Slashdot Mirror
'Honey Stick' Project Tracks Fate of Lost Smartphones
wiredmikey writes with a quote from an article at Secury Week: "In order to get a look at what happens when a smartphone is lost, Symantec conducted an experiment, called the Honey Stick Project, where 50 fully-charged mobile devices were loaded with fake personal and corporate data and then dropped in publicly accessible spots in five different cities ...Tracking showed that 96-percent of the devices were accessed once found (PDF), and 70-percent of them were accessed for personal and business related applications and information. Less than half of the people who located the intentionally lost devices attempted to locate the owner. Interestingly enough, only two phones were left unaccounted for; the others were all found."
Best way to get a phone back. LOUD annoying ringtone.
Loose that sucker. Call it and call it and call it...
Eventually "come get your freeking phone it is ringing off the hook with this stupid song"...
Has worked 3 times so far :)
I won't care about the contents, would wipe the phone clean, and change the IMEI, then it's a brand new phone for me. (most likely what happened to the 2 unaccounted for)
Just out of curiousity, how many of these phones were able to actually send/receive calls, and (most importantly) -- did they have a phone book entry titled "Mom". Because whenever I find a lost phone, that's the number I call. People are generally honest -- contrary to what this study suggests. If the number is that low, it's probably something wrong with the methodology; ie, a cell phone left at a restaurant has a lot higher chance of making it back to its owner than being left sitting at a bus station. A test like this should try to accurately reproduce where someone would leave their phone, otherwise the stats gathered aren't very interesting.
#fuckbeta #iamslashdot #dicemustdie
A group of us were out on Saturday night, and while walking along the seaside (at Redcliffe, QLD, Australia) found a Blackberry on a park bench.
There was no password, no contacts labelled in anything that looked like a home number, and all names had expletives in them.
Rather than try to find who the owner was (battery nearly dead) we dropped it off at the nearest Police station.
Isn't this just a big ploy by Symantec to now sell you some "phone security" program that will A) not work and B) make your phone really slow?
A couple of months ago whilst visiting Calgary I found a new looking pink Blackberry bold on the street. The phone was fully charged and locked. With a lock it was impossible to contact the owner as I couldn't access the phone to try calling a contact. I just waited and the next day the phone rang. I explained I had found the phone etc and the owner's company sent a courier to pick it up. I was a little disappointed that at no point did anyone thank me for picking up the phone and waiting in for the courier but ah well the phone got back home. The thing is though it made me realise that the only thing the lock on the phone did was prevent me from calling a contact on the phone. If I had wanted to keep it I would have done as a poster above commented and wipe the phone clean. I suppose some phones have sensitive information on them but for the rest of us do we need to lock them if all it does is stop honest people from trying to return them to the rightful owner?
About 10 years ago I was driving along a gravel road in rural Minnesota and spotted a phone in the road.
During the first few hours I made a point of answering this phone so that I could get the word out that
the owner's phone had been lost. Almost without exception the people who called refused to believe that
I wasn't the owner of the phone playing some trick on them. Then I was accused of stealing the phone
and later of wanting money for its return. Seriously, I was verbally attacked by these morons for simply
trying to arrange a place for its return. Eventually I told one of these people which gas station I was leaving
it at, and simply left it there with a confused cashier. The whole experience was surreal; I felt like I had been
sucked into this person's life. It would make a good movie plot I think. Needless to say when I see an apparently
lost phone now, I just ignore it and walk away.
As far as returning the phone, there has to be someway to get data to return the phone.This involves one of two things. First is waiting for the person to call the phone and hope the person who answers is intent on returning it,or going through the address book and calling people so the phone can be returned. The later was how I got my Razr back when I lost it on the Texas A&M campus. So rummaging though the phone, as some people did, can either be considered snooping or data gathering to try to return the phone. Accessing email may be to send an email say the phone was found, or trying to steal email. The motive is ambiguous, though the scare mongering obvious. If I found a lost phone, I would expect a call on it pretty promptly asking for it back. The lack of such a call would mean that something else was going on.
In fact the only thing that is clear is that if you lose a phone, there is at least 50% chance that no effort will be made to return it. From the data It seems about half the finders did what any competent thief would do. Remove the sim card, go to the nearest public computer and wipe the phone. The real race when losing a phone is getting a lock before this happens.
"She's a scientist and a lesbian. She's not going to let it slide." Orphan Black
Character is what you do when no one will see.
One time, I found a cell phone in a dorm lounge. I was there watching my show and was planning to leave the phone in place in case the owner came looking for it. The phone began to ring incessantly, and eventually I answered in case the owner was calling to search for the phone.
Before I could say more than, "Hello", the owner started chewing me out as a despicable cell phone thief.
I didn't appreciate this sort of mistreatment. What to do? Well, I am not a thief, so naturally I decided to do the right thing.
I took the phone and dropped it down the nearby elevator shaft, then resumed watching my show. This was in 2003, so perhaps the phone has been returned to its irate owner by now. Or perhaps it shattered when it hit the base of the shaft three stories down. Either way, I feel happy I chose the righteous path and ignored any temptation to follow baser instincts.
think of the children('s phones)?
