[freegeek-startup] Re: Secure data erasing/wipe... certified ?

[Iain Davidson]

As a followup,  in the meanwhile, we are using DBAN as a good tool to
wipe/erase/test harddrives which we are receiving....  here's some wiki
notes which I just created about 10 minutes ago. :)

-------------------------- wiki code cut here
----------------------------------
(this process includes standard secure erasing the data from the drive)

= Steps for Process =
(for any PC with CD-ROM, and 3 available Power connectors)
* Connect 1 to 3 Hard drive (HD) into the PC.
** Double check Master/Slave jumpers, power connections, and ribbon cables.
* Put DBAN (bootable) CD into drive.
* Bootup PC
* Check BIOS boot sequence, CDROM is listed first.
* Check/watch detection for HD's.
* Check/watch CD is loading correctly.
* Type "'''autonuke'''" at the prompt.
* Review that correct Harddrives are being erased.
** (You can now use the CD-ROM in another PC for erasing.)
* Wait 40 to 55 minutes for process to complete.
* Power down and remove HD's.
* Mark down that erasing has been completed.

= Background =

Currently, using [http://dban.sourceforge.net/|Darik's Boot and Nuke
1.0.7(DBAN)] with the following results.

Method (DoD Short, 1 round)
* 2 , 6 GB drives on same cable = 33 minutes
* 2 , 6 GB drives on seperate cables = 52 minutes
* 3 , 6 GB (Quantum Fireballs) across two cables = 52 minutes.

----

------------------------- wiki code cut here
-----------------------------------

I had heard that a few folks are using 'badblocks' Unix tool to check/zap
HD's.  Anyone have a good bootable ISO which is a nice and easy "BadBlock
Bootup-and-Zap" CD setup ???

Thanks, -Iain

On 9/8/06, Iain (FreeGeek) Davidson <iain at freegeek.org> wrote:
>
> ok,
>    we have recently established a great relationship with a locally owned
> bank with a few county branches.
>
> They are donating piles of PC's, monitors, mice, keyboards, and other misc
> computer stuff.   yeah!
>
> Unfortunately, they are concerned about data security and information
> which was stored on the hard drives.  So they are removing the hard drives
> and keeping them.... due to the fact they have no way to securely erase the
> data.
>
> We've been working with them on recommending both OpenSource and
> commercial software.... which clearly state that data erasing is up to
> government standards.  But still they feel uncomfortable sending us the hard
> drives.  (they are 10, 20, and sometimes 40 GB !!!)
>
> Does anyone have experience working with businesses which are concerned
> about data security ?  Especially banks or financial institutions ?
> Has a FG worked out a relationship with a data-erasing company/business to
> certify that their processes are secure ?
>
> What process do others do, to securely erase the data?
>
> -Iain 'hard drive less' Davidson
> p.s.  Luckily, a previous grant of hard drives from PDX, is helping us
> survive the deficit for awhile.
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freegeek.org/pipermail/startup/attachments/20060909/a0cf4e5e/attachment.html