Re: "Hard drive destruction 'crucial'" (BBC)

["Tomas L. Byrnes" <tomb () byrneit net>]

If you RTFA, you'll see that they actually say that the standard
Sanitizing methods DO work.

Darik's Boot and Nuke with Guttman is pretty damn good, and there is a
faster way:

http://cmrr.ucsd.edu/people/Hughes/SecureErase.shtml

This half-baked article also includes the following quote:

"Unless you're a spook or the kingpin of a criminal consortium, there's
no need to go out and buy deleting software and no need to put a hammer
through the damned thing," Mr Goodwins told the BBC.

Huh? Hasn't the bonehead heard of regulations regarding PII? How about
business risk due to breach of Confidentiality Agreements, or just plain
loss of competitive advantage due to dumpster diving?

The biggest economic risk, IMO, is not the $50 or so per card a carder
can get before the HNC servers catch them. It's the millions that can be
lost due to notification of large-scale data loss, which MIGHT result in
identity theft, or the loss of business, either of which can end your
business.




> -----Original Message-----
> From: funsec-bounces () linuxbox org [mailto:funsec-bounces () linuxbox org]
> On Behalf Of Paul M. Moriarty
> Sent: Thursday, January 08, 2009 10:01 AM
> To: Paul Vixie
> Cc: funsec () linuxbox org
> Subject: Re: [funsec] "Hard drive destruction 'crucial'" (BBC)
>
> Why not just encrypt the whole thing before chucking it?
>
> Paul Vixie wrote:
> > The only way to stop fraudsters stealing information from old
computer
> hard
> > drives is by destroying them completely, a study has found.
> >
> > ...
> >
> > http://news.bbc.co.uk/2/hi/technology/7816446.stm
> > _______________________________________________
> > Fun and Misc security discussion for OT posts.
> > https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
> > Note: funsec is a public and open mailing list.
> _______________________________________________
> Fun and Misc security discussion for OT posts.
> https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
> Note: funsec is a public and open mailing list.

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.