I was in a cab with a bunch of drunk people about six years ago, when a phone came up out of the seat we were all asked, "Is this your phone?" Turned out that it didn't belong to any of us. I had never found a lost phone before, but I was sober, and I was also pretty sure I could locate its owner, and as I lived in the area code corresponding to the device's number, would have the easiest time returning it. I took the phone home with me.
I called a few entries in the contact list, most notably, "Mom." Got voicemail, left a message explaining what had happened. "Mom" never called back. I ended up chatting with two different women though by going through the recent calls list and calling some numbers. I came out of that ordeal with two different stories---apparently the guy who used the phone was either a player or a womanizer, I'm not really sure which. The problem I had was that I wasn't sure who the right party to return this phone to was, exactly. So I had an idea...
The phone was tattooed with Verizon logos (I sure as hell don't miss those days... that LG UI that got ported to EVERY PHONE THEY SOLD was so fucking awful), so I called 611 with the phone itself. After explaining the situation to a customer service rep, she very regrettably informed me that even though she had the information right in front of her on her screen, she would not tell me the name of the account holder. Go figure. So I wrack my brain trying to think of ideas when I got a pretty good one.
I asked her, "Can you make three way calls?"
"No, but I can put you on hold and make another call," she replied.
"Okay, take down this phone number," and I give her the number of the woman I most suspect that I should return the phone to. "Now put me on hold and call her, and then can you tell me whether or not that person is the owner of this phone?"
"Oh yes!" she says. "Just wait on hold."
Ten minutes later...
"That person IS the owner of this phone. You can return the phone to her and you'll be all set!"
So I call her one more time and gave her my address, and a car pulled up an hour or two later. The funny thing was that the person who came to the door to pick up the phone wasn't actually the woman I spoke with though... it was her boyfriend, the guy who actually used the phone, and also bore a striking resemblance to the fellow that took all those self-shot photos in the camera roll, modestly covering his junk while staring at a mirror.
A more positive ID might have been possible, but camera phones had such atrocious low-light performance back then....
Boot Windows, Linux, and ESX over the network for free.
Easy peasy. I didn't even bother to look at anything on the phone besides the provider info. Took it to the store, explained that I found it, and handed it over. They would have the 'best' way to get it back to the owner. Keeping it was never an option.
Since it could be identified I treated it like a wallet. It's not finders keepers.
He is likely a Sociopath, incapable of empathizing with others, caring only about his own feelings. While we associate that with serial killers, and indeed all serial killers are, a surprising amount of the population is like that, about 10%. They cannot feel empathy as we do, they can't put themselves in the shoes of another person. All that matters to them is their happiness. So they are the kind of people who will do something to someone and not think twice, but if the same thing is done to them they will get extremely angry. They cannot see that it is the same, to them it is completely different because only their feelings matter.
Getting the phones back was just part of the experiment.
What people would do with the phone is way more interesting:
Eight out of 10 finders tried to access corporate information, including files clearly marked as "HR Salaries," "HR Cases", and other types of corporate information.
Well, dah. Of course people are curious. I'm not surpised around 80% of finders that look at these files. It would be near 100% if there was a folder called "pr0n".
Best anti theft device for a car,
Paint it pink.
Probably also works for phones
A few weeks ago I was passing through the Seattle airport with my family. I found an iPad 2 on the shuttle train between terminals - basically brand new with only the very barest of info on it. We were running behind, so I stuck it in my pack and boarded the plane. Once appropriately airborne, I pulled it out and tracked down the email address of the owner (good thing they use Facebook - I don't). My 4.5 year old son asked me what I was doing and I replied; "We're going to give this back to the people who lost it." Which we did as soon as we got home.
We don't own an iPad and my kids, I'm sure, would love to have one. But teaching my kids to do the right thing - because it's the right thing to do - is far, far more important than a piece of electronica. And if it was my phone, or his Star Wars lunch box - we'd want it back.
Recently I had an extra laptop. I had the idea (but didn't execute on it) to go to coffee shops with it, with tracking software installed in the background. I would then leave the laptop frequently while "going to the bathroom". Eventually in theory the laptop would be stolen, I would be able to trace it, track the person down, call the authorities and get it back. One less laptop thief running around (or at least unknown to police) and a fun time. Unfortunately, I didn't follow through on it.
Tibbon
tibbon.com
I lost my phone a week and a bit ago, didnt have any software to remote wipe it. used to, but i am a rom junky and didnt reinstall it kind of recently. this is annoying information to me. :( replacement phone gets here, will build a custom rom with mobile defense in the system partition, so it'd take a full flashing to remove it, or someone who knows android pretty well. remove root (boo), and encrypt the whole thing, including sdcard. should have been more careful. i dont mind the phone being lost, but the data which might be on it, might be important or sensitive (wang pics :P)
The nature of the fake user data may have influenced the results. If I thought I had the phone of some some MBA tool I would hand it to a bum. If it looked like someone nice I would go out of my way to help it on its way home.
