Industry


Ads by TechWords

See your link here


Martin McKeay's picture
Martin McKeay

Security Matters

How do you dispose of old hard drives?

If you're a geek like me, you've got at least a few old hard drives sitting around collecting dust.  They may not be MFM or RLL drives, but you've probably got some 8 or 20 gig drives sitting around from an old upgrade.   Do you even remember what OS was on those systems, let alone what sort of sensetive information might be sitting on those drives?  According to some of the latest findings out there, you better either take the time to do a military-grade wipe on the drives or physically destroy them; the alternative is throwing them out and hoping no one comes along and does a forensics analysis of your old drive in the hopes of finding your credit card information.

Deleting the files on your drive just isn't enough anymore.  The tools exist for even an amateur computer sleuth to recover files on the hard drive if it wasn't properly formated.  And we need these tools for the occasional mistake or disaster, but we have to be aware of the fact that the bad guys have them too.  Anything you might be able to recover using testdisk or ddrescue will also be recoverable by someone snooping for account information or credit card numbers.

So here's what I do:  at work I use any of the many Linux LiveCD's, as long as they contain Wipe.   Three or four passes over the data with random  1's and 0's  make the data pretty hard for anyone except the most talented and dedicated  forensics analyst to recover any data.  And at home I have even a simpler solution:  a cordless drill with a 3/8" titanium bit.  One or two holes in the platter make certain anyone without a scanning electron microscope isn't going to be able to use the disk in the future.  And it only takes about 30 seconds per drive.

What People Are Saying

I recovered data of many

I recovered data of many HDD. Make it unaccesscible.
Lock disk or lock and wipe, then quick spray paint around cylinder center to disable master cyl. Ultrasonic water bath wont help.

Every christmas at my

Every christmas at my company, each department decorates their area in somewhat of an undocumented contest. Last year I degaused (we own a Garner HD-1 Hard Disk Drive Degausser ) and disassembled some really old full height SCSI 2GB drives. I removed the platters and hung them from the ceiling tiles using paperclips. So, in short, hard drive platters make really nice ornaments for an IT group. Quick Note: The original cost of those drives was about $1000 back in the day. We also use the magnents from those drives to hang staplers from cabinets and other metal object.

Oh... and remove the Magnets

Oh... and remove the Magnets from the Read/Write head mechanism. ( AGAIN, CAUTION )
the Read/Write heads are SHARP!.)
Once you have the Magnet's removed, use them on your fridge to hold up TONS of kids art, calendars and even large cats. They are AWESOME Magenets.
Watch Your Fingers. They really stick to the Fridge.

1. Find a good movie on HBO

1. Find a good movie on HBO or one of your favorite DVD's.
2. Get a nice pair of wire cutters, some pliers, a screwdriver or two.
3. Start watching the movie and sit on the floor with your back against the couch.
4. Use the wire cutters in a vise like method to remove the bolts holding the cover onto the hard drive container. You will hear a small "Whoosh" as you open up the hard drive. This is the vacuum seal being broken. Cool.
5. Take the wire cutters and snip off the EXTREMELY SHARP read write heads. Caution. They do cut fingers.
6. Take the pliers, screwdrivers and anything else you can find to remove the platters/disks out of the device.
7. CAUTION. I came across one set of really shiny disks that turned out to be GLASS, and they shattered all over. Hey, NSA, Try putting that one back together.
8. Enjoy the movie.
9. If and when you get the disks removed, use them to learn how to juggle.

If you want a simple, safe,

If you want a simple, safe, and secure way to destroy drives, consider the HDC-V (Best Product of TechnoSecurity 2006).

The patent pending HDC-V is simple, safe, and secure. The challenge with methods like degaussing and overwriting is that it might not work and the time....

www.edrsolutions.com

Darik's Boot and Nuke

Darik's Boot and Nuke (http://dban.sourceforge.net) is a free secure-wipe program that can be saved on a bootable floppy or CD. You can choose from a simple all-zeroes pass to the American DoD 5220-22.M standard and others. It even supports today's new huge hard drives (>137GB.) Did I mention it's free?

There was a recent dicussion

There was a recent dicussion on this topic on Techrepublic. The two suggestions that were given were to encrypt all files to assure that they can't be accessed later, or to erase the information completely... several times.

In any case, something HAS to be done to make sure that any sensitive data doesn't end up in the hands of fraudsters.