Peppermint OS Community Forum

Support => Advanced Topics => Topic started by: cavy on March 23, 2017, 09:33:02 am

Title: SSD wiping
Post by: cavy on March 23, 2017, 09:33:02 am
I came across these instructions for wiping SSD & HDD, (Arch site) are they viable or a safe method.   :-\  I can afford to muller a USB and not lose too much sleep, but a SSD is another matter.   ::)

Code: [Select]
SECURELY WIPE SSD DRIVE
dd if=/dev/urandom of=/dev/sda iflag=nocache oflag=direct bs=4096 @ 8hrs for 500Gb SSD

and

Code: [Select]
SECURELY WIPE HARDDRIVE
dd if=/dev/urandom of=/dev/hda

PARANOID
!/bin/bash
for n in `seq 7`; do dd if=/dev/urandom of=/dev/sda bs=8b conv=notrunc;
done

# chmod a+x wipeIt
sh wipeIt`

Both are a single step method, I was intrigued as it is mirrors the first step of a six step method I use to erase and format a USB stick.    ;)

Quote
1. sudo dd if=/dev/zero of=/dev/sdc bs=4M iflag=nocache oflag=direct

2. UNPLUG/EJECT USB then re-insert for step two

3. sudo parted /dev/sdc (to check true size of USB, i.e 2102Gb or 4027Gb etc)

4. sudo parted /dev/sdc mklabel msdos

5. sudo parted -a none /dev/sdc mkpart  primary fat32 0 2102 *true-size*

6. sudo mkfs.vfat -n "Disk" /dev/sdc1

The other method was shred, sounds like brute force, so not considering it...!    ???
Title: Re: SSD wiping
Post by: zebedeeboss on March 23, 2017, 09:53:36 am
Hi cavy,

whats the reason behind wanting to "wipe" the disks ?

Regards Zeb...
Title: Re: SSD wiping
Post by: cavy on March 23, 2017, 10:07:34 am
Hi Zeb,

Usually I use Gparted to delete all partitions, then install new OS. As I have a had few different OS'es on the same disk, thought it may be time for a clean start.   ;)

The dd process I use to clean my USBsticks does seem to make a difference, especially after erasing a bootable OS image.   :D
Title: Re: SSD wiping
Post by: PCNetSpec on March 23, 2017, 10:28:42 am
They are for "secure" wipes, where every sector is overwritten with random gibberish (or zero's in your 6 step instructions) .. in fact it's not a "wipe" at all, more an overwrite.

If this is purely for a reinstall, so it's not necessary to make sure a forensic examination of the drive is defeated, then they are a bit over the top .. just use Gparted to either delete the partitions or create a new partition table.

Because of the way SSD's store data (non-magnetically), I don't think it would ever be necessary to overwrite with 8 passes as in the "PARANOID" section of one of your scripts.
Title: Re: SSD wiping
Post by: zebedeeboss on March 23, 2017, 11:10:56 am
Hi cavy,

It would be no exaggeration to say I have carried out well over 100 installs on my two SSD's (both less than 2 yrs old) and they still work perfectly :)  Disks are built to be written on and written over many many times in their lifetime.

So carry on with gparted as PCNetSpec said

Regards Zeb...
Title: Re: SSD wiping
Post by: cavy on March 23, 2017, 11:55:55 am
Okay cheers guys, so they're a bit OTT for normal use.   8)

Really aimed at the James Bond, type, or when you are getting rid of an old machine.   ::)
Title: Re: SSD wiping
Post by: PCNetSpec on March 23, 2017, 12:24:27 pm
Okay cheers guys, so they're a bit OTT for normal use.   8)

Really aimed at the James Bond, type, or when you are getting rid of an old machine.   ::)

               {Hi, my name is Zac T. Ly}
                                   /
Egg ZacTLy  -->  :)
Title: Re: SSD wiping
Post by: VinDSL on March 23, 2017, 08:44:58 pm
I came across these instructions for wiping SSD & HDD, (Arch site) are they viable or a safe method. 

Current trend for securely wiping a SSD is :  Encrypt ... Reformat ... Encrypt again ... Done !   ;)
Title: Re: SSD wiping
Post by: VinDSL on March 23, 2017, 09:12:42 pm
Here ya go:  https://goo.gl/3p2F9H   8)
Title: Re: SSD wiping
Post by: cavy on March 24, 2017, 06:55:36 am
Quote
Current trend for securely wiping a SSD is :  Encrypt ... Reformat ... Encrypt again ... Done !   ;)

Thanks VinDSL   :D

I have a iDsonix (USB3) dual bay 2.5/3.5 SSD/Hard-drive docking system, I use for remote encrypted storage, now cloning.   8)

Caveat, target drive must be larger than donor, quoted time for a 500Gb drive being 4 hours.   :)

My test drive (120Gb), containing OS and saved files, 25Gb in total was cloned in @ 15mins. Change computer or username to suit. Worked..!    :-*

Have deleted a SSD through the iDsonix, using Gparted, maybe an allusion, always seems to have a crisper performance afterwards.    8)

Using your suggested method I could remotely encrypt a drive via Gnome Disk Utility, then reformat via Gparted  and finally encrypt again.    8)

And save a shed load of dosh,     ;)  all $283.99.    ;)

cheers cavy  :D
Title: Re: SSD wiping
Post by: VinDSL on March 24, 2017, 07:09:29 am
Yeah, with a HDD, it pretty easy to securely wipe them with a hammer and a drill, but that method doesn't work with SSDs.   Those damn little chips will still retain the data.

Wash, rinse and repeat with encryption and nobody will be able to suck info off of the drive - or so the theory goes ...   ;)
Title: Re: SSD wiping
Post by: ttooaatt on June 05, 2017, 10:34:06 pm
Hi all

Am going to install Peppermint 8 here soon and was wondering what thoughts you may have using hdparm and doing a low-level format of SSD as opposed to methods mentioned in the thread. Thank you in advance for your help.

Chris
Title: Re: SSD wiping
Post by: murraymint on June 05, 2017, 10:39:13 pm
Yes, I've done it that way and it was fine. I can't comment on how technically secure an erase it is, but it's very fast.

https://ata.wiki.kernel.org/index.php/ATA_Secure_Erase
Title: Re: SSD wiping
Post by: PCNetSpec on June 06, 2017, 08:04:02 am
HEED THE WARNINGS at murraymints link .. not all SSD's support ATA Secure Erase properly and in some rare instances it can render the SSD unusable .. I'd visit your SSD manufacturers website and see what they say (and tools they offer/suggest).
Title: Re: SSD wiping
Post by: pin on June 08, 2017, 12:32:30 am
For HDD's there's Derik's boot and nuke... that's like what the US army uses 😁!  For SSD's they have Blancco. Blancco is not for free, but they do offer a try.

Skickat från min SM-G900F via Tapatalk