Hi All,
I have a disk with personal information on it that I need
to wipe. Is there some cleaver way of using "dd" to write
the alphabet across it? Any better ideas? (One pass is fine.)
Many thanks,
-T
|
|
0
|
|
|
|
Reply
|
Todd3275 (76)
|
12/28/2011 6:09:15 PM |
|
Hello,
Todd a �crit :
>
> I have a disk with personal information on it that I need
> to wipe. Is there some cleaver way of using "dd" to write
> the alphabet across it? Any better ideas? (One pass is fine.)
Why bother to write the alphabet ? Writing zeroes is just fine.
|
|
0
|
|
|
|
Reply
|
boite-a-spam (841)
|
12/28/2011 6:39:11 PM
|
|
Todd wrote:
>I have a disk with personal information on it that I need
>to wipe. Is there some cleaver way of using "dd" to write
>the alphabet across it?
>
It's amazing how, a generation into the Internet Age,
folks still haven't discovered Google or Wikipedia.
http://google.com/search?q=dd+wipe
>Any better ideas? (One pass is fine.)
>
http://www.computerhope.com/unix/shred.htm
|
|
0
|
|
|
|
Reply
|
jeffm_ (1319)
|
12/28/2011 6:46:35 PM
|
|
Pascal Hambourg wrote:
> Hello,
>
> Todd a écrit :
>> I have a disk with personal information on it that I need
>> to wipe. Is there some cleaver way of using "dd" to write
>> the alphabet across it? Any better ideas? (One pass is fine.)
>
> Why bother to write the alphabet ? Writing zeroes is just fine.
dd if=/dev/null of=/dev/sdwhatever...
|
|
0
|
|
|
|
Reply
|
tnp (2253)
|
12/28/2011 6:47:52 PM
|
|
Todd wrote:
> Hi All,
>
> I have a disk with personal information on it that I need
> to wipe. Is there some cleaver way of using "dd" to write
> the alphabet across it? Any better ideas? (One pass is fine.)
>
> Many thanks,
> -T
Yes, use "wipe"
--
Tim Watts
|
|
0
|
|
|
|
Reply
|
usenet8686 (85)
|
12/28/2011 6:49:20 PM
|
|
The Natural Philosopher a �crit :
>
> dd if=/dev/null of=/dev/sdwhatever...
Rather if=/dev/zero
|
|
0
|
|
|
|
Reply
|
boite-a-spam (841)
|
12/28/2011 6:58:08 PM
|
|
Pascal Hambourg wrote:
> The Natural Philosopher a écrit :
>>
>> dd if=/dev/null of=/dev/sdwhatever...
>
> Rather if=/dev/zero
or /dev/urandom if non zero wiping with dd is desired...
--
Tim Watts
|
|
0
|
|
|
|
Reply
|
usenet8686 (85)
|
12/28/2011 7:06:02 PM
|
|
On 2011-12-28, Todd <Todd@invalid.invalid> wrote:
>
> I have a disk with personal information on it that I need
> to wipe.
There's erase and there's eliminate. Do some research:
http://en.wikipedia.org/wiki/Data_erasure
nb
--
Merry Christmas and a Happy New Year
|
|
0
|
|
|
|
Reply
|
notbob (921)
|
12/28/2011 7:09:06 PM
|
|
Pascal Hambourg wrote:
> The Natural Philosopher a écrit :
>> dd if=/dev/null of=/dev/sdwhatever...
>
> Rather if=/dev/zero
yup..
|
|
0
|
|
|
|
Reply
|
tnp (2253)
|
12/28/2011 7:20:47 PM
|
|
notbob wrote:
> On 2011-12-28, Todd <Todd@invalid.invalid> wrote:
>> I have a disk with personal information on it that I need
>> to wipe.
>
> There's erase and there's eliminate. Do some research:
>
> http://en.wikipedia.org/wiki/Data_erasure
>
> nb
>
if you are paranoid take a crusher to it.
Otherwise dd will render an data on it totally inaccessible to anyone
without the ability to strip the drive and read it almost by hand.
|
|
0
|
|
|
|
Reply
|
tnp (2253)
|
12/28/2011 7:22:47 PM
|
|
On 12/28/2011 11:06 AM, Tim Watts wrote:
> Pascal Hambourg wrote:
>
>> The Natural Philosopher a écrit :
>>>
>>> dd if=/dev/null of=/dev/sdwhatever...
>>
>> Rather if=/dev/zero
>
> or /dev/urandom if non zero wiping with dd is desired...
>
Oh, I like this one! Thank you. -T
|
|
0
|
|
|
|
Reply
|
Todd3275 (76)
|
12/28/2011 7:42:36 PM
|
|
On 12/28/2011 10:46 AM, JeffM wrote:
> It's amazing how, a generation into the Internet Age,
> folks still haven't discovered Google or Wikipedia.
Google is a blunt instrument. Often very helpful.
It does not offer the personal wisdom, experience,
and advice offered in friendship by a colleague
to a specific question.
Thank you for the links.
