Re: declassify hard drive
From: John Elsbury (johne_at_neveryoumind.co.nz)
Date: 07/16/03
- Next message: Piotr Gałuszkiewicz: "Leading PKI platforms"
- Previous message: Al Dykes: "Re: Newbie Asks..."
- In reply to: Walter Roberson: "Re: declassify hard drive"
- Next in thread: Chris Mattern: "Re: declassify hard drive"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Wed, 16 Jul 2003 03:52:42 GMT
On 15 Jul 2003 17:21:31 GMT, roberson@ibd.nrc-cnrc.gc.ca (Walter
Roberson) wrote:
>The procedures apparently depend upon the level of security that
>was attached to the drives to start with. For very sensitive data,
>I believe destruction is still the only approved method.
>--
The last time I looked at these standards / procedures, they
apparently predated "intelligent" disk drives which identify and map
bad sectors autonomously and transparently.
Now almost all (if not all) IDE and SCSI drives have the ability to
recalibrate, identify failing sectors, and copy their contents to
spare sectors (internally). This could be a significant exposure as
software-based disk cleaning tools might not find those sectors, but
information could potentially be recovered by an attacker using
advanced technology..
Given the low cost of hard disks, I would suggest erring on the side
of caution and go with the "destruction" option anyway. Or, at least,
keep them (and account for them) until any information they have ever
stored is of no value to anybody.
- Next message: Piotr Gałuszkiewicz: "Leading PKI platforms"
- Previous message: Al Dykes: "Re: Newbie Asks..."
- In reply to: Walter Roberson: "Re: declassify hard drive"
- Next in thread: Chris Mattern: "Re: declassify hard drive"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
