The Honey Stick Project

“Stream 0″ Objective:

To measure the frequency of different actions that Finders take when they discover an abandoned USB Memory Drive. The resulting analysis can give insights into what most people do with the devices when they find them (eg. try to turn them in to a person of authority, take a peek into the files to see if they can locate the finder, explore the contents for items of interest.)

NOTE: Detailed file content and web site configurations will not be publicly released until the end of “Stream 0” to avoid external influences that could affect results.

Device Type:

USB Memory Drive (No Identifying Labels, Generic Appearance – GXT 64 MB)

Folder Structure:

One visible subfolder, and one hidden subfolder

Folder Names:

CONFIDENTIAL – hidden subfolder containing a file with apparent links to online banking, brokerage and website passwords.

File Content Type:

HTML – multiple files having IMGSRC links to logged website, with unique identifiers in the link codes to identify the filename and link text for links clicked on within the file. Filenames have various interesting text strings, as do some links within files.

TXT – one text file with filename “Owner_Info.txt” and plaintext content containing phone number, email address to give Finder a chance to contact the owner and offer to return the device. Also has link to www.honeystickproject.com website.

DOC – one MS Word file which should inquire if user wants links to external files updated. If they answer Yes, it will log a request.

Placement:

Publicly accessible Honey Stick placement locations:

• Coffee shops
• Libraries
  
• Public telephone booths and stands
• Hotel lobbies
• Food courts and Restaurants
  
• Transportation Hubs and Vehicles
• Colleges and Universities
• Conference Centers
• Office Buildings
  

Data Collected:

• Time of device placement
• Category of placement location (not address or property owner information)
• Time of HTTP requests made from the computer connected to device
  
• Indicators of files opened
• Indicators of links followed

“Stream 0″ Objective:

To measure the frequency of different actions that Finders take when they discover an abandoned USB Memory Drive. The resulting analysis can give insights into what most people do with the devices when they find them (eg. try to turn them in to a person of authority, take a peek into the files to see if they can locate the finder, explore the contents for items of interest.)

NOTE: Detailed file content and web site configurations will not be publicly released until the end of “Stream 0” to avoid external influences that could affect results.

Device Type:

USB Memory Drive (No Identifying Labels, Generic Appearance – GXT 64 MB)

Folder Structure:

One visible subfolder, and one hidden subfolder

Folder Names:

CONFIDENTIAL – hidden subfolder containing a file with apparent links to online banking, brokerage and website passwords.

File Content Type:

HTML – multiple files having IMGSRC links to logged website, with unique identifiers in the link codes to identify the filename and link text for links clicked on within the file. Filenames have various interesting text strings, as do some links within files.

TXT – one text file with filename “Owner_Info.txt” and plaintext content containing phone number, email address to give Finder a chance to contact the owner and offer to return the device. Also has link to www.honeystickproject.com website.

DOC – one MS Word file which should inquire if user wants links to external files updated. If they answer Yes, it will log a request.

Placement:

Publicly accessible Honey Stick placement locations:

• Coffee shops
• Libraries
  
• Public telephone booths and stands
• Hotel lobbies
• Food courts and Restaurants
  
• Transportation Hubs and Vehicles
• Colleges and Universities
• Conference Centers
• Office Buildings
  

Data Collected:

• Time of device placement
• Category of placement location (not address or property owner information)
• Time of HTTP requests made from the computer connected to device
  
• Indicators of files opened
• Indicators of links followed