[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-talk] observation: Browser bundle & secure files deletion



I had the exact same question about secure delete. Also, securing
wiping the computer's memory is important, as sensitive data could be
recovered from RAM even *after* power off...

On 4 October 2011 08:27, Joe Btfsplk <joebtfsplk@xxxxxxx> wrote:
> I've thought about TBB & it insecurely deleting files such as cache when
> closing TBB Firefox. ÂI assume this is what happens - I've investigated - a
> BIT - & seems that's what it does. Â*Is this correct?*
> If true, there's no opportunity to securely wipe the files, rather than them
> being insecurely deleted - unless I'm mistaken. ÂAFAIK, Tor has no secure
> wiping capability built in.
>
> Don't remember reading in documentation, either that users should be Âaware
> of this & take appropriate action, or that TBB already handles it securely.
> ÂAlso, no mention of a list of files TBB deletes on shut down, that users
> might consider the possibility of data being recoverable.
>
> If true, the only way to wipe any sensitive info (Ex.: Âso a repressive
> gov't can't recover info from HDD), would be use a prgm to wipe free space
> on the partition containing TBB. ÂIf it is installed on a flash drive, that
> could be wiped, but principal is still the same.
>
> Since many users install most everything to C:\ - esp. in Windows Â(in TBB
> case, unzip to a folder), then wiping free space process on the OS partition
> - which MAY be the whole HDD for some users, ALWAYS involves some risk to
> file(s) corruption. ÂI've never had a disaster wiping free space, but forums
> like Eraser, CCleaner & others are full of posts about the process
> (apparently) severely damaging the OS.
>
> If my assumptions are correct,
> 1) Have TBB developers considered the issue of some deleted info from
> sessions, being recoverable?
>
> 2) Other than wiping free space, (which takes time) are there other
> suggestions for avg users to realistically deal w/ this? ÂIt doesn't affect
> me so much, but in repressive countries, it may warrant consideration.
>
> I'd think for users wanting to securely wipe free space, it'd be best to use
> TBB on flash drive or a small partition on HDD. ÂIt's possible ? w/ a proper
> list of files, the files in question MIGHT be securely deleted BEFORE
> closing TBB, but many wiping prgms would have problems wiping active files.
> ÂIt probably can be done w/ enough knowledge & right tools, but most users
> aren't aware of steps needed, and would not regularly go to that trouble (or
> forget).
>
> Thanks.
> _______________________________________________
> tor-talk mailing list
> tor-talk@xxxxxxxxxxxxxxxxxxxx
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
>
_______________________________________________
tor-talk mailing list
tor-talk@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk