LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Security (https://www.linuxquestions.org/questions/linux-security-4/)
-   -   Is a one pass with DBAN good enough? (https://www.linuxquestions.org/questions/linux-security-4/is-a-one-pass-with-dban-good-enough-4175554933/)

mr.facetious 09-30-2015 03:43 PM

Is a one pass with DBAN good enough?
 
Dear LQ,

I saw an article about securely wiping hard dries for resale or disposal. Anyway, in the article it mentioned that a one pass wipe with DBAN is good enough. Do you agree with this?

I personally use bcwipe and then encrypt for good measure when throwing my hard drive away. What do you use to securely erase your drive?

suicidaleggroll 09-30-2015 03:46 PM

I do a single dd dump from /dev/zero to wipe drives if they're going in for RMA or similar. I don't feel multiple passes would be worth it, because anything sensitive on the drive will most likely be in an encrypted volume anyway. If they're going to be disposed of I destroy them with a hammer...it's both effective and fun!

Habitual 09-30-2015 04:10 PM

Quote:

Originally Posted by mr.facetious (Post 5428021)
What do you use to securely erase your drive?

A 45 slug.

mr.facetious 09-30-2015 04:10 PM

Quote:

Originally Posted by suicidaleggroll (Post 5428025)
I do a single dd dump from /dev/zero to wipe drives if they're going in for RMA or similar. I don't feel multiple passes would be worth it, because anything sensitive on the drive will most likely be in an encrypted volume anyway. If they're going to be disposed of I destroy them with a hammer...it's both effective and fun!

Yeah, who wants to do multiple passes on a terabyte drive or larger? I don't.

Beryllos 10-01-2015 08:18 PM

Both DBAN and bcwipe offer a lot of different options which could solve your problem. If you are only doing one pass, the question is not which brand, but which data stream, if any, renders the drive unreadable even by unconventional means.

I would put my faith in the theory that the best spatial coverage (overwriting magnetization deep into the platter and broad across the track) is obtained with data streams that have a broad spectrum, like pseudo-random numbers.

Since you ask, I use /dev/urandom but speed it up with this trick, which is cryptographically weak but at least covers the spectrum.


All times are GMT -5. The time now is 06:20 AM.