Penetration Testing mailing list archives

Re: Wiping Solaris Servers


From: Mister Coffee <live4java () stormcenter net>
Date: Tue, 18 Sep 2007 11:53:29 -0700

Holstein, Robert - BLS CTR wrote:
Hey everyone, 

I need to find a method of securly wiping Solaris servers using the DOD
standard disk sanitization requirements. So far the only thing I have
come up with is customized bootable Solaris CD of some sort with bcwipe
on it.  There has got to be a better way.  Does anyone know of a
bootable (or other) solution that's a little less complicated.
Essentially we would need the end process to be so easy a monkey could
perform the task. 

Ideally, during the surplus phase a wharehouse employee would boot the
server up, run a simple command, and the server would be on its way...

Any assistance is apprecited. 

Regards, 
Bobby 

  
This is one of those topics that comes up over and over on various
lists.  A number of people have already weighed in with software tools
that will wipe the disk sufficiently for "most" purposes.  The question
you need to ask is how valuable the data is on the disks.  If you're
worried that the data is so valuable that someone would go through the
trouble and expense of recovering it past a software
wipe/reformat/rewrite, then your only real option is physical
destruction.  If it's not that valuable, than just wipe it and send the
drives on their way.

Physical destruction leads to a whole slew of more or less amusing
methods, not the least of which include liquid oxygen and a BBQ, large
caliber weapons, and/or an 8 pound sledge.  Your mileage, and amusement,
may vary.

Cheers,
L4J

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------


Current thread: