Re: [GTALUG] Securely wiping SSDs

2024-03-29 Thread Kevin Cozens via talk
On 2024-03-23 10:50, Giles Orr via talk wrote: I have, for many years, used "Darik's Boot and Nuke" on a USB stick to securely wipe spinning hard disks. It takes a long time, but I mostly understand and trust the process. I'm now at the point that I have to wipe and dispose of SSDs, and I'm

Re: [GTALUG] Securely wiping SSDs

2024-03-25 Thread David Thornton via talk
There might have been too much alcohol involved in the conversation to consider it production Ready 藍 On Mon., Mar. 25, 2024, 09:47 D. Hugh Redelmeier via talk, wrote: > | From: David Thornton via talk > > | I grilled my local hardware security friend who said you should never > trust > |

Re: [GTALUG] Securely wiping SSDs

2024-03-25 Thread D. Hugh Redelmeier via talk
| From: David Thornton via talk | I grilled my local hardware security friend who said you should never trust | the secure delete feature in ssd . In general it has been found insecure. It seems hard to accidentally screw up Secure Delete: - everything written to the flash layer is encode -

Re: [GTALUG] Securely wiping SSDs

2024-03-24 Thread Ron / BCLUG via talk
Giles Orr via talk wrote on 2024-03-23 07:50: I have, for many years, used "Darik's Boot and Nuke" on a USB stick to securely wipe spinning hard disks. It takes a long time, but I mostly understand and trust the process. I'm going to take a contrarian stance and suggest that the best way is

Re: [GTALUG] Securely wiping SSDs

2024-03-24 Thread David Thornton via talk
I grilled my local hardware security friend who said you should never trust the secure delete feature in ssd . In general it has been found insecure. As mentioned the "Large grinder" seems like the only way to be sure. On Sat., Mar. 23, 2024, 10:50 Giles Orr via talk, wrote: > I have, for many

Re: [GTALUG] Securely wiping SSDs

2024-03-24 Thread D. Hugh Redelmeier via talk
| From: D. Hugh Redelmeier via talk | Some disks have a feature where they have a key that encrypts every block. | The key persists in the drive. But if you want to wipe the disk, you | change this key. Then every block is nonsense until it is rewritten. | I haven't got time to look up the

Re: [GTALUG] Securely wiping SSDs

2024-03-24 Thread Dave Collier-Brown via talk
From academic papers: dd was found to work on local devices in article 1, remote wiping of phones was found to be immature/buggy in 2. 1. Secure State Deletion: Testing the efficacy and integrity of secure deletion tools on Solid State Drives, M Freeman, A Woodward - ro.ecu.edu.au

Re: [GTALUG] Securely wiping SSDs

2024-03-24 Thread Dave Collier-Brown via talk
On 2024-03-23 22:25, James Knott via talk wrote: On 3/23/24 22:02, Anthony de Boer via talk wrote: And on disposal, the golden standard has always been physical destruction. I don't know if it's been mentioned, but what about the shred command? Quite good for rotating magnetic drives that

Re: [GTALUG] Securely wiping SSDs

2024-03-23 Thread James Knott via talk
On 3/23/24 22:02, Anthony de Boer via talk wrote: And on disposal, the golden standard has always been physical destruction. I don't know if it's been mentioned, but what about the shred command? --- Post to this mailing list talk@gtalug.org Unsubscribe from this mailing list

Re: [GTALUG] Securely wiping SSDs

2024-03-23 Thread Anthony de Boer via talk
If the data that will be stored on a new drive is confidential enough that a privacy leak would be Bad then the current standard of care would seem to be encryption so that if the media did go walkabout it would not be readable. If you’re going to reuse a device for a new project then losing

Re: [GTALUG] Securely wiping SSDs

2024-03-23 Thread Alvin Starr via talk
On 2024-03-23 10:50, Giles Orr via talk wrote: I have, for many years, used "Darik's Boot and Nuke" on a USB stick to securely wipe spinning hard disks. It takes a long time, but I mostly understand and trust the process. I'm now at the point that I have to wipe and dispose of SSDs, and I'm

Re: [GTALUG] Securely wiping SSDs

2024-03-23 Thread Scott Allen via talk
The original request was for a Linux command line utility. However, if any O/S and control interface is acceptable (E.g. Windows GUI program), and possibly having to trust closed-source code, then you may wish to check if the manufacturer of the SSD drive has a utility targeted to wiping your

Re: [GTALUG] Securely wiping SSDs

2024-03-23 Thread William Park via talk
In addition to 'hdparm', I have 'shred' and 'blkdiscard' on my computer. Other distros may vary. -- On 2024-03-23 10:50, Giles Orr via talk wrote: I have, for many years, used "Darik's Boot and Nuke" on a USB stick to securely wipe spinning hard disks. It takes a long time, but I mostly

Re: [GTALUG] Securely wiping SSDs

2024-03-23 Thread D. Hugh Redelmeier via talk
It depends on your paranoia level. In the good old days, there were no levels hiding the disk sectors from the computer. Then came automatic sector mapping for bad blocks. Really convenient. But how are you going to wipe those mapped-out blocks? As far as I know, there is no way to do so.

Re: [GTALUG] Securely wiping SSDs

2024-03-23 Thread Colin McGregor via talk
Not that long ago I had to erase an SSD, and found that DBAN doesn't work with SSDs :-( . So, I did find the following, which does seem to happily erase (securly I hope) SSDs, HDs and other read/write media (different code base, but exactly the same concept as DBAN) : https://aban.derobert.net/

Re: [GTALUG] Securely wiping SSDs

2024-03-23 Thread Dave Collier-Brown via talk
We used to have a simple wipe and an enhanced wipe on SunOS. The first one overwrote the disk with a fixed bit pattern, the latter wrote and rewrote it with different patterns. The idea was to make it hard to detect residual magnetism from some older data. Definitely spinning-rust stuff. For

[GTALUG] Securely wiping SSDs

2024-03-23 Thread Giles Orr via talk
I have, for many years, used "Darik's Boot and Nuke" on a USB stick to securely wipe spinning hard disks. It takes a long time, but I mostly understand and trust the process. I'm now at the point that I have to wipe and dispose of SSDs, and I'm feeling a bit shaky on the methodology. Here's