Securely Erasing HDD/SSD? Questions

Forums › IT Pro and developers › Securely Erasing HDD/SSD? Questions

Aaroona

:)
2901 posts

Uber Geek
+1 received by user: 98

Subscriber

Topic # 151011 11-Aug-2014 09:26

We are busy sorting out a vendor agreement regarding erasing client data on computers we retrieve.

We have looked at tools like DBAN, which is great, but it doesn't support SSD's.

While I was googling around, I saw there is a command that is can be used on SSD's which essentially sends a voltage spike across the NAND, which makes it "Forget" what it was storing.
I guess my main question is;

is there a tool that can do both Mech HDD and SSD's as well, to wipe them securely?
Preferably able to produce a audit report of the wipe being completed? (though not a deal breaker if not)

TIA!

Dynamic

2472 posts

Uber Geek
+1 received by user: 738

Trusted

Lifetime subscriber

Reply # 1106224 11-Aug-2014 10:05

Degaussing machines will destroy a hard drive's data completely but make the drive completely unusable after. DBAN is great, but takes time and time is money.

Degaussing doesn't work on SSDs, and my research suggests physical destruction is currently the best option.

"4 wheels move the body. 2 wheels move the soul."

“Don't believe anything you read on the net. Except this. Well, including this, I suppose.” Douglas Adams

ubergeeknz

3344 posts

Uber Geek
+1 received by user: 1089

Trusted

Vocus

Reply # 1106225 11-Aug-2014 10:06

One person supports this post

Other option - use hardware encryption, then delete the key when it's disposal time.

stuartgr

155 posts

Master Geek
+1 received by user: 3

Reply # 1106226 11-Aug-2014 10:07

Blancco will secure wipe drives and provide reports for collection review. However degaussing then physical destruction would be best if you have access to the tools.

xpd

Chief Trash Bandit
9222 posts

Uber Geek
+1 received by user: 1479

Mod Emeritus

Trusted

Lifetime subscriber

Reply # 1106232 11-Aug-2014 10:14

One person supports this post

Physical destruction would be my preference as well - take the top of the drive off, blow torch the innards.

XPD / Gavin / DemiseNZ

Server : i3-3240 @ 3.40GHz 16GB RAM Win 10 Pro Workstation : i5-3570K @ 3.40GHz 16GB RAM Win 10 Pro Console : Xbox One

https://www.xpd.co.nz - Games, geeks, and more.

AidanS

455 posts

Ultimate Geek
+1 received by user: 139

Reply # 1106237 11-Aug-2014 10:25

One person supports this post

xpd: Physical destruction would be my preference as well - take the top of the drive off, blow torch the innards.

And film it for the report ;).

qyiet

454 posts

Ultimate Geek
+1 received by user: 95

Trusted

Reply # 1106251 11-Aug-2014 10:38

We just make sure there is a hole punched through all the platters. I guess for SSDs you'd have to go with making sure that all the chips were smashed.

Physical destruction is the only sure way.

Warning: reality may differ from above post

billgates

3846 posts

Uber Geek
+1 received by user: 237

Trusted

Reply # 1106257 11-Aug-2014 10:54

Active KillDisk.

Do whatever you want to do man.

gundar

488 posts

Ultimate Geek
+1 received by user: 80

Trusted

Reply # 1106262 11-Aug-2014 10:57

Hi. I recovered hard drives in a previous role using software only and I know what is possible, even if files are partially overwritten. I have also recovered and resold PCs, trying to blank the hard drives using various methods to protect the former owners. Given the amount of time it takes to do the latter properly and the ease with which the former is done, even at hourly minimum wage, it's still cheaper for you to physically destroy the old hard drives and buy new ones for the PCs resale/repurpose. My preferred method is a heavy hammer and chisel, ensuring I have physically buckled the drive such that the platters within have either shattered or are warped beyond reading. This is just for generic clients. Finance and government institutions will have more stringent requirements, though.

timmmay

14371 posts

Uber Geek
+1 received by user: 2613

Trusted

Subscriber

Reply # 1106272 11-Aug-2014 11:18

Eraser is a software solution I use.

AWS Certified Solution Architect Professional, Sysop Administrator Associate, and Developer Associate
TOGAF certified enterprise architect
Professional photographer

networkn

18920 posts

Uber Geek
+1 received by user: 5459

Trusted

Lifetime subscriber

Reply # 1106302 11-Aug-2014 12:05

One person supports this post

I'm also interested in this. I don't mind the time taken as we usually sit them on the bench and let them run. We usually tell customers erasurer will keep the curious and moderately determined from getting their data from the disks, but beyond that, it's a matter of physical destruction.

Sideface

4481 posts

Uber Geek
+1 received by user: 2849

Lifetime subscriber

Reply # 1106350 11-Aug-2014 12:34

DBAN
http://www.dban.org/
"DBAN is free erasure software designed for the home user. It automatically deletes the contents of any hard disk that it can detect."

Sideface

toyonut

1508 posts

Uber Geek
+1 received by user: 213

Reply # 1106381 11-Aug-2014 12:54

We use DDS, document destruction services, they provide us with a bin which all the drives go into and that gets sent for shredding.
I think they say you can put documents and drives in the same bin, but it would pay to check that.

Try Vultr using this link and get us both some credit:

http://www.vultr.com/?ref=7033587-3B

Aaroona

:)
2901 posts

Uber Geek
+1 received by user: 98

Subscriber

Reply # 1106711 11-Aug-2014 20:35

Thanks guys, for your replies.

We are taking them into considering and I'm writing a proposal for our company.
I'm not entirely convinced that all devices should be wiped and sold/reused, so am recommending certain categories be destroyed.

In the end it's going to be a balance between security/privacy and economic value. (and of course liability!)

I will hopefully post back shortly with the recommendations I'm going to go back with to the company, fortunately most of the ones suggested here are already being considered, so good to get that feedback!