This article goes into detail about why it is nearly impossible to derive usable forensic data from an SSD drive or memory chip.
Some news, views and musing about things going on in the Information Security World.
Showing posts with label secure erasure. Show all posts
Showing posts with label secure erasure. Show all posts
Friday, January 6, 2012
Rock Solid: Will Digital Forensics Crack SSD’s?
Journalists always formulate their headlines by stating predictions they know will happen, or asking questions that they know are unlikely to happen. Whenever a headline asks a question, they are really saying 'No'
Key Words:
data destruction,
forensics,
physical security,
secure erasure,
security controls
Wednesday, May 26, 2010
Data Destruction
How many times should a hard drive be overwritten before one can safely assume its data is no longer retrievable?
A lot of shady software vendors tell you that you should overwrite repeatedly with various patterns, such as the 35-pass method created by Peter Gutmann more than 30 years ago. Some of these packages are free, most of them cost some arbitrary amount of money. All of them are a waste of money.
Even Mr. Gutmann stated that any hard drives that came out after the early 90's MFM and RLL drives can simply be overwritten once with random data. Sticking a decommissioned hard drive into any unix-like box, or booting the system with a live-CD version of Linux, and simply overwriting it with "dd if=/dev/urandom of=/dev/" will do the trick, and it won't cost you anything.
A lot of shady software vendors tell you that you should overwrite repeatedly with various patterns, such as the 35-pass method created by Peter Gutmann more than 30 years ago. Some of these packages are free, most of them cost some arbitrary amount of money. All of them are a waste of money.
Even Mr. Gutmann stated that any hard drives that came out after the early 90's MFM and RLL drives can simply be overwritten once with random data. Sticking a decommissioned hard drive into any unix-like box, or booting the system with a live-CD version of Linux, and simply overwriting it with "dd if=/dev/urandom of=/dev/
Subscribe to:
Posts (Atom)