For those who don’t know, a lot of my hobbies revolve around networking equipment and related infrastructure. Every once in a while I buy used hardware from companies that specialize in IT asset liquidation. From these purchases, I keep receiving gear formerly owned by large organizations, either entirely un-wiped or so sloppily wiped that all it takes to uncover sensitive information is running “ls” or “dir”. Nearly every piece of equipment I’ve purchased in recent memory has been either entirely un-wiped or improperly wiped, and still contained sensitive information that required reporting to someone’s information security department (and wow, is it hard to find contacts for some companies’ infosec departments!