Sharon D. Nelson 2012-12-25 05:40:08
Securely Deleting Data from Mobile Devices Why do we care about deleting data from mobile devices? Usually, we are trying to get back data that we inadvertently deleted. It could be that we “fat fingered” an email or text message or blew away a photo that we really wanted to use as a background image. But what about when we upgrade our smartphones, iPads, and other mobile devices? Do we really know what confidential or personal information resides within the memory of our prized possessions? As lawyers, we have an ethical obligation to protect the information of our clients. This means that we better be darn sure the data doesn’t stay on our smartphone when we sell it, give it to our kids, or donate it to a worthy cause. Many lawyers do not believe there is any confidential information on their mobile devices, especially if they never specifically took steps to save any data. The unfortunate truth is that smartphones and tablets automatically save data even if you do not want them to. As an example, every time you hit the “home” key on an iPhone, a screenshot is saved to the phone. What if you had an attachment open? A picture of that attachment now resides on the phone even though you didn’t explicitly save the attachment. Data is automatically saved on other platforms too, so it is best to assume that your mobile device does contain confidential information that must be removed. The ability to securely delete data varies by operating system and platforms. Some are built-in and some require third-party products. Let us start with one of the easier platforms to deal with: BlackBerry. BlackBerry devices have a built-in feature to securely delete data. Navigate to “Options,” select “Security Options,” and then “Security Wipe.” You will need to confirm your wipe selections and intent by typing “blackberry” at the bottom of the screen. Once confirmed, the device will clear the selected data. The procedure is slightly different for older versions of the OS. The process for wiping the PlayBook is similar and is accessed through the “Settings” icon. As an alternative, you can remotely wipe the BlackBerry if you are connected to a BlackBerry Enterprise Server. The administrator issues a remote wipe command from the BES console and no user action is required. There are a couple of different ways to clear the data from an iPhone, iPod Touch, or iPad. The more difficult method is to use iTunes to restore the device back to factory defaults. First, launch iTunes and connect the device. Select the device and click “Restore.” You will be prompted to back up the device. It is up to you whether to back up or not. Following your selection, there will be a prompt to restore the device to factory defaults. Click the “Restore” button and the process will begin. You will receive a confirmation message once the device is restored to the original factory settings. Like the BlackBerry, remotely wiping is an option. Apple has changed the method for remote wiping from that used by the original Find My iPhone application. You are now required to sign up and configure iCloud in order to use the Find My iPhone service. Make sure you read the terms and conditions when agreeing to use iCloud so you understand what Apple can do with your data. Once you have set up and enabled iCloud, you need to configure the Find My iPhone app on the device. Essentially, you need to turn it on, but you’re not done yet. Download and install the free Find My iPhone app. The app allows you to locate the device if it is lost and remotely wipe the data. You won’t be able to remotely wipe the data if you haven’t configured and installed the appropriate software before initiating the wipe request. Understand that once you initiate a remote wipe, the device will be reset to factory defaults. This means you will be unable to find out where the device is located. You may elect to do a remote wipe instead of using iTunes, especially if you are in possession of the device. Android devices are trickier to deal with, primarily because there are so many variants of operating systems and manufacturer capabilities. We do not have the time or column inches available to run through all the variations. The simplest way to clear the data from an Android device is to reset it to factory defaults. This is done by going to “Menu,” “Settings,” “Privacy,” “Factory Data Reset.” If you care about the information on the phone, make sure you back it up before resetting the phone. Is the data really gone when you factory reset? It is hard to tell without testing each and every phone and operating system combination. The short answer is probably not, but it is good enough. Forensic software and techniques may be able to recover data after a factory reset, but “Joe Six Pack” will not be able to retrieve it. While we are on the subject of factory resets, almost all other mobile devices are cleared in this way. Here is where Google is your friend. Do a search for how to factory reset your particular mobile device and you will find the procedure. We had an attorney contact us who wanted to know how to get rid of a nasty program that had infected his feature (non-smartphone) phone. His phone was acting strangely after clicking on a link in a text message that appeared to come from his son. We told him to Google the manufacturer, model, and term “factory reset” to get the instructions. He was very grateful to have his phone back to normal operation. [Note to self: Don’t click on things you shouldn’t!] Finally, do not forget to wipe the data from any memory expansion cards that may be in the phone. iPhone users do not have to worry about this since you cannot expand the memory, but all others may have a 2GB, 4GB, or larger SD or micro SD card for memory expansion. The card may contain attachments, pictures, and other files that should be wiped before disposal. There are several alternatives for dealing with these memory cards. The easiest is to remove them and do not give the cards away. More often you will want to give the cards away and need to wipe the data. You can remove the cards from the phone and put them in a computer that can read the contents. Sometimes you can just connect the phone (with the card installed) to a computer and see the memory card contents. Once you can access the card, use software to wipe the data. A product like BCWipe will do the trick, but there are many others available. Please note that the advice given here is current as we write, but as we know too well, things change in one heck of a hurry in the legal tech world. Sharon D. Nelson, Esq., and John W. Simek are president and vice president of Sensei Enterprises, Inc., a legal technology, information security and digital forensics firm in Fairfax, Va. Contact them at (703) 359- 0700 or visit senseient.com. TECHGEAR Acer’s bargain-priced C7 Chromebook ($199) runs the Chrome OS, which allows WIFI access to Google cloud services such as Gmail, Search, Docs, and YouTube. The device is one-inch thick, weighs three pounds, and includes 100GB of Google Drive storage for two years. WEBLINKS KEITH JAASMA is of counsel at the Houston office of Patterson & Sheridan, L.L.P., where he handles intellectual property and commercial disputes, trademark and copyright prosecution, and intellectual property transactions. He is a graduate of Rice University and the University of California, Los Angeles School of Law, and a former law clerk for the Hon. Charles E. Wiggins for the U.S. Court of Appeals, 9th Circuit. Twitter.com Twitter is what you want it to be. As a news feed focused on legal issues, or for the occasional comic relief if you follow comedians or lawyers who think they are, Twitter is useful and informative (just don’t follow any Karsdashians). It is also the perfect forum for haiku. SCOTUSBlog.com This blog is indispensable not only for commentary on U.S. Supreme Court opinions, but also for previewing cases pending certiorari or coming up for argument. Cornell Legal Information Institute law.cornell.edu This site provides free Supreme Court cases and other caselaw, U.S. statutes, and other useful information. TheOnion.com This site publishes parody news stories related to current events and the mundane events of everyday life. Solid material for more than a decade. LiterallyUnbelievable.org This is a collection of comments from Facebook by people who think that stories from TheOnion.com are real. These are usually very angry people.
Published by State Bar of Texas. View All Articles.
This page can be found at http://mydigimag.rrd.com/article/Technology/1271533/140244/article.html.