Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here. |
| Notices |
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
Are you new to LinuxQuestions.org? Visit the following links:
Site Howto |
Site FAQ |
Sitemap |
Register Now
If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.
Having a problem logging in? Please visit this page to clear all LQ-related cookies.
 |
GNU/Linux Basic Guide
This 255-page guide will provide you with the keys to understand the philosophy of free software, teach you how to use and handle it, and give you the tools required to move easily in the world of GNU/Linux. Many users and administrators will be taking their first steps with this GNU/Linux Basic guide and it will show you how to approach and solve the problems you encounter.
Click Here to receive this Complete Guide absolutely free. |
|
 |
03-17-2010, 04:02 AM
|
#1
|
|
Member
Registered: Mar 2008
Location: Marbella, Spain
Distribution: Many and various...
Posts: 714
Rep:
|
Security implications for Wear-Leveling of Hard Disks
Hi all,
I am surprised (from the searches I carried out on the net) that no one seems to have considered this danger so far as I can see...
I'm a little concerned about the implications on security for algorithms that opaquely shift data blocks around on disks to even-out surface wear rates.
In the good old days, if I wanted to wipe a file that documented my struggle to give up frosted strawberry donuts (for example) I knew where that file started on the disk and how long it was and could thus instruct the OS to wipe it with complete confidence.
Nowadays, however, with increasingly sophisticated use being made of W-L techniques and fancy, journaling file systems that separate meta-data from file content and whatnot and so forth, how can I still be sure that when I try to overwrite a personal and private file, that i AM actually doing precisely THAT, and not just nuking some virtual image of the thing which in reality remains preserved elsewhere on the disk?
|
|
|
|
03-17-2010, 07:30 AM
|
#2
|
|
Senior Member
Registered: Oct 2004
Distribution: Fedora Core 4, 12, 13, 14, 15, 17
Posts: 2,279
|
It wouldn't be over writing if it remained the same somewhere else would it ? Overwrite takes care of the journal and a file is still a file, even if it's been moved slightly.
|
|
|
|
03-17-2010, 08:32 AM
|
#3
|
|
LQ 5k Club
Registered: Dec 2008
Location: Tamil Nadu, India
Distribution: Debian Squeeze (server), Slackware 13.37 (netbook), Slackware64 14.0 (desktop),
Posts: 8,357
|
I believe your concern is valid, Completely Clueless, for the reasoning explained in this LQ post.
EDIT: my reasons had more to do with the hardware itself, rather than how the file systems work. Deleting a file at the file system level will leave lots of data still on disk because there is no point (security aside) to do the extra work of removing the content of what were once file data blocks after they have been freed by removing references to them. A common workaround for this issue is to write a single large file of, say, zeros to the file system until it fills and then delete it.
Last edited by catkin; 03-17-2010 at 08:38 AM.
Reason: Errant comma
|
|
|
|
03-17-2010, 08:54 AM
|
#4
|
|
Senior Member
Registered: Oct 2004
Distribution: Fedora Core 4, 12, 13, 14, 15, 17
Posts: 2,279
|
It hardly matters really. Unless you are going to give your disk to someone with sophisticated low level hard drive recovery gear, your deleted files are not readable. When you've finished with the disk you can zero it, but as noted the bad blocks will not get overwritten.
Are you a spy or a govt. agent ?
If not, don't worrry about it.
|
|
|
|
03-17-2010, 09:32 AM
|
#5
|
|
Member
Registered: Mar 2008
Location: Marbella, Spain
Distribution: Many and various...
Posts: 714
Original Poster
Rep:
|
Quote:
Originally Posted by catkin
I believe your concern is valid, Completely Clueless, for the reasoning explained in this LQ post.
|
Very interesting, Catkin. I recall WD have been using wear-leveling techniques in their normal (non-SSD) drive controllers for a while now. If one was unaware of this phenomenon, one would never know that 'wiped' data was in fact still readable - albeit not via conventional means.
