[ale] Need an iso to wipe hard drives.
Greg Freemyer
greg.freemyer at gmail.com
Fri Apr 16 12:38:27 EDT 2010
Who can I send it to so that it can live on the ALE website?
On Fri, Apr 16, 2010 at 12:04 PM, Brian Pitts <brian at polibyte.com> wrote:
> On 04/16/2010 11:31 AM, Greg Freemyer wrote:
>>
>> NIST has a sanitation paper that says disk drives of 20GB or larger
>> capacity are not recoverable even via laboratory means after a single
>> wipe with zero's.
>>
>> So your just wasting cpu cycles using /dev/urandom. Just use
>> /dev/zero. And just do it once.
>
> The link you shared to a discussion of that paper a while back is dead.
> Do you know of any more sources? I'd really like to have something to
> wave at the "you must wipe it 27 times" people.
>
>> Also, ext2/3 reserves x% of the drive for root, so if your doing the
>> above as a normal user, your missing that x%. I think x% is 5%, but I
>> don't recall for sure. And 5% of 1TB is 50GB, so it is a big deal.
>
> At Free IT Athens, we run sfill and sswap from the secure-delete suite
> of tools as a post-install action to securely erase all unused space on
> a system being refurbished. sfill sipes the disk space and inode space,
> and sswap takes care of the swap partition.
>
> --
> All the best,
> Brian Pitts
> _______________________________________________
> Ale mailing list
> Ale at ale.org
> http://mail.ale.org/mailman/listinfo/ale
> See JOBS, ANNOUNCE and SCHOOLS lists at
> http://mail.ale.org/mailman/listinfo
>
--
Greg Freemyer
Head of EDD Tape Extraction and Processing team
Litigation Triage Solutions Specialist
http://www.linkedin.com/in/gregfreemyer
CNN/TruTV Aired Forensic Imaging Demo -
http://insession.blogs.cnn.com/2010/03/23/how-computer-evidence-gets-retrieved/
The Norcross Group
The Intersection of Evidence & Technology
http://www.norcrossgroup.com
More information about the Ale
mailing list