Question on shredding a terebyte drive

Rick Stevens ricks at nerd.com
Thu Sep 3 00:07:00 UTC 2009


Dean S. Messing wrote:
> Thanks to all for the replies.
> 
> I'll answer most of the comments here.
> 
> 0) The disk is unmounted.
> 
> 1) The drive is (was) a backup drive with a great deal of sensitive
>    corporate laboratory research data and algorithms on it.  The
>    monitary loss of the data being stolen would be significant though
>    it's hard to put a $$ value on it.  More importantly, I'm following
>    corporate policy.
> 
> 2) The drive is under extended warranty and so I'm sending it back for
>    a new drive.  The Power Supply in the enclosure is bad.  The actual
>    drive is still good, but they want the whole thing back for a
>    replacement.  Sanding off the oxide and then melting the drive
>    probably won't go over well with the manufacturer.
> 
> 3) Writing zeros is a not a good idea if the data is valuable.  The
>    small latent magnetic orientation info left from the previously
>    written data is not _that_ hard to recover with $5000 equipment, so
>    I've read.  Multiple passes of random patterns are needed to make
>    recovery costly.
> 
>    Tony Nelson's remark about newer drives having overlapping data
>    tracks is interesting and I don't know what current research says
>    about the effects of that on recovery, but Gutmann's (slightly old)
>    paper from 1996:
> 
>      <http://www.cs.auckland.ac.nz/%7Epgut001/pubs/secure_del.html>
> 
>    says in Section 2:
> 
>       When all the above factors are combined it turns out that each
>       track contains an image of everything ever written to it, but
>       that the contribution from each "layer" gets progressively
>       smaller the further back it was made. Intelligence organisations
>       have a lot of expertise in recovering these palimpsestuous
>       images.
>    
>    Which is why 25 passes meets DoD (and my corporate) standards.
> 
>  4) I don't know if the fact that the process runing at 100% of one CPU
>     means it is compute bound.  Looking at the disk I/O meter in
>     gkrellm I see bursts of writes followed by intervals of no
>     transfer.  I know that magnetic reorientation requires some time
>     to "set" and that may be why the delays are there.  Or it may be
>     compute bound.

Run "top" and you may find that the shred process is in a "D" state a
lot of the time.  That means it's in an I/O wait state, waiting on the
drive to complete some operation.  A "D" state can suck up a lot of CPU.

> Thanks for all the interesting comments on my question.  At this point
> I think I'll just let the thing run for the five days.
> 
> Dean
> 


-- 
----------------------------------------------------------------------
- Rick Stevens, Systems Engineer                      ricks at nerd.com -
- AIM/Skype: therps2        ICQ: 22643734            Yahoo: origrps2 -
-                                                                    -
-           Give me ambiguity or give me something else!             -
----------------------------------------------------------------------




More information about the users mailing list