RE: Hard Drive eraser recommendation

[Dave Kleiman <dave () davekleiman com>]

Nick,

Why not just use the hard drive itself to wipe every sector...

The easiest (possible the best because of speed) way to accomplish this in modern ATA hard drives (2001 forward) is 
with the built-in Secure Erase program. Conveniently placed there for us by Recording Research (CMRR) headed by Gordon 
Hughes, Associate Director of CMRR, USSD on the Secure Erase Initiative.

""At the ANSI T-13 Committee meeting in 2004, Gordon described the differences between block erase as described in 
government document DoD2550 and Secure Erase. Unlike block level erase Secure Erase also overwrites reassigned blocks 
and can be up to eight times faster (per CMRR tests).
In addition the enhanced SE command qualifies for Federal Government secret data classification erasure.""

You can download a DOS-based utility HDDerase that securely erases all data on ATA hard disk drives via the internal 
secure erase command. 
http://cmrr.ucsd.edu/people/Hughes/SecureErase.shtml

It is one of the only methods to wipe bad hard drive sectors G-List (not OS bad sectors).


Respectfully,

Dave Kleiman - http://www.ComputerForensicExaminer.com - http://www.DigitalForensicExpert.com 

4371 Northlake Blvd #314
Palm Beach Gardens, FL 33410
561.310.8801 

Digital Computer Forensics + Data Recovery + Electronic Discovery


-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On Behalf Of Nick Duda
Sent: Wednesday, September 30, 2009 09:53
To: security-basics () securityfocus com
Subject: Hard Drive eraser recommendation

I'm looking for a hard drive erasing solution (hardware) that meets the DOD recommendation for erasing but is also 
fairly easy for the helpdesk to just hook a drive up to, press a button and walk away until it is complete. Does anyone 
have any recommendations for one that is good and low cost?

- Nick

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------