MacOSG: Securely erasing an iPhone/iPod touch (photos)
TweetFollow Us on Twitter

MacOSG: Securely erasing an iPhone/iPod touch (photos)

Research scientist and security expert Jonathan Zdziarski, recently discovered that the iPhone's restore mode still leaves personal data intact after preforming a restoration. Zdziarski writes, "While the restore process takes long enough to make most people assume the "disk" stored in NAND memory is formatted, it actually isn't.

As part of my work on a forensics toolkit for the iPhone, I decided to test whether user data could survive a full restore in iTunes. There have been rumors floating around that the entire NAND is flashed to 0xFF when the device is restored, but this is untrue - this only occurs in a different part of the iPhone (the NOR), but not the NAND. To confirm this theory, I first deleted any backups of my device and then forced the iPhone into recovery mode. From there, I performed a full firmware restore of my iPhone, ensuring that no backups or syncing were performed. I then performed a basic recovery of the raw disk using the forensic toolkit I put together, and analyzed it. What I discovered was that deleted mail, contacts, and pretty much all of my other personal information was still residing in unallocated space on the device. My personal information was safe and sound, and available to anyone with the right skills to recover it.

What does this mean? This means that when you do a restore through iTunes, it is only the equivalent of performing a "Quick Format" on your iPhone. And for those of you who use "Erase all Content and Settings," this has even less of an effect, as it doesn't even destroy the file system. In both cases, all of the personal information that was sitting on the device prior to the erase or restore is still left sitting in the unallocated blocks of the iPhone's NAND memory. To make matters worse, the restore process is likely to restore the original operating system files over the same location as the old ones, meaning very little data is likely to be corrupted at all."

Zdziarski goes on to report, "A verified detective from the Oregon State Police notified me that an out-of-the-box refurbished iPhone he purchased direct from Apple contained recoverable personal data including email, personal photos, and even financial information which he was able to recover using my forensic toolkit. The photos he sent me (see below) included the individual's name, which I've blurred out myself, but if you've ever had to return a defective iPhone, you might recognize this inbox. The more sensitive information hasn't been posted here for obvious reasons.

What you're looking at here is a partial list of the previous customer's files which were recovered from the iPhone's free space, and a screenshot that the iPhone took itself of the user's inbox, browser window, etc. when its user pressed the 'Home' button. Application snapshots are taken every time a program goes into the background to generate the zoom effects built into the device. And yes, the actual email and other personal data was also available."

Inbox
image























Facebook Activity
image
























Facebook Message
image
























Facbeook Profile
image
























Facebook Profile
image























So what can you do to make sure all your information is erased? Here are a few things to try:

1. Change passwords for all mail accounts that are synced to the iPhone or touch.
2. Make sure the device can no longer open the mail accounts.
3. Do an erase/restore of the iPhone or iPod touch, preferably using another computer or at least another account than the one the device was synced with.
4. Sync as many songs/videos of a non-compromising nature and nothing else to the newly restored device as will fit.
5. A good tool I recommend using to fill the drive up with data (songs/videos), is PhoneView. You can directly access the disk on your iPhone to totally fill it up.
6. After you have filled the drive up, do another erase/restore.
7. Repeat steps 4/5 with different content and erase/restore again. The more times you do this, the more times the data will be overwritten, thus having a less chance of recovery.

iPhoneView Utility
image















Final note: If you're having a problem with your iPhone/iPod touch and you are going to have Apple check it out, more than likely they will keep it and replace it with a refurbished unit, so make sure your iPhone/iPod touch is totally erased before you take it in. Oh, and one more thing. If the photos above look like they may be from your previous iPhone, please email us.

Mac Owners Support Group -- aka MacOSG -- was conceived by Dave Merten, the former 'Focus on Mac Support' guide at About.com. Since it's humble beginning as 'G5 Owners Support Group' back in February 2004, MacOSG has become one of the world's fastest-growing online Apple User Groups, dedicated to helping Mac users from all over the globe.

