[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: storage privacy (was: Nice quiet, private, anonymous life??)
- To: or-talk@xxxxxxxxxxxxx
- Subject: Re: storage privacy (was: Nice quiet, private, anonymous life??)
- From: "F. Fox" <kitsune.or@xxxxxxxxx>
- Date: Sun, 02 Dec 2007 17:54:40 -0800
- Delivered-to: archiver@xxxxxxxx
- Delivered-to: or-talk-outgoing@xxxxxxxx
- Delivered-to: or-talk@xxxxxxxx
- Delivery-date: Sun, 02 Dec 2007 20:54:51 -0500
- Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:user-agent:mime-version:to:subject:references:in-reply-to:x-enigmail-version:content-type:content-transfer-encoding; bh=Rc6qYk4uAl8T8CtJdx+sJdHf4hyuSKO0m15CmpyuhFM=; b=NtRRcc2vJxiVsOd8Gv1FQPBmUzV8id/hTWr0Q8BV1pLRIjKle1GtcDt7KZnSAby5cEhC1E5YFCXb6M8lE3lyhC5XGX5w0IQWMnlArHblxhw8d2jNG0mF8wF0NWCsGfHPLYJTrE5s3bM/GCD/3IvIg3DjBYzh1d4FjunLwWJAFTI=
- Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=received:message-id:date:from:user-agent:mime-version:to:subject:references:in-reply-to:x-enigmail-version:content-type:content-transfer-encoding; b=x1205CWTmkApi4CP2/4YMuYBNWREWKico6ohAry+QzmwfpKSc8ByJGGzQLelRuylPiJUHPIHuo89M6g8qaCMbmBmDRMuf3DWDPCxSMKOPms0zNxvEwDr0F9EzTirNiaEgX+HlloPSEUFRVWIyMCyd20Ej5UyPoSK6+Xi8TzbpZk=
- In-reply-to: <4ef5fec60712021443p288a6313n96617877c9faa1e3@xxxxxxxxxxxxxx>
- References: <4ef5fec60712021443p288a6313n96617877c9faa1e3@xxxxxxxxxxxxxx>
- Reply-to: or-talk@xxxxxxxxxxxxx
- Sender: owner-or-talk@xxxxxxxxxxxxx
- User-agent: Thunderbird 2.0.0.9 (X11/20071115)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
coderman wrote:
> apologies in advance for veering this far off topic...
>
> On Dec 2, 2007 2:25 PM, F. Fox <kitsune.or@xxxxxxxxx> wrote:
>> [ strange, dangerous, and likely to fail methods for destroying drives ]
>
> use full disk encryption, even the latest ubuntu supports this.
>
> destroy the disk keys and you've got platters full of entropy.
>
> anything else is just a bad idea.
>
(snip)
I don't think much of the aforementioned physical "destruction" methods;
I also agree in that full disk encryption is the best way to go, if at
all possible.
However, given that a system has already been deployed without such
encryption, wouldn't secure overwriting be a reasonable way of
destroying such data?
It'd be slow, and maybe not effective against the most determined (and
well-funded) attackers - but at least it wouldn't be dangerous, weird,
and violent... =:oD
- --
F. Fox
CompTIA A+, Net+, Security+
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org
iD8DBQFHU2HfbgkxCAzYBCMRAj0dAJ92NHfJqZVVcK/u99gbWTo0jsSnFACeOSJW
EmV8OG+cGBSMlWBGXfqvh1M=
=hc2d
-----END PGP SIGNATURE-----