data shredder

Amedee Van Gasse (ub) amedee-ubuntu at amedee.be
Mon Dec 21 14:24:38 UTC 2009


Hi Gilles!

Something went wrong, I got your last mail 3 times.

On Mon, December 21, 2009 14:48, Gilles Gravier wrote:

> The standards are still there, like /DoD 5220.22-M (3 passes).../ and
> more also. See the list on my previous post.

>From Wikipdia:
DoD 5220.22-M is sometimes cited as a standard for sanitization to counter
data remanence. The NISPOM actually covers the entire field of
government-industrial security, of which data sanitization is a very small
part (about two paragraphs in a 141 page document).[4] Furthermore, the
NISPOM does not actually specify any particular method. Standards for
sanitization are left up to the Cognizant Security Authority. The Defense
Security Service provides a Clearing and Sanitization Matrix (C&SM) which
does specify methods.[5] As of the June 2007 edition of the DSS C&SM,
overwriting is no longer acceptable for sanitization of magnetic media;
only degaussing or physical destruction is acceptable.

> Random data is not enough... If you're going random, you might as well
> do one pass.

Doh!
You're right of course. Silly me.

> Unless there is clear text in that block that allows a sector search to
> find it...

That assumes that you already know what you want to find. It won't work
for a blind search.

-- 
Amedee





More information about the ubuntu-users mailing list