-T
"Just Google It!" the new "RTFM"
|
|
0
|
|
|
|
Reply
|
Todd3275 (76)
|
12/28/2011 7:50:14 PM
|
|
On 12/28/2011 10:47 AM, The Natural Philosopher wrote:
> Pascal Hambourg wrote:
>> Hello,
>>
>> Todd a écrit :
>>> I have a disk with personal information on it that I need
>>> to wipe. Is there some cleaver way of using "dd" to write
>>> the alphabet across it? Any better ideas? (One pass is fine.)
>>
>> Why bother to write the alphabet ? Writing zeroes is just fine.
>
> dd if=/dev/null of=/dev/sdwhatever...
Thank you!
|
|
0
|
|
|
|
Reply
|
Todd3275 (76)
|
12/28/2011 7:50:39 PM
|
|
On 12/28/2011 10:58 AM, Pascal Hambourg wrote:
> The Natural Philosopher a �crit :
>>
>> dd if=/dev/null of=/dev/sdwhatever...
>
> Rather if=/dev/zero
Thank you!
|
|
0
|
|
|
|
Reply
|
Todd3275 (76)
|
12/28/2011 7:50:52 PM
|
|
On 12/28/2011 10:49 AM, Tim Watts wrote:
> Todd wrote:
>
>> Hi All,
>>
>> I have a disk with personal information on it that I need
>> to wipe. Is there some cleaver way of using "dd" to write
>> the alphabet across it? Any better ideas? (One pass is fine.)
>>
>> Many thanks,
>> -T
>
> Yes, use "wipe"
Thank you!
# yum whatprovides wipe
....
wipe-2.2.0-1.2.el6.rf.x86_64 : Secure file deletion utility
Repo : rpmforge
|
|
0
|
|
|
|
Reply
|
Todd3275 (76)
|
12/28/2011 7:51:46 PM
|
|
On 12/28/2011 11:09 AM, notbob wrote:
> On 2011-12-28, Todd<Todd@invalid.invalid> wrote:
>>
>> I have a disk with personal information on it that I need
>> to wipe.
>
> There's erase and there's eliminate. Do some research:
>
> http://en.wikipedia.org/wiki/Data_erasure
>
> nb
>
I just want to make it hard for the bad guys. Anyone
with the capability to undo a dd urandom is going to
also have the resources (and search warrants) to get
whatever they what from me anyway.
Thank you for the link,
-T
|
|
0
|
|
|
|
Reply
|
Todd3275 (76)
|
12/28/2011 7:55:03 PM
|
|
On 28/12/11 20:42, Todd wrote:
> On 12/28/2011 11:06 AM, Tim Watts wrote:
>> Pascal Hambourg wrote:
>>
>>> The Natural Philosopher a écrit :
>>>>
>>>> dd if=/dev/null of=/dev/sdwhatever...
>>>
>>> Rather if=/dev/zero
>>
>> or /dev/urandom if non zero wiping with dd is desired...
>>
>
> Oh, I like this one! Thank you. -T
Writing from /dev/urandom is slower than from /dev/zero, and makes
absolutely no difference to the security.
Writing zeros has a few advantages (though they are unlikely to be
useful in practice) - if you use the disk to form a raid array along
with other zeroed disks, the initial sync will be faster. And if you
ever feel the need to do a full disk image copy, the copy will be very
compressible.
|
|
0
|
|
|
|
Reply
|
david.brown6091 (326)
|
12/28/2011 10:14:49 PM
|
|
On Wed, 28 Dec 2011 14:42:36 -0500, Todd <Todd@invalid.invalid> wrote:
> On 12/28/2011 11:06 AM, Tim Watts wrote:
>> Pascal Hambourg wrote:
>>> The Natural Philosopher a écrit :
>>>> dd if=/dev/null of=/dev/sdwhatever...
>>> Rather if=/dev/zero
>> or /dev/urandom if non zero wiping with dd is desired...
> Oh, I like this one! Thank you. -T
You can speed it up quite a bit. Check the output of
"hdparm -i /dev/sdb|grep MultSect" for the drive in question.
Both of my hard drives are currently set to a MultSect of 16,
meaning the drive can write up to 16 sectors at a time.
So if I were wiping the drive, I'd use
"dd if=/dev/urandom of=/dev/sdb bs=8K".
Writing 16 sectors at a time instead of 1, will have a very
noticeable speed increase.
Regards, Dave Hodgins
--
Change nomail.afraid.org to ody.ca to reply by email.
(nomail.afraid.org has been set up specifically for
use in usenet. Feel free to use it yourself.)
|
|
0
|
|
|
|
Reply
|
dwhodgins (363)
|
12/28/2011 10:16:20 PM
|
|
On 28/12/11 20:22, The Natural Philosopher wrote:
> notbob wrote:
>> On 2011-12-28, Todd <Todd@invalid.invalid> wrote:
>>> I have a disk with personal information on it that I need
>>> to wipe.
>>
>> There's erase and there's eliminate. Do some research:
>>
>> http://en.wikipedia.org/wiki/Data_erasure
>>
>> nb
>>
> if you are paranoid take a crusher to it.
