how often it does happen that data is simply left lying around on old storage devices.
 
After indulging in a few fantastic scenarios involving high-limit credit cards, blackmail, extortion and public humiliation, I sighed and formatted the HDD. But I just wondered, before doing that, if I shouldn't have e-mailed the guy, something along the lines of "Your name is XXXXX. Your birthdate is XXXX. Your social insurance number is XXXX. You live at XXXX. Your parents are XXXXX and XXXX. Your total declared income for last year was XXXXX. Your girfriend's name is XXXX. She lives at XXXX. She has a pet dog named XXXX. Her telehone number is XXXX. You are a graduate of XXXX. You are a computer science major, but have no clue about data security. Oh, and you have a small d!ck"

Why would you even wonder if you should have done that? Do you think you're cool or something for thinking that? You'd just end up being a dick if you sent him an email with all that info. Is the person stupid for leaving all that on there? Sure, but leave it at that and just erase the shit and be done. Or maybe just send him an email saying "hey, you left a lot of sensitive information on this HDD of yours. I erased it all but just be more careful in the future".

Yes I realize that is what you ultimately did, but you coming here and telling us you had those thoughts makes you look like a dick.
 
I work for a large health care company, I support our remote people and pharmacies. They send their computers in for repair when remote work won't fix their issue. I have a video of one of our VP's getting his salad tossed by a high priced hooker (NWS! but you can search Janelle Jane if you want to find her... he kept docs involving her and her costs and she was in his Outlook contacts). I have seen loads of pay check stubs (we are generally electronic with those unless prohibited by law or the employee opts out) and tax info. Personal finances, MS Word docs titled "Passwords", etc.

People are dumb. People also do not realize once something is deleted doesn't mean it's gone...
 
Why would you even wonder if you should have done that? Do you think you're cool or something for thinking that? You'd just end up being a dick if you sent him an email with all that info. Is the person stupid for leaving all that on there? Sure, but leave it at that and just erase the shit and be done. Or maybe just send him an email saying "hey, you left a lot of sensitive information on this HDD of yours. I erased it all but just be more careful in the future".

Yes I realize that is what you ultimately did, but you coming here and telling us you had those thoughts makes you look like a dick.

A bit harsh, is it not?
Please tell me, in all earnestness, that such thoughts don't go through the mind of any/all people who suddenly find themselves in such a position. Kinda like finding a million bucks in a suitcase, and thinking about all you could do with the money, before turning it over to the authorities. Kinda like the story about "ride the donkey, but don't think about the donkey's ass."

It's not what we think, it's how we choose to act that really defines us.

And I'll admit to having a twisted sense of humour; the thought of that letter really doubled me over.
 
A bit harsh, is it not?
Please tell me, in all earnestness, that such thoughts don't go through the mind of any/all people who suddenly find themselves in such a position. Kinda like finding a million bucks in a suitcase, and thinking about all you could do with the money, before turning it over to the authorities. Kinda like the story about "ride the donkey, but don't think about the donkey's ass."

It's not what we think, it's how we choose to act that really defines us.

And I'll admit to having a twisted sense of humour; the thought of that letter really doubled me over.

Thinking about what you would do if you found a $1M is different than telling someone you have a lot of their sensitive and personal information. Why would you want to purposely make someone feel shitty knowing some stranger has their personal information?

Again, yes, they are stupid for not being more careful, but show some class will you? I almost feel like you're just looking for attention by telling us the things you thought about doing.
 
Again, yes, they are stupid for not being more careful, but show some class will you? I almost feel like you're just looking for attention by telling us the things you thought about doing.

Oh, spare me the BS freshman psychology... How old are you, 19? You are overly dramatic, and probably project too much.

I posted the story to make you guys laugh and to give you something to think about. From here to accusing me of being an attention whore is a long way. Please compare our years of membership and number of posts before making inane assumptions. Sheesh!
 
heh, just more proof that a paper degree can be worthless. I've met CS majors who can't even buy the right RAM for their PC's.
 
Why would you want to purposely make someone feel shitty knowing some stranger has their personal information?

Because if you notify them in a very memorable way, they won't make that mistake again. While I agree that a simple, "Hey, just wanted to know that I picked up a discarded external HDD for repair and it turns out that it's full of your personal data, including SSN and banking details" along with a link to a good system-wiping software (like DBAN) would be a bit more "polite," I can completely see the argument in favor of "shocking" the person into better security habits.

ZV
 
Oh, spare me the BS freshman psychology... How old are you, 19? You are overly dramatic, and probably project too much.

I posted the story to make you guys laugh and to give you something to think about. From here to accusing me of being an attention whore is a long way. Please compare our years of membership and number of posts before making inane assumptions. Sheesh!

Can't argue with that 🙄
 
heh, just more proof that a paper degree can be worthless. I've met CS majors who can't even buy the right RAM for their PC's.

Honestly, I don't see any necessity for them to be able to do that. Give me someone who understands the big picture and doesn't know how to hold a screwdriver rather than a hardware pro who doesn't understand architecture or data structures.
 
I'm pretty sure I would have done what the OP did, down to thinking of sending the email. Pretty typically stuff.

I might have done it, if I was able to tell from whatever was on his HDD that he was a dick.
 
i have a box of old HDDs in my server closet that i will eventually hang on branches in the desert and shoot full of 7.62 holes. i also have an external HDD that the owner owned but will not access through usb anymore. i know the info is still there and available to whomever found it and wanted it, so it stays in my desk until my next shooting trip.

one of my customers asked me to help him with his personal computer one time, and it had all kinds of personal info on it. i didnt open any of it, but did tell him he needed to keep that stuff at least in encrypted files or offload it when he takes it to get serviced. hes an engineer, but i dont fault him at all. some people dont think of that stuff, and arent nearly as paranoid as i am about it. knowledge has made me paranoid, but its ok. thats what i get paid for.
 
Back
Top