Wiping HD's before selling (a challenge to some1)

For system help, all hardware / software topics NOTE: use Coders Corner for all coders topics.

Moderators: Krom, Grendel

User avatar
Fusion
DBB Ace
DBB Ace
Posts: 379
Joined: Sun Sep 07, 2003 2:01 am
Location: Valdez System, Underverse; 7 Stars, Azeroth

Wiping HD's before selling (a challenge to some1)

Post by Fusion »

Greetings DBB Members!

I am a Donation Attendant in a Not-For-Profit business. We accept, among other things, computers and all periphs. All OSes, any platform, and age. In order to sell these computers that we receive, we must erase the HD to prevent ID theft. However doing that is becoming impossible thx to Mr. Gates :( With computers Win 98 and back we are able to go into dos and use the DOS command "format c: <enter>" (w/o quotes) and erase the HD. Unfortunately this does not work in 2K and up cuz u need an admin PW do do anything like this. I beleive this is also the case for Linux/Unix critters as well, not sure.

Is there an app that my company can buy, pass out to all of our locations, and use to erase ALL Windows and Linux/Unix OSes HD's completely? If one does not exist, can one be cooked up (made) that will do the job? Only requirements would be that it be on a CD-Rom and/or a 3.5 floppy, and be able to run on a min of a 486 chip box. Can this or has this been done?
I will be posting this in a couple other forums for input there.

Any programmers out there for the challenge?

Fus
PS. Mods, please keep an eye on this string, please? I don't need any bashing on our choice of DOS commands for erasing the HD's. thx :)

Fus
User avatar
Admiral LSD
DBB Admiral
DBB Admiral
Posts: 1240
Joined: Sun Nov 18, 2001 3:01 am
Location: Northam, W.A., Australia
Contact:

Post by Admiral LSD »

If you get a hold of a Linux LiveCD like Knoppix you could probably run a dd command that overwrites every sector on the hdd with random garbage. Not sure of the exact syntax but it'd be something like this:

Code: Select all

dd if=/dev/urandom of=/dev/hda bs=512
plus some other parameters which I can't quite remember to make it iterate until all the sectors are overwritten.
User avatar
Ferno
DBB Commie Anarchist Thug
DBB Commie Anarchist Thug
Posts: 15152
Joined: Fri Nov 20, 1998 3:01 am

Post by Ferno »

Make a win98 bootdisk.

then run fdisk.
User avatar
Fusion
DBB Ace
DBB Ace
Posts: 379
Joined: Sun Sep 07, 2003 2:01 am
Location: Valdez System, Underverse; 7 Stars, Azeroth

Post by Fusion »

Ferno wrote:Make a win98 bootdisk.

then run fdisk.
Will that work on 2k and up?

Fus
User avatar
Lothar
DBB Ghost Admin
DBB Ghost Admin
Posts: 12133
Joined: Thu Nov 05, 1998 12:01 pm
Location: I'm so glad to be home
Contact:

Post by Lothar »

if the system has a working floppy drive, you can boot it from a floppy and then format the hard drive, regardless of what operating system is on the hard drive.

BUT... formatting the hard drive will not protect people's information. When you format the hard drive, all you're doing is wiping out the "table of contents", so to speak. It's still quite possible for someone to bust out an "unformat" program to recover the data on the hard drive.

What you really need is something to completely wipe the data. There are programs out there to do this. Google gave me Drive Scrubber, Wipe Drive, and an article from a bank site that links to AutoClave. AutoClave looks good to me -- it's a free program, and if UW uses it, it's probably good enough. My dad also linked me to this listing, and specifically to Darik's Boot and Nuke, which also looks pretty good (as most sourceforge apps are.)

