What Are You Doing Right Now

JaredBusch

@gjacobse said in What Are You Doing Right Now:

@JaredBusch said in What Are You Doing Right Now:

@johnhooks said in What Are You Doing Right Now:

What the heck

Consider it a time out.

No, it is called over zealous moderation.

Leave proof or it can never be anything else.

JaredBusch

10 hours to go!!!

0_1463695098033_upload-c87d4e1b-ecc5-486a-b771-3a3207acf2f2

So here is a question..

When you run something like this, how do you test/verify its effectiveness?

Not like I actually care because I am going to be reusing the device in a controlled environment and did not actually even care about this 4 pass 0/1/0/1 fill that it did.

Just curious.

scottalanmiller

Verify the effectiveness of a disk wipe? That's an interesting question. Never really considered that, but should have. I mean you can do basic things like run Recuva and see what it sees. But we can probably trust that that won't work. But would a good forensic shop get data? Honestly, I bet the only way to test that would be do spot check it by attempting all out recovery on some disks at random that you have done this to.

stacksofplates

@JaredBusch said in What Are You Doing Right Now:

10 hours to go!!!

So here is a question..

When you run something like this, how do you test/verify its effectiveness?

Not like I actually care because I am going to be reusing the device in a controlled environment and did not actually even care about this 4 pass 0/1/0/1 fill that it did.

Just curious.

If it just fills it with zeros you could do a hex dump and it will show a couple lines of all zeros and then just an ellipses and then the very last line.

JaredBusch

@scottalanmiller said in What Are You Doing Right Now:

Verify the effectiveness of a disk wipe? That's an interesting question. Never really considered that, but should have. I mean you can do basic things like run Recuva and see what it sees. But we can probably trust that that won't work. But would a good forensic shop get data? Honestly, I bet the only way to test that would be do spot check it by attempting all out recovery on some disks at random that you have done this to.

Drives I am concerned about are shredded after having DBAN ran in autonuke mode.

So I would never deal with paying for this, but this process did make me curious.

MattSpeller

@JaredBusch said in What Are You Doing Right Now:

@scottalanmiller said in What Are You Doing Right Now:

Verify the effectiveness of a disk wipe? That's an interesting question. Never really considered that, but should have. I mean you can do basic things like run Recuva and see what it sees. But we can probably trust that that won't work. But would a good forensic shop get data? Honestly, I bet the only way to test that would be do spot check it by attempting all out recovery on some disks at random that you have done this to.

Drives I am concerned about are shredded after having DBAN ran in autonuke mode.

So I would never deal with paying for this, but this process did make me curious.

I recall reading an article on the effectiveness of disk wipes and apparently it's incredibly effective. That's just hearsay until I find the article but I specifically recall "forensic data experts" being unable to recover anything after a single pass of random 1/0s.

scottalanmiller

@MattSpeller said in What Are You Doing Right Now:

@JaredBusch said in What Are You Doing Right Now:

@scottalanmiller said in What Are You Doing Right Now:

Verify the effectiveness of a disk wipe? That's an interesting question. Never really considered that, but should have. I mean you can do basic things like run Recuva and see what it sees. But we can probably trust that that won't work. But would a good forensic shop get data? Honestly, I bet the only way to test that would be do spot check it by attempting all out recovery on some disks at random that you have done this to.

Drives I am concerned about are shredded after having DBAN ran in autonuke mode.

So I would never deal with paying for this, but this process did make me curious.

I recall reading an article on the effectiveness of disk wipes and apparently it's incredibly effective. That's just hearsay until I find the article but I specifically recall "forensic data experts" being unable to recover anything after a single pass of random 1/0s.

Would not be surprised. If you think about how drives store data, after a pass it would be SO hard to determine what had been there at different points in history.

thanksajdotcom

Working and relaxing, but not too much right now.

thwr

@JaredBusch get a dump from the disk and compare it to a backup maybe?
BTW: 0/1/0/1 is not that secure, there may still be magnetic echoes. DBAN is always nice to actually kill something, physical shredding is even better

JaredBusch

@thwr said in What Are You Doing Right Now:

@JaredBusch get a dump from the disk and compare it to a backup maybe?
BTW: 0/1/0/1 is not that secure, there may still be magnetic echoes. DBAN is always nice to actually kill something, physical shredding is even better

If you scroll back far enough, you will see my initial post where i said this was a Buffalo Link Station Duo that I was repurposing. I decided to default the unit, not realizing that it would do this to the drives.