No. 1 Story

HP job cuts loom for Australian employees

A number of Australian employees of Hewlett-Packard are facing the loss of their jobs as the global computer giant looks to slash its worldwide workforce by up to 30,000.

read more

Related Articles

Dont, buy, that, used, memory, stick
A new survey has found 9% of computer users have purchased goods sold through...

Don't buy that used memory stick!

Business IT - Security

A recent 'purchasing raid' on Sydney's RailCorp lost property auction yielded 50 memory sticks, 66% of which contained malware.

Paul Ducklin, Sophos' Asia Pacific Head of Technology spoke today of a project whereby the company purchased a random set of 50 USB memory sticks from a recent RailCorp lost property auction.

Two immediate outcomes were clear.

Firstly, that two thirds of the sticks were afflicted with some kind of malware (the worst affected stick had six different infections).  This probably means that you would either be infected by simply inserting the stick in your computer (although less likely now that Microsoft has disabled AutoRun in a recent patch) or definitely infected by opening a malicious file.

You DO have up-to-date anti-virus running, don't you?

Of course the second outcome is that Sophos technicians gained access to an absolute plethora of information regarding a large number of 'innocent' people.

Ducklin reports that they discovered, "4443 directly accessible files on the 50 devices including 2882 images, 629 source code files, 197 web files, 145 documents, 128 programs and 23 videos."

In addition, the files included:

 

  • Lists of tax deductions.
  • Minutes of an activists' meeting.
  • School and University assignments.
  • AutoCAD drawings of work projects.
  • Photo albums of family and friends.
  • A CV and job application.
  • Software and web source code.


So, think about it - what if the person buying these memory sticks was not a security researcher, but an identity thief instead?