News for hackers. Stuff that matters.
Re:Retina Macbook 2015 Teardown by Silhouette on Friday April 17, 2015 @11:36AM (#9394962)
It also makes removing the data storage for secure destruction much more difficult. I'm very happy to recycle old devices rather than contributing to landfill or otherwise being wasteful, but if my HDD/SSD can't go for complete destruction separately then the entire unit is going for complete destruction instead. In this day and age, this is a practical minimum for safely retiring old gear as far as I'm concerned. For my businesses, it is also effectively a legal and/or regulatory requirement in many cases.
Re:Retina Macbook 2015 Teardown by Silhouette on Saturday April 18, 2015 @06:18AM (#9398898)
To the person who downvoted the parent post: Maybe it's different where you are, but here in the UK the recycling centres typically get rights to do just about anything they want with gear you leave there. For things like laptops that are still in working order, they may literally just wipe the disk and sell it on in another part of the world where it would seem like much more advanced technology. Unfortunately there have been numerous reports of that wiping not being done properly, and things like spreadsheets full of bank details and confidential employment records have turned up on computers in Africa. This happens often enough that I've even seen TV documentaries made about it.

Data leakage via computer disks is a real and potentially very serious problem. It can happen if you send a failed drive back for replacement. It can happen if you take a computer into a PC store for repair and the guy on the help desk starts browsing through your files. It can happen if you take a retired PC for recycling without proper precautions, which you can't always take if you retired it because something failed. This is not a hypothetical risk: all of these things have happened and been publicly reported plenty of times.

If you give someone else your drive after you've stored anything sensitive on it, you're asking for trouble. If you do it as a business that works with sensitive information such as financial or health data, you are almost certainly breaching regulations in a lot of jurisdictions.