Re: Secure Delete for Windows

[bkfsec <bkfsec () sdf lonestar org>]

J.A. Terranson wrote:

> (1) I do have something "useful to say".  The exact same thing every other
> security conscious person is saying:
>
> No source?  An exe?  Baaaaaddddd newwwwwssssss....
>
> Publicly released "tools" are only safely released through open source
> (or, "full disclosure" if you prefer).  Without source, it's you who
> should be taking a turn at stfu.
>
>  
I'm going to back up the general point of J.A.'s statement.

People who don't care about security and could care less about 
transparency don't, by and large, use "file shredders".  A handful of 
paranoid users might, but I think that these people are few and far 
between.  Ensuring that files are deleted represents a willfulness 
amongst the user to be detailed (or paranoid, perhaps, depending on 
their motives and intentions). 

As such, I think that the same kinds of people who might be interested 
in a tool like this would be interested in reviewing the source code, 
for two reasons:

         - Verification that the code is not a trojan.
         - Ensuring that the methods used in the secure deletion 
utility are sound.  (Which is perhaps more important for the 
detail-oriented.)

In the end, it's easy to see the value of transparency, particularly in 
a product like this.  There really is no sound argument for 
proprietization anymore.  Code is so heavily commoditized that most 
programs are reinventions of older concepts.  That isn't to say that 
there isn't some innovation going on, but the reality is that the only 
argument that can be used for proprietization is profit, and that's an 
argument that has been getting progressively less enticing as more 
commoditization occurs and as more code projects are shipped off to 
offshore workshops, the draw of proprietization is decreased - I would 
even say antiquated.   Interestingly, people continue to proprietize 
code even in the face of that.  I guess that that green aura is somewhat 
blinding. :)

(Not flaming anyone, just making some observations.)

               -bkfsec


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/