4 ms·

How do you disable your old phones especially those those that do not work (due to shattered screen mostly) before giving them up for recycling or buyback? I a

How do you disable your old phones especially those those that do not work (due to shattered screen mostly) before giving them up for recycling or buyback? I am always worried someone will fix and misuse my old phone.

throwaway81523 5y ago
I wonder if there is a way to connect to it through usb in order to wipe it.
- crtasm 5y ago
  There is, it's called adb https://developer.android.com/studio/command-line/adb https://developer.android.com/studio/command-line/adb My phone has a button combination to hold when powering on to get into a recovery mode, then you can wipe it with adb.
- dinkelberg 5y ago
  It might not be possible to wipe the data off the flash memory, due to how flash memory works. As you can only reset bits on the flash memory some amount of times, flash memory controllers try to avoid resetting bits and they try to distribute resets evenly on the memory (called wear leveling), so that it doesn't happen that parts of the memory are already worn out while other parts are healthy. So "deleting" and even "zeroing" flash memory might not do what you would expect. Instead of resetting the bits of the original content, it might put the zeros somewhere completely different. And wipe commands that one can send to flash memory chips are sometimes broken too (they might be implemented as no-ops). Edit: Also, even if you tell it to write zeros everywhere, it might not delete the content, because there is hidden extra memory on flash memory chips.
  - jeffbee 5y ago
    This is FUD. Flash is fundamentally easier to wipe than hard disk drives. You’re just using a defective mental model for the process. While magnetic recording needs to be overwritten, flash memory does not. Flash has a dedicated erase command. Flash can only be written if it was erased. You can erase an entire flash device in a split second.
    - dinkelberg 5y ago
      I guess it is true that you can erase an entire flash device in a split second. But that doesn't help you if the erase command was not implemented correctly. And I am sure that you cannot implement an erase command from within the operating system. It has to be implemented in the flash memory controller. So if your hardware manufacturer got it wrong, you can't fix it.
      - dinkelberg 5y ago
        "Our results lead to three conclusions: First, built-in commands are effective, but manufacturers sometimes implement them incorrectly. [...] We tested ATA commands for sanitizing an entire SSD, [...]. We find that while most implementations of the ATA commands are correct, others contain serious bugs that can, in some cases, result in all the data remaining intact on the drive." M. Wei, L.M. Grupp, F.E. Spada, S. Swanson: "Reliably Erasing Data From Flash-Based Solid State Drives." <https://www.usenix.org/legacy/events/fast11/tech/full_papers/Wei.pdf https://www.usenix.org/legacy/events/fast11/tech/full_papers...>
        jeffbee 5y ago
        Do you believe that mobile handsets are communicating with their embedded storage devices using ATA?
        dinkelberg 5y ago
        No, I don't know how they communicate exactly. However, I imagine between the processor and flash memory proper there sits a flash memory controller (provided by the flash memory manufacturer) that speaks some protocol akin to ATA. That way manufacturers would be able to replace flash memory A by flash memory B with relative ease, because the abstraction of the protocol allows them to ignore how that specific flash memory is implemented exactly. Is that wrong? Does the OS on smartphones generally have direct access to the flash memory proper? Edit: I remembered another protocol that I would guess is used in smartphones for communication with the flash memory, namely UFS (which is also utilized with SD cards). Edit 2: Note that it is irrelevant whether the protocol used is ATA, UFS, or something different.
  - mbreese 5y ago
    That may be true if you assume the threat is a state actor or TLA. That's not the case here. A USB based method for resetting a device would be perfectly acceptable to use before sending in a device for repair. If you're worried about a state removing the flash chips to recover data from dead/used cells, you don't send your phone in for repair. You secure the data with a drill before disposing of it. That clearly wasn't the owner's concern. They wanted a method for securing the device, but couldn't due to the screen. This is in no way the owner's fault. I can't say I blame them wanting to have a working phone and not a very expensive paper weight. A better method for securely erasing data from a phone before service is in everyone's best interests. The customer's data isn't at risk, the manufacturer has significantly reduced liability, and the vendor doing the work doesn't have to worry about employees doing something stupid like this and risking their contract with Google. You really just have to make the process of getting the data off the phone slightly more difficult to avoid casual theft (infringement? -- I don't know the right word here).
