Slashdot Mirror


'Honey Stick' Project Tracks Fate of Lost Smartphones

wiredmikey writes with a quote from an article at Secury Week: "In order to get a look at what happens when a smartphone is lost, Symantec conducted an experiment, called the Honey Stick Project, where 50 fully-charged mobile devices were loaded with fake personal and corporate data and then dropped in publicly accessible spots in five different cities ...Tracking showed that 96-percent of the devices were accessed once found (PDF), and 70-percent of them were accessed for personal and business related applications and information. Less than half of the people who located the intentionally lost devices attempted to locate the owner. Interestingly enough, only two phones were left unaccounted for; the others were all found."

44 of 222 comments (clear)

  1. hehe by Anonymous Coward · · Score: 5, Informative

    Best way to get a phone back. LOUD annoying ringtone.

    Loose that sucker. Call it and call it and call it...

    Eventually "come get your freeking phone it is ringing off the hook with this stupid song"...

    Has worked 3 times so far :)

  2. If I were to find one... by Anonymous Coward · · Score: 3, Interesting

    I won't care about the contents, would wipe the phone clean, and change the IMEI, then it's a brand new phone for me. (most likely what happened to the 2 unaccounted for)

    1. Re:If I were to find one... by Anonymous Coward · · Score: 5, Insightful

      Stealing is stealing. Finders keepers is a poor excuse for a total lack of character.

    2. Re:If I were to find one... by houstonbofh · · Score: 4, Insightful

      Stealing is stealing. Finders keepers is a poor excuse for a total lack of character.

      The term "stealing" sure has changed a lot lately. I thought is was actively depriving someone of wanted property. So "copying" is not "stealing." Claiming discarded items is not "stealing." Hitting you over the head and taking it out of your pocket is "stealing." That said, I would try and find the owner to give back the phone. And not doing so is kinda shitty, but it ain't "stealing."

    3. Re:If I were to find one... by houstonbofh · · Score: 5, Insightful

      Should you ever lose your phone, expect the same thing to happen to you.

      He does. He thinks that is normal. He thinks most people are like that. Can you imaging how much it sucks to live in his world?

    4. Re:If I were to find one... by Anonymous Coward · · Score: 5, Insightful

      And your reply is testimony to the "kinda shitty" attitudes with our modern society. Character is what you do when no one will ever know what you did. You and he have none. I would love to reply under my login, but evidently replies like this keep my karma level in the basement.

    5. Re:If I were to find one... by Jhon · · Score: 5, Insightful

      Claiming a lost item is "discarded" is some pretty funny "thinkspeak", don't you think?

      I'd suggest you look up what can be considered theft and then re-evaluate your statement.

      I cannot speak of the 49 other states in the US, but I'm familiar with the statutes of CA -- and I can tell you that it *IS* stealing. Shall I waste my time looking up the exact statutes or will you just accept you are wrong?

    6. Re:If I were to find one... by sjames · · Score: 5, Insightful

      Is it hard to accept that we do NOT have a moral right to act like a dick?

    7. Re:If I were to find one... by Ethanol-fueled · · Score: 5, Informative

      Well, technically, it would be larceny here in the states. In other words, "borrowing" without intent to give back to the owner.

    8. Re:If I were to find one... by realityimpaired · · Score: 5, Informative

      Hypothetically speaking, because I would try to contact the owner and return it, in a real situation, but...

      If I were going to steal a cell phone, the first thing I would do is pull the battery. The second thing I would do is factory reset it, either by reflashing it from a computer, or from within the phone if it's not locked. The third thing I would do is change the IMEI.

      All of the above are ridiculously easy (well, pulling the battery from an iPhone isn't), and would leave me with a phone that can't be located by you, and which can't be burned by the carrier because it has a different IMEI. Sell it as "off the back of a truck" for a few hundred, and you're done. Rinse. Repeat.

      And if it's a GSM phone, there's no "bringing it in to get activated". Buy a SIM. Put it in. Hey look, it's activated!