All that is to say... I don't know enough to be able to tell you right away what to do, but google and my dad have provided plenty of links to research. My instinct says to start with DBAN (the last link) and see if it looks good to you...
Matrix
DBB Alumni
DBB Alumni
Posts: 763
Joined: Tue Sep 18, 2001 2:01 am
Location: NJ
Contact:

Re: Wiping HD's before selling (a challenge to some1)

Post by Matrix »

Fusion wrote:PS. Mods, please keep an eye on this string, please? I don't need any bashing on our choice of DOS commands for erasing the HD's. thx :)
Fus
Is that because u already know formatting the drive doesnâ??t do a damn thing against stopping people from recovering the data? :P

u need to do like admiral suggested, write totally random bits to the entire drive.

Edit: lothar also :P
User avatar
Lothar
DBB Ghost Admin
DBB Ghost Admin
Posts: 12133
Joined: Thu Nov 05, 1998 12:01 pm
Location: I'm so glad to be home
Contact:

Post by Lothar »

write totally random bits to the entire drive.
... which you can do if you grab one of the already-written apps I linked to above. No sense in reinventing the wheel -- just find out how universities or the government do their data wiping, and if they use free software, find a copy.
User avatar
Admiral LSD
DBB Admiral
DBB Admiral
Posts: 1240
Joined: Sun Nov 18, 2001 3:01 am
Location: Northam, W.A., Australia
Contact:

Post by Admiral LSD »

Autoclave and DBAN both appear to be based on Linux and most likely perform a variation on what I alluded to in my first post ;)
User avatar
kurupt
DBB Fleet Admiral
DBB Fleet Admiral
Posts: 2506
Joined: Wed May 17, 2000 2:01 am
Location: Clinton, Ohio

Post by kurupt »

does a low level format not completely erase everything? i was under the assumption that it did. you can do these formats using tools that can be found on the manufacturers websites.
User avatar
Flatlander
DBB Fleet Admiral
DBB Fleet Admiral
Posts: 2411
Joined: Thu Apr 15, 1999 2:01 am
Location: Pennsylvania
Contact:

Post by Flatlander »

What Lothar said. Another program that is available is http://www.killdisk.com ; maxllf also works, see http://www.ameriwebs.net/groupworks/george/llf.htm
User avatar
Genghis
DBB Newbie
DBB Newbie
Posts: 1377
Joined: Fri Feb 12, 1999 3:01 am
Location: Ithaca, NY, USA

Post by Genghis »

Admiral LSD wrote:

Code: Select all

dd if=/dev/urandom of=/dev/hda bs=512
This is what I would do. Knoppix is awesome: it's free, widely used, and a favorite for forensics work. Just google to download and burn it onto a CD. You can also google to find a ton of how-to's for getting started with Knoppix.

Interesting side note: if you wanted to erase a drive so a well-funded agency (e.g. the NSA) can't recover the data, you'd have to overwrite it seven to 12 times! Of course for your purposes you don't need to worry about this.
User avatar
WarAdvocat
DBB Defender
DBB Defender
Posts: 3035
Joined: Sun Jun 23, 2002 2:01 am
Location: Fort Lauderdale, FL USA

Re: Wiping HD's before selling (a challenge to some1)

Post by WarAdvocat »

Fusion wrote:I don't need any bashing on our choice of DOS commands for erasing the HD's.
You do realize that's like throwing blood in shark-infested waters :twisted: ...and then taking a swim.

Realistically, a Win98 boot disk+fdisk is all you need to protect people's data 99% of the time (provided, of course, it works on NTFS drives). That last 1% is a KILLER, though, so I would definately advise that you use something more thorough than fdisk or format, to at least keep the honest men honest.
User avatar
KompresZor
DBB Captain
DBB Captain
Posts: 919
Joined: Wed Jul 31, 2002 2:01 am
Location: Clearfield, Pennslyvania

Post by KompresZor »

I have a little com file that you could put on a bootable floppy that will wipe the HD. A friend of mine that worked for Swan Computers ( tells you how long ago it was ) gave it to me for bulk file erasure.

To use it you would just have to make a bootable floppy and copy the file ( Nuke.com ) onto the floppy disk. Boot the computer off the disk and type "nuke c:" then just let it do it's thing. It will remove all the information on the drive including the partition information. One word of caution, it does not ask questions and once you hit enter the only way to stop it is to pull the plug :) So i wouldn't automate it.

