LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Software (https://www.linuxquestions.org/questions/linux-software-2/)
-   -   disapointing bleachbit results: READ (https://www.linuxquestions.org/questions/linux-software-2/disapointing-bleachbit-results-read-4175450568/)

H_TeXMeX_H 02-23-2013 06:45 AM

The best way to make sure files stay deleted is to wipe free space, like you said earlier:

Code:

dd if=/dev/zero of=/home/junk.file bs=4M; rm -f file
If you wanted to use random data to wipe, I would use the 'wipe' program, as it is faster than /dev/urandom.

minty33 02-23-2013 06:54 AM

about wipe
 
I would use urandom because I think wipe suffers from the same issue shred does. I believe it was mentioned by someone earlier. It has to do with modern HDD's and using journaled fs. Here is a link to the warning on wipes man page.
http://manpages.ubuntu.com/manpages/...n1/wipe.1.html

H_TeXMeX_H 02-23-2013 07:42 AM

Yes, but I was saying to use it to wipe free space like:

Code:

wipe -x -a -o > file; rm -f file
Similar to using dd, but faster than urandom.

jcgrin 02-26-2013 02:43 PM

I did try running other utilities, and recently on two different versions of the same distro. Two very different versions. Lucid Lynx version of Ubuntu running a Gnome Desktop Environment, and everything worked perfectly, the three files were erased and the exact amount of free space was recovered, and the wiped files were gone and nothing short of taking the drives and having them professionally recovered was going to bring the data back. The Oneric Ocelot Ubuntu running a KDE Desktop Envrionment it takes two consecutive wipes before the space is completely recovered. Also doing some digging, I've been unable to find similar issues related to much older kernels. There also seems to be a connection between whether or not the kernel is 64bit or 32bit as to whether or not it does this. Other than general bug problems which I created, my laptop doesn't have this issue it's a 32bit Kernel, the test machine which I'm able to reproduce this on is 64 bit, and there are plenty of other weird and odd ball issues with the 64 bit kernels.

Aditionally it seems to be much much less likely to require consecutive wipes in an EXT3 versus EXT4 when it can be reproduced. The man who let me borrow his machine to run these tests thinks that if I had enough time and distro coppies I'd find that this happens more offten on Debian or Debian Clone Distros rather than Fedora or Fedora Clone Distros. I don't have all the distros to test this, but perhaps someone in the bloggosphere does have multiple distros and the time to install them and test his theory.

minty33 02-26-2013 04:26 PM

Nice. Mine is 32 bit that the problem is on but it is also ext4 and I think ext4 is a pretty big factor. I was going back and forth with Andrew who i think is one of the devs over at bleach bit. He said it had something to do with fsync and how he used it in the code and the link I left earlier is a patch for that however I had some other effects I didn't like using the patch. He said it was a temp fix and still needed some work so they are aware of this. I also pointed out it is still even with the patch not writing data to parts of the free space during the wipe. I demonstrated this by making a cron job that shows df -h every minute while dd runs and while bleach bit runs. Here is the funding. First df reports 95G of used space 140G of total space on the portion and 38G of available space. As you can see there is a 7G difference between what's available and the diff between used and total. It's in this 7G that most of my issue was. With dd the cron job showed that after avail space was 0 it kept writing to disk until total used matched total drive space. With bleach bit it stopped writing when it reached 0 space available which is at 133G used leaving that 7G gap from used and total. Now this probably doesn't come into play often as maybe the OS doesn't usually write to this 7G making this random or only when disk is pretty full that this problem occurs. Remember it was the same images that were recoverable for me initially and multiple wipes did nothing so for me I think those files were from previous OS's but happened to be residing in that mysterious 7G gap or that 7G gap is the 5% that the journal uses and is generally protected.


All times are GMT -5. The time now is 08:50 PM.