Good advice.
>
> Otherwise dd will render an data on it totally inaccessible to anyone
> without the ability to strip the drive and read it almost by hand.
A simple dd from /dev/zero is the fastest way to wipe a disk (other than
losing the key to an encrypted disk), and makes everything completely
inaccessible except perhaps for re-mapped bad blocks. It doesn't matter
if the "bad guys" can strip the disk and put it under an electron
microscope - the idea of recovering overwritten data is a myth kept
alive by people selling "secure disk wipe" software and hardware.
|
|
0
|
|
|
|
Reply
|
david.brown6091 (326)
|
12/28/2011 10:20:58 PM
|
|
David W. Hodgins a �crit :
>
> You can speed it up quite a bit. Check the output of
> "hdparm -i /dev/sdb|grep MultSect" for the drive in question.
>
> Both of my hard drives are currently set to a MultSect of 16,
> meaning the drive can write up to 16 sectors at a time.
>
> So if I were wiping the drive, I'd use
> "dd if=/dev/urandom of=/dev/sdb bs=8K".
>
> Writing 16 sectors at a time instead of 1, will have a very
> noticeable speed increase.
Yes, but this has probably nothing to do with the multiple sector
parameter of hadparm (see -m). This parameter is used only in PIO mode,
but disk transfers use mostly DMA modes, which are more efficient.
|
|
0
|
|
|
|
Reply
|
boite-a-spam (841)
|
12/28/2011 10:47:56 PM
|
|
On 2011-12-28, The Natural Philosopher <tnp@invalid.invalid> wrote:
> notbob wrote:
>> On 2011-12-28, Todd <Todd@invalid.invalid> wrote:
>>> I have a disk with personal information on it that I need
>>> to wipe.
>>
>> There's erase and there's eliminate. Do some research:
>>
>> http://en.wikipedia.org/wiki/Data_erasure
>>
>> nb
>>
> if you are paranoid take a crusher to it.
>
> Otherwise dd will render an data on it totally inaccessible to anyone
> without the ability to strip the drive and read it almost by hand.
And almost certainly not even then. Manufacturers spend huge amounts of
money trying to extract the absolutely maximum data density from the
drives. Any data which survives writing 0 to evey byte is clearly data
which could be harvested to increase the data density on the drive.
|
|
0
|
|
|
|
Reply
|
unruh7679 (594)
|
12/29/2011 5:08:13 AM
|
|
unruh wrote:
> On 2011-12-28, The Natural Philosopher <tnp@invalid.invalid> wrote:
>> notbob wrote:
>>> On 2011-12-28, Todd <Todd@invalid.invalid> wrote:
>>>> I have a disk with personal information on it that I need
>>>> to wipe.
>>>
>>> There's erase and there's eliminate. Do some research:
>>>
>>> http://en.wikipedia.org/wiki/Data_erasure
>>>
>>> nb
>>>
>> if you are paranoid take a crusher to it.
>>
>> Otherwise dd will render an data on it totally inaccessible to anyone
>> without the ability to strip the drive and read it almost by hand.
>
> And almost certainly not even then. Manufacturers spend huge amounts of
> money trying to extract the absolutely maximum data density from the
> drives. Any data which survives writing 0 to evey byte is clearly data
> which could be harvested to increase the data density on the drive.
http://en.wikipedia.org/wiki/Data_remanence
is worth a look.
Whilst it is acknowledged that overwriting will make it fairly impossible
for mere mortals to recover data, the USA's DoD and NSA require more
stringent destruction methods.
--
Tim Watts
|
|
0
|
|
|
|
Reply
|
usenet8686 (85)
|
12/29/2011 6:23:22 AM
|
|
On 2011-12-29, Tim Watts <tw+usenet@dionic.net> wrote:
> unruh wrote:
>
>> On 2011-12-28, The Natural Philosopher <tnp@invalid.invalid> wrote:
>>> notbob wrote:
>>>> On 2011-12-28, Todd <Todd@invalid.invalid> wrote:
>>>>> I have a disk with personal information on it that I need
>>>>> to wipe.
>>>>
>>>> There's erase and there's eliminate. Do some research:
>>>>
>>>> http://en.wikipedia.org/wiki/Data_erasure
>>>>
>>>> nb
>>>>
>>> if you are paranoid take a crusher to it.
>>>
>>> Otherwise dd will render an data on it totally inaccessible to anyone
>>> without the ability to strip the drive and read it almost by hand.
>>
>> And almost certainly not even then. Manufacturers spend huge amounts of
>> money trying to extract the absolutely maximum data density from the
>> drives. Any data which survives writing 0 to evey byte is clearly data
>> which could be harvested to increase the data density on the drive.
>
> http://en.wikipedia.org/wiki/Data_remanence
>
> is worth a look.
>
> Whilst it is acknowledged that overwriting will make it fairly impossible
> for mere mortals to recover data, the USA's DoD and NSA require more
> stringent destruction methods.
