RE: [Full-Disclosure] Erasing a hard disk easily

["Todd Towles" <toddtowles@xxxxxxxxxxxxxxx>]

WipeDrive3 is a DOD approved (HIPAA, etc) product that I use and it calls
DOD-level wiping 3 passes with 3 overwrites each. Most of the time I use 1
pass for less important information. 

http://www.whitecanyon.com/wipedrive.php


-----Original Message-----
From: full-disclosure-admin@xxxxxxxxxxxxxxxx
[mailto:full-disclosure-admin@xxxxxxxxxxxxxxxx] On Behalf Of
Valdis.Kletnieks@xxxxxx
Sent: Tuesday, July 13, 2004 11:45 PM
To: Maarten
Cc: full-disclosure@xxxxxxxxxxxxxxxx
Subject: Re: [Full-Disclosure] Erasing a hard disk easily 

On Mon, 12 Jul 2004 23:23:24 +0200, Maarten <fulldisc@xxxxxxxxxxxx>  said:

> * Department-of-defense level (dd as above but lots more times (like 10+))

DOD 5220-22M says:

http://www.irwin.army.mil/ac/Electronic_Publications/DoD_Pubs/DoD%205220-22-
M/cp
8.pdf

Pages 14 and 15 note methods "a, b, d, and m" sanitizing fixed drives,
and continues:

d. Overwrite all addressable locations with a character, its complement,
then a 
random character and verify. THIS
   METHOD IS NOT APPROVED FOR SANITIZING MEDIA THAT CONTAINS TOP SECRET
INFORMA-
   TION.

So 3 passes with verification is sufficient for up to Secret.  Top Secret
and higher classifications require physical destruction of the disk.

(Note that these are the regs for civilian-sector contractors to the DoD,
anybody with citations for the military and/or intelligence community
segments feel free to speak up - but I suspect they're fairly similar..)


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html