
In
my
last blog I covered a dubious report that suggested the only
way to prevent secondhand purchasers from recovering deleted data from
hard disks was to physically smash them to pieces. That of course
is
bunkum. So what are the open source alternatives?
The simplest whole-disk solution is
DBAN
-- Darik's Boot and Nuke -- "a self-contained boot disk that
securely wipes the hard disks of most computers." Download and run it
from CD, DVD, floppy disk or USB stick and DBAN will nuke the contents
of any hard disk it can detect.
DBAN is partially funded by
GEEP International
who claim to be "the most efficient, and the most environmentally
conscientious consumer electronics recycling company in North America."
There's even an enterprise version called
EBAN -- Enterprise
Boot an Nuke -- that comes with technical training, certification and
support.
Linux Level Tools
shred is
a simple command-line tool that comes ready installed on most
distributions. It overwrites the specified file(s) with random junk --
25 times by default. It does however come with a couple of caveats.
(The
man shred
command will give you the full details.) Essentially it assumes that
the file system overwrites data in place. That's the usual way of doing
things, but Linux has a wide variety of possible file systems and they
don't all work the same way! But
shred
works just fine with the default
ext3 file system
used on most distributions.
Here's how to use it:
Will
shred the contents of secrets.txt
but
it leaves the file in place! While this is a good way of
checking what shred does, you probably really want to ...
...
remove the file after you've shredded it. For extra security you can ...
| shred -u -n 100 secrets.txt |
...
tell it to overwrite the file 100 times instead of the default 25, and
even ...
| shred -u -n 100 -z
secrets.txt |
...
overwrite the file with zeros on its last pass. This disguises the fact
that there was ever any file there at all!
Linux also has a suite of more sophisticated tools, but I'll look at
those next time.
<--Previous
Hidden Linux
Next Hidden
Linux -->