RE: Hard Drive eraser recommendation

["Craig S. Wright" <craig.wright () Information-Defense com>]

Anything that uses the "secure erase" (SE) feature of the ATA command set.

Any single wipe is ok, the issue is that they may not complete and may not
get all sectors.

Setting an ATA (inc. SATA, PATA etc) drive to SE mode means that it will
complete a wipe. In fact, it will continue the wipe process if the drive is
powered down and moved to another host.

You power the drive down with a normal wipe tool, you have a partially wiped
drive.

You power down with SE set, and the firmware on the drive will start to wipe
the remaining sectors even without an OS. As soon as it is powered, it
starts a wipe cycle. If you are in a hurry, modern (PATAII etc) drives have
an encrypted sector. When SE is run, the key is deleted first. This means
that you have a fairly secure erase in milliseconds and this remains even if
the platter is transferred to another unit.

See:
http://cmrr.ucsd.edu/people/Hughes/SecureErase.shtml

Regards,
...
Dr. Craig S Wright GSE, GSE-Malware, GSE-Compliance, LLM, & ...
Information Defense Pty Ltd



-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On
Behalf Of CrayNetX
Sent: Thursday, 1 October 2009 1:21 AM
To: Nick Duda; security-basics () securityfocus com
Subject: Re: Hard Drive eraser recommendation

Maybe not what you are exactly looking for but I would take alook at 
DBAN: http://sourceforge.net/projects/dban/
It's easy to use and offers severals options for deleting the content of 
your hard disk.

Nick Duda schrieb:
> I'm looking for a hard drive erasing solution (hardware) that meets the
DOD recommendation for erasing but is also fairly easy for the helpdesk to
just hook a drive up to, press a button and walk away until it is complete.
Does anyone have any recommendations for one that is good and low cost?
> - Nick
>
> ------------------------------------------------------------------------
> Securing Apache Web Server with thawte Digital Certificate
> In this guide we examine the importance of Apache-SSL and who needs an SSL
certificate.  We look at how SSL works, how it benefits your company and how
your customers can tell if a site is secure. You will find out how to test,
purchase, install and use a thawte Digital Certificate on your Apache web
server. Throughout, best practices for set-up are highlighted to help you
ensure efficient ongoing management of your encryption keys and digital
certificates.
>
http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727
d1
> ------------------------------------------------------------------------
>
>
>   


------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL
certificate.  We look at how SSL works, how it benefits your company and how
your customers can tell if a site is secure. You will find out how to test,
purchase, install and use a thawte Digital Certificate on your Apache web
server. Throughout, best practices for set-up are highlighted to help you
ensure efficient ongoing management of your encryption keys and digital
certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727
d1
------------------------------------------------------------------------


------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------