[BBLISA] Looking for disk destruction in metro Boston/Manchester NH area.

[John Orthoefer]

Without speaking for JohnR.  It could be a contractual requirement for you to use a certified disk destroyer.  Yes if it's just some drives that you don't want someone dumpster diving, you likely don't want to spend the money to get it done professionally.  

However, if you have a client's data on the drives, and they say at the end contract you need to certify the drives are destroyed.  That comes with risk, you need a company that can certify what they did and how it was done, and likely carries some favor of insurance.  

This is just me talking.  I don't know why he is asking. These are great ideas, but may not help for what he needs.   

johno

On Feb 7, 2013, at 10:52 AM, John Stoffel <john at stoffel.org> wrote:

> 
> Scott> On Thu, Feb 7, 2013 at 10:25 AM, Sean Lutner <sean at rentul.net> wrote:
> 
>>> Neither of those methods ensure that there would be no access to
>>> the data off the platters. In the case of just unscrewing the bolt,
>>> if you don't then spin the drives up to cause the physical damage,
>>> I would just take the platters out entirely and pop them in another
>>> drive. Very simple. In the case of drilling holes you may prevent
>>> access to some data but very little of the over all data and you
>>> can piece things back together if need be.
> 
> Realistically, if you have a couple of holes in the platters, once the
> drive spins up and the head moves across the hole, it's going to
> bounce and the hit the platter, causing all kinds of problems.  
> 
> Again, what level of paranoia are you going to use here?  Yes, the
> NSA/CIA/FBI might be able to pull some data off a platter with holes
> in it, but at what cost?  
> 
> In 99.999% of all cases, just doing either of these two steps will
> effectively destroy the drive and any data on them.  
> 
> If you need certainty, then shredding or a sledge hammer (a warped
> platter isn't going to be ready by anyone) will do the trick to any
> degree.
> 
> From the sound of the original request, I suspect that the drives were
> already dead and not responding to accesses, but had potentially some
> risk of data being pulled off them.  In that case, just going the next
> step of disassembling them or drilling holes would make it effectively
> impossible to recover data from them.  
> 
> Is that a 100% guarrenttee?  Of course not.  What in life is?  
> 
> 
>>> DoD level wipes or
>>> physical shredding following DoD level wipes are the only methods
>>> that can ensure that no nefarious folks get your data.
> 
> _______________________________________________
> bblisa mailing list
> bblisa at bblisa.org
> http://www.bblisa.org/mailman/listinfo/bblisa