That entry is very old. As I said, IF there really were that kind of
data remaining on the disk, the manufacturers could use it to store more
information on the disk. It is to their advantage to make use of every
last possible bit of information from the disk.
If fact if you had read the Wikipedia page you would have seen the
following paragraphs.
------------------------------------------------------
"Daniel Feenberg, an economist at the private National Bureau of
Economic Research, claims that the chances of overwritten data being
recovered from a modern hard drive amount to "urban legend".[3] He also
points to the "18� minute gap" Rose Mary Woods created on a tape of
Richard Nixon discussing the Watergate break-in. Erased information in
the gap has not been recovered, and Feenberg claims doing so would be an
easy task compared to recovery of a modern high density digital signal.
As of November 2007, the United States Department of Defense considers
overwriting acceptable for clearing magnetic media within the same
security area/zone, but not as a sanitization method. Only degaussing or
physical destruction is acceptable for the latter.[4]
On the other hand, according to the 2006 NIST Special Publication 800-88
(p. 7): "Studies have shown that most of today?s media can be
effectively cleared by one overwrite" and "for ATA disk drives
manufactured after 2001 (over 15 GB) the terms clearing and purging have
converged."[1] An analysis by Wright et al. of recovery techniques,
including magnetic force microscopy, also concludes that a single wipe
is all that is required for modern drives. They point out that the long
time required for multiple wipes "has created a situation where many
organisations ignore the issue all together ? resulting in data leaks
and loss. "[5]"
--------------------------------------------------------
Hwever, disks are cheap. If you are really really worried, then erase
the disk, and then destroy it. Eg open the drive and heat the platter to
red hot to get above the Curie temperature.
>
|
|
0
|
|
|
|
Reply
|
unruh7679 (594)
|
12/29/2011 8:32:13 AM
|
|
On 29/12/2011 07:23, Tim Watts wrote:
> unruh wrote:
>
>> On 2011-12-28, The Natural Philosopher<tnp@invalid.invalid> wrote:
>>> notbob wrote:
>>>> On 2011-12-28, Todd<Todd@invalid.invalid> wrote:
>>>>> I have a disk with personal information on it that I need
>>>>> to wipe.
>>>>
>>>> There's erase and there's eliminate. Do some research:
>>>>
>>>> http://en.wikipedia.org/wiki/Data_erasure
>>>>
>>>> nb
>>>>
>>> if you are paranoid take a crusher to it.
>>>
>>> Otherwise dd will render an data on it totally inaccessible to anyone
>>> without the ability to strip the drive and read it almost by hand.
>>
>> And almost certainly not even then. Manufacturers spend huge amounts of
>> money trying to extract the absolutely maximum data density from the
>> drives. Any data which survives writing 0 to evey byte is clearly data
>> which could be harvested to increase the data density on the drive.
>
> http://en.wikipedia.org/wiki/Data_remanence
>
> is worth a look.
>
> Whilst it is acknowledged that overwriting will make it fairly impossible
> for mere mortals to recover data, the USA's DoD and NSA require more
> stringent destruction methods.
>
Just because the USA DoD and NSA require multiple write passes, does not
mean that has any basis in reality.
If it were possible to recover wiped data, there would be commercial
companies offering the service. (And if you think the DoD or NSA have
"silenced" such commercial efforts, you are seriously paranoid.)
I'm afraid I can't remember where, but I read an article about a
university group that attempted to recover single-pass wiped data from a
relatively modern hard disk (a few years old). They worked on a section
containing about 25 to 30 bits, and after months of work they were
reasonably sure they had recovered some of them (11 bits, IIRC). So I
don't think you need to worry about any "bad guys" reading your wiped data.
The only way to be entirely sure that there is no data left on remapped
blocks is to physically destroy the platters. Shredding them works
well. But if you want to keep the disk, writing over once with zeros is
fine.
Note that it's a different matter entirely with SSD's. Writing over
with zeros (or 0xff) will stop any amateurs, but groups that are willing
to open the device and de-solder the chips will find lots of bits and
pieces - far more than on harddisks re-mapped sectors, and with far less
effort. If you need to protect against that sort of thing, encrypt the
disk before use, or destroy it physically.
|
|
0
|
|
|
|
Reply
|
david2384 (1885)
|
12/29/2011 9:50:37 AM
|
|
David Brown wrote:
> On 29/12/2011 07:23, Tim Watts wrote:
>> unruh wrote:
>>
>>> On 2011-12-28, The Natural Philosopher<tnp@invalid.invalid> wrote:
>>>> notbob wrote:
>>>>> On 2011-12-28, Todd<Todd@invalid.invalid> wrote:
>>>>>> I have a disk with personal information on it that I need
>>>>>> to wipe.
>>>>>
>>>>> There's erase and there's eliminate. Do some research:
>>>>>
>>>>> http://en.wikipedia.org/wiki/Data_erasure
>>>>>
>>>>> nb
>>>>>
>>>> if you are paranoid take a crusher to it.
