Tell me more ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I'm looking for a quick, simple, and effective way to erase the hard drives of computers that my company will be getting rid of (donation to charity, most likely). Ideally, I would like a single-purpose bootable utility CD that upon booting, finds all attached hard drives and performs an "NSA grade" disk erasure.

Is anyone aware of such a utility (even one not quite as automated as what I've described)?

share|improve this question
1  
I know you said you wanted to donate. I usualy physicaly distroy disk. A hammer works pretty good. – Alan Aug 19 '09 at 19:18
3  
Alan, actually in all seriousness, a hammer won't work that well if someone with serious resources wants the data because it might not actually effect the magnetic data that much. – Kyle Brandt Aug 19 '09 at 19:23
1  
Semtex, C4, TNT? – Nick Kavadias Aug 19 '09 at 19:37
7  
Thermite. After it cools, if there is anything recognizable as coming from a drive, thermite it again. Bury the slag in a secure location. – Paul Tomblin Aug 19 '09 at 19:39
4  
Thermite, man. The solution to all your problems (drive data or otherwise). – womble Aug 19 '09 at 19:39
show 1 more comment

13 Answers

up vote 31 down vote accepted

DBAN:
dban, Darik's "boot and nuke" bootable cd will do this. It takes a while, but that is because it really makes sure everything get erased when you use the longer format options.

Keep in mind 'sure' and 'fast' are opposing forces with something like DBAN. The faster the wipe, the easier it will be to recover the data.

Other Options:
If you have a lot of drives, you might consider looking at 3rd party vendors that provide this service, lots of companies that shred paper will do this service as well (for tapes and hard drives). If this is something you are going to be doing a lot in the future, you might want to buy a degausser. Both the 3rd party vendor and the degausser options will destroy the drives for future use, but you could still donate the rest of the hardware.

share|improve this answer
Beat me by 36 seconds. :( – EBGreen Aug 19 '09 at 18:57
1  
Please note that even after zero-ing out a drive, some forensics can still recover data. However, using DBAN to overwrite with zeros is safe enough. The safest way, of course, is always a hammer and a degausser :) – SilentW Aug 19 '09 at 19:00
3  
I'd trust a belt sander before I trust a degausser... Or an Enron style shredder. – chris Aug 19 '09 at 20:13
3  
@SilentW: That is very probably a myth. While it is theoretically possible to recover overwritten data, no one has actually accomplished it in practice. Even if it can be done, it's most likely so hideously complicated / expensive that you don't need to worry unless you're protecting state secrets. See e.g. nber.org/sys-admin/overwritten-data-guttman.html – sleske Oct 12 '09 at 11:12
3  
BTW, as fun as it is, it's not very nice to configure DBAN as the default PXE boot image on a network :) – MikeyB Oct 14 '09 at 23:20

dd if=/dev/zero of=/dev/hda

Seriously, I don't know any way of getting rid of data faster or easier. There's even a challenge for data recovery companies to restore anything that has been erased with dd. Nobody has been able to do it.

Best part: the drive is usable afterwords. I've used DoD spec'd erasing programs that actually didnt work(the system was bootable afterwords). dd, and no boot. plus dd is faster.

It take a bit to learn how to use dd. but I've used it for data recovery on failing hard drives(think if=/dev/hda of=/dev/sda) and it has worked wonders. Don't know how it works, and don't care, it's awesome.

share|improve this answer
1  
You can pass a second wipe with dd if=/dev/urandom of=/dev/sda – Bart Jan 7 '12 at 13:20

If you are decommissioning the drives physically, Bustadrive is good choice.

alt text

share|improve this answer
3  
That is simply AWESOME! – Chris Aug 19 '09 at 23:13
This looks like it would keep kids and your neighbors from looking over your data but it might not really prevent the Chinese Intelligence agents from recovering your data if they were really interested... – chris Aug 20 '09 at 0:08
I am sure that if you are concerned about your data in the hands of foreign intelligence, i am sure a consumer grade crusher isnt going to do it. My guess is that you grind it and slag it. – MikeJ May 3 '10 at 14:34

Seconding dban. "NSA" level wipes take 6-8+ hours to fully write to the drive the required number of times. Simply writing over the entire disk once will make it safe from anyone who lacks specialized and costly tooks to manually read the data from the drive.

