Naked photos have been retrieved from a batch of second-hand phones whose owners thought had been completely erased.
Security firm Avast studied a batch of Android phones and found that using "standard forensic security tools" they could retrieve pictures, phone numbers and other sensitive information even after the phones had been given a "factory reset".
Researchers were able to recover more than 40,000 photos from the 20 handsets, including 750 pictures of women "in various stages of undress" and 250 revealing photos of men, The Guardian reports.
The Week
Escape your echo chamber. Get the facts behind the news, plus analysis from multiple perspectives.
Sign up for The Week's Free Newsletters
From our morning news briefing to a weekly Good News Newsletter, get the best of The Week delivered directly to your inbox.
From our morning news briefing to a weekly Good News Newsletter, get the best of The Week delivered directly to your inbox.
Researchers were also able to retrieve texts and e-mails. And four of the phones had stored details of the previous owners' identities.
A Google spokesperson told Ars Technica that the problem affected older phones only, and not handsets that run the company's more recent operating systems.
"This research looks to be based on older devices and versions and does not reflect the security protections in Android versions that are used by 85 per cent of users," Google said. "If you sell or dispose of your device, we recommend you enable encryption on your device and apply a factory reset beforehand; this has been available on Android for over three years."
Apple says that its iPhones and iPads encrypt data in such a way that when a user opts to "erase all content and settings" it cannot be decoded.
However, Alan Calder, founder of cyber-security and risk management firm IT Governance, told the BBC that it is possible to retrieve even encrypted data.
"Google's recommended routine for protecting the data only makes it harder for someone to recover the data," he said. "It does not make it impossible."
"If you don't want your data recovered, destroy the phone – and that has been standard security advice, in relation to telephones and computer drives, for a number of years. Any other 'solution' simply postpones the point at which someone is able to access your confidential data."
-
Is the UK government getting too close to Big Tech?Today’s Big Question US-UK tech pact, supported by Nvidia and OpenAI, is part of Silicon Valley drive to ‘lock in’ American AI with US allies
-
Google: A monopoly past its prime?Feature Google’s antitrust case ends with a slap on the wrist as courts struggle to keep up with the tech industry’s rapid changes
-
South Korea's divide over allowing Google MapsTalking Points The country is one of few modern democracies where the app doesn't work
-
Google avoids the worst in antitrust rulingSpeed Read A federal judge rejected the government's request to break up Google
-
Is AI killing the internet?Talking Point AI-powered browsers and search engines are threatening the death of the open web
-
Unreal: A quantum leap in AI videoFeature Google's new Veo 3 is making it harder to distinguish between real videos and AI-generated ones
-
Google's new AI Mode feature hints at the next era of searchIn the Spotlight The search giant is going all in on AI, much to the chagrin of the rest of the web
-
Is Apple breaking up with Google?Today's Big Question Google is the default search engine in the Safari browser. The emergence of artificial intelligence could change that.
