4 ms·
I just bought 2 computers from a local business that was having a rummage sale. I mounted the computers with a Linux live disk and it turns out that the comput
by sloshnmosh 6y ago
I just bought 2 computers from a local business that was having a rummage sale.
I mounted the computers with a Linux live disk and it turns out that the computers were used by a professional website development company that created websites for several prominent local businesses around the state.
There was no encryption used on the drives and I found the passwords and authentication tokens for their advertising accounts, LastPass password manager, passwords used by their FileZilla instance, the business American Express card and billing, Office 365, Email accounts etc.
A year ago I purchased a used 500Gb external drive from a local computer recycling center and when I ran an open-source recovery program on the drive I recovered several years of patient medical records.
The lack of security and privacy awareness of the people handling sensitive information is disturbing.
- fakedang 6y agoOn a similar note, I recently found the Instagram and FB tokens for a prominent media outlet right in their website source code, presumably for auto posting to those sites. Is that a security issue or normal? (Sorry in advance, I'm new to the whole security space)
- eli 6y agoDepends what kind of token. Could be a big deal, could be nothing.
- anitil 6y agoDo you feel safe using these pre-loved drives/computers? It seems like a handy way to pick up some kit but I'd wonder about issues with them.