Securely Erasing HDD/SSD? Questions

Forums › IT Pro and developers › Securely Erasing HDD/SSD? Questions

Aaroona

3204 posts

Uber Geek
+1 received by user: 169

#151011 11-Aug-2014 09:26

We are busy sorting out a vendor agreement regarding erasing client data on computers we retrieve.

We have looked at tools like DBAN, which is great, but it doesn't support SSD's.

While I was googling around, I saw there is a command that is can be used on SSD's which essentially sends a voltage spike across the NAND, which makes it "Forget" what it was storing.
I guess my main question is;

is there a tool that can do both Mech HDD and SSD's as well, to wipe them securely?
Preferably able to produce a audit report of the wipe being completed? (though not a deal breaker if not)

TIA!

Dynamic

4015 posts

Uber Geek
+1 received by user: 1851

ID Verified

Trusted

Lifetime subscriber

#1106224 11-Aug-2014 10:05

Degaussing machines will destroy a hard drive's data completely but make the drive completely unusable after. DBAN is great, but takes time and time is money.

Degaussing doesn't work on SSDs, and my research suggests physical destruction is currently the best option.

“Don't believe anything you read on the net. Except this. Well, including this, I suppose.” Douglas Adams

ubergeeknz

3344 posts

Uber Geek
+1 received by user: 1041

Trusted

Vocus

#1106225 11-Aug-2014 10:06

Other option - use hardware encryption, then delete the key when it's disposal time.

stuartgr

163 posts

Master Geek
+1 received by user: 8

Lifetime subscriber

#1106226 11-Aug-2014 10:07

Blancco will secure wipe drives and provide reports for collection review. However degaussing then physical destruction would be best if you have access to the tools.

xpd

Geek of Coastguard
14115 posts

Uber Geek
+1 received by user: 4574

Retired Mod

ID Verified

Trusted

Lifetime subscriber

#1106232 11-Aug-2014 10:14

Physical destruction would be my preference as well - take the top of the drive off, blow torch the innards.

XPD / Gavin

LinkTree

AidanS

458 posts

Ultimate Geek
+1 received by user: 135

#1106237 11-Aug-2014 10:25

xpd: Physical destruction would be my preference as well - take the top of the drive off, blow torch the innards.

And film it for the report ;).

qyiet

454 posts

Ultimate Geek
+1 received by user: 94

Trusted

#1106251 11-Aug-2014 10:38

We just make sure there is a hole punched through all the platters. I guess for SSDs you'd have to go with making sure that all the chips were smashed.

Physical destruction is the only sure way.

Warning: reality may differ from above post

AliExpress

Shop now on AliExpress (affiliate link).

billgates

4705 posts

Uber Geek
+1 received by user: 671

Trusted

#1106257 11-Aug-2014 10:54

Active KillDisk.

Do whatever you want to do man.

gundar

488 posts

Ultimate Geek
+1 received by user: 80

Trusted

#1106262 11-Aug-2014 10:57

Hi. I recovered hard drives in a previous role using software only and I know what is possible, even if files are partially overwritten. I have also recovered and resold PCs, trying to blank the hard drives using various methods to protect the former owners. Given the amount of time it takes to do the latter properly and the ease with which the former is done, even at hourly minimum wage, it's still cheaper for you to physically destroy the old hard drives and buy new ones for the PCs resale/repurpose. My preferred method is a heavy hammer and chisel, ensuring I have physically buckled the drive such that the platters within have either shattered or are warped beyond reading. This is just for generic clients. Finance and government institutions will have more stringent requirements, though.

timmmay

20858 posts

Uber Geek
+1 received by user: 5350

Trusted

Lifetime subscriber

#1106272 11-Aug-2014 11:18

Eraser is a software solution I use.

networkn

Networkn
32862 posts

Uber Geek
+1 received by user: 15453

ID Verified

Trusted

Lifetime subscriber

#1106302 11-Aug-2014 12:05

I'm also interested in this. I don't mind the time taken as we usually sit them on the bench and let them run. We usually tell customers erasurer will keep the curious and moderately determined from getting their data from the disks, but beyond that, it's a matter of physical destruction.

Sideface

9649 posts

Uber Geek
+1 received by user: 15596

Trusted

Lifetime subscriber

#1106350 11-Aug-2014 12:34

DBAN
http://www.dban.org/
"DBAN is free erasure software designed for the home user. It automatically deletes the contents of any hard disk that it can detect."

Sideface

Apple TV

Stream your favourite shows now on Apple TV (affiliate link).

toyonut

1508 posts

Uber Geek
+1 received by user: 211

#1106381 11-Aug-2014 12:54

We use DDS, document destruction services, they provide us with a bin which all the drives go into and that gets sent for shredding.
I think they say you can put documents and drives in the same bin, but it would pay to check that.

Try Vultr using this link and get us both some credit:

http://www.vultr.com/?ref=7033587-3B

Aaroona

3204 posts

Uber Geek
+1 received by user: 169

#1106711 11-Aug-2014 20:35

Thanks guys, for your replies.

We are taking them into considering and I'm writing a proposal for our company.
I'm not entirely convinced that all devices should be wiped and sold/reused, so am recommending certain categories be destroyed.

In the end it's going to be a balance between security/privacy and economic value. (and of course liability!)

I will hopefully post back shortly with the recommendations I'm going to go back with to the company, fortunately most of the ones suggested here are already being considered, so good to get that feedback!