W
wendyP
Guest
Drexel University recently released a study that found that the Microsoft Xbox 360 stores credit card information on the system hard drive permanently. The researchers purchased a refurbished Xbox 360 from an authorized resellers, and with some basic modification software was able to access all the files and folders on the gaming system hard drive, including the credit card information of the previous owner.
The researchers, Cindy Casey, Ashley Podhradsky, Rob D’Ovidio, and Pat Engebretson from Dakota State University, conducted the research. "I think Microsoft has a long-standing pattern of this," Podhradsky told Kotaku. "When you go and reformat your computer, like a Windows system, it tells you that all of your data will be erased. In actuality, that's not accurate — the data is still available ... so when Microsoft tells you that you're resetting something, it's not accurate."
Microsoft general manager of security Jim Alkove said the company is “conducting a thorough investigation” into the credit card data storing issue, and said in an email to SecurityNewsDaily that “"Xbox is not designed to store credit-card data locally on the console, and as such [it] seems unlikely credit-card data was recovered by the method described…Additionally, when Microsoft refurbishes used consoles, we have processes in place to wipe the local hard drives of any other user data. We can assure Xbox owners we take the privacy and security of their personal data very seriously."
The researchers however suggest users hook their hard drives to a computer and utilize hard-drive ‘sanitation’ software to make sure it’s clean.
The researchers, Cindy Casey, Ashley Podhradsky, Rob D’Ovidio, and Pat Engebretson from Dakota State University, conducted the research. "I think Microsoft has a long-standing pattern of this," Podhradsky told Kotaku. "When you go and reformat your computer, like a Windows system, it tells you that all of your data will be erased. In actuality, that's not accurate — the data is still available ... so when Microsoft tells you that you're resetting something, it's not accurate."
Microsoft general manager of security Jim Alkove said the company is “conducting a thorough investigation” into the credit card data storing issue, and said in an email to SecurityNewsDaily that “"Xbox is not designed to store credit-card data locally on the console, and as such [it] seems unlikely credit-card data was recovered by the method described…Additionally, when Microsoft refurbishes used consoles, we have processes in place to wipe the local hard drives of any other user data. We can assure Xbox owners we take the privacy and security of their personal data very seriously."
The researchers however suggest users hook their hard drives to a computer and utilize hard-drive ‘sanitation’ software to make sure it’s clean.