If a disk uses 0's and 1's to hold data, imagine writing everything to 0 makes those 1's into 0.2's. A special tool can read that 0.2 and recognize it used to be a 1.

Wiping it fully twice (all 0's, then all 1's) is sufficient to make a recovery extremely expensive and require even more time and specialized tools.

share|improve this answer
6  
Seconds are generally supposed to be a comment on the original answer plus an upvote. – EBGreen Aug 19 '09 at 18:57
2  
One pass is enough on modern drives - see serverfault.com/questions/959/… and blogs.sans.org/computer-forensics/2009/01/15/… – Hamish Downer Jun 30 '10 at 13:27

Center for Magnetic Recording Research:

Secure Erase

From the Q&A doc:

Secure erase has been approved by the U.S. National Institute for Standards and Technology (NIST), Computer Security Center . In general data erasure techniques when used alone are approved by NIST for lower security sanitization (less than secret) since the data can be recovered at least in theory.

share|improve this answer

http://www.novell.com/communities/node/2973/securely-erasing-partitions

share|improve this answer
1  
I concur - dd from /dev/random is simple and highly effective – warren Aug 19 '09 at 23:01
I recall reading an website where someone offered a reward to any company that could recover from a dd. The reward remains unclaimed to date. Couldn't find the site. – Dave Jarvis Aug 19 '09 at 23:14

I use thermite. Of course it's a little hard to donate them to charity, but they sure are thoroughly unreadable.

share|improve this answer

Thermite is definitely fast, and secure in the data sense. It is not exactly easy to work with.

Your other option is a big magnet, it's fast too. You don't need to get fancy with degaussing, waving a strong magnet can ruin sufficient data, including the error correction bits.

share|improve this answer
1  
I was being a bit facetious in that it is the safest way to destroy your data very quickly, but a power drill is a close second in terms of speed and reliability of destroying the data in an almost as secure way as the big burn. A tool like dban will take hours and a big magnet will likely not really do anything unless you shove it right up against the platters. – chris Aug 20 '09 at 0:12

You don't need thermite or nitro, just take the drives apart and take the platters out (and keep the voice coil magnets from the head positioning assembly, they're super-strong rare-earth magnets, very useful), and break them. Just taking the platters off the spindles will make it impossible for almost anyone to read them (I've read different things about whether it's possible for anyone to get the platters re-aligned), and if you break the platters into a few pieces, that should be it. I guess you could still thermite the platters if you're really worried...

share|improve this answer

dban is the proper tool to use if you are planning on using the drive for some other application or donating it to another party or selling it.

If you want it to be fast and completely unambiguously safe, nothing beats thermite. Somewhat slower but less likely to surprise your neighbors is a drill. Again, you won't be reusing the results anywhere so charity donations are out the window after the drill or thermite...

share|improve this answer
1  
I keep all laptops laced with thermite just in case: youtube.com/watch?v=5EVJFg4dxVA . Also, I always, keep extra thermite right next to my extra tinfoil hats :-) – Kyle Brandt Aug 19 '09 at 19:19

Oh for [goodness] sake, if you want to erase the data securely use autonuke at the command prompt in DBAN. If you want to physically get rid of the thing just throw it into the [friendly] fireplace, or fill up the sink and submerge it in water. Or get a hammer and bash the little nutter to bits. The easiest solution is, of course, the water. But then again you must consider, how highly do you think of yourself to think anyone's after your petty [friendly] data?

share|improve this answer

Hammer 'em and forget about donating. A number of charities don't accept computer equipment anymore because they've gotten non-working gear dumped on them. A lot of computer gear is hazardous and shouldn't just be thrown in a dumpster. Charities get saddled with disposal costs, so they just say no to PC gear.

@Kyle Brandt, the idea is to hammer them so the platters inside shatter into tiny bits and dust. That is impossible to read.

share|improve this answer

How about just filling the drive with many meaningless huge files?

A batch file --> 1000 Copies of a random .vob DVD file. Sequential filenames.

And thén a simple quick format.

share|improve this answer
This doesn't seem very efficient, and unless you can get full coverage of the disk (which would require various file sizes or some math) may leave unerased gaps. – voretaq7 Nov 12 '12 at 6:00

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.