    - dinkelberg 5y ago
      > A USB based method for resetting a device would be perfectly acceptable to use before sending in a device for repair. I think that is true, but with one caveat, you should test if the resetting actually worked. I once had an Android phone with "full encryption" enabled that, after resetting, still had all the user data on it. It was obviously not only not reset, it wasn't even encrypted in the first place. I am sure a lot of mobile phones have problems like that, because I think that smartphone manufacturers don't care about quality too much, as long the issues are not immediately apparent to an average user. But if you can't recover the data afterwards yourself, I would agree that you can normally send it to recycling or repair. Thank you. My comments might sound very strict and total. But of course everyone has different threats that they care about, and repair shops are probably not too sophisticated.
- vorejdajo 5y ago
  There are different modes to boot up the device using power+volume up/down combinations. Once in fastboot mode, you can connect to pc or another android device to boot to recovery and factory reset/wipe data. It won't be any three letter agency safe, but most data should be lost for any common tech person.
MarkusWandel 5y ago
In 2 of 2 of cases where I've used krazy-glue to try to fix something in an electronic gadget, the stuff wicked into a connector and ruined the device. So I dare say, if the phone isn't the waterproof type, just dribble some of that stuff in there e.g. through the SIM drawer slot and bye bye. I usually terminate truly obsolete gadgets that could still contain recoverable login information etc. by physically destroying the motherboard, e.g. by drilling into it or prying off the flash chip. But for non-removable battery types that's iffy; what if you short out the battery and cause it to catch fire? I've just recently found a usable charge a 2012 vintage LiPo battery that came with a robot kit that hadn't been built in all those years.
adrianN 5y ago
Microwaves are very good at killing electronics.
- djbusby 5y ago
  Not too long tho, can also damage the microwave.
  - mnw21cam 5y ago
    If you put a cup of water in the microwave at the same time it will prevent damage.
    - jazzyjackson 5y ago
      the steam will improve the mouthfeel of the chips as well
otachack 5y ago
Here are a few options: - keep it but mind the battery as it can expand over time - fix it to the point where you can access then properly wipe the storage with given options on the OS - if you're ultra paranoid, find software that'll write over the storage, like Dban (i don't have any in mind right now) but if you're already here you might as well destroy the storage physically (see below) - look into tear down instructions and find where the storage is. Remove and destroy the storage.
Thaxll 5y ago
Factory reset Android will securly wipe the data.
- JohnFen 5y ago
  That doesn't help if the phone is broken. My personal policy is to just keep all of my old devices (and hard drives, for that matter) forever.
  - xboxnolifes 5y ago
    If you don't plan to repair them, wouldn't it make more sense to fully destroy them and dispose of them? I feel like you'd get quite a bit a junk hanging around after a while.
- minusf 5y ago
  a recent security research paper about android systems calling home stated that there are vendors whose factory reset in fact does not remove all user data from the phone.
gpm 5y ago
For the buyback program that you can use when you buy a pixel, Google requires that you factory reset the phone before sending it in, and threatens to not give you any money if you don't. Presumably to avoid exactly this (especially since it seems like it goes direct to a third party, that Google probably doesn't trust all that much).
matwood 5y ago
If I can't properly wipe the phone I just keep it until I can fully destroy it. Same with old hard drives.
izacus 5y ago
Keep PIN protection enabled - the storage on modern phones is encrypted by default and it's usually not possible to recover data without having the original PIN (unless you set it to something obvious like 0000). Both iPhones and Android will HEAVILY complain in your setup process if you refuse to secure them with a PIN or a password.
jfrunyon 5y ago
- Set a password on your phone. I dunno about iPhones but for recent Androids, that will encrypt all files on the phone. Voila. You're done. - Queue up a wipe remotely which will take place as soon as the phone is turned on.

