I bought a 3d printer off Ebay which got delivered not too long ago, and it came with 2 sd cards - one with a build video and some demo print files, but worryingly another card that has all the previous owner’s personal files on there.
Not sure whether to format it, or to contact the seller offering to send the card back (free of charge)… how would you prefer to be approached in a similar situation?
Edit: No gcode files are on the card, just 30gb of pictures, music and videos. Sent the seller a message offering to upload it to cloud or to send the card back
Windows doesn’t autorun by default these days iirc, I don’t think there’s any zero interaction remote code execution bugs that are unpatched either. The only way you would get compromised is by running something or if the usb device pretended to be a keyboard which I don’t think is commercially available in sd card format