>>>>
>>>> Otherwise dd will render an data on it totally inaccessible to anyone
>>>> without the ability to strip the drive and read it almost by hand.
>>>
>>> And almost certainly not even then. Manufacturers spend huge amounts of
>>> money trying to extract the absolutely maximum data density from the
>>> drives. Any data which survives writing 0 to evey byte is clearly data
>>> which could be harvested to increase the data density on the drive.
>>
>> http://en.wikipedia.org/wiki/Data_remanence
>>
>> is worth a look.
>>
>> Whilst it is acknowledged that overwriting will make it fairly impossible
>> for mere mortals to recover data, the USA's DoD and NSA require more
>> stringent destruction methods.
>>
>
> Just because the USA DoD and NSA require multiple write passes, does not
> mean that has any basis in reality.
>
> If it were possible to recover wiped data, there would be commercial
> companies offering the service. (And if you think the DoD or NSA have
> "silenced" such commercial efforts, you are seriously paranoid.)
>
> I'm afraid I can't remember where, but I read an article about a
> university group that attempted to recover single-pass wiped data from a
> relatively modern hard disk (a few years old). They worked on a section
> containing about 25 to 30 bits, and after months of work they were
> reasonably sure they had recovered some of them (11 bits, IIRC). So I
> don't think you need to worry about any "bad guys" reading your wiped data.
>
> The only way to be entirely sure that there is no data left on remapped
> blocks is to physically destroy the platters. Shredding them works
> well. But if you want to keep the disk, writing over once with zeros is
> fine.
>
> Note that it's a different matter entirely with SSD's. Writing over
> with zeros (or 0xff) will stop any amateurs, but groups that are willing
> to open the device and de-solder the chips will find lots of bits and
> pieces - far more than on harddisks re-mapped sectors, and with far less
> effort. If you need to protect against that sort of thing, encrypt the
> disk before use, or destroy it physically.
>
+1.
The ability to recover erased data from actual drives is theoretical
only. No practical or simple method exists to do it.
The big leap is between simply deleting files - which merely marks the
sector involved as 'available for re use' but does not erase the actual
data - and actually overwriting it.
At that point data recovery changes from 'something a spotty teenager
can do in his bedroom' to 'something a computer laboratory and thousands
of hours cant guarantee to get more than a fragment pack from'
In fact its probably easier to recover it off a disk that has been crushed.
In the commercial arena, where old PCS and servers are regularly
decommissioned to make way for new, crushing is used because its CHEAPER
than erasure. And it feels more secure to insurance companies.
You can crush a big disk in seconds. It takes hours to erase it.
|
|
0
|
|
|
|
Reply
|
tnp (2253)
|
12/29/2011 10:28:15 AM
|
|
On 29/12/2011 11:28, The Natural Philosopher wrote:
> David Brown wrote:
>> On 29/12/2011 07:23, Tim Watts wrote:
>>> unruh wrote:
>>>
>>>> On 2011-12-28, The Natural Philosopher<tnp@invalid.invalid> wrote:
>>>>> notbob wrote:
>>>>>> On 2011-12-28, Todd<Todd@invalid.invalid> wrote:
>>>>>>> I have a disk with personal information on it that I need
>>>>>>> to wipe.
>>>>>>
>>>>>> There's erase and there's eliminate. Do some research:
>>>>>>
>>>>>> http://en.wikipedia.org/wiki/Data_erasure
>>>>>>
>>>>>> nb
>>>>>>
>>>>> if you are paranoid take a crusher to it.
>>>>>
>>>>> Otherwise dd will render an data on it totally inaccessible to anyone
>>>>> without the ability to strip the drive and read it almost by hand.
>>>>
>>>> And almost certainly not even then. Manufacturers spend huge amounts of
>>>> money trying to extract the absolutely maximum data density from the
>>>> drives. Any data which survives writing 0 to evey byte is clearly data
>>>> which could be harvested to increase the data density on the drive.
>>>
>>> http://en.wikipedia.org/wiki/Data_remanence
>>>
>>> is worth a look.
>>>
>>> Whilst it is acknowledged that overwriting will make it fairly
>>> impossible
>>> for mere mortals to recover data, the USA's DoD and NSA require more
>>> stringent destruction methods.
>>>
>>
>> Just because the USA DoD and NSA require multiple write passes, does
>> not mean that has any basis in reality.
>>
>> If it were possible to recover wiped data, there would be commercial
>> companies offering the service. (And if you think the DoD or NSA have
>> "silenced" such commercial efforts, you are seriously paranoid.)
>>
>> I'm afraid I can't remember where, but I read an article about a
>> university group that attempted to recover single-pass wiped data from
>> a relatively modern hard disk (a few years old). They worked on a
>> section containing about 25 to 30 bits, and after months of work they
>> were reasonably sure they had recovered some of them (11 bits, IIRC).
>> So I don't think you need to worry about any "bad guys" reading your
>> wiped data.
>>
>> The only way to be entirely sure that there is no data left on
>> remapped blocks is to physically destroy the platters. Shredding them
>> works well. But if you want to keep the disk, writing over once with
>> zeros is fine.