throwaway81523 5y ago

I wonder if there is a way to connect to it through usb in order to wipe it.

crtasm 5y ago
There is, it's called adb https://developer.android.com/studio/command-line/adb https://developer.android.com/studio/command-line/adb My phone has a button combination to hold when powering on to get into a recovery mode, then you can wipe it with adb.
dinkelberg 5y ago
It might not be possible to wipe the data off the flash memory, due to how flash memory works. As you can only reset bits on the flash memory some amount of times, flash memory controllers try to avoid resetting bits and they try to distribute resets evenly on the memory (called wear leveling), so that it doesn't happen that parts of the memory are already worn out while other parts are healthy. So "deleting" and even "zeroing" flash memory might not do what you would expect. Instead of resetting the bits of the original content, it might put the zeros somewhere completely different. And wipe commands that one can send to flash memory chips are sometimes broken too (they might be implemented as no-ops). Edit: Also, even if you tell it to write zeros everywhere, it might not delete the content, because there is hidden extra memory on flash memory chips.
- jeffbee 5y ago
  This is FUD. Flash is fundamentally easier to wipe than hard disk drives. You’re just using a defective mental model for the process. While magnetic recording needs to be overwritten, flash memory does not. Flash has a dedicated erase command. Flash can only be written if it was erased. You can erase an entire flash device in a split second.
  - dinkelberg 5y ago
    I guess it is true that you can erase an entire flash device in a split second. But that doesn't help you if the erase command was not implemented correctly. And I am sure that you cannot implement an erase command from within the operating system. It has to be implemented in the flash memory controller. So if your hardware manufacturer got it wrong, you can't fix it.
    - dinkelberg 5y ago
      "Our results lead to three conclusions: First, built-in commands are effective, but manufacturers sometimes implement them incorrectly. [...] We tested ATA commands for sanitizing an entire SSD, [...]. We find that while most implementations of the ATA commands are correct, others contain serious bugs that can, in some cases, result in all the data remaining intact on the drive." M. Wei, L.M. Grupp, F.E. Spada, S. Swanson: "Reliably Erasing Data From Flash-Based Solid State Drives." <https://www.usenix.org/legacy/events/fast11/tech/full_papers/Wei.pdf https://www.usenix.org/legacy/events/fast11/tech/full_papers...>
      - jeffbee 5y ago
        Do you believe that mobile handsets are communicating with their embedded storage devices using ATA?
        dinkelberg 5y ago
        No, I don't know how they communicate exactly. However, I imagine between the processor and flash memory proper there sits a flash memory controller (provided by the flash memory manufacturer) that speaks some protocol akin to ATA. That way manufacturers would be able to replace flash memory A by flash memory B with relative ease, because the abstraction of the protocol allows them to ignore how that specific flash memory is implemented exactly. Is that wrong? Does the OS on smartphones generally have direct access to the flash memory proper? Edit: I remembered another protocol that I would guess is used in smartphones for communication with the flash memory, namely UFS (which is also utilized with SD cards). Edit 2: Note that it is irrelevant whether the protocol used is ATA, UFS, or something different.
- mbreese 5y ago
  That may be true if you assume the threat is a state actor or TLA. That's not the case here. A USB based method for resetting a device would be perfectly acceptable to use before sending in a device for repair. If you're worried about a state removing the flash chips to recover data from dead/used cells, you don't send your phone in for repair. You secure the data with a drill before disposing of it. That clearly wasn't the owner's concern. They wanted a method for securing the device, but couldn't due to the screen. This is in no way the owner's fault. I can't say I blame them wanting to have a working phone and not a very expensive paper weight. A better method for securely erasing data from a phone before service is in everyone's best interests. The customer's data isn't at risk, the manufacturer has significantly reduced liability, and the vendor doing the work doesn't have to worry about employees doing something stupid like this and risking their contract with Google. You really just have to make the process of getting the data off the phone slightly more difficult to avoid casual theft (infringement? -- I don't know the right word here).
  - dinkelberg 5y ago
    > A USB based method for resetting a device would be perfectly acceptable to use before sending in a device for repair. I think that is true, but with one caveat, you should test if the resetting actually worked. I once had an Android phone with "full encryption" enabled that, after resetting, still had all the user data on it. It was obviously not only not reset, it wasn't even encrypted in the first place. I am sure a lot of mobile phones have problems like that, because I think that smartphone manufacturers don't care about quality too much, as long the issues are not immediately apparent to an average user. But if you can't recover the data afterwards yourself, I would agree that you can normally send it to recycling or repair. Thank you. My comments might sound very strict and total. But of course everyone has different threats that they care about, and repair shops are probably not too sophisticated.
vorejdajo 5y ago
There are different modes to boot up the device using power+volume up/down combinations. Once in fastboot mode, you can connect to pc or another android device to boot to recovery and factory reset/wipe data. It won't be any three letter agency safe, but most data should be lost for any common tech person.