I wonder if the same unsatisfactory situation pertains to USB thumb drives or even SD cards? At first sight, I would find it hard to believe there is as yet such a thing as a "USB stick controller" that opaquely maps out bad sectors of thumb drives, but has anyone any information to the contrary? It would need to be incorporated into the stick itself, presumably.
|
|
|
|
03-17-2010, 09:44 AM
|
#6
|
|
Senior Member
Registered: Oct 2004
Distribution: Fedora Core 4, 12, 13, 14, 15, 17
Posts: 2,279
|
Firstly you keep saying opaquely, when you actually mean transparently. If you can't see it happening then it would be transparent.
Secondly, read this http://en.wikipedia.org/wiki/Wear_levelling
|
|
|
|
03-17-2010, 10:16 AM
|
#7
|
|
LQ 5k Club
Registered: Dec 2008
Location: Tamil Nadu, India
Distribution: Debian Squeeze (server), Slackware 13.37 (netbook), Slackware64 14.0 (desktop),
Posts: 8,357
|
Quote:
Originally Posted by smoker
Firstly you keep saying opaquely, when you actually mean transparently. If you can't see it happening then it would be transparent.
|
Ah, semantics!
I recall finding the usage of these words counter-intuitive when I first learned them (not that I knew "counter-intuitive" then). Transparent means you can see through something. Opaque means you cant. Simple.
Except that neither means you can see inside the something so not so simple because people were using transparent to mean you could see inside something and opaque to mean you couldn't. People define language so I had to go along with it and struck on the idea that when the "something"s are boxes with things inside (as opposed to filters, window panes etc.) the transparent was applied only to the box, not to the things inside the box. From there it was a short step to extending "boxes" to more abstract concepts such as processes and financial accounts. Got it!
On that basis I go with Completely Clueless' usage; anything going on inside a USB stick controller is completely hidden using such instruments as are "to hand".
|
|
|
|
03-17-2010, 10:19 AM
|
#8
|
|
Member
Registered: Mar 2008
Location: Marbella, Spain
Distribution: Many and various...
Posts: 714
Original Poster
Rep:
|
Quote:
Originally Posted by smoker
|
I guess you would be correct in this context! Funny how real and virtual world terminology is often completely back-to-front.
|
|
|
|
03-17-2010, 10:28 AM
|
#9
|
|
Member
Registered: Mar 2008
Location: Marbella, Spain
Distribution: Many and various...
Posts: 714
Original Poster
Rep:
|
Quote:
Originally Posted by catkin
Ah, semantics!
On that basis I go with Completely Clueless' usage; anything going on inside a USB stick controller is completely hidden using such instruments as are "to hand".
|
THanks, Catkin. As a non-technical person I have run up against this curious situation before. For example, with the word "partition" - which before I learned about disks, I took to mean a *divider* that separated things on either side of it. Like the Great Wall of China. Now I know in the virtual world, it is in fact *not* the divider, but a portion of that which the divider has divided!
Same with Ethernet. I always thought that meant a wireless connection (after "Ether" - the old term for space). Now it turns out to actually mean a *wired* connection in nerdspeak. How curious! It amazes me how even more confusing it must be for non-native English speakers.
|
|
|
|
03-17-2010, 11:03 AM
|
#10
|
|
Senior Member
Registered: Oct 2004
Distribution: Fedora Core 4, 12, 13, 14, 15, 17
Posts: 2,279
|
Quote:
Originally Posted by catkin
Ah, semantics!
On that basis I go with Completely Clueless' usage; anything going on inside a USB stick controller is completely hidden using such instruments as are "to hand".
|
So it is transparent, both to you and the filesystem. Transparent means you can see through it as if it weren't there, which you can.
Opaque isn't even a term used in this regard.
|
|
|
|
| Thread Tools |
Search this Thread |
|
|
|
Posting Rules
|
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
HTML code is Off
|
|
|
All times are GMT -5. The time now is 06:08 AM.
|
|
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know.
|
Latest Threads
LQ News
|
|