>>
>> Note that it's a different matter entirely with SSD's. Writing over
>> with zeros (or 0xff) will stop any amateurs, but groups that are
>> willing to open the device and de-solder the chips will find lots of
>> bits and pieces - far more than on harddisks re-mapped sectors, and
>> with far less effort. If you need to protect against that sort of
>> thing, encrypt the disk before use, or destroy it physically.
>>
> +1.
>
You are correct, except for the scale of the issue.
> The ability to recover erased data from actual drives is theoretical
> only. No practical or simple method exists to do it.
>
It was only ever theoretically possible with older disk technologies -
with modern ones, it is not even theoretically possible.
> The big leap is between simply deleting files - which merely marks the
> sector involved as 'available for re use' but does not erase the actual
> data - and actually overwriting it.
>
Correct.
> At that point data recovery changes from 'something a spotty teenager
> can do in his bedroom' to 'something a computer laboratory and thousands
> of hours cant guarantee to get more than a fragment pack from'
>
When it comes to recovering overwritten data, it was "something a
computer laboratory and thousands of hours can't guarantee to get more
than a fragment from" about 15 years ago, when Peter Gutmann first wrote
his widely misunderstood paper. With modern hard disks, it is well
within the range of easily proven to be impossible (by looking at the
signal to noise ratios).
> In fact its probably easier to recover it off a disk that has been crushed.
>
That's perfectly true. There have been occasions when disks have been
recovered after fires, plane crashes, etc.
> In the commercial arena, where old PCS and servers are regularly
> decommissioned to make way for new, crushing is used because its CHEAPER
> than erasure. And it feels more secure to insurance companies.
>
> You can crush a big disk in seconds. It takes hours to erase it.
Very true.
|
|
0
|
|
|
|
Reply
|
david2384 (1885)
|
12/29/2011 11:09:05 AM
|
|
On Wed, 28 Dec 2011 10:09:15 -0800, Todd wrote:
> Hi All,
>
> I have a disk with personal information on it that I need to wipe. Is
> there some cleaver way of using "dd" to write the alphabet across it?
> Any better ideas? (One pass is fine.)
>
> Many thanks,
> -T
Run badblocks on it in destructive mode. Badblocks writes patterns over
all of the sectors.
|
|
0
|
|
|
|
Reply
|
schvantzkoph (1875)
|
12/29/2011 2:43:23 PM
|
|
On 12/29/2011 06:43 AM, General Schvantzkoph wrote:
> On Wed, 28 Dec 2011 10:09:15 -0800, Todd wrote:
>
>> Hi All,
>>
>> I have a disk with personal information on it that I need to wipe. Is
>> there some cleaver way of using "dd" to write the alphabet across it?
>> Any better ideas? (One pass is fine.)
>>
>> Many thanks,
>> -T
>
> Run badblocks on it in destructive mode. Badblocks writes patterns over
> all of the sectors.
>
Thank you!
|
|
0
|
|
|
|
Reply
|
Todd3275 (76)
|
12/29/2011 11:58:54 PM
|
|
On 2011-12-29, David Brown <david@westcontrol.removethisbit.com> wrote:
>
> If it were possible to recover wiped data, there would be commercial
> companies offering the service. (And if you think the DoD or NSA have
> "silenced" such commercial efforts, you are seriously paranoid.)
That's what I've seen argued here and there when this subject comes up
(and it comes up very often). When you point out that nobody seems to be
able to _demonstrate_ the recoverability of "wiped" data, people pop up
to say that the men in black are capable of doing so but don't want you
to know about it.
As a layman, I'd think there'd be a theoretical (scientific) possibility
perhaps, coupled with a practical impossibility.
Anyway, the OP is always just some dude with nude pics of his gf and
perhaps a stray tax form on his drive, so the whole discussion is a kind
of ridiculous and vain digression.
Or maybe I'm wrong. Maybe "Todd" is somebody with data so vital on his
'puter that hordes of intelligence agents will be willing to increase
the entropy of the universe to the point of stasis in order to try to
pierce his secrets.
Which is why he posts the crucial question on USENET.
|
|
0
|
|
|
|
Reply
|
curty (127)
|
12/30/2011 4:22:45 PM
|
|
On 30/12/11 17:22, Curt wrote:
> On 2011-12-29, David Brown<david@westcontrol.removethisbit.com> wrote:
>>
>> If it were possible to recover wiped data, there would be commercial
>> companies offering the service. (And if you think the DoD or NSA have
>> "silenced" such commercial efforts, you are seriously paranoid.)
>
> That's what I've seen argued here and there when this subject comes up
> (and it comes up very often). When you point out that nobody seems to be
> able to _demonstrate_ the recoverability of "wiped" data, people pop up
> to say that the men in black are capable of doing so but don't want you
> to know about it.
>
People always seem to think there are "men in black" who have more
advanced technology than everyone else, and keep these things as state
secrets. But in western society, with USA in the lead, commercial
forces trump state secrecy. Whenever there is a lot of money to be
made, you can be sure someone will be making it if at all possible -
regardless of what the MiB's would prefer.
