Concerned but Ineffective: User Perceptions, Methods, and Challenges when Sanitizing Old Devices for Disposal
Concerned but Ineffective: User Perceptions, Methods, and Challenges when Sanitizing Old Devices for Disposal
复制标题
关注但无效：用户在对旧设备进行消毒处理时的看法、方法和挑战
DOI：
--
复制
发表时间：
2021
期刊：
影响因子：
--
通讯作者：
Dan Vogel
中科院分区：
文献类型：
--
作者：
Jason Ceci;Hassan Khan;U. Hengartner;Dan Vogel
由于硬件的不断进步，消费者更频繁地升级他们的设备。旧设备需要被消毒（即，在出售、捐赠、丢弃或回收设备（“处置”）之前，以低恢复概率移除个人数据），但是先前的工作已经表明用户经常不这样做。我们的目标是了解导致个人数据风险的误解来源。通过一项调查（n=131），我们测量了旧设备的最终位置以及它们是如何消毒的。我们的调查显示，虽然大多数用户会丢弃他们的设备，但很大一部分参与者（73%）会保留至少一台旧设备，这通常是出于数据泄露的考虑。在被丢弃的设备中，25%的参与者报告使用了不安全的方法来删除数据。为了进一步探索消毒设备和误解来源的过程，我们邀请了一部分受访者（n=35）进行访谈。我们的访谈揭示了设备清理实践不佳的原因-误导性的数据删除界面和提示，缺乏知识，以及复杂而缓慢的磁盘擦除过程。我们为设备制造商和零售商提供有关如何在对旧设备进行消毒时提高隐私、信任和便利性的建议。
Consumers are upgrading their devices more often due to continuous advances in hardware. Old devices need to be sanitized (i.e., personal data removed with low recovery probability) before selling, donating, throwing away, or recycling the device ( “disposal” ), but previous works have shown that users frequently fail to do that. We aim to understand the sources of misconceptions that result in risks to personal data. Through a survey (n=131), we measure where the old devices end up and how they are sanitized. Our survey shows that while most users dispose of their devices, a large proportion of participants (73%) kept at least one old device, often due to data leakage concerns. Among disposed-of devices, 25% of participants reported using methods to erase their data that are insecure. To further explore the processes that were undertaken to sanitize devices and sources of misconception, we invite a subset of respondents (n=35) for interviews. Our interviews uncover the reasons for poor device sanitizing practices—misleading data deletion interfaces and prompts, lack of knowledge, and complex and slow disk wiping procedures. We provide suggestions for device manufacturers and retailers on how to improve privacy, trust, and convenience when sanitizing old devices.