    9. Re:If I were to find one... by houstonbofh · · Score: 4, Insightful

      I live in a world where most people who find the phone would try and give it back. In my world, people like that are the exception, not the rule.

    10. Re:If I were to find one... by arkhan_jg · · Score: 5, Insightful

      Claiming discarded items is not "stealing."

      Much as I see where you're coming from; actually it is under the law. Lost property remains the property of the original owner, they don't give up ownership to anyone that finds it - just as your house remains yours when you leave in the morning, so your phone remains yours if you leave it on a bench. There are means to legally acquire abandoned property though - adverse possession for example.

      So if you were to notify the owner that you have their property, and they can't be bothered to collect it, after a period of time it legally becomes yours. You can also hand it into the police, and again, after a period of time of non-collection they may return it to the finder to keep (in the UK; a friend of mine when we were kids handed in a found £50 note, and got it back a few months later when it was unclaimed).

      This is why if you unknowingly buy a stolen car, and the owner finds out and claims it back - via reporting it to the police - you get stiffed. The person that sold you the car had no legal right of ownership to transfer, so you own bupkiss, and the original owner gets to claim it back.

      Of course, in practise physical possession is 9/10's of the law, especially for small objects that are hard to track down once mislaid. But picking up a dropped/mislaid item and keeping it, is in fact, stealing - you're intentionally depriving someone else of their property, even if you don't know who that someone is. Best choice is to hand the item into a responsible person where you found it; the barman or shopkeeper for example, as it is fairly likely the owner will attempt to find it via them. Alternatively, hand it into the police with details of where you found it. Keeping it and attempting to return it directly is of course an option, but you might get accused of stealing it in the first place! Leaving it exactly where it was is also an option often forgotten - the owner may well come back for it in a minute.

      Personally, I've returned a fair few items ( though mostly to someone who's literally just dropped it or left it), but including a lady's purse that had all her things that she left in a supermarket trolley, via the shop-keeper. They contacted me later to say that she was extremely happy and surprised to get it all back untouched - apparently there was her pension in there, and she'd expected that at least to go missing. On the other hand, I've had a dropped camera disappear in the 5 minutes it took to come back for it; a wallet that wasn't mine popped back through my letterbox (turned out to be a neighbours); and my dropped wallet returned by a guy walking behind me. A friend of mine also got his laptop back that he left in a taxi; the taxi driver tracked him down and dropped it off personally.

      So you never know; there are a lot more honest people out there than you'd think.

      --
      Remember kids, it's all fun and games until someone commits wholesale galactic genocide.
    11. Re:If I were to find one... by arkhan_jg · · Score: 4, Interesting

      Advere possession only applies if the owner knows (or should know) you have it, but doesn't care. So if you find a mobile phone and tell the owner that you've got it, and they never turn up to claim it, after a while it becomes yours. Same goes for land; if you occupy it (by for example, building your fence over part of their land), and they allow it without some specific contract lease or something, then eventually it becomes yours - after 10 years, I think.

      Picking something up, keeping it and telling nobody, does not qualify under adverse possession.

      --
      Remember kids, it's all fun and games until someone commits wholesale galactic genocide.
    12. Re:If I were to find one... by type40 · · Score: 4, Informative

      You might want to look at the "Abandoned Property" statutes. Those are the ones that say if you leave a car in my yard, after a while I can keep it.

      Yes, but, you generality are required to make a good faith effort to locate the owner within a certain time frame (check your local listings, Your mileage may very, open to residents of the continental United States only).

      Someone leaves an item at your home. You go, "it's mine now bitch". Original Owner comes to reclaim item within the prescribed time frame. If you don't return it, you are committing a crime.

      You post the item in Craigslist lost & found on a regular basis until the time frame has elapsed and the OO comes to claim it a day late, "Suck it, it's mine now bitch."

      --
      "You can see I know very little about pimp policy." George McGovern.
    13. Re:If I were to find one... by Dodgy+G33za · · Score: 4, Insightful

      Ditto. I left my phone on the roof of my car at a rest area. Came back looking for it an hour later and it had gone. No answer on the phone. Got a call from a mobile phone shop the next day to say that someone had handed it in to them - due to the carrier splash screen. They couriered it to me because I had only been in the city for the day, and had returned home.The best part about it was that I was no longer with that carrier, which they would have known when they looked up my address.

