Channel Register

PC repair shop caught trying bank fraud

It's no surprise that computer repair shops might snoop for porn on laptops they fix, but an investigation by Sky provides anecdotal evidence that unscrupulous repairmen are prepared to attempt bank fraud as well. Sky planted surveillance software on a brand-new laptop, before rigging an easy to diagnose fault by dislodging an …

This topic is closed for new posts.

Rob

Blatantly!

Boffin

The amount of PC repairs I've had brought to me after they had already been to another repair place.

The best way to clear this problem is educate the user, I always ask the user if they would like to know how to fix the problem themselves, financially bad for business but excellent for the reputation, which can in turn bring in more business so to a certain extent balances out. Generally speaking they aren't that hard to get to grips with, with most users their fear boils down to the scaremongering the industry does with it's terminology.

Anonymous Coward

Where are the photos

Big Brother

of the Sky researcher (in her bikini) to back this claim?

Number6

Hard Disk

There's a lot to be said for encrypted user partitions on hard disks, except that I can see that plenty of users would then need help recovering the contents of said partitions and put it back to square one.

I take the same approach as the MoD, once I've got a hard disk and it's got user data on, I keep it. On the offchance that a faulty machine has to go away for repair, it can have a fresh disk with a new install on it to go. However, I'm a bit more technical than Joe Public, and probably a lot more paranoid (it doesn't count if they're really trying to get me).

Ben Rosenthal

not that surprised

I'm certainly glad I don't have to trust an unscrupulous scum bag like me with my stuff :D

Anonymous Coward

So what?

Stop

"As soon as we became aware of Sky's investigation we suspended Laptop Revival. It will be given an opportunity to respond but if no adequate explanation is forthcoming Laptop Revival will be expelled from the association".

So bloody what? Do they think the average bloke in the street checks that the PC shop he's taking his computer into is part of this association?

If Sky have proof that this happened, then why aren't the police involved?

"that its investigation showed that abuse of trust within the laptop repair industry in the UK might be much worse than previously thought"

Only previously thought by people outside the IT industry. When I had a faulty laptop I took it back, having run the rescue CD and left it with a clean Vista install (which showed the problem fine) and the shop said "But you've wiped the hard drive". I don't think they liked being told that I didn't trust them with my personal data. Would you trust most of these places, including PC World, with personal data? Seriously?

Anonymous Coward

same here

Big Brother

i have been asked to recover over 27 gigs of pictures for a young female from a dying HDD

Still having trouble recovering but from what i have i can see thumbnails being built so i dont need to check every picture !!

As soon as i mentioned the work i was doing i was asked to upload most of the pictures

Anon yeah well obvious really

Adam Christie-Grant

Worse than previously thought?

Happy

Thought by whom? Certainly not me or anyone else who works in IT for a living.... I would not go to a PC repair shop no matter what.

Anonymously Deflowered

The real WTF

WTF?

It's no surprise that the data snooping occurs, and that's why whenever I've had to send my laptop for repair I've swapped the hard disk for one with a clean windows install on (or sent it back with no disk at all).

The real WTF is that five out of six of these companies failed to find and fix the actual fault. SHAME ON THEM!

jon 44

got something important?

Alert

encrypt it.

firefox->master password

documents ->truecrypt (OSS)

Trust noone.

Mike Richards

I'm shocked...

...shocked I tell you!

Sky made a genuinely useful programme.

Just tell me it was fronted by Ross Kemp.

Tezfair

nothing new

I bet nearly all repair shops snoop around for the 'Gary Glitter' pot of dirt and 15 mins of fame. Funny how PCWorld never got rapped for violating his private rights (not that im saying he was innocent etc).

I have worked in many places and its common for snooping to go on, license codes to be lifted.

Its also why, when we send anything away thats under warranty, the drives are removed or swapped with blanks.

ElNumbre

And in other news...

Coat

"Sky either misdiagnosed the fault or overcharged for repairs."

That was the only sentence I extracted from that bulletin.

phil 21

surveilance 'software' ?

was the software recoding through the built in webcam then, if sky knew that the guy called his friends over ?

Anonymous John

"He called over a colleague to view the images"

How did the software know that? Webcam?

Stu

Thats life...

Pint

...you see, us computer know-it-alls get ripped off and screwed over by your average car repairmen, your builders or plumbers and your personal financial adviser maybe.

Everybody else gets ripped off / screwed over by all those above AND your average PC World, sorry "Tech Gays" lackeys.

