# Security and Privacy with Second-Hand Storage Devices: A User-Centric Perspective from Switzerland
**Source**: https://iris.unil.ch/entities/publication/33e10c40-6a6f-4638-8e82-8c6f5ecfd532
**Parent**: https://wp.unil.ch/persuasivelab/2024/12/kevin-huguenin/
Title
# Security and Privacy with Second-Hand Storage Devices: A User-Centric Perspective from Switzerland
Type
journal article
Institution
UNIL/CHUV/Unisanté + partner institutions
Journal
Proc. of the Privacy Enhancing Technologies (PoPETs)
Author(s)
Salehzadeh Niksirat, Kavous
Author
Korka, Diana
Author
Jacquemin, Quentin
Author
Vanini, Céline
Author
Humbert, Mathias
Author
Cherubini, Mauro
Author
Métille, Sylvain
Author
Huguenin, Kévin
Author
Links to people
[Huguenin, Kévin](https://iris.unil.ch/entities/person/2944935d-0b87-49be-9948-63cc91c050ff)
[Métille, Sylvain](https://iris.unil.ch/entities/person/c13319bd-1cb2-4934-9804-da8705a4a06d)
[Cherubini, Mauro](https://iris.unil.ch/entities/person/6f43a3ca-6be5-469a-a28c-ab66a0b7c282)
[Jacquemin, Quentin](https://iris.unil.ch/entities/person/15472c5d-a7e9-4eba-b70e-448094499196)
[Vanini, Céline](https://iris.unil.ch/entities/person/776ad279-fc98-4275-b3b1-ce57a901179a)
[Salehzadeh Niksirat, Kavous](https://iris.unil.ch/entities/person/e5c03883-048c-40d8-bf09-2aea1fa425a0)
[Korka, Diana](https://iris.unil.ch/entities/person/019a6c3e-fdfe-48d9-a7c4-75c654f711ea)
[Humbert, Mathias](https://iris.unil.ch/entities/person/b2c29137-b436-4bb5-ac26-179cfdf81053)
Links to units
[Droit, criminalité et sécurité des technologies de l'information](https://iris.unil.ch/entities/orgunit/36747f9e-f070-4804-b18a-054078495abb)
[Département des systèmes d'information](https://iris.unil.ch/entities/orgunit/ea5cb1db-0d46-435a-9f5e-e334d1b6ec0e)
[Science forensique](https://iris.unil.ch/entities/orgunit/342bb3dc-fb6e-4844-8238-bb1cff77eebd)
[Centre de droit pénal](https://iris.unil.ch/entities/orgunit/e47b190d-4a01-4c4e-8c8d-1fbef46fed2a)
Editorial status
Published
Date Issued
2024-04
Volume
2024
Issue
2
First page
412–433
Peer-reviewed
True
Language
english
Abstract
Second-hand electronic devices are increasingly being sold online. Although more affordable and more environment-friendly than new products, second-hand devices, in particular those with storage capabilities, create security and privacy threats (e.g., malware or confidential data still stored on the device, aka remnant data). Previous work studied this issue from a technical point of view or only from the perspective of the sellers of the devices, but the perspective of the buyers has been largely overlooked. In this paper, we fill this gap and take a multi-disciplinary approach, focusing on the case of Switzerland. First, we conduct a brief legal analysis of the rights and obligations related to second-hand storage devices. Second, in order to understand the buyers’ practices related to these devices and their beliefs about their legal rights and obligations, we deploy a survey in collaboration with a major online platform for transactions of second-hand goods. We demonstrate that the risks highlighted in prior research might not materialize, as many buyers do not inspect the content of the bought devices (e.g., they format it directly). We also found that none of the buyers uses forensic techniques. We identified that the buyers’ decisions about remnant data depend on the type of data. For instance, for data with illegal content, they would keep the data to report it to the authorities, whereas for sensitive personal data they would either delete the data or contact the sellers. We identified several discrepancies between the actual legal rights/obligations and users’ beliefs
Subjects
[Second-hand electroni...](javascript:void(0);)
[second-hand devices](javascript:void(0);)
[security](javascript:void(0);)
[privacy](javascript:void(0);)
[Switzerland](javascript:void(0);)
Serval PID
serval:BIB\_B69A6B006D03
DOI
[10.56553/popets-2024-0057](https://doi.org/10.56553/popets-2024-0057)
Permalink
<https://iris.unil.ch/handle/iris/222645>
Research dataset DOI
10.17605/OSF.IO/ESYVF
Open Access
True
Creation date
2024-03-27T13:24:47.596Z
Creation date in IRIS
2025-05-21T04:28:15Z
File(s)
Loading...
Download
**Name**
SalehzadehNiksirat2024PoPETS.pdf
**Manuscript version**
published
**License**
[CC BY 4.0](https://creativecommons.org/licenses/by/4.0)
**Visibility**
Open Access
**Size**
1.14 MB
**Format**
Adobe PDF
**Serval PID**
serval:BIB\_B69A6B006D03.P001
**URN**
[urn:nbn:ch:serval-BIB\_B69A6B006D030](https://nbn-resolving.org/urn:nbn:ch:serval-BIB_B69A6B006D030)
**Checksum**
(MD5):76df895455d3cec7c010a5853cbeb099