I have not tried it on Win2k and up OS's so I'm not 100% sure it will work, it is pretty old and my have trouble with NTFS.

If you want to try it email me or catch me in chat.
User avatar
JMEaT
DBB Meat ByProduct
DBB Meat ByProduct
Posts: 10047
Joined: Wed Mar 10, 1999 3:01 am
Location: USA

Post by JMEaT »

One of my old college professors had a program he wrote in C++ called Nuke. It ground zero'd a hard drive.

Why not just low level format the disk though using a proggy like MaxLLF?
User avatar
Iceman
DBB Habitual Type Killer
DBB Habitual Type Killer
Posts: 4929
Joined: Thu Apr 20, 2000 2:01 am
Location: Huntsville, AL. USA
Contact:

Post by Iceman »

CyberScrub rawkz joo ...

Really, I love this tool. I started using it when going through my divorce ... I found evidence that my ex was entering the house and scanning the PC. She left with nothing ...

I like these features of it:
* Individual file, folder, and disk erasure
* User selects wiping method
* "Erase beyond recovery" menu selection integrated into desktop.
* Smart enough to sanitize ALL internet activity.
* Even the brainless can use it ...
User avatar
WarAdvocat
DBB Defender
DBB Defender
Posts: 3035
Joined: Sun Jun 23, 2002 2:01 am
Location: Fort Lauderdale, FL USA

Post by WarAdvocat »

Iceman wrote:* Even the brainless can use it ...
heh
User avatar
woodchip
DBB Benefactor
DBB Benefactor
Posts: 17865
Joined: Tue Jul 06, 1999 2:01 am

Post by woodchip »

Another possible way is to install "SureDelete", erase all files except the o.s., then do a suredelete which will overwrite all erased sectors. You can have multiple overwrites that anyone except the fbi may have problems recovering. Then you can wipe the HD totally.
User avatar
Vindicator
DBB Benefactor
DBB Benefactor
Posts: 3166
Joined: Mon Dec 16, 2002 3:01 am
Location: southern IL, USA
Contact:

Post by Vindicator »

Degaussing? :P
User avatar
WarAdvocat
DBB Defender
DBB Defender
Posts: 3035
Joined: Sun Jun 23, 2002 2:01 am
Location: Fort Lauderdale, FL USA

Post by WarAdvocat »

didn't we already have the Degaussing conversation not too long ago?
User avatar
Stryker
DBB Admiral
DBB Admiral
Posts: 1103
Joined: Sat Jun 12, 2004 7:58 am
Contact:

Post by Stryker »

One thing you might try is a program such as Norton Ghost. This program will basically take a hard drive, erase EVERYTHING on it, and put whatever's on the CD onto the HD instead. You'll have to do some messing in BIOS to make sure the computer is set to boot off a CD before the HD (the best format I've found is floppy/CD/HD), then insert the CD and reboot the computer. It should come up and give you options for ghosting the HD.

I'll also second http://www.killdisk.com/ , it looks like a good proggie if you don't want to go through all the hassles (possible legal consequences too, if you ghost a version of windows or mac onto the systems) of ghosting. Just remember to check the BIOS settings as a computer boots up to make sure it's set to boot off a bootable floppy if one is present. Almost all BIOS setups will look different depending on the system, so I can't give you foolproof instructions on that; but it's not too hard to do.
User avatar
fliptw
DBB DemiGod
DBB DemiGod
Posts: 6459
Joined: Sat Oct 24, 1998 2:01 am
Location: Calgary Alberta Canada

Post by fliptw »

get knoppix. Why? it gives you another opurtinity to back-up data without having to resort to rebooting(if your smart enough to take out other drives before doing this, then it saves you alot of hassle).

