Linux - SecurityThis forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.
Notices
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.
Having a problem logging in? Please visit this page to clear all LQ-related cookies.
Get a virtual cloud desktop with the Linux distro that you want in less than five minutes with Shells! With over 10 pre-installed distros to choose from, the worry-free installation life is here! Whether you are a digital nomad or just looking for flexibility, Shells can put your Linux machine on the device that you want to use.
Exclusive for LQ members, get up to 45% off per month. Click here for more info.
I would like to find a simple erase program. I'm not worried about someone finding the content on this computer since it would bore them silly.
I'm using Linux Mint 19. with a Hitachi drive on a laptop. I've tried to load Load and Nuke, as well as a Seagate zero erase from the DVD drive, but it keeps defaulting to the hard drive. I'm a very basic user, so keep it simple.
Thank you both for your responses. I'm a self-taught user, and so unfamiliar with the command line within Linux. These two suggestions will help a lot.
My purpose is to simply erase the content on the hard drive and rebuild the OS. I have a 32-bit machine - rather old since I buy well-used equipment - low low budget. I'm currently sticking with version 18.3 of Mint Mate. Since there is no virus or malware screening software, I like to clean the drive periodically with the intent of cleaning unwanted files. Is this a good idea?
Probably pointless. If you reformat the filesystem when you re-install, any files from the prior install will be unreachable, and subject to being overwritten at any time. They will not affect your new system.
Your fretting over the lack of screening software is probably a little paranoiac, but that's ok - a little of that is sensible. As for zeroing the system, I used to simply reformat it as NTFS; that defaults to zeroing first (make sure not to use "quick format"). Then make it ext4 or whatever you want to use. Simple, and less likely to get wrong.
Last edited by syg00; 11-09-2020 at 11:43 PM.
Reason: added quick format note
Thank you both for your responses. Let me clarify my intent in wiping data.
I'm currently using Linux Mint Mate version 18.3 32 bit. I heard, once upon a time, that zeroing out a hard drive two or three times would clean off any viruses and/or malware, so that has been my practice. Once the HD is squeaky clean, I reload my files and go happily down the road. Of course, I use a strong encryption code for the hard drive files, and use a fairly strong password, but am aware that malicious people can work around these protections. I assume that over the course of six months, someone has embedded a 'Peeking Tom' program, so thus my paranoia. Am I operating under the right assumptions?
As for backing up files, yes, I copy them to a USB stick periodically. Since my equipment is old, it isn't all that dependable.
So wiping a drive can get rid of malware, certainly, but encryption to keep malicious people out is pointless. Encrypting drive contents only prevents against physical theft. Let me say that again: encrypting drive contents only prevents against physical theft.
The OS has to have everything accessible while running so needs to be able to read everything. If malware or a malicious person is on your system (unlikely), then they will also be able to read whatever data is encrypted.
Also, wiping SSDs is not recommended as it wears them excessively. I believe most SSD manufacturers have some sort of software that safely wipes the drives. I know Samsung does but I've never owned another brand so can't speak to the other manufacturers.
So wiping a drive can get rid of malware, certainly, but encryption to keep malicious people out is pointless. Encrypting drive contents only prevents against physical theft. Let me say that again: encrypting drive contents only prevents against physical theft.
It's also a good way of erasing the data. Simply "forget" the key and the data is permanently inaccessible.
No one can install keylogger software on your system without having physical access and the password, either yours or root's, or you installing it yourself through downloaded malware. On a Linux system, the odds of that are not zero, bur very close. Linux is not Windows. Wiping the hard drive just to get rid of possible malware, of which you have no evidence, is, IMO, a waste of time and effort, regardless of what you may have read about Windows.
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know.