| View previous topic :: View next topic |
| Author |
Message |
serene LXF regular

Joined: Sun Jun 19, 2005 1:43 pm Posts: 101
|
Posted: Tue Jan 01, 2013 8:47 pm Post subject: Is my drive 'really' secure after wiping ? |
|
|
Hi.
I usually wipe my drives by;
dcfldd bs=1M if=/dev/zero of=/dev/sda
I tried the 'secure' ATA method, which in theory should wipe the protected areas and bad sectors.
Questiion;
Since dd or dcfldd writes low level zeros directly to the disk, shouldn't it overwrite any and all areas of the drive, including reserved areas ?
I'd rather use dd instead of the ATA method if it acomplishes the same thing.
Thank you. |
|
| Back to top |
|
 |
Dutch_Master LXF regular
Joined: Tue Mar 27, 2007 2:49 am Posts: 2354
|
Posted: Tue Jan 01, 2013 9:09 pm Post subject: |
|
|
You need to weigh up the risks against the effort: what info is on the disk and how likely is it the new owner of the disk (assuming you wipe it before flogging it off) is going to try to retrieve any residual info.
If you want it done properly, format the drive for a different filesystem (XFS, ext4, JFS, NTFS, ZFS, (V)FAT) then copy data to it from /dev/null and /dev/random (minimum 5x each), then reformat in a totally different FS and start the copy process again. Use all above file systems in that order. No "quick format", the full conversion! |
|
| Back to top |
|
 |
serene LXF regular

Joined: Sun Jun 19, 2005 1:43 pm Posts: 101
|
Posted: Tue Jan 01, 2013 9:39 pm Post subject: |
|
|
Dutch_Master,
Thank you, however this does not address my question.
If hard drives are wiped via my example, will the reserved, protected, and remaped bad sectors/blocks be overwritten ?
Or is the 'only' way to acomplish the above is to use the secure erase method...
https://ata.wiki.kernel.org/index.php/ATA_Secure_Erase
Thank you.
Serene |
|
| Back to top |
|
 |
johnhudson LXF regular
Joined: Wed Aug 03, 2005 2:37 pm Posts: 767
|
Posted: Tue Jan 01, 2013 10:43 pm Post subject: |
|
|
For a belt and braces approach try
http://www.sysresccd.org/SystemRescueCd_Homepage
which offers several options which do multiple overwrites to prevent recovery of any data. Read their documentation first if you want an explanation of why single overwrites may not deter a determined cracker. |
|
| Back to top |
|
 |
nelz Moderator

Joined: Mon Apr 04, 2005 12:52 pm Posts: 8002 Location: Warrington, UK
|
Posted: Tue Jan 01, 2013 11:06 pm Post subject: |
|
|
If you are that concerned about your data, or it really is that sensitive, play safe and destroy the drive.
Not only is a lump hammer more effective than dd, it is a damn sight more therapeutic too  _________________ Unix is user-friendly. It's just very selective about who it's friends are. |
|
| Back to top |
|
 |
Ram LXF regular

Joined: Thu Apr 07, 2005 10:44 pm Posts: 1552 Location: Guisborough
|
Posted: Wed Jan 02, 2013 1:46 am Post subject: |
|
|
| nelz wrote: | If you are that concerned about your data, or it really is that sensitive, play safe and destroy the drive.
Not only is a lump hammer more effective than dd, it is a damn sight more therapeutic too  |
Or drilling straight through the platters. _________________
Ubuntu LXDE 12.04 running on AMD Phenom II*4; ASUS Crosshair III Formula MB; 4 GB Ram.....
|
|
| Back to top |
|
 |
ajgreeny LXF regular
Joined: Wed May 10, 2006 9:18 pm Posts: 407 Location: Oxfordshire.
|
Posted: Wed Jan 02, 2013 11:31 am Post subject: |
|
|
There is a lot of apocryphal information that suggests that data can be retrieved from disks that have been overwritten several times, even after using such utilities as DBAN.
Having searched a few months ago, just out of interest, not because I had anything to wipe, it became quickly obvious that the cost of retrieval of anything from a disk that has been overwritten even once with zeros, but better with random data, was exorbitant, and only in the case of high forensic need would it ever be contemplated, and even then would probably fail.
This google search may put your mind at rest, but do your own fuller search if you want to.
http://www.google.co.uk/search?q=data+retrieval+ater+overwriting+disk+with+zeros&ie=UTF-8#hl=en&tbo=d&spell=1&q=data+retrieval+after+overwriting+disk+with+zeros&sa=X&ei=vBnkUMLkMKu00QWmmIGQDQ&ved=0CDIQvwUoAA&bav=on.2,or.r_gc.r_pw.r_qf.&bvm=bv.1355534169,d.d2k&fp=cf23a98e91636af7&bpcl=40096503&biw=1440&bih=718 _________________ Ubuntu 10.04 user, and loving it! |
|
| Back to top |
|
 |
serene LXF regular

Joined: Sun Jun 19, 2005 1:43 pm Posts: 101
|
Posted: Wed Jan 02, 2013 3:13 pm Post subject: |
|
|
A Happy New Year to all.
The question remains unanswered.
'Not' seeking alternative erase methods, recovery, physical destruction, risks.
I am seeking experience with using hard drive ATA Secure Erase command (Wipes all reserved areas including blocks reserved as bad) and is it "The Same" as using dd ?
For example;
dd bs=1M if=/dev/zero of=/dev/sda
vs.
hdparm --user-master u --security-erase NULL /dev/sda
Does anyone have 1st hand experience in determining if dd will wipe all reserved/hidden hard drive areas, including reserved bad blocks ?
Thank you.
Serene |
|
| Back to top |
|
 |
Paradigm Shifter

Joined: Sat May 19, 2012 1:16 pm Posts: 84
|
|
| Back to top |
|
 |
serene LXF regular

Joined: Sun Jun 19, 2005 1:43 pm Posts: 101
|
Posted: Thu Jan 03, 2013 3:49 pm Post subject: |
|
|
Paradigm Shifter,
Nice link.
The link you provided says;
"Summary:
ATA-SE methodology is superior to Block Erase methodology due to ATA-SE’s ability to overwrite bad blocks, due to it’s reduced time demand and due to it’s improved completion feedback."
I have not found a reliable method to overwrite bad blocks.
Using dd interestingly results in the exact amount of wipe time as a secure ATA command.
By the way, if any of you are interested in using the ATA secure erase, the 'Parted Magic' live cd is great... use the "Disk Eraser".
I understand it to wipe all protected areas and reserved bad block areas by using the secure ATA commands, from a nice little GUI.
You can also use hdparm, but the GUI is pretty stress free.
You may want to see how long it will take for a secure erase, remain seated for a 3TB drive (ouch)....
$ hdparm -I /dev/sda | grep -i "enhanced security"
Results for 1TB;
$ 174min for SECURITY ERASE UNIT. 174min for ENHANCED SECURITY ERASE UNIT.
Thanks all... I'll continue research on my own. Some food for thought eh? It would be nice to know eventually if a simple dd will wipe all reserved/hidden areas of a hard drive.
Bye for now.
Cheers.
Serene |
|
| Back to top |
|
 |
| View previous topic :: View next topic |
|