MarkusWandel 5y ago

In 2 of 2 of cases where I've used krazy-glue to try to fix something in an electronic gadget, the stuff wicked into a connector and ruined the device. So I dare say, if the phone isn't the waterproof type, just dribble some of that stuff in there e.g. through the SIM drawer slot and bye bye. I usually terminate truly obsolete gadgets that could still contain recoverable login information etc. by physically destroying the motherboard, e.g. by drilling into it or prying off the flash chip. But for non-removable battery types that's iffy; what if you short out the battery and cause it to catch fire? I've just recently found a usable charge a 2012 vintage LiPo battery that came with a robot kit that hadn't been built in all those years.

adrianN 5y ago

Microwaves are very good at killing electronics.

djbusby 5y ago
Not too long tho, can also damage the microwave.
- mnw21cam 5y ago
  If you put a cup of water in the microwave at the same time it will prevent damage.
  - jazzyjackson 5y ago
    the steam will improve the mouthfeel of the chips as well

otachack 5y ago

Here are a few options: - keep it but mind the battery as it can expand over time - fix it to the point where you can access then properly wipe the storage with given options on the OS - if you're ultra paranoid, find software that'll write over the storage, like Dban (i don't have any in mind right now) but if you're already here you might as well destroy the storage physically (see below) - look into tear down instructions and find where the storage is. Remove and destroy the storage.

Thaxll 5y ago

Factory reset Android will securly wipe the data.

JohnFen 5y ago
That doesn't help if the phone is broken. My personal policy is to just keep all of my old devices (and hard drives, for that matter) forever.
- xboxnolifes 5y ago
  If you don't plan to repair them, wouldn't it make more sense to fully destroy them and dispose of them? I feel like you'd get quite a bit a junk hanging around after a while.
minusf 5y ago
a recent security research paper about android systems calling home stated that there are vendors whose factory reset in fact does not remove all user data from the phone.

gpm 5y ago

For the buyback program that you can use when you buy a pixel, Google requires that you factory reset the phone before sending it in, and threatens to not give you any money if you don't. Presumably to avoid exactly this (especially since it seems like it goes direct to a third party, that Google probably doesn't trust all that much).

matwood 5y ago

If I can't properly wipe the phone I just keep it until I can fully destroy it. Same with old hard drives.

izacus 5y ago

Keep PIN protection enabled - the storage on modern phones is encrypted by default and it's usually not possible to recover data without having the original PIN (unless you set it to something obvious like 0000). Both iPhones and Android will HEAVILY complain in your setup process if you refuse to secure them with a PIN or a password.

jfrunyon 5y ago

- Set a password on your phone. I dunno about iPhones but for recent Androids, that will encrypt all files on the phone. Voila. You're done. - Queue up a wipe remotely which will take place as soon as the phone is turned on.