Securely delete all data on external SSD [Solved]

[CharlesV]

Because of the way SSD's 'balance' writing, and none of the makers do strict ATT clearing mechanics.. there 'technically' is no method to guarantee even a 0 wipe will 'over write' everything on an SSD.

You CAN get pretty darn close by wiping, then destroying partitions and creating several partitions, (I usually choose three grabbing the entire drive.) Install to it 100% encrypted. Then destroy those and create one partition 100% drive size and encrypt that as well.

Once there, you can pretty much destroy that partition too and create anything you like and nobody will be 'recovering data' from that drive. ***BUT*** someone WILL tell you that *still* you have not 'over written safely' ;=/

[Charlie Brown]

If you can, just do this:

After just 1 pass of zero:

photorec and/or testdisk on Linux

and Recuva (or any other you like (whichever is supposed to be the most powerful/professional)) on Windows (you can find Recuva also on Hiren's BootCD if you don't want/have Windows..)

Then scan..

and let's see what they'll be able to recover :)

[Aronticuz]

If you can, just do this:

After just 1 pass of zero:

photorec and/or testdisk on Linux

and Recuva (or any other you like (whichever is supposed to be the most powerful/professional)) on Windows (you can find Recuva also on Hiren's BootCD if you don't want/have Windows..)

Then scan..

and let's see what they'll be able to recover :)

mm hmm - acknowledged - will do and ~ let it be henceforth and thenceforward known by all subject and citizen

Dat Charlie Brown - He da Maan!

[Aronticuz]

Because of the way SSD's 'balance' writing, and none of the makers do strict ATT clearing mechanics.. there 'technically' is no method to guarantee even a 0 wipe will 'over write' everything on an SSD.

You CAN get pretty darn close by wiping, then destroying partitions and creating several partitions, (I usually choose three grabbing the entire drive.) Install to it 100% encrypted. Then destroy those and create one partition 100% drive size and encrypt that as well.

Once there, you can pretty much destroy that partition too and create anything you like and nobody will be 'recovering data' from that drive. ***BUT*** someone WILL tell you that *still* you have not 'over written safely' ;=/

The best help is always the help when in need.

I was thinking along similar lines - do all I can to obfuscate residuals if residuals do hang around.
And encryption may just attract a hackers attentions?

Usually I test a new drive but the one I received I plopped it into immediate use and it was too slow. 6 minutes on one external drive too 2 hours to partially complete before I quit it in process.

Ah well let it be known that Aronticuz finds all your help very, very helpful and also learns from own mistakes.

Thus! Henceforth and thenceforward let it be known that Charlie Brown has a colleague in CharlesV and both thenceforth greeted as
Yoo Da Maan bro!

[CharlesV]

[Aronticuz]

Just a heads up on this topic.

Reason: making sure have enough copies of my own data to provide continuity in switching over from 21.3 to 23.1 on this machine.

Thanks to all who contributed - you are great

[BitJam]

Code: Select all

sudo dd if=/dev/zero of=/dev/sdX conv=noerror,sync,notrunc status=progress

It's also possible to add , say, bs=1M or say 4M to make it faster, but without that (the above way) will be "bit-for-bit" (perfect)..


...Just change the /dev/zero to /dev/random (when needed) and of=/dev/sdX to whatever it is, say ../nvme0

IMO /dev/urandom is far better than /dev/zero for this. Perhaps it was a coincidence but one of the few times I've had a fairly new flash memory device fail was when I wrote a bunch of zeroes to it.

[Aronticuz]

@BitJam hey thanks for this - it will be helpful going forward

[errorik]

Thanks Charlie and Charles. Just finished zeroing my 250GB NVME.

Just cleaning up my mess of daily and spare SSD's and flash drives.

This thread got me thinking of writing a custom dataset. One that the potential "lulz" seeker would have to "un-see".

A typical zero pass and fresh install should be fine for my uses. I typically get free hardware from an IT friend.
His clients NEED the latest. I had to start saying "No". The amount of e-waste is overwhelming.

It is prudent to protect your data. I find it to be a losing battle. Because Microsoft, Google, Apple and others are
harvesting our data at every turn.

[Aronticuz]

abridged ...

It is prudent to protect your data. I find it to be a losing battle. Because Microsoft, Google, Apple and others are
harvesting our data at every turn.

Agreed - but like any home protection system if they want to get in and they have skills to do so then they will.

It is more along lines of being prudent and ensuring personal data is not flaunted to general public.