Never trust a copy machine


Recommended Posts

videos like this are just journalists trying to scare people. The copy machines we have at work all have Hard drives in them and the HDD is in the copy machine to facilitate locked printing, large document sizes and being able to scan as a pdf and send either via email or through SMB directly to a computer. The data is deleted seconds after it is used and while it is possible to harvest the files off of it if you really had to it is not worth the time. Its not like we have to swap the hard drive out every so often because it is full and we are keeping everything people copy or send.

You know that even the images got deleted from the hard drive, they can actually be recovered right. The hard drive must be low-level format when they sell the old printers.

videos like this are just journalists trying to scare people. The copy machines we have at work all have Hard drives in them and the HDD is in the copy machine to facilitate locked printing, large document sizes and being able to scan as a pdf and send either via email or through SMB directly to a computer. The data is deleted seconds after it is used and while it is possible to harvest the files off of it if you really had to it is not worth the time. Its not like we have to swap the hard drive out every so often because it is full and we are keeping everything people copy or send.

You know that even the images got deleted from the hard drive, they can actually be recovered right. The hard drive must be low-level format when they sell the old printers.

I stated in my post that you can easily get them off its just not worth the time.

I stated in my post that you can easily get them off its just not worth the time.

who's time wouldn't it be worth now? if you're in the line of identity theft something like that would be like winning the lottery

videos like this are just journalists trying to scare people. The copy machines we have at work all have Hard drives in them and the HDD is in the copy machine to facilitate locked printing, large document sizes and being able to scan as a pdf and send either via email or through SMB directly to a computer. The data is deleted seconds after it is used and while it is possible to harvest the files off of it if you really had to it is not worth the time. Its not like we have to swap the hard drive out every so often because it is full and we are keeping everything people copy or send.

While your company may have the policy in place for no data retention on the copier, a lot of places won't simply because they never chose to do anything about it, or didn't realize the data is stored on the hard drive itself.

I was aware of the data retention on machines from hearing about it several years ago, and have only had to wipe a HDD once on a copier, and that was when a health facility changed hands via funding and ownership. The policy of my employer was to strip out all data even if it would have been useful for the new owner's. Because of various laws in place, we had to wipe the drive basically before we turned it over to the new owners.

A little off topic, but I remember one time at a call center I worked at for a major mail order catalog as a call center drone (operator). During the slow times, I would poke around in the hard drive's root directory and see what all was there. One time I ran across a file of customer data, names, addresses, and full credit card numbers generated by their Point of Sale system from their physical store. The guys in the IT department there just recycled the computer and gave it to us w/o wiping the system. So, even computers can have this info if traded across the community after being e-cylced. Just proves that you have to beware of what is out there.

While most people would think it is not worth the time to get data from deleted drives, for the right person (data theif, someone wanting to screw over the company etc), it would be very worth their time. Just like in the video, medical records were found - serious violation of privacy and the HIPPA laws (Health Information Portability Protection Act), If someone had found info on say a famous person or gov't offical that visited the health center, then that could be used. Or checks which were found copied. On the bottom of the check is the routing and account number. A simple trip to the office store will let you buy blank check stock that looks like what they are using and print the info (account number and routing number) on the bottom of the check, and forge everything. Giving access to money by the theif.

This topic is now closed to further replies.
  • Posts

    • The memory and nvme can be swapped and upgraded with standard parts. But the GPU cannot, which is the weakest part of the box. It's a dead product at these prices.
    • Sounds like the debloated build you are running is missing some components that the Photos app and Snipping Tool rely on.
    • Apparently, Microsoft doesn't use water in their taps, washrooms or clean their facility. /sarc
    • Wow, throwback.  VERY VERY briefly - but realised that it wasn't the language I needed for the tasks I was taking on.
    • Apple and Tesla trade secrets reportedly exposed following a Tata Electronics cyberattack by Hamid Ganji Image via Depositphotos.com Tata Electronics has confirmed that it detected a cybersecurity incident in some of its systems. The Indian company is a manufacturing partner of both Apple and Tesla, and the incident may have exposed some trade secrets belonging to the two American companies. The World Leaks ransomware group is said to be behind the attack, and it has reportedly posted up to 200,000 files on the dark web, including component designs and specification documents related to Apple and Tesla products. Tata Electronics told Reuters that its response protocols were deployed immediately and that the “incident has had no impact on our operations across businesses, which remain unaffected.” The ransomware group reportedly sent a ransom demand to Tata Electronics, while Apple has launched an investigation into the incident. World Leaks claims it stole more than 200,000 files totaling over 630GB from Tata Electronics. Some database files on the ransomware group’s website are titled "com.apple.factorydata," which could refer to Apple’s iPhone production operations in India. Moreover, some documents reportedly contain material specifications and quality inspection standards for iPhone circuit board components. However, Apple is not the only affected company. A folder found in the World Leaks database is titled "NV36 Chargeport Controller - North America," which may refer to Tesla Model Y components. Additionally, other files in the database reportedly contain drawings related to Tesla’s Project Highland, the internal codename for the EV maker’s updated Model 3 sedan. To support the authenticity of the stolen files, World Leaks has published documents containing footers that read: "This document contains proprietary and confidential information of Apple Inc." and "information contained herein is deemed confidential, proprietary, and a trade secret of Tesla Inc." Cybersecurity researcher Rajshekhar Rajaharia told Reuters that the database also contains emails, event logs spanning several years, and passport copies of employees, including foreign nationals. Both Tesla and Apple have declined to comment on the scale of the incident.
  • Recent Achievements

    • One Month Later
      nates earned a badge
      One Month Later
    • Week One Done
      Almohandis earned a badge
      Week One Done
    • Rookie
      dorf went up a rank
      Rookie
    • First Post
      mike_rumble earned a badge
      First Post
    • Dedicated
      tuben earned a badge
      Dedicated
  • Popular Contributors

    1. 1
      +primortal
      487
    2. 2
      +Edouard
      201
    3. 3
      PsYcHoKiLLa
      96
    4. 4
      Michael Scrip
      91
    5. 5
      neufuse
      71
  • Tell a friend

    Love Neowin? Tell a friend!