      Nice things do happen, and as houstonbofh said, it is the rule rather than the exception in most places.

    14. Re:If I were to find one... by jareth-0205 · · Score: 3, Interesting

      And your reply is testimony to the "kinda shitty" attitudes with our modern society. Character is what you do when no one will ever know what you did. You and he have none. I would love to reply under my login, but evidently replies like this keep my karma level in the basement.

      Hm... I don't disagree, but hiding behind an AC and then judging someone on what they do when unknown? You know that 'character' is also questionable when you hide your identity just because some people might disagree with you?

    15. Re:If I were to find one... by AliasMarlowe · · Score: 5, Informative

      While it may be classified as stealing by law, morally it's fine.

      Only if you consider stealing to be morally acceptable.

      Shame morality and the law never seem to match.

      They do, in this case.

      If you find a valuable item which is likely someone else's lost or misplaced property, you're supposed to bring it to a lost property office or to a police station. If it remains unclaimed after some time, it becomes yours. I have done exactly this a couple of times, and in both cases the original owner claimed the property. Clearly, it had been misplaced, not discarded. In one case, the person who reclaimed a wallet which had no identifying material (no credit cards, driving license, etc.) gave a couple of pounds to me as a reward, which was delivered anonymously via the police.

      --
      Those who can make you believe absurdities can make you commit atrocities. - Voltaire
    16. Re:If I were to find one... by Hodr · · Score: 5, Funny

      I found a phone once while on travel. I opened it up and called the number listed as "Home".

      The person who answered accused me of stealing his phone.

      I told him fuck off and that I was throwing his phone in the garbage.

      Then I had a change of heart and left the phone with the front desk of my hotel, texted "Mom" where the phone was and that her son is an ass.

    17. Re:If I were to find one... by Larryish · · Score: 3, Interesting

      The reason for anonymity is to air your views while avoiding persecution by those who disagree, be they legislators or moderators.

  3. Less than half by girlintraining · · Score: 5, Interesting

    Just out of curiousity, how many of these phones were able to actually send/receive calls, and (most importantly) -- did they have a phone book entry titled "Mom". Because whenever I find a lost phone, that's the number I call. People are generally honest -- contrary to what this study suggests. If the number is that low, it's probably something wrong with the methodology; ie, a cell phone left at a restaurant has a lot higher chance of making it back to its owner than being left sitting at a bus station. A test like this should try to accurately reproduce where someone would leave their phone, otherwise the stats gathered aren't very interesting.

    --
    #fuckbeta #iamslashdot #dicemustdie
    1. Re:Less than half by medcalf · · Score: 4, Insightful

      Or ICE (In case of emergency) or Home. Yeah. That's actually one of the problems I have with the iPhone: it doesn't have a way to phone home if you find it locked.

      --
      -- Two men say they're Jesus. One of them must be wrong. - Dire Straits
    2. Re:Less than half by PRMan · · Score: 4, Informative

      I have found 3 cell phones and have attempted to return them all. On one, the person never returned my calls. I guess they didn't want it back for some reason (it was a throwaway cheap phone). The other two people were extremely happy to get their phone back, and one insisted I take a $50 reward (I settled for $20, since I really didn't want to take anything, but I realized that it made her feel good to give something).

      --
      Peter predicted that you would "deliberately forget" creation 2000 years ago...
    3. Re:Less than half by Anne_Nonymous · · Score: 5, Funny

      >> "Mom"... that's the number I call.

      Well, that's one dating strategy.

  4. Commercial? by Anonymous Coward · · Score: 5, Insightful

    Isn't this just a big ploy by Symantec to now sell you some "phone security" program that will A) not work and B) make your phone really slow?

