31–40 of 61 posts
Earlier quoted context omitted.
I’d say it depends on your use case. In many compliance-heavy fields, there are specific requirements around data destruction, sometimes involving physically destroying the storage medium up to some given standard. I’d assume this device targets that market.
Most data destruction compliance standards I am familiar with allow for cryptographic erasure when the device is encrypted prior to sensitive data being written to it (excluding some specific data-sensitivity levels). If they are strict enough to not allow for cryptographic erasure (or the data is above a specific sensitivity), this device would likely not be in compliance either -- physical destruction generally req…
I'm also not saying that all compliance standards related to data security require physical destruction; just that these absolutely exist, mostly in defense and similar areas.
Better to encrypt your drives. Like ZFS encryption. No need to destroy the hardware in this case and you're also save from someone stealing the server.
The boot password might be needed to be configured but it's unlocks your SSD. It's enough for the SSD to forget the AES key
Earlier quoted context omitted.
Depending on your threat model, a drill isn't even the right tool. This will significantly complicate data recovery and render data where the drill impacts it destroyed, but it will in theory still be possible to decap/analyse platters or nand with a SEM microscope and reconstruct data off the surviving parts of the storage medium. The cost may not be worth it even to some state actors, but such a cost is peanuts to…
> They even let you watch it go in. I wonder if/when there's a data destruction company that employs professional magicians, who swap out the drives from under you at some point, while you watch "your" drive going into the grinder, never the wiser.
Centuries of prior art on disappearing!
As someone whose job in the past was mass destruction of HDDs and SSDs (thousands on weekly basis) for a major cloud provider this is pretty much useless. If you wanna do it efficiently on scale then something like this is much better option: https://m.youtube.com/watch?v=iqU9QSwHcNg And for SSDs you'd want something like this: https://phiston.com/product/mediadice-ssd-disintegrator-2c/
As someone whose job in the past was mass destruction of HDDs and SSDs (thousands on weekly basis) for a major cloud provider this is pretty much useless. If you wanna do it efficiently on scale then something like this is much better option: https://m.youtube.com/watch?v=iqU9QSwHcNg And for SSDs you'd want something like this: https://phiston.com/product/mediadice-ssd-disintegrator-2c/
This is designed for low hundreds per week and probably is priced much more reasonably for that market than what you are suggesting.
Earlier quoted context omitted.
Most data destruction compliance standards I am familiar with allow for cryptographic erasure when the device is encrypted prior to sensitive data being written to it (excluding some specific data-sensitivity levels). If they are strict enough to not allow for cryptographic erasure (or the data is above a specific sensitivity), this device would likely not be in compliance either -- physical destruction generally req…
I'm not saying there are many (any?) modern standards that would allow physical destruction without cryptographic erasure. As far as I know, physical destruction requirements are usually accompanied by cryptographic erasure requirements. I'm also not saying that all compliance standards related to data security require physical destruction; just that these absolutely exist, mostly in defense and similar areas.
But, I mainly made my comment in reply to this part of your comment:
>I’d assume this device targets that market.
Because I don't think there is any market where this SSD punching device would be compliant and cryptographic erasure wouldn't be compliant. At least, in my career, I have not seen any environment or standard where this would be considered compliant but cryptographic erasure wouldn't be.
Earlier quoted context omitted.
This is designed for low hundreds per week and probably is priced much more reasonably for that market than what you are suggesting.
You'd be surprised how much enterprises pay for Protons and Garners. For approx tripple the price (my links above) you get about 30x throughput. But I agree, not everyone needs that speed.
For our scale at the time (destroying 10s of drives a month) it worked fine and it was a great stress reliever.
Get off a frustrating customer call? Go take 15 and take it out on the stack of drives needing destruction.
I recently saw a device that vibrates drives apart into it's components for easy recycling.
Earlier quoted context omitted.
I usually "dissolve" mine in a bucket of non-diet cola. Cheap & easy to source. The acid to damage electronics, and the sugar gums up mechanical parts.
SSD stores your data on flash chips. They are coated and only the connectors are exposed. You are not destroying anything you just make it hard to access
However you're wrong about this. As we know from when capacitors and batteries leak, the acid or alkali in those can get inside chip packaging by being wicked through the leads, which will destroy them thoroughly from the inside as well.