[url=http://www.macosg.com]MacOSG Home[/url] | [url=http://www.macosg.com/group/index.php]Support Forums[/url] | [url=http://macosg.com/group/viewtopic.php?t=78]Become a Member[/url]
[url=http://macosgpodcast.com]MacOSG Podcast[/url] | [url=http://mac611.com/]Mac611 Mobile Mac Support[/url]

Email us: admin AT macosg.com

image"Macsimum News" is a proud supporter of [url=http://planetgumbo.org/]Planet Gumbo[/url], which feeds the hungry. We urge you to help them in their efforts.

 
AAPL
$107.72
Apple Inc.
-5.04
GOOG
$597.79
Google Inc.
-20.46
MSFT
$41.82
Microsoft Corporation
-1.70
MacNews Search:
Community Search:
view counter

view counter
view counter
view counter
view counter
view counter
view counter

This Week at 148Apps: August 24-28, 2015
The Apps of August With 148Apps How do you know what apps are worth your time and money? Just look to the review team at 148Apps. We sort through the chaos and find the apps you're looking for. The ones we love become Editor’s Choice, standing out above the many good apps and games with something just a little bit more to offer. Take a look at... | Read more »
NASCAR in Real Racing 3? Sure, Why Not?
I have to give Firemonkeys credit - it's very cool of them to add NASCAR to Real Racing 3 via an update rather than making a separate game for it. But that's a different discussion for another time; for now let's sit back and enjoy driving in circles. [Read more] | Read more »
The nuyu is an Inexpensive Activity Moni...
Today, Health o Meter nuyu has announced a series of health and fitness-related products, including the aforementioned activity monitor along with a wireless scale. All at a decent pricepoint, no less. [Read more] | Read more »
The Makers of Overkill are Trying Someth...
Craneballs, the studio responsible for the Overkill series, is taking a little break from all that violence (a little break) to bring us Cube Worm - a 3D take on one of the most classic PC/calculator games in existence. [Read more] | Read more »
The Sandbox Welcomes Cutethulu in its La...
Another month, another update to Pixowl's The Sandbox. This time players can say hello to "Cutethulu" - an adorable little rendition of perhaps the most well known (and infamous) of the Elder Gods. [Read more] | Read more »
ReBoard: Revolutionary Keyboard (Utilit...
ReBoard: Revolutionary Keyboard 1.0 Device: iOS Universal Category: Utilities Price: $1.99, Version: 1.0 (iTunes) Description: Do everything within the keyboard without switching apps! If you are in WhatsApp, how do you schedule a calendar appointment? By switching to Calendar app. Right?What if you could schedule an appointment... | Read more »
Tiny Empire (Games)
Tiny Empire 1.1.3 Device: iOS Universal Category: Games Price: $2.99, Version: 1.1.3 (iTunes) Description: Launch cannonballs and blow tiny orcs into thousands of pieces in this intuitive fantasy-themed puzzle shooter! Embark on an epic medieval journey that will take you from the grasslands of the empire to the forgotten desert... | Read more »
Astropad Mini (Productivity)
Astropad Mini 1.0 Device: iOS iPhone Category: Productivity Price: $4.99, Version: 1.0 (iTunes) Description: *** 50% off introductory price! ​***Get the high-end experience of a Wacom tablet at a fraction of the price with Astropad Mini!• "Astropad is my new go-to retouching tool while on the go, which is often." - FStoppers• "In... | Read more »
Emo Chorus (Music)
Emo Chorus 1.0.0 Device: iOS Universal Category: Music Price: $1.99, Version: 1.0.0 (iTunes) Description: Realistic Choir simulator ranging from simple Chorus emulation to full ensemble Choir with 128 members.### introductory offer 60% off ### | Read more »
Forest Spirit (Games)
Forest Spirit 1.0.5 Device: iOS Universal Category: Games Price: $2.99, Version: 1.0.5 (iTunes) Description: | Read more »
All contents are Copyright 1984-2010 by Xplain Corporation. All rights reserved. Theme designed by Icreon.