Hacker News new | ask | show | jobs
by kryogen1c 1110 days ago
Don't forget that sensitive data is encrypted. The only thing harder than breaking bitlocker on a hard drive is breaking bitlocker on a random 0.5% chunk of hard drive unaligned with the r/w tracks.

Bullshit is too weak a word.

5 comments

Encrypted and stripped/sharded in most cases.

My employer just shredded somewhat new-ish enterprise grade SSD worth a few $M. It hurt to watch :(

Overheard: "Does our Degausser work on SSDs?"
Degaussers don’t work period. I’ve heard the theory that The hard drive case functions as a faraday cage. Whatever the cause the evednce backed method is best. Grab a random selection of drives out of your degausser output tray. You’ll be able to get data off of all of them. Some may even boot. (The above led to our company buying a bunch of crushers)
Don't HDD's come with encryption per default nowadays? I.e. the 1's and 0's on the platter go through a layer of decryption that happens on the logic board of disk, before it travels through the SATA cable. And vice-versa when writing.

There's an ATA command to protect the encryption key with a password (and you'll be asked on boot for the password), but if the password isn't set, there's still an encryption key. Just make that irretrievable and the information is theoretically irretrievable.

But yeah, funny how superstitions still control the world and people still say "The HDD needs to be shredded so we're absolutely sure!"

Do you audit all the hard drives, to make sure that:

* someone didn't prep and use the drives before using OS level encryption

* someone didn't ignore swap space, eg config mistake

* some process was supposed to set up / a person set up, but didn't

Are you going to audit all those drives? It's literally cheaper to just destroy them, far far cheaper.

> Bullshit is too weak a word.

Try the English slang word for bullshit, bollocks.

Or that if we wish to keep it PG: deceptive nonsense.

It's fortunate if every sensitive data are encrypted