    1. Re:Commercial? by cheater512 · · Score: 4, Insightful

      C) And kill your battery

    2. Re:Commercial? by gman003 · · Score: 4, Funny

      and D) Drain your wallet

  5. Re:Some people are good citizens by jimmerz28 · · Score: 4, Funny

    If you were truly a "good" citizen you would have dropped the BlackBerry off in the nearest trash can.

  6. Finding a phone by zebadee · · Score: 5, Interesting

    A couple of months ago whilst visiting Calgary I found a new looking pink Blackberry bold on the street. The phone was fully charged and locked. With a lock it was impossible to contact the owner as I couldn't access the phone to try calling a contact. I just waited and the next day the phone rang. I explained I had found the phone etc and the owner's company sent a courier to pick it up. I was a little disappointed that at no point did anyone thank me for picking up the phone and waiting in for the courier but ah well the phone got back home. The thing is though it made me realise that the only thing the lock on the phone did was prevent me from calling a contact on the phone. If I had wanted to keep it I would have done as a poster above commented and wipe the phone clean. I suppose some phones have sensitive information on them but for the rest of us do we need to lock them if all it does is stop honest people from trying to return them to the rightful owner?

    1. Re:Finding a phone by Anonymous Coward · · Score: 3, Interesting

      My stepdad works as a commercial guard on a train, and often finds a phone. Those who phone up and politely say "can I have my phone back" get them.

      He's also had asshats who shout at "whoever stole my phone!!1". Those don't make it back. But they do often make into in the bay by one of the stations...

    2. Re:Finding a phone by trunicated · · Score: 3, Informative

      This is why my phone's lockscreen has my email address on it. That way, if somebody wants to return my phone, they have a very easy way to do it (assuming they don't just take it to an AT&T store)

      --
      There's a reason there is no "Disagree" mod...
    3. Re:Finding a phone by bill_mcgonigle · · Score: 3, Interesting

      With a lock it was impossible to contact the owner as I couldn't access the phone to try calling a contact.

      Just curious - did you pop the battery to look for contact info on the inside of the battery bay?

      --
      My God, it's Full of Source!
      OUTSIDE_IP=$(dig +short my.ip @outsideip.net)
    4. Re:Finding a phone by rhook · · Score: 4, Insightful

      At which point your step-dad really does steal their phone. And to top it off he destroys it. What an asshole, I hope he gets fired.

  7. Re:Some people are good citizens by million_monkeys · · Score: 5, Interesting

    A group of us were out on Saturday night, and while walking along the seaside (at Redcliffe, QLD, Australia) found a Blackberry on a park bench. There was no password, no contacts labelled in anything that looked like a home number, and all names had expletives in them. Rather than try to find who the owner was (battery nearly dead) we dropped it off at the nearest Police station.

    Random thought: It could have been the business phone of an escort. You wouldn't expect to find a home number. And a lot of times the contacts are used to store the phone numbers of creeps they don't want to hear from again, hence the expletives.

  8. I tried returning a lost phone...once. by wytten · · Score: 5, Interesting

    About 10 years ago I was driving along a gravel road in rural Minnesota and spotted a phone in the road.
    During the first few hours I made a point of answering this phone so that I could get the word out that
    the owner's phone had been lost. Almost without exception the people who called refused to believe that
    I wasn't the owner of the phone playing some trick on them. Then I was accused of stealing the phone
    and later of wanting money for its return. Seriously, I was verbally attacked by these morons for simply
    trying to arrange a place for its return. Eventually I told one of these people which gas station I was leaving
    it at, and simply left it there with a confused cashier. The whole experience was surreal; I felt like I had been
    sucked into this person's life. It would make a good movie plot I think. Needless to say when I see an apparently
    lost phone now, I just ignore it and walk away.

  9. Scare Mongering by fermion · · Score: 4, Insightful
    It is unclear if anyone access data. It appears from the write that people were more interested in personal information(facebook) than corporate espionage.This makes sense as what is the average person going to do with corporate data? Sell to another corporate entity. How many of us has such contacts for espionage? No, we hope to find some embarrassing picture of celebrity that we can sell to the tabloids. So we rifle in facebook and the pictures.