It also gives you the most flexibility.

the basic pattern is doing alternating writes of OO's and FF's to the disk, and not writing random values to the disk. You want to nudge the magnetic paticles to a neutral orination.
User avatar
woodchip
DBB Benefactor
DBB Benefactor
Posts: 17865
Joined: Tue Jul 06, 1999 2:01 am

Post by woodchip »

MD-2389
Defender of the Night
Defender of the Night
Posts: 13477
Joined: Thu Nov 05, 1998 12:01 pm
Location: Olathe, KS
Contact:

Post by MD-2389 »

WarAdvocat wrote:didn't we already have the Degaussing conversation not too long ago?
Well, theres always that magnet Krom linked to a while back. ;) If that little sucker can lift 400lb, I don't think it will have any problem degaussing a hard drive. :D If not, sticking it into an MRI will definitely do the trick. ;)

Seriously though, a simple low-level format will do fine for your purposes. Now if you really wanted to hide data, then use the program(s) that Lothar linked to, or what Admiral LSD said. Just be aware that either way this will take a fair bit of time, particularly if the drives are rather large.
User avatar
Lothar
DBB Ghost Admin
DBB Ghost Admin
Posts: 12133
Joined: Thu Nov 05, 1998 12:01 pm
Location: I'm so glad to be home
Contact:

Post by Lothar »

You definitely want to have something simple -- no sense in having to have every donation worker at your entire thrift store chain trying to learn UNIX shell scripting or anything like that.

It looks like both DBAN and AutoClave would do what you want. If you can get permission from your boss, download one of each and practice on donated computers... see which one seems to work the best, and the easiest.
Cuda68-2
DBB Ace
DBB Ace
Posts: 320
Joined: Fri Sep 20, 2002 2:01 am
Location: St. Paul Minnesota
Contact:

Post by Cuda68-2 »

gdisk.exe - fits on a floppy and poof goes the data
User avatar
DCrazy
DBB Alumni
DBB Alumni
Posts: 8826
Joined: Wed Mar 15, 2000 3:01 am
Location: Seattle

Post by DCrazy »

MD, sticking an HDD into an MRI is NOT the smartest idea, unless you want an HDD spinning around in mid-air. :P
User avatar
Fusion
DBB Ace
DBB Ace
Posts: 379
Joined: Sun Sep 07, 2003 2:01 am
Location: Valdez System, Underverse; 7 Stars, Azeroth

Post by Fusion »

TY all for your input. I have printed up Lothar's suggested applications mentioned in his first post, and will be sharing it w/my superiors. I am kinda leaning towards DBAN, based on this list of info on what the app will do, and the simplicity of it. I can't find the same info @ autoclave's website.

Fus
User avatar
Ned
DBB Ace
DBB Ace
Posts: 308
Joined: Thu Jul 08, 2004 9:58 pm
Location: Maryland

Post by Ned »

recently tried ghost and thought it was an awful program

my 2 cents
MD-2389
Defender of the Night
Defender of the Night
Posts: 13477
Joined: Thu Nov 05, 1998 12:01 pm
Location: Olathe, KS
Contact:

Post by MD-2389 »

DCrazy wrote:MD, sticking an HDD into an MRI is NOT the smartest idea, unless you want an HDD spinning around in mid-air. :P
Hense the next two words in my post. ;) Though in that situation, more than likely it would slam against one of the walls of the scanner, which would ruin the drive anyways. :lol:
User avatar
Verran
DBB Captain
DBB Captain
Posts: 589
Joined: Thu Nov 05, 1998 12:01 pm
Location: Colorado
Contact:

Post by Verran »

I a big fan of DBAN. It's nice, and free.
User avatar
KompresZor
DBB Captain
DBB Captain
Posts: 919
Joined: Wed Jul 31, 2002 2:01 am
Location: Clearfield, Pennslyvania

Post by KompresZor »

JMEaT wrote:One of my old college professors had a program he wrote in C++ called Nuke. It ground zero'd a hard drive.
There is a good chance that this is the same program :)
User avatar
ccb056
DBB Fleet Admiral
DBB Fleet Admiral
Posts: 2540
Joined: Wed Jul 31, 2002 2:01 am
Contact:

Post by ccb056 »

