Security and Privacy with Second-Hand Storage Devices: A User-Centric Perspective from Switzerland - Archive ouverte HAL Accéder directement au contenu
Article Dans Une Revue Proceedings on Privacy Enhancing Technologies (PoPETs) Année : 2024

Security and Privacy with Second-Hand Storage Devices: A User-Centric Perspective from Switzerland

Résumé

Second-hand electronic devices are increasingly being sold online. Although more affordable and more environment-friendly than new products, second-hand devices, in particular those with storage capabilities, create security and privacy threats (e.g., malware or confidential data still stored on the device, aka remnant data). Previous work studied this issue from a technical point of view or only from the perspective of the sellers of the devices, but the perspective of the buyers has been largely overlooked. In this paper, we fill this gap and take a multi-disciplinary approach, focusing on the case of Switzerland. First, we conduct a brief legal analysis of the rights and obligations related to second-hand storage devices. Second, in order to understand the buyers’ practices related to these devices and their beliefs about their legal rights and obligations, we deploy a survey in collaboration with a major online platform for transactions of second-hand goods. We demonstrate that the risks highlighted in prior research might not materialize, as many buyers do not inspect the content of the bought devices (e.g., they format it directly). We also found that none of the buyers uses forensic techniques. We identified that the buyers’ decisions about remnant data depend on the type of data. For instance, for data with illegal content, they would keep the data to report it to the authorities, whereas for sensitive personal data they would either delete the data or contact the sellers. We identified several discrepancies between the actual legal rights/obligations and users’ beliefs
Fichier principal
Vignette du fichier
SalehzadehNiksirat2024PoPETS.pdf (1.14 Mo) Télécharger le fichier
Origine : Fichiers éditeurs autorisés sur une archive ouverte
Licence : CC BY - Paternité

Dates et versions

hal-04523423 , version 1 (07-04-2024)

Licence

Paternité

Identifiants

Citer

Kavous Salehzadeh Niksirat, Diana Korka, Quentin Jacquemin, Céline Vanini, Mathias Humbert, et al.. Security and Privacy with Second-Hand Storage Devices: A User-Centric Perspective from Switzerland. Proceedings on Privacy Enhancing Technologies (PoPETs), 2024, 2024 (2), pp.412-433. ⟨10.56553/popets-2024-0057⟩. ⟨hal-04523423⟩
3 Consultations
0 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More