    As far as returning the phone, there has to be someway to get data to return the phone.This involves one of two things. First is waiting for the person to call the phone and hope the person who answers is intent on returning it,or going through the address book and calling people so the phone can be returned. The later was how I got my Razr back when I lost it on the Texas A&M campus. So rummaging though the phone, as some people did, can either be considered snooping or data gathering to try to return the phone. Accessing email may be to send an email say the phone was found, or trying to steal email. The motive is ambiguous, though the scare mongering obvious. If I found a lost phone, I would expect a call on it pretty promptly asking for it back. The lack of such a call would mean that something else was going on.

    In fact the only thing that is clear is that if you lose a phone, there is at least 50% chance that no effort will be made to return it. From the data It seems about half the finders did what any competent thief would do. Remove the sim card, go to the nearest public computer and wipe the phone. The real race when losing a phone is getting a lock before this happens.

    --
    "She's a scientist and a lesbian. She's not going to let it slide." Orphan Black
  10. Doing the right thing isn't always easy... by Anonymous Coward · · Score: 3, Interesting

    Character is what you do when no one will see.

    One time, I found a cell phone in a dorm lounge. I was there watching my show and was planning to leave the phone in place in case the owner came looking for it. The phone began to ring incessantly, and eventually I answered in case the owner was calling to search for the phone.

    Before I could say more than, "Hello", the owner started chewing me out as a despicable cell phone thief.

    I didn't appreciate this sort of mistreatment. What to do? Well, I am not a thief, so naturally I decided to do the right thing.

    I took the phone and dropped it down the nearby elevator shaft, then resumed watching my show. This was in 2003, so perhaps the phone has been returned to its irate owner by now. Or perhaps it shattered when it hit the base of the shaft three stories down. Either way, I feel happy I chose the righteous path and ignored any temptation to follow baser instincts.

  11. I had a similar experience once by RulerOf · · Score: 3, Interesting

    I was in a cab with a bunch of drunk people about six years ago, when a phone came up out of the seat we were all asked, "Is this your phone?" Turned out that it didn't belong to any of us. I had never found a lost phone before, but I was sober, and I was also pretty sure I could locate its owner, and as I lived in the area code corresponding to the device's number, would have the easiest time returning it. I took the phone home with me.

    I called a few entries in the contact list, most notably, "Mom." Got voicemail, left a message explaining what had happened. "Mom" never called back. I ended up chatting with two different women though by going through the recent calls list and calling some numbers. I came out of that ordeal with two different stories---apparently the guy who used the phone was either a player or a womanizer, I'm not really sure which. The problem I had was that I wasn't sure who the right party to return this phone to was, exactly. So I had an idea...

    The phone was tattooed with Verizon logos (I sure as hell don't miss those days... that LG UI that got ported to EVERY PHONE THEY SOLD was so fucking awful), so I called 611 with the phone itself. After explaining the situation to a customer service rep, she very regrettably informed me that even though she had the information right in front of her on her screen, she would not tell me the name of the account holder. Go figure. So I wrack my brain trying to think of ideas when I got a pretty good one.

    I asked her, "Can you make three way calls?"

    "No, but I can put you on hold and make another call," she replied.

    "Okay, take down this phone number," and I give her the number of the woman I most suspect that I should return the phone to. "Now put me on hold and call her, and then can you tell me whether or not that person is the owner of this phone?"

    "Oh yes!" she says. "Just wait on hold."

    Ten minutes later...

    "That person IS the owner of this phone. You can return the phone to her and you'll be all set!"

    So I call her one more time and gave her my address, and a car pulled up an hour or two later. The funny thing was that the person who came to the door to pick up the phone wasn't actually the woman I spoke with though... it was her boyfriend, the guy who actually used the phone, and also bore a striking resemblance to the fellow that took all those self-shot photos in the camera roll, modestly covering his junk while staring at a mirror.

    A more positive ID might have been possible, but camera phones had such atrocious low-light performance back then....

