Earlier quoted context omitted.
Shredding/sledgehammer is likely the best option for secure disposal of mechanical drives, but SSDs are a different animal and are likely reusable given some of the suggestions in this thread.
Most hard disks support hardware level encryption and full disk erase at this point. There’s very little need to sledgehammer anything given realistic attacker models.
How secure is merely discarding (TRIMing) all of a SSD's blocks?
31–40 of 117 posts
Re: How secure is merely discarding (TRIMing) all of a SSD's blocks?
#32As others have mentioned, use encryption. But that has gaps as someone can hold onto the drive and wait for impossible to break to become somewhat expensive to break to broke by mistake through bad encryption implementation . Put the encrypted drive into a hydraulic press and flatten it into a thin sheet, then run that sheet through a chop saw, or just use tin-snips if your hydraulic press was powerful enough. A hydr…
I think an angle grinder would be more accessible than a press.
Re: How secure is merely discarding (TRIMing) all of a SSD's blocks?
#33Super interested in this and would love to hear about some techniques. Used to work at a HealthTech co. We had an “appliance” that we’d send to doctor offices to integrate with other diagnostic machines on the network. Sometimes we would send out new ones to replace the old. When we got the old ones back, it was always unclear how to purge and recommission SSD/NVME drives. My best attempt was using GNU shred, but it…
The only proper way of disposal is physical destruction, preferrably on site and under observation of inhouse staff. There are contractors you can hire in those: https://shredsupply.com/hard-drive-shredding-trucks/ (no relation, just arbitrary google hit). I'm also unsure as to why you are getting drives back at all, any of your customers should not have any kinds of storage devices leave their site intact. At least…
Re: How secure is merely discarding (TRIMing) all of a SSD's blocks?
#34As others have mentioned, use encryption. But that has gaps as someone can hold onto the drive and wait for impossible to break to become somewhat expensive to break to broke by mistake through bad encryption implementation . Put the encrypted drive into a hydraulic press and flatten it into a thin sheet, then run that sheet through a chop saw, or just use tin-snips if your hydraulic press was powerful enough. A hydr…
Re: How secure is merely discarding (TRIMing) all of a SSD's blocks?
#35As others have mentioned, use encryption. But that has gaps as someone can hold onto the drive and wait for impossible to break to become somewhat expensive to break to broke by mistake through bad encryption implementation . Put the encrypted drive into a hydraulic press and flatten it into a thin sheet, then run that sheet through a chop saw, or just use tin-snips if your hydraulic press was powerful enough. A hydr…
Delete all the files then "dd" from the random device until the drive is full? Must we always jump straight to the hydraulic press?
Also a standard failure mode of SSDs is refusing to accept writes, so you'll have to handle that case.
Re: How secure is merely discarding (TRIMing) all of a SSD's blocks?
#36As others have mentioned, use encryption. But that has gaps as someone can hold onto the drive and wait for impossible to break to become somewhat expensive to break to broke by mistake through bad encryption implementation . Put the encrypted drive into a hydraulic press and flatten it into a thin sheet, then run that sheet through a chop saw, or just use tin-snips if your hydraulic press was powerful enough. A hydr…
Delete all the files then "dd" from the random device until the drive is full? Must we always jump straight to the hydraulic press?
Not always. I suppose it depends on your information security case. If your goal is to secure your kids laptop from the average thief that is heading to the pawn shop, maybe "secure erase" of encrypted drives may be sufficient.
If on the other hand one is protecting intellectual property, customer data and so on, then perhaps that average thief was hired by someone with significant resources. I would wager that a percentage of the people reading this comment are using a work laptop and have some IP on their drive that in the wrong hands could cost billions. Even some of the emails I've seen could do significant damages.
Re: How secure is merely discarding (TRIMing) all of a SSD's blocks?
#37As others have mentioned, use encryption. But that has gaps as someone can hold onto the drive and wait for impossible to break to become somewhat expensive to break to broke by mistake through bad encryption implementation . Put the encrypted drive into a hydraulic press and flatten it into a thin sheet, then run that sheet through a chop saw, or just use tin-snips if your hydraulic press was powerful enough. A hydr…
Can we repurpose a die press to this task and if so, would a 100 ton AvE die press [1] be powerful enough?
Re: How secure is merely discarding (TRIMing) all of a SSD's blocks?
#38This is why you always want to use full disk encryption (FDE). Then it doesn't really matter whether some blocks are recoverable after TRIM. It also doesn't really matter whether the Secure Delete function works. It also doesn't matter whether the very expensive security-buzzword-compliant secure deletion snakeoil software really works. Also, TRIM is only possible with drives that are still in working order. Very oft…
And if you turn off TRIM you get a massive performance decrease.
Re: How secure is merely discarding (TRIMing) all of a SSD's blocks?
#39Earlier quoted context omitted.
I think an angle grinder would be more accessible than a press.
Open them, heat treat the disks in a bonfire, use the magnets as fridge magnets (those are quite strong, can fix entire books to the fridge instead of just notes).
Re: How secure is merely discarding (TRIMing) all of a SSD's blocks?
#40As others have mentioned, use encryption. But that has gaps as someone can hold onto the drive and wait for impossible to break to become somewhat expensive to break to broke by mistake through bad encryption implementation . Put the encrypted drive into a hydraulic press and flatten it into a thin sheet, then run that sheet through a chop saw, or just use tin-snips if your hydraulic press was powerful enough. A hydr…
> ...hydraulic press was powerful enough. Can we repurpose a die press to this task and if so, would a 100 ton AvE die press [1] be powerful enough? [1] https://www.youtube.com/watch?v=d_LSPX8cNaE