Definitely something to be said for doing all PC / house / car repairs yourself! Sure it means getting down and dirty with some horiffic repair manuals, but think of the savings, to your dignity that is!

.

Everybody raise your pint to those who think hitting the delete key is sufficient to erase all evidence of your BDSM porn addiction!

Stevie

Bah!

So the average computer-savvy individual is no more trustworthy than Google or Phorm, and usually a damned site less so? Technicians behaving like car mechanics and bank robbers?

Well, colour me surprised.

Tom 42

exactly why...

I took my hard drive out of my laptop when I sent it to be repaired.

EdwardP

What?

Flame

"He called over a colleague to view the images. "

How do they know this? Was their software recording audio/video as well? If so then it's verging on an invasion of privicy and is almost certainly illegal.

David Lester

You just can't get the PFYs these days...

Happy

Paging Simon Travaglia...

OrientalHero

Oooohhhhherrrrhhh!

Joke

Come on then!

Where's the link to the bikin clad Sky lady on the beach?

David Ndhlovu

They need training

Gates Horns

From the BOFH and the PFY!

iamapizza

This thread is useless without photos

Pint

Please provide us with copies of the mentioned photos so that we may ascertain whether this was reprehensible or criminal behavior and whether this warranted the suspension of said computer repair firm.

Stephen Rodda

Bouquet

So which was the good company?

Although I can understand this thing occurs, I should take a very dim view if any of my engineers attempted that sort of thing.

Jack 4

Not at all surprising...

There is a reason that I built (And learned *how* to build.) my own system, which I know how to troubleshoot and fix if need be, and a reason that I'm running Ubuntu which I can also trouble shoot and fix if need be, thus eliminating the chance of someone lifting my personal info off of it.

I've known technicians who have worked at various repair shops, and according to them the first thing that they do when a new machine comes in, is to copy off any porn, music or movies you might be on there. [1] The ones I knew were ethical enough that they didn't record financial details, but as this report shows, there's no guarantee.

I've also heard personally from people who worked at a particular shop in the US, (Now long out of business, fortunately.) that the owner there made a practice of going through the computer owners financial records to determine how much he could get away with charging them for repairs.

Personally, I think that the current attitudes toward privacy on machines that have been brought in for repair are far too lax, and I'm not at all surprised that something like this has come up. In fact, I'm surprised that it's taken this long to start to hear about it.

I feel that there really needs to be a code of conduct for these types of businesses which states that personal files and information on a machine should be *absolutely* off limits, beyond the absolute minimum needed to actually fix the machine. (Which should be zero, 99% of the time.) This should include oversight of technicians to stop the currently winked at practices of copying off interesting files, and which would yank the business license of any shops that are caught doing this, even if there's no misuse made of the information.

[1] My own comment to them, that I was advising any friend who sent in their machine for repairs to entitle a folder, "My Girlfriend Nude" and fill it with octogenarian porn, was for some reason met with accusations that that I was in fact, "Evil Incarnate". Go figure.

Rob Beard

Pron

Paris Hilton

Well of course the excuse is going to be that they are searching for child porn if they get caught out.

Still naughty of them to do stuff like this.

By the way, did El Reg get a copy of the Sky reporter photos? :-D

Rob

Destroy All Monsters

I thought "Über surveillance software"...

Coat

...monitors behaviour of your friendly repair gorilla even if the laptop is powered down or the DIMM is unseated.

On second reading, it becomes clear that the assorted Gnomes of the Repair Cave of Evil have to fix the machine first, then boot it up, log in, and only then they fall into the trap ... aww!

Martin 6

And yet..

When these same shops 'find' porn on some celebrity's machine they are an absolutely unimpeachable chain of evidence.

Ian 13

in other news...

...apparently some garages rip off customers who know nothing about car maintenance and some workers at these garages are dishonest and will take cash they find lying on the floor.

Robb Dunphy

Shock horror

WTF?

And this is why anyone with a shred of sense always avoids those sorts of places, and looks to their local computer geek, or friends kids who have a clue. Since I was a kid I was the person people came to when they needed someone to check their computers.

However you'd expect places like this, that are a member of some "official" association would have more stringent checks, especially in this day and age of data theft.

All in all, not that surprising, but still a shock to those who just think a computer is something you get from dell to use the interweb.

Joe Drunk

Underpaid & overworked

Considering what a PC tech makes these days it's hardly surprising - just didn't think it was that rampant. I guess it's like trying to find an auto mechanic, repairman or building contractor who's honest.

