Posted by Russell Eberhardt on 20/08/2017 10:32:10:
Posted by vintagengineer on 19/08/2017 21:47:54:
And remember you can never delete files from the hard drive, you need to remove the hard drive and smash it with a large hammer. This is the only way to stop anyone retrieving any data from the drive!
This is overkill. While just deleting files will not get rid of them entirely, there are plenty of programs available that will wipe the disk and overwrite any existing files. I've used Bleachbit. If you just install Linux in place of Windows the installer will reformat the disk in EXT4 rather than FAT format and any remaining files will become unreadable.
Russell
Sorry to disagree Russell. Much depends on how badly someone wants to read that disk. Time, money and inclination.
- Deleting a file just removes the file's name from an index and frees the storage so it can be used by something else. The data is unchanged until it's actually overwritten. Large portions of the original data may remain intact and retrievable, possibly for years. Even if if the storage is reused, see point 5 below!
- Repartitioning a disk completely destroys the operating systems understanding of how folders and files were organised but the data is still intact and can be retrieved. Not easily, but certainly possible.
- Reformatting a disk is more brutal, but even that does not necessarily touch old user data. For example MSWindows Quick Format is superficial. Full format is more likely to damage data structure, but it is still possible to retrieve data. It may be hard work to piece it together, but it can be done.
- The real killer though relates to the way hard-drives work. They are analogue devices. Being mechanical, a disk's read/write head does not accurately position over the track each time it passes. That means readable old data can be recovered from an overwritten track by careful positioning of the read head. Recovering data this way is costly. It may require the disk platter to be removed and mounted in another machine, and post-processing of multiple possibilities. But it can be and is done.
The range of recovery options can be very useful. If important data is accidentally deleted, there's a reasonable chance of getting it back. There are companies specialising in this kind of work, but be warned – they're not cheap.
From a security point of view, smashing the disk will usually put the data beyond economic recovery. Even then, be aware that 'military grade' destruction requires disks to be physically smashed and incinerated. That's because, in theory, a well-funded government agency could still to get data off the bits.
Software methods of erasing disks have a cheesy reputation in the trade. Various reasons such as for efficiency, most operating systems and disk controllers are unwilling to write data to physical media unless they really, really have to, preferring to wait until it's convenient to them. That means it's possible for a higher level program to think it's comprehensively overwriting a disk when in fact it's only pointlessly overwriting buffers in memory. The way software methods depend on implementation detail isn't strong security. It might work well on one system build and badly on another.
As it's so easy to do, I always smash old disks before disposal. One good whack with a small hammer is enough.
Dave
Edits, typos galore!
Edited By SillyOldDuffer on 20/08/2017 11:49:48
Edited By SillyOldDuffer on 20/08/2017 11:51:11