Go to all the major disk manufacturer websites, get their diagnostic tools, usually in there is a tool that will write all zeros to a drive, these tools almost always fit on a bootable floppy
User avatar
JMEaT
DBB Meat ByProduct
DBB Meat ByProduct
Posts: 10047
Joined: Wed Mar 10, 1999 3:01 am
Location: USA

Post by JMEaT »

KompresZor wrote:
JMEaT wrote:One of my old college professors had a program he wrote in C++ called Nuke. It ground zero'd a hard drive.
There is a good chance that this is the same program :)
I didn't even read your post as I am a chronic skimmer. :P That's pretty cool, he did work for an old software company I believe. Maybe it is the same dude? His name was Keifer.
User avatar
Fusion
DBB Ace
DBB Ace
Posts: 379
Joined: Sun Sep 07, 2003 2:01 am
Location: Valdez System, Underverse; 7 Stars, Azeroth

Post by Fusion »

Fusion wrote:I have printed up Lothar's suggested applications mentioned in his first post, and will be sharing it w/my superiors.

Fus
Ok, So I am quoting myself, so what.. 8) :P
Well, I have d/led the DBAN app, rigged a Floppy, and have burned the source zip file to CDRW for my superiors. I also added a notepad file telling anyone who has the CD some background on it, giving links to this string and DBAN's website. I am awaiting word from my superiors that my boss's boss give the ok of clearance to use it. I hope that it will be soon. :|

Fus
User avatar
iten
DBB Ace
DBB Ace
Posts: 100
Joined: Tue Sep 28, 2004 3:38 pm

Post by iten »

Kinda off-topic, but won't writing random bits to all of /dev/hda corrupt the partition table?

Can you recover if the partition table is really messed up?
User avatar
Lothar
DBB Ghost Admin
DBB Ghost Admin
Posts: 12133
Joined: Thu Nov 05, 1998 12:01 pm
Location: I'm so glad to be home
Contact:

Post by Lothar »

really off topic: BUTT KICKING FOR GOODNESS!

semi off topic: there are utilities out there that can rebuild partition tables, I think.
User avatar
KompresZor
DBB Captain
DBB Captain
Posts: 919
Joined: Wed Jul 31, 2002 2:01 am
Location: Clearfield, Pennslyvania

Post by KompresZor »

JMEaT wrote:
KompresZor wrote:
JMEaT wrote:One of my old college professors had a program he wrote in C++ called Nuke. It ground zero'd a hard drive.
There is a good chance that this is the same program :)
I didn't even read your post as I am a chronic skimmer. :P That's pretty cool, he did work for an old software company I believe. Maybe it is the same dude? His name was Keifer.
The guy that gave me the program didn't write it, he was a tech for Swann Computers in State College. But I bet there's a good chance that this is the one Keifer wrote, even more of a chance if you happened to go to school at Penn State :D
User avatar
World War Woodi
DBB Ace
DBB Ace
Posts: 167
Joined: Mon Oct 04, 2004 2:20 am
Location: seattle wa
Contact:

Post by World War Woodi »

One word, MICROWAVE !

ok, maybe not but it would look cool.
User avatar
Xamindar
DBB Admiral
DBB Admiral
Posts: 1498
Joined: Sun Jun 06, 2004 2:44 am
Location: California
Contact:

Post by Xamindar »

simplest solution would be to get a linux boot disk (tomsbrt or some such). I have found that linux fdisk seems to be able to erase any type of partition whereas dos fdisk can't sometimes. And get a floppy one because you mentioned you take old computers, which might not boot a cd.
MD-2389
Defender of the Night
Defender of the Night
Posts: 13477
Joined: Thu Nov 05, 1998 12:01 pm
Location: Olathe, KS
Contact:

Post by MD-2389 »

Xamindar wrote:simplest solution would be to get a linux boot disk (tomsbrt or some such). I have found that linux fdisk seems to be able to erase any type of partition whereas dos fdisk can't sometimes. And get a floppy one because you mentioned you take old computers, which might not boot a cd.
One problem with that. Partition tables can be rebuilt. The data is still actually there until the sector it resides in is over-written completely, hense the above mentioned programs that write random data over those sectors repeatedly.
Post Reply