> As a layman, I'd think there'd be a theoretical (scientific) possibility
> perhaps, coupled with a practical impossibility.
>
> Anyway, the OP is always just some dude with nude pics of his gf and
> perhaps a stray tax form on his drive, so the whole discussion is a kind
> of ridiculous and vain digression.
>
> Or maybe I'm wrong. Maybe "Todd" is somebody with data so vital on his
> 'puter that hordes of intelligence agents will be willing to increase
> the entropy of the universe to the point of stasis in order to try to
> pierce his secrets.
>
> Which is why he posts the crucial question on USENET.
|
|
0
|
|
|
|
Reply
|
david.brown6091 (326)
|
12/30/2011 5:35:46 PM
|
|
On Wed, 28 Dec 2011 10:09:15 -0800, Todd wrote:
> I have a disk with personal information on it that I need to wipe.
I've been watching the thread with growing frustration, and I'm amazed
no-one's suggested what to me is the obvious solution... DBAN.
DBAN is a purpose-written application to do exactly what you want. See
www.dban.org for details. It's also available as part of the SysRescueCD
installation, which I find contains a really useful suite of tools,
and can run from a USB stick.
Chris
|
|
0
|
|
|
|
Reply
|
chris-usenet (1109)
|
1/1/2012 2:49:49 PM
|
|
On 01/01/12 15:49, Chris Davies wrote:
> On Wed, 28 Dec 2011 10:09:15 -0800, Todd wrote:
>> I have a disk with personal information on it that I need to wipe.
>
> I've been watching the thread with growing frustration, and I'm amazed
> no-one's suggested what to me is the obvious solution... DBAN.
>
> DBAN is a purpose-written application to do exactly what you want. See
> www.dban.org for details. It's also available as part of the SysRescueCD
> installation, which I find contains a really useful suite of tools,
> and can run from a USB stick.
>
> Chris
There are plenty of programs designed to "securely wipe" disks using
multiple passes. They are /all/ useless. A single pass is much faster,
and does just as good a job. A "ATA secure erase" command is quite
similar in practice. There is no recoverable data left on the disk
after a single pass, except possibly in bad blocks. And multi-pass
"Gutmann" pattern utilities will also leave this bad-block loophole.
The only possible use of something like dban is for people who can't
type "dd if=/dev/zero of=/dev/sda bs=1M".
|
|
0
|
|
|
|
Reply
|
david.brown6091 (326)
|
1/2/2012 8:49:04 PM
|
|
On 01/02/2012 12:49 PM, David Brown wrote:
> bs=1M"
Thank you!
|
|
0
|
|
|
|
Reply
|
Todd3275 (76)
|
1/2/2012 9:50:30 PM
|
|
David Brown <david.brown@removethis.hesbynett.no> wrote:
> There are plenty of programs designed to "securely wipe" disks using
> multiple passes. They are /all/ useless. A single pass is much faster,
> and does just as good a job.
Opinion or fact? I'd be curious for a reference to that, please.
Cheers,
Chris
|
|
0
|
|
|
|
Reply
|
chris-usenet (1109)
|
1/3/2012 8:56:05 AM
|
|
On 03/01/2012 09:56, Chris Davies wrote:
> David Brown<david.brown@removethis.hesbynett.no> wrote:
>> There are plenty of programs designed to "securely wipe" disks using
>> multiple passes. They are /all/ useless. A single pass is much faster,
>> and does just as good a job.
>
> Opinion or fact? I'd be curious for a reference to that, please.
>
> Cheers,
> Chris
<http://en.wikipedia.org/wiki/Gutmann_method#Criticism>
People or websites with any sort of "official" standing are always
reluctant to give concrete opinions in matters like this, especially
when there are various government-backed standards (such as from the USA
DoD, and many other countries around the world) that are based on
misunderstandings of Gutmann's original paper.
The biggest piece of evidence for the impossibility (or at least total
impractibility) of recovering overwritten data is the lack of evidence -
if it could be done in real life, rather than just in conspiracy
theories, then we would have heard of it. Someone would be getting a
great deal of prestige, and a great deal of money, by publishing the fact.
To me, this is fact. But since I have no qualifications here, then to
you it is just my opinion. Don't rely on my opinion to hide evidence of
your secret information!
|
|
0
|
|
|
|
Reply
|
david2384 (1885)
|
1/3/2012 9:25:11 AM
|
|
David Brown <david@westcontrol.removethisbit.com> wrote:
> On 03/01/2012 09:56, Chris Davies wrote:
>> David Brown<david.brown@removethis.hesbynett.no> wrote:
>>> There are plenty of programs designed to "securely wipe" disks using
>>> multiple passes. They are /all/ useless. A single pass is much faster,
>>> and does just as good a job.
> <http://en.wikipedia.org/wiki/Gutmann_method#Criticism>
Thanks.