    --
    Boot Windows, Linux, and ESX over the network for free.
    1. Re:I had a similar experience once by rhook · · Score: 3, Insightful

      so I called 611 with the phone itself. After explaining the situation to a customer service rep, she very regrettably informed me that even though she had the information right in front of her on her screen, she would not tell me the name of the account holder. Go figure.

      Not only would she get fired for giving you that information it is also illegal for her to do so. You should have just dropped it off at a Verizon store.

  12. Re:Some people are good citizens by Zeroedout · · Score: 4, Insightful

    Random thought: It could have been the business phone of an escort. You wouldn't expect to find a home number. And a lot of times the contacts are used to store the phone numbers of creeps they don't want to hear from again, hence the expletives.

    That sounds quite plausible. But I'm curious, how did you come about this information?

  13. Re:No, probalby not by wisty · · Score: 4, Interesting

    No, he's just annoyed at the legalistic interpretation of moral judgements.

    If I find $10 on the side of the road (and can't see who dropped it), I'm going to pocket it. Finders keepers. Technically, it's a crime, but it's not (IMO) wrong.

    If it's traceable (i.e. a wallet, phone) I'll make a reasonable effort to trace the owner, or hand it over to the police.

    To me, it depends on whether the owner is likely to get it back anyway. It's reasonable to assume that dropped money is never coming back. It's reasonable to assume that a dropped wallet will be picked up by someone who will make an effort to return it, or found by the owner (who's going to be looking). The police might not make a distinction, but I do. Sometimes the law (or what people assume the law is) can be "wrong". That's his point.

  14. Teachable moment by Anonymous Coward · · Score: 4, Interesting

    A few weeks ago I was passing through the Seattle airport with my family. I found an iPad 2 on the shuttle train between terminals - basically brand new with only the very barest of info on it. We were running behind, so I stuck it in my pack and boarded the plane. Once appropriately airborne, I pulled it out and tracked down the email address of the owner (good thing they use Facebook - I don't). My 4.5 year old son asked me what I was doing and I replied; "We're going to give this back to the people who lost it." Which we did as soon as we got home.

    We don't own an iPad and my kids, I'm sure, would love to have one. But teaching my kids to do the right thing - because it's the right thing to do - is far, far more important than a piece of electronica. And if it was my phone, or his Star Wars lunch box - we'd want it back.

  15. Re:Some people are good citizens by million_monkeys · · Score: 3

    That sounds quite plausible. But I'm curious, how did you come about this information?

    A friend of a friend is/was an escort and mentioned it offhand one day. I thought it was interesting enough to remember.

  16. Fake user data might have influenced by EmperorOfCanada · · Score: 4, Interesting

    The nature of the fake user data may have influenced the results. If I thought I had the phone of some some MBA tool I would hand it to a bum. If it looked like someone nice I would go out of my way to help it on its way home.
    Also if some guy found the phone of what seemed to be a hot chick he might tend to be more chivalrous.
    For real phones the worst case scenario for the phone would be if it were a politician's. That phone's data would be on the net in two seconds.

  17. The world meets your expectations of it... by AliasMarlowe · · Score: 4, Interesting

    Since it did happen, it appears he lives in the real world. The real question though, is what world is it that you live in?

    Perhaps GP lives in a more civilized/honest part of the world than GGP. Thus his experience suggests and his expectation is that the vast majority of people are honest.

    I dropped my passport once in Tampere (EU passport, possibly worth a bit to a sleazeball), and got it back by asking at some shops I had been in earlier. It had apparently been found on the ground outside and been handed in to the shopkeeper. Where I work (Kuopio, about 400 people in the office, and lots of visitors), it is unheard-of for things to be taken without permission, and people leave stuff lying around quite often. If a wallet is left on a desk in an open-plan area, it will still be there the next day. A high-end laptop can be left anywhere at a customer's factory in the Nordic countries, and it will still be there when you return. On the other hand, if we visit the U.K. or the U.S., we're supposed to secure any laptop with a locking cable if we leave it for even a few minutes; and that's company policy.

    --
    Those who can make you believe absurdities can make you commit atrocities. - Voltaire