Also if some guy found the phone of what seemed to be a hot chick he might tend to be more chivalrous.
For real phones the worst case scenario for the phone would be if it were a politician's. That phone's data would be on the net in two seconds.
Considering that the iPud had to go through security, i don't see the danger to the plane. And if someone did have a means of planting it there without taking it through security, why choose the Rube Goldberg way to take down a flight? There would be more direct means. Yeah, airport security is bullshit, but that's mostly because it's based on crazy paranoia.
I give you that the iPud could have been loaded with malware.
Since it did happen, it appears he lives in the real world. The real question though, is what world is it that you live in?
Perhaps GP lives in a more civilized/honest part of the world than GGP. Thus his experience suggests and his expectation is that the vast majority of people are honest.
I dropped my passport once in Tampere (EU passport, possibly worth a bit to a sleazeball), and got it back by asking at some shops I had been in earlier. It had apparently been found on the ground outside and been handed in to the shopkeeper. Where I work (Kuopio, about 400 people in the office, and lots of visitors), it is unheard-of for things to be taken without permission, and people leave stuff lying around quite often. If a wallet is left on a desk in an open-plan area, it will still be there the next day. A high-end laptop can be left anywhere at a customer's factory in the Nordic countries, and it will still be there when you return. On the other hand, if we visit the U.K. or the U.S., we're supposed to secure any laptop with a locking cable if we leave it for even a few minutes; and that's company policy.
Those who can make you believe absurdities can make you commit atrocities. - Voltaire
I found an iPhone 4S on a restroom sink in a restroom a few weeks ago. The only thing I accessed on it was the ownership information, and the phone book to look for a second number for the owner. He had a second cell (maybe business phone?) that he promptly called it on. I met him at my office and handed it back to him.
I did NOT leave it with the attendant at the gas station; after seeing these statistics, I'm glad I didn't as he may not have seen it again. He was somewhat amazed that I would return it; I was somewhat amazed that he would think someone wouldn't. Makes me sad to see his expectations were more realistic than my own.
In a "it's a small world" realization later, it turned out that the gentleman who lost the phone was a friend of mine's father. Had no idea at the time though.
Just another ignorant American.
I seen this report on the Tee Vee a couple days back. It scaret the begubus out of me and my kin, so we gots wallet chains attached to our phones now.
Yea buddy.
I have it in case someone finds my phone.
I have one labeled "Work".
I have another labeled "Home"
I think for a while I also had one labeled "Wife"
This is actually a problem with my current phone. Contacts are naturally just names because it picks them up from my e-mail. This is as opposed to them being nicknames that would be recognizable to a stranger.
Most likely the easiest way to contact me on my current phone would be through my e-mail. Just look there and get my e-mail address, then e-mail me.
... than to expect accuracy in the summary, but it wasn't less than half that tried to contact the owners, it was exactly half. From the executive summary of the linked PDF: "50 percent of smartphone finders contacted the owner and provided contact information"
There are apps that allow you to locate your phone by logging in from any computer. I tried the free app LookOut and was amazed it could pinpoint my phone's location to a single unit of an apartment building (not accounting for floors). You can also remotely set off a very loud 'siren' on the phone. Paying customers can remotely wipe their smartphone clean.
I examined the passenger seat closer and there were now TWO Blackberry phones on my seat! The nerve!
I always look for a contact named ME, HOME, MOM, WIFE, ICE, etc. so that I can find out who the phone belongs to and get it properly returned. I also look through the photo thumbnails or check a logged in Facebook or Twitter profile to see if I can locate a selfpic for current or future identification of the owner when I return the device. I have returned no less than 10 phones this way. Some might call this a little invasive, but I do make an honest effort to refrain from prying TOO much outside of attempts to attain reasonable owner contact information. I have also returned a locked phone by contacting the carrier and reporting the IMEI number and allowing the carrier to contact the owner and arrange a return.
My phone has basic owner info on the lockscreen and a warning that 10 lockfails = wipe. I have had my phone returned to me once this way. There was no failed attempt to bypass my lock.
Sometimes there are good people in the world. I try to be among them.
You're not paranoid if they really ARE out to get you...
Claiming discarded items is not "stealing."
Yeah, I totally "discard" my brand new phones by leaving them laying on a park bench. Not that I should be rewarded for being stupid, but please dude, come on.
In one case, the person who reclaimed a wallet which had no identifying material (no credit cards, driving license, etc.) gave a couple of pounds to me as a reward, which was delivered anonymously via the police.
I re-read this a couple times, eyes wide, thinking "WOW...WHERE does this guy live?!" .... before understanding this is the UK and you were referring to money. ... (Right?)
Thankfully the majority of this society (slashdot) does not, therefore rendering your comment (and point) moot
10% of the entire population does not have a fucking mental disorder, dude......unless you consider having an over-simplified, inaccurate worldview to be one.
And yet people violate copyright (money involved or not) with impunity.
When people lose phones, they typically report them stolen so the carrier can de-activate them. If you pick up a phone that is reported stolen, then you are guilty of possessing stolen property and can go to jail.
So, I never ever pick up anything that isn't mine.