Chris
|
|
0
|
|
|
|
Reply
|
chris-usenet (1109)
|
1/3/2012 5:24:19 PM
|
|
On 12/28/2011 10:09 AM, Todd wrote:
> Hi All,
>
> I have a disk with personal information on it that I need
> to wipe. Is there some cleaver way of using "dd" to write
> the alphabet across it? Any better ideas? (One pass is fine.)
>
> Many thanks,
> -T
SATA 1, 150 MB/sec
# fdisk -l /dev/sdb
Disk /dev/sdb: 203.9 GB, 203928109056 bytes
255 heads, 63 sectors/track, 24792 cylinders
Units = cylinders of 16065 * 512 = 8225280 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes
Disk identifier: 0x00000000
Disk /dev/sdb doesn't contain a valid partition table
# date +%H:%M:%S; dd bs=1M if=/dev/zero of=/dev/sdb; date +%H:%M:%S
21:25:34
dd: writing `/dev/sdb': No space left on device
194482+0 records in
194481+0 records out
203928109056 bytes (204 GB) copied, 3874.7 s, 52.6 MB/s
22:30:10
Elapsed time 1:05:36
|
|
0
|
|
|
|
Reply
|
Todd3275 (76)
|
1/7/2012 1:29:01 AM
|
|
|
36 Replies
60 Views
(page loaded in 0.397 seconds)
Similiar Articles: Delete old disk information from metastat - comp.unix.solaris ...I just want to delete them because I don't need them anymore. Thanks Andr=E9 ... Re: Delete old disk information from metastat Thanks Thomas, ths solved the ... Problem starting Solidworks 2007 - comp.cad.solidworksThe IT guy says he needs to wipe the hard disk clean and reinstall everything. ... that the your user account has not enough rights to do what is necessery (need ... wipe free space from HD - comp.unix.programmerWhat kind of access level would you need to write a program in C to access the EIDE and wipe free space? ... hard drive tutorial FileMonkey Tutorial - How to wipe the disk ... Hidden partition? - comp.sys.laptops.thinkpadTP R51 In Disk Management, I see that the 40 GB internal ... what's in it, how did it get there and do I need to keep it? Could I create an image of it then delete it? Virtual PC w/WinXP - How to boot into Recovery Console? - comp.sys ...I need to run the WinXP recovery console on a Mac G4 ... Virtual PC no longer includes a separate Windows disc. ... I then root around to delete the Connectix prefs and ... How to remove Oracle 11g Instant Client Driver? - comp.databases ...... Ive installed Oracle 11g R 2 Intant Client but I need to ... So, run "fdisk" on the disk of your choice and first ... > > To keep the server clear, can i delete the folder directly? How to increase write speed to local hard drive? - comp.unix ...Hi there, I need to write about 4,000 files (the total ... partition. > But it takes about 35 minutes. > To delete ... for a Linux PC to be a lot faster is that the IDE disk ... dd command for remote disk copy? - comp.os.linux.networking ...You need to read the raw device directly on the windows box. You can send the ... Delete old disk information from metastat - comp.unix.solaris ... dd command for remote ... Quickest way to bulk copy many files from one disk cluster to ...There is a flag to delete files on the target or not. It's very versatile. ... Quickest way to bulk copy many files from one disk cluster ... disk cluster to ... > I need to ... How to exec "login" from the lowest level "shell" - comp.unix ...You need to investigate why /var is filling up, and perhaps modify procedures ... Won't that wipe your disk? You run fsck, find you've then got tons of error-msgs, lost ... Can You Delete ThinkVantage Stuff Entirely? - comp.sys.laptops ...Can You Delete ThinkVantage Stuff Entirely? - comp.sys.laptops ... Disk I/O, BIOS, dosemu, FreeDOS, linux host with ... Perhaps there is a completely different way I need to ... Solaris 10 floppy disk?? - comp.unix.solaris(via "initial install", not upgrade, since I need to re-partition the disks. ... solaris solaris 10 Fast Data Access MMU Miss - comp.unix.solaris ... quick disk wipe ... Dual boot XW8600 - comp.sys.hp.hardwareYou usually need to disable RAID and weird frills from disk controllers to make non-windows stuff work on ... bring ... companies do, if any, so you are stuck ... Wipe the ... display video in a GUI - comp.soft-sys.matlabSo I need to switch between the two axes. I used axes ... close all; % Close all imtool figures. clear; % Erase ... if they didn't write any individual frames out to disk ... How to save files into a specific folder - comp.soft-sys.matlab ...... of first video of the set into 'jpg' files, but i need ... close all; % Close all imtool figures. clear; % Erase ... if they want to write the individual frames out to disk. How to Completely Erase a Hard Disk Drive - Webopedia.comEditor's Recommendation: Need help understanding formatting? This Webopedia "Did ... Disk wipe applications will typically overwrite the master boot record (MBR), ... How to Wipe Out a Hard Drive Without a Boot Disk | eHow.comComments You May Also Like. How to Wipe Out & Restore a Computer Hard Drive. When selling a computer, you will need to wipe out the hard drive to be sure that nobody ... 7/23/2012 5:54:52 PM
|