The Great Zero Challenge

Mark Sowerby ukcrypto at chiark.greenend.org.uk
Sun, 7 Sep 2008 11:42:24 +0100


Hi,

 It goes withouth saying, but I will state it for completeness as I don't 
think it has been stated in the thread (apologies, suck eggs etc) - 
overwriting is different from deleting, which generally does not delete.

Drives use pre-emptive error correction where they remap data from weak 
sectors to spare sectors. So, whilst dd may actually oblitorate the data 
(beyond economical physical recovery), it is unlikely that dd will have 
erased all of the data as drive electronics (keeping the weak sectors from 
being addressed by the computer) and mybe the operating system device driver 
may have got in the way....It may be the case that it is undesirable for 
even these mere remnants of data trapped on the "weak" remapped sectors of 
the drive to be recovered.

For HMG use only wiping systems listed at the link below should be used, 
which have been tested to be suitable:

http://www.cesg.gov.uk/site/iacs/itsec/


With software based data erasure - if the method is not assured - then you 
cannnot rely upon it to give assurance. However - it may be a case that a 
complete overwrite (for example dd) is a suitable risk mitigation method 
when taking into account what was actually on the disk. There are plenty of 
Linux distributions that can be run from CD that could be used to "dd" a 
drive. If there is no need to reuse a drive, I find a large hammer works for 
me.

BR
Mark