[ale] Need an iso to wipe hard drives.

Greg Freemyer greg.freemyer at gmail.com
Fri Apr 16 12:38:27 EDT 2010


Who can I send it to so that it can live on the ALE website?

On Fri, Apr 16, 2010 at 12:04 PM, Brian Pitts <brian at polibyte.com> wrote:
> On 04/16/2010 11:31 AM, Greg Freemyer wrote:
>>
>> NIST has a sanitation paper that says disk drives of 20GB or larger
>> capacity are not recoverable even via laboratory means after a single
>> wipe with zero's.
>>
>> So your just wasting cpu cycles using /dev/urandom.  Just use
>> /dev/zero.  And just do it once.
>
> The link you shared to a discussion of that paper a while back is dead.
> Do you know of any more sources? I'd really like to have something to
> wave at the "you must wipe it 27 times" people.
>
>> Also, ext2/3 reserves x% of the drive for root, so if your doing the
>> above as a normal user, your missing that x%.  I think x% is 5%, but I
>> don't recall for sure.  And 5% of 1TB is 50GB, so it is a big deal.
>
> At Free IT Athens, we run sfill and sswap from the secure-delete suite
> of tools as a post-install action to securely erase all unused space on
> a system being refurbished. sfill sipes the disk space and inode space,
> and sswap takes care of the swap partition.
>
> --
> All the best,
> Brian Pitts
> _______________________________________________
> Ale mailing list
> Ale at ale.org
> http://mail.ale.org/mailman/listinfo/ale
> See JOBS, ANNOUNCE and SCHOOLS lists at
> http://mail.ale.org/mailman/listinfo
>



-- 
Greg Freemyer
Head of EDD Tape Extraction and Processing team
Litigation Triage Solutions Specialist
http://www.linkedin.com/in/gregfreemyer
CNN/TruTV Aired Forensic Imaging Demo -
   http://insession.blogs.cnn.com/2010/03/23/how-computer-evidence-gets-retrieved/

The Norcross Group
The Intersection of Evidence & Technology
http://www.norcrossgroup.com



More information about the Ale mailing list