Securely Erasing HDD/SSD? Questions

Forums › IT Pro and developers › Securely Erasing HDD/SSD? Questions

Aaroona

Human
2978 posts

Uber Geek

Subscriber

#151011 11-Aug-2014 09:26

We are busy sorting out a vendor agreement regarding erasing client data on computers we retrieve.

We have looked at tools like DBAN, which is great, but it doesn't support SSD's.

While I was googling around, I saw there is a command that is can be used on SSD's which essentially sends a voltage spike across the NAND, which makes it "Forget" what it was storing.
I guess my main question is;

is there a tool that can do both Mech HDD and SSD's as well, to wipe them securely?
Preferably able to produce a audit report of the wipe being completed? (though not a deal breaker if not)

TIA!

Dynamic

2768 posts

Uber Geek

Trusted

Lifetime subscriber

#1106224 11-Aug-2014 10:05

Degaussing machines will destroy a hard drive's data completely but make the drive completely unusable after. DBAN is great, but takes time and time is money.

Degaussing doesn't work on SSDs, and my research suggests physical destruction is currently the best option.

"4 wheels move the body. 2 wheels move the soul."

“Don't believe anything you read on the net. Except this. Well, including this, I suppose.” Douglas Adams

ubergeeknz

3344 posts

Uber Geek

Trusted

Vocus

#1106225 11-Aug-2014 10:06

Other option - use hardware encryption, then delete the key when it's disposal time.

stuartgr

159 posts

Master Geek

Lifetime subscriber

#1106226 11-Aug-2014 10:07

Blancco will secure wipe drives and provide reports for collection review. However degaussing then physical destruction would be best if you have access to the tools.

xpd

Budget Gamer
10522 posts

Uber Geek

Mod Emeritus

Trusted

Lifetime subscriber

#1106232 11-Aug-2014 10:14

Physical destruction would be my preference as well - take the top of the drive off, blow torch the innards.

XPD^ / DemiseNZ

Blog Free Games Twitter

AidanS

458 posts

Ultimate Geek

#1106237 11-Aug-2014 10:25

xpd: Physical destruction would be my preference as well - take the top of the drive off, blow torch the innards.

And film it for the report ;).

qyiet

454 posts

Ultimate Geek

Trusted

#1106251 11-Aug-2014 10:38

We just make sure there is a hole punched through all the platters. I guess for SSDs you'd have to go with making sure that all the chips were smashed.

Physical destruction is the only sure way.

Warning: reality may differ from above post

billgates

4162 posts

Uber Geek

Trusted

#1106257 11-Aug-2014 10:54

Active KillDisk.

Do whatever you want to do man.

gundar

488 posts

Ultimate Geek

Trusted

#1106262 11-Aug-2014 10:57

Hi. I recovered hard drives in a previous role using software only and I know what is possible, even if files are partially overwritten. I have also recovered and resold PCs, trying to blank the hard drives using various methods to protect the former owners. Given the amount of time it takes to do the latter properly and the ease with which the former is done, even at hourly minimum wage, it's still cheaper for you to physically destroy the old hard drives and buy new ones for the PCs resale/repurpose. My preferred method is a heavy hammer and chisel, ensuring I have physically buckled the drive such that the platters within have either shattered or are warped beyond reading. This is just for generic clients. Finance and government institutions will have more stringent requirements, though.

timmmay

15923 posts

Uber Geek

Trusted

Subscriber

#1106272 11-Aug-2014 11:18

Eraser is a software solution I use.

networkn

22545 posts

Uber Geek

Trusted

Lifetime subscriber

#1106302 11-Aug-2014 12:05

I'm also interested in this. I don't mind the time taken as we usually sit them on the bench and let them run. We usually tell customers erasurer will keep the curious and moderately determined from getting their data from the disks, but beyond that, it's a matter of physical destruction.

Sideface

5857 posts

Uber Geek

Trusted

Lifetime subscriber

#1106350 11-Aug-2014 12:34

DBAN
http://www.dban.org/
"DBAN is free erasure software designed for the home user. It automatically deletes the contents of any hard disk that it can detect."

Sideface

toyonut

1508 posts

Uber Geek

#1106381 11-Aug-2014 12:54

We use DDS, document destruction services, they provide us with a bin which all the drives go into and that gets sent for shredding.
I think they say you can put documents and drives in the same bin, but it would pay to check that.

Try Vultr using this link and get us both some credit:

http://www.vultr.com/?ref=7033587-3B

Aaroona

Human
2978 posts

Uber Geek

Subscriber

#1106711 11-Aug-2014 20:35

Thanks guys, for your replies.

We are taking them into considering and I'm writing a proposal for our company.
I'm not entirely convinced that all devices should be wiped and sold/reused, so am recommending certain categories be destroyed.

In the end it's going to be a balance between security/privacy and economic value. (and of course liability!)

I will hopefully post back shortly with the recommendations I'm going to go back with to the company, fortunately most of the ones suggested here are already being considered, so good to get that feedback!