I'm glad I'm the one who takes care of PC probs for several of my friends & relatives but I would never ever want to do this for a living. I pity those who rely on such places to solve PC problems but doesn't everyone have a friend/relative who's a PC techie these days?

matt 83

And this is why

Paris Hilton

You should always clone the drive of any PC brought in for repair BEFOR looking for porn etc!

Anonymous Coward

Not impressed...

Anonymous Coward

Surely anyone with any technical pride would have noticed the harddrive flicking away with the stream of video it was recording and investigated as that's the kind of thing that gives away trojans.

It would certainly attract my attention, as would anything a bit odd in the process list.

I shall continue repairing PCs in my birthday suit, with nothing more than these nipple clamps as clothing.

Anonymous Coward

See it for yourself

Pint

There is a video from the sky if anyone want to see that

Here is the link:

http://news.sky.com/skynews/Home/video/Computer-Repair-Shops-Illegally-Accessing-Personal-Data-From-Customers-Hard-Drives-Sky-News-Investigation/Video/200907415343630?lpos=video_Article_Related_Content_Region_1&lid=VIDEO_15343630_Computer_Repair_Shops_Illegally_Accessing_Personal_Data_From_Customers_Hard_Drives%2C_Sky_News_Investigation

tony trolle

@Not impressed

Troll

nipple clamps as workware just like a grounded wrist strap

Fraser

Err...

Sky's researcher a Mr Glitter said that the report had been on the shelf for about, ten years...

Incidentally I saw this on Ch5 news last night, I thought they were ITN?

Scott 19

Go and check the stroy

Coffee/keyboard

Its on the Sky news web site and the photos must of been good looking at the techie's(?) eyes. And they used the web cam to take still pictures of the offending.

Anonymous Coward

Happened to me....

Coffee/keyboard

....and at an Apple store too!

Once put my Macbook in to the local Apple store to have the keyboard replaced. When they gave it back the genius booted it and it was still in Firewire Target Disk Mode. The guy was at a complete loss to explain why anybody would have needed to use it as an external drive just to replace the keyboard (he was quite sure that backing it up would be my responsibility, not theirs) and the 'genius' who actually worked on the laptop refused to come and speak to me and explain himself.

Fortunately I'm the paranoid type and had completely rebuilt the thing before putting it in for repair so all he got was a fresh Leopard install and some awkward questions.

Shingo Tamai

Gentlemen you are missing the big picture here.

Stop

It is not about shops not being able to diagnose the problem, is about fraud and privacy infringement.

One of the shops after pushing the memory module back on the laptop called offering a motherboard replacement. Then the offer was refused, they short SOLDERED some memory pins together to replicate the fault.

Problem is that the source used for this article is not a good one.

Here:

http://www.pcpro.co.uk/news/262978/exposed-the-pc-repair-shops-that-rifle-through-your-photos-and-passwords.html

blackworx

Goes both ways

Grenade

I've had people bring me their PC to fix after having been ripped off by one or other of the local "pros" at prices which usually run well into three figures for the privilege of not repairing anything, cracking the case (if it's a laptop) and stealing a few screws.

At the same time the queue of gringos who want you to "take a look" at their machine because "it's running a bit slow" and "doesn't work properly" and they think it "might" have a virus, never gets any smaller. The one thing they're always fucking sure about however is that it's just a five minute job and that you'll to do it for the price of a couple of beers (if you're lucky).

Michael Dunn

@Jack4

FAIL

Oh, dear! Codes of conduct! It's just because the financial services industry is governed by codes of conduct and guide lines rather than laws that bite, that the world is in the state it's in now.

Anonymous Coward

Repair chimps

FAIL

As other have said, before handing your PC to a service centre of any kind, make sure there's nothing on it at all.

As for the chimps, if they were in any way knowledgable, they'd have booted from the portable Linux distro of choice before looking at the drive thus avoiding any spyware/surveilance measures. Pah! Amateurs!

Anonymous Coward

Repair shops

Anonymous Coward

Even if they didn't systematically steal everyone's data, I still wouldn't pay the kind of prices they're asking for the kind of work they usually have to do.

Then again I know my way around the inside of a computer.

Anonymous Coward

Gentlemen you are missing the big picture.

Stop

This is not about incompetent shops, it's about frauds.

One of the shops spotted immediately what the problem was and soldered pins on the memory slot together in order to replicate the fault after the "customer" refused to go on with a "motherboard replacement".

Point is that the article this The Register story is incomplete, there is another article with a lot more details also on the kind of software used, just google for:

"PC repair shops that rifle through your photos and passwords"

Stuart Halliday

Don't Tar all of us please

Alert

Hmm doesn't appear to be many actual IT repair business here.

