Securely Erasing HDD/SSD? Questions

Forums › IT Pro and developers › Securely Erasing HDD/SSD? Questions

Aaroona

3192 posts

Uber Geek

#151011 11-Aug-2014 09:26

We are busy sorting out a vendor agreement regarding erasing client data on computers we retrieve.

We have looked at tools like DBAN, which is great, but it doesn't support SSD's.

While I was googling around, I saw there is a command that is can be used on SSD's which essentially sends a voltage spike across the NAND, which makes it "Forget" what it was storing.
I guess my main question is;

is there a tool that can do both Mech HDD and SSD's as well, to wipe them securely?
Preferably able to produce a audit report of the wipe being completed? (though not a deal breaker if not)

TIA!

Dynamic

3819 posts

Uber Geek

ID Verified

Trusted

Lifetime subscriber

#1106224 11-Aug-2014 10:05

Degaussing machines will destroy a hard drive's data completely but make the drive completely unusable after. DBAN is great, but takes time and time is money.

Degaussing doesn't work on SSDs, and my research suggests physical destruction is currently the best option.

“Don't believe anything you read on the net. Except this. Well, including this, I suppose.” Douglas Adams

Referral links to services I use, really like, and may be rewarded if you sign up:
PocketSmith for budgeting and personal finance management. A great Kiwi company.

Tradepub

Free professional, reference and technical white papers (affiliate link).

ubergeeknz

3344 posts

Uber Geek

Trusted

Vocus

#1106225 11-Aug-2014 10:06

Other option - use hardware encryption, then delete the key when it's disposal time.

stuartgr

163 posts

Master Geek

Lifetime subscriber

#1106226 11-Aug-2014 10:07

Blancco will secure wipe drives and provide reports for collection review. However degaussing then physical destruction would be best if you have access to the tools.

xpd

Geek @ Coastguard NZ
13699 posts

Uber Geek

Retired Mod

ID Verified

Trusted

Lifetime subscriber

#1106232 11-Aug-2014 10:14

Physical destruction would be my preference as well - take the top of the drive off, blow torch the innards.

Gavin / xpd / FastRaccoon / Geek of Coastguard New Zealand

LinkTree - kiwiblast.co.nz - Lego and more

Support Kiwi music! The People Black Smoke Trigger Like A Storm Devilskin

NZ GEEKS Discord______________________________

AidanS

458 posts

Ultimate Geek

#1106237 11-Aug-2014 10:25

xpd: Physical destruction would be my preference as well - take the top of the drive off, blow torch the innards.

And film it for the report ;).

qyiet

454 posts

Ultimate Geek

Trusted

#1106251 11-Aug-2014 10:38

We just make sure there is a hole punched through all the platters. I guess for SSDs you'd have to go with making sure that all the chips were smashed.

Physical destruction is the only sure way.

Warning: reality may differ from above post

billgates

4704 posts

Uber Geek

Trusted

#1106257 11-Aug-2014 10:54

Active KillDisk.

Do whatever you want to do man.

gundar

488 posts

Ultimate Geek

Trusted

#1106262 11-Aug-2014 10:57

Hi. I recovered hard drives in a previous role using software only and I know what is possible, even if files are partially overwritten. I have also recovered and resold PCs, trying to blank the hard drives using various methods to protect the former owners. Given the amount of time it takes to do the latter properly and the ease with which the former is done, even at hourly minimum wage, it's still cheaper for you to physically destroy the old hard drives and buy new ones for the PCs resale/repurpose. My preferred method is a heavy hammer and chisel, ensuring I have physically buckled the drive such that the platters within have either shattered or are warped beyond reading. This is just for generic clients. Finance and government institutions will have more stringent requirements, though.

timmmay

20424 posts

Uber Geek

Trusted

Lifetime subscriber

#1106272 11-Aug-2014 11:18

Eraser is a software solution I use.

networkn

Networkn
32184 posts

Uber Geek

ID Verified

Trusted

Lifetime subscriber

#1106302 11-Aug-2014 12:05

I'm also interested in this. I don't mind the time taken as we usually sit them on the bench and let them run. We usually tell customers erasurer will keep the curious and moderately determined from getting their data from the disks, but beyond that, it's a matter of physical destruction.

Sideface

9231 posts

Uber Geek

Trusted

Lifetime subscriber

#1106350 11-Aug-2014 12:34

DBAN
http://www.dban.org/
"DBAN is free erasure software designed for the home user. It automatically deletes the contents of any hard disk that it can detect."

Sideface

toyonut

1508 posts

Uber Geek

#1106381 11-Aug-2014 12:54

We use DDS, document destruction services, they provide us with a bin which all the drives go into and that gets sent for shredding.
I think they say you can put documents and drives in the same bin, but it would pay to check that.

Try Vultr using this link and get us both some credit:

http://www.vultr.com/?ref=7033587-3B

Aaroona

3192 posts

Uber Geek

#1106711 11-Aug-2014 20:35

Thanks guys, for your replies.

We are taking them into considering and I'm writing a proposal for our company.
I'm not entirely convinced that all devices should be wiped and sold/reused, so am recommending certain categories be destroyed.

In the end it's going to be a balance between security/privacy and economic value. (and of course liability!)

I will hopefully post back shortly with the recommendations I'm going to go back with to the company, fortunately most of the ones suggested here are already being considered, so good to get that feedback!