SSD wiping

[cavy]

I came across these instructions for wiping SSD & HDD, (Arch site) are they viable or a safe method.     I can afford to muller a USB and not lose too much sleep, but a SSD is another matter.   

Code: [Select]

SECURELY WIPE SSD DRIVE
dd if=/dev/urandom of=/dev/sda iflag=nocache oflag=direct bs=4096 @ 8hrs for 500Gb SSD
and

Code: [Select]

SECURELY WIPE HARDDRIVE
dd if=/dev/urandom of=/dev/hda

PARANOID
!/bin/bash
for n in `seq 7`; do dd if=/dev/urandom of=/dev/sda bs=8b conv=notrunc;
done

# chmod a+x wipeIt
sh wipeIt`
Both are a single step method, I was intrigued as it is mirrors the first step of a six step method I use to erase and format a USB stick.   

1. sudo dd if=/dev/zero of=/dev/sdc bs=4M iflag=nocache oflag=direct

2. UNPLUG/EJECT USB then re-insert for step two

3. sudo parted /dev/sdc (to check true size of USB, i.e 2102Gb or 4027Gb etc)

4. sudo parted /dev/sdc mklabel msdos

5. sudo parted -a none /dev/sdc mkpart  primary fat32 0 2102 *true-size*

6. sudo mkfs.vfat -n "Disk" /dev/sdc1

The other method was shred, sounds like brute force, so not considering it...!   

[zebedeeboss]

Hi cavy,

whats the reason behind wanting to "wipe" the disks ?

Regards Zeb...

[cavy]

Hi Zeb,

Usually I use Gparted to delete all partitions, then install new OS. As I have a had few different OS'es on the same disk, thought it may be time for a clean start.   

The dd process I use to clean my USBsticks does seem to make a difference, especially after erasing a bootable OS image.   

[PCNetSpec]

They are for "secure" wipes, where every sector is overwritten with random gibberish (or zero's in your 6 step instructions) .. in fact it's not a "wipe" at all, more an overwrite.

If this is purely for a reinstall, so it's not necessary to make sure a forensic examination of the drive is defeated, then they are a bit over the top .. just use Gparted to either delete the partitions or create a new partition table.

Because of the way SSD's store data (non-magnetically), I don't think it would ever be necessary to overwrite with 8 passes as in the "PARANOID" section of one of your scripts.

[zebedeeboss]

Hi cavy,

It would be no exaggeration to say I have carried out well over 100 installs on my two SSD's (both less than 2 yrs old) and they still work perfectly   Disks are built to be written on and written over many many times in their lifetime.

So carry on with gparted as PCNetSpec said

Regards Zeb...

[cavy]

Okay cheers guys, so they're a bit OTT for normal use.   

Really aimed at the James Bond, type, or when you are getting rid of an old machine.   

[PCNetSpec]

Okay cheers guys, so they're a bit OTT for normal use.   

Really aimed at the James Bond, type, or when you are getting rid of an old machine.   

               {Hi, my name is Zac T. Ly}
                                   /
Egg ZacTLy  --> 

[VinDSL]

I came across these instructions for wiping SSD & HDD, (Arch site) are they viable or a safe method. 

Current trend for securely wiping a SSD is :  Encrypt ... Reformat ... Encrypt again ... Done !   

[VinDSL]

Here ya go:  https://goo.gl/3p2F9H   

[cavy]

Current trend for securely wiping a SSD is :  Encrypt ... Reformat ... Encrypt again ... Done !   

Thanks VinDSL   

I have a iDsonix (USB3) dual bay 2.5/3.5 SSD/Hard-drive docking system, I use for remote encrypted storage, now cloning.   

Caveat, target drive must be larger than donor, quoted time for a 500Gb drive being 4 hours.   

My test drive (120Gb), containing OS and saved files, 25Gb in total was cloned in @ 15mins. Change computer or username to suit. Worked..!   

Have deleted a SSD through the iDsonix, using Gparted, maybe an allusion, always seems to have a crisper performance afterwards.   

Using your suggested method I could remotely encrypt a drive via Gnome Disk Utility, then reformat via Gparted  and finally encrypt again.   

And save a shed load of dosh,       all $283.99.   

cheers cavy 

[VinDSL]

Yeah, with a HDD, it pretty easy to securely wipe them with a hammer and a drill, but that method doesn't work with SSDs.   Those damn little chips will still retain the data.

Wash, rinse and repeat with encryption and nobody will be able to suck info off of the drive - or so the theory goes ...   

[ttooaatt]

Hi all

Am going to install Peppermint 8 here soon and was wondering what thoughts you may have using hdparm and doing a low-level format of SSD as opposed to methods mentioned in the thread. Thank you in advance for your help.

Chris

[murraymint]

Yes, I've done it that way and it was fine. I can't comment on how technically secure an erase it is, but it's very fast.

https://ata.wiki.kernel.org/index.php/ATA_Secure_Erase

[PCNetSpec]

HEED THE WARNINGS at murraymints link .. not all SSD's support ATA Secure Erase properly and in some rare instances it can render the SSD unusable .. I'd visit your SSD manufacturers website and see what they say (and tools they offer/suggest).

[pin]

For HDD's there's Derik's boot and nuke... that's like what the US army uses 😁!  For SSD's they have Blancco. Blancco is not for free, but they do offer a try.

Skickat från min SM-G900F via Tapatalk