I as a sole trader repairing computers and provide training, etc. and I must say I provide a 100% confidential service. I wouldn't think of searching a customers computer.

I suspect all these people are less-than adequately trained or empowered (I hesitate to use the word 'engineers'). There _has_ to be a strong element of trust between the customer and the engineer.

Sure I've came across things in my 20 years experience. But I don't go around telling people about it!

The IT industry is still young. I believe it needs to develop a similar level of agreement as Lawyers and Doctors have with their customers. It may develop this trust in time. But it's a long way away if this story is to be believed.

Look up the Shark News site if you want juicy stories of custards. You'll find none from professionals like me.

Medium Dave

@AC

I often copy customer's data when I don't need to...

Not because I want to go rummaging through it - 20 years in sys admin roles has made me immune to that - but for those occasions when they phone up a month later and say "Help! I've just deleted the photos of cousin Maude's wedding! What can I do?"

For the cost of a few gig of disk space, you can acquire the reputation of a minor bearded deity. Otherwise, the data just sits around in an encrypted tarball until I need the space...

I do make a point to tell the customer, though, and delete it on the spot if they don't want it.

elderlybloke

I am lucky

Happy

my repair man is too busy to bother with wasting his time on searching for tit-bits or just tits on my computer.

Anonymous Coward

Come on guys.....

Anonymous Coward

How many of you can *honestly* say if you had a laptop in front of you belonging to a young woman and found a folder marked private that you wouldn't sneak a look?

The rest of the stuff is the real issue and Im not in any way condoning that but the looking through photos is simple red blooded male syndrome!

Christopher Webb

No title here...

FAIL

@blackworx: You know that's my experience exactly!

There's a computer shop a matter of 20 yards from where I live that has a reputation for charging ridiculous amounts of money and not fixing anything. A typical example was from my neighbour - his mum's computer wouldn't go on the Internet so she phoned the computer guy who turned up at her house, replaced the modem (at £35 per hour + £10 callout) and left. It didn't work, so he came back again (£10 callout + £35 per hour) and put on a BT Click DUC and left. It still didn't work, so he came back AGAIN (£10 callout + £35 per hour) and after much fiddling decided he couldn't work out the problem and gave up. Total cost: £135 to NOT repair a Packard Bell PII-350 (in 2007). I lamented my neighbour's stupidity in not suggesting my services instead and offered to look at it for nothing. Firstly, there was nothing wrong with the old modem. Secondly, the BT Click DUC used an out of date number and so was useless. Thirdly, the Freeserve Dial-up account hadn't been used for 5 years, ever since the original owner (neighbour's Dad) died. I set up a new ISP account and had the machine on the net within 30 minutes of walking through the door.

Another computer shop around the corner to where I work has a similarly terrible approach to customer care. One guy wanted a laptop with a MIDI port on it, they sold him an ancient P-133 with Windows 95 and not so much as a USB port, let along a joystick connector. Another walked in to buy some videos (it's also a second hand shop - go figure) but they said she should get DVDs instead because videos are old fashioned. She said she didn't have a DVD player, so they sold her an antique PII-233 laptop with Windows 98 for almost the same cost as a brand new P4 for her to watch DVDs on. She wasn't savvy enough to know you could buy a DVD player in Lidl (or Superdrug for that matter) for £20. In both cases the laptops had incorrect drivers installed and even the odd driver missing altogether. The police also suspect the shop to be trading stolen goods but can't prove it because nobody writes down the serial numbers of their electronic goods or marks anything.

In regards to privacy, sometimes there is a need to look at personal data, but ONLY when you've been instructed to by the customer. I always make of point of asking if a password is needed to get into the PC and if they want any data saving in the (rare) event of having to reinstall. I only look at documents and photos when it's a data recovery job, and even then only a couple to check that the recovery is working. I tell the customer to check for themselves and notify me if they still need help. I never look at anything I've saved prior to re-installation, and I tell them their data is only kept on our storage server for a maximum of 30 days, in case anything wasn't transferred back. Again, it's up to them to notify us, and data is prompted deleted - we need the space!

I'm always saddened by stories like this (and I too wondered how the Gary Glitter story missed the fact that the engineer had clearly been snooping without need) but this is also a poignant reminder of what happens when other people get hold of our data. Human beings cannot be trusted! (That includes the Government and the Police).

Rant over, been a long weekend. Gonna grab a pint or two (or more) and get ready to roll straight back into work tomorrow. :(

This topic is closed for new posts.

Forums

Forgotten password