[Cialug] Semi-OT: wiping a hard drive once is enough?

[Nathan Stien]

Very interesting reply at the original link.  Strikes me as credible
(despite its cavalier approach to capitalization), but I am no expert on
drive hardware.

http://www.h-online.com/security/news/forum/S-True-but/forum-111495/msg-14370181/read/

"""
considering the limitations of software or any overwrite process that
uses the data interface of the drive to clear legacy information is
limited by the technical limitations of this process. In many cases,
any data in the HPS will not be modifiable unless the process is HPA
aware and the process enables the host controller to facilitate
access to this region. likewise, G-list sectors may not be accessible
to most externally initiated overwrite processes.

[...]

to address the need for a reliable and efficient purge based process
that renders the processed device reusable, and void of all data
beyond laboratory effort a good solution is Secure Erase. This
technology is embedded in all ATA standard compliant hard drives
manufactured since 2001. Although SE is an integrated purge level
technology, the means to deploy it is a challenge. developed as a
means for IT admins to have a reliable sanitization technology
integrated in to every drive, the potential for SE to be exploited by
virus, malware or malicious intentions was too significant to leave
it unprotected. consequently SE can not be initiated reliably through
the use of software, or on devices connected to their host.
"""

That's news to me at least.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://cialug.org/pipermail/cialug/attachments/20090312/64e404ec/attachment.html