Slashdot Mirror
The Homemade Hard Disk Destroyer
Barence writes "All businesses have sensitive data they need to destroy when they replace PCs, but disposing of hard disks properly can be an expensive business. This has led one IT manager in the UK to come up with his own, homemade solution — Bustadrive. It uses a powerful 'hydraulic punch' to physically deform a hard disk, rendering it virtually unreadable, and requires nothing more than a pull of the lever on the front — similar to a drinks-can crusher. PC Pro tested the Bustadrive, and also sought the opinions of data destruction companies as to whether the device was really as effective as hoped, or just a fun way to mangle a hard disk or two."
Why not just use a degausser? or DBAN?
I just use a stand drill. I goes through all the platters and the circuitboard.
Fairly easy to find and purchase.
I gave up with the idea of an useful sig...
Just give the hard drive to your kid with a hammer, tell them to go nuts, come back 10 mins later with a dustpan and brush and you are sorted.
My drill press makes for a very effective drive killer.
Use what you got!
pending committee review
I have always preferred putting some 7.62mm holes through old hard drives at a distance of 50 to 100m. Just remove the electronics so you don't end up with circuit board debris all over and old hard drives make great targets.
Time to offend someone
Nuke your old hard drive from the orbit. It's the only way to be sure.
I think it would be easy to melt the disk into a nice puddle of slag, what might be harder is not burning the building down in the process.
Raise the drive to the curie point. All magnetic domains are destroyed, and recovery is impossible with currently known methods.
I bet it takes less time to plug the machine in and boot off a CD than it does to open the case, remove the drive, and then smash it.
Not if you actually let the software RUN, it doesn't. Using DBAN on a 500 GB drive can take days, whereas this solution takes a few minutes at most. Your solution is only practical if you have one hard drive to destroy, and it is attached to a machine. The usual situation is the hard drive died and you replaced it with a good one, now need to make sure the dead one is REALLY dead before you toss it. Or, you have a batch of them that need to go because you're refreshing PCs.
Learning HOW to think is more important than learning WHAT to think.
A ball pean hammer applied vigorously to the drive spindle will render all but the most wealthy and determined effort to recover data fruitless and even then it is highly unlikely that all or even most of the data would be recoverable.
There is no need to physically destroy a drive to prevent data from being read. The claims of Gutmann that it was possible to read overwritten sectors were never sustained by his sources. I investigated this years ago and reported in Can Intelligence Agencies Read Overwritten Data that he was very much overwrought. I see he has gone on to tilt at other windmills since he propagated that myth.
This is not effective, I've successfully recovered drives where the PCB had been smashed, broken, etc. You just need to find the same model and replace with that.
Here is an easier method (version that may make from work).
There are commerical version that do alot better bending job, try http://www.garner-products.com/ for videos and pictures to gladden your hard drive destroying heart.
You don't need to melt the platters. You just need to get them hot enough to no longer be magnetic - that is above the Curie temperature for the alloy, which will be somewhere around 200C or so. When the magnetic domains reform there is none of them to be in the same place as they were before with the exception of a few edges on grain boundaries. Get even hotter and you'll change the grain size or even completely change the crystal structure and get grains in completely different places and sizes when it cools down.
That means heating the whole drive for long enough that the platters get hot and not just heating the outside of the thing the drive is in for a few minutes.
the topic is hard drive destruction, not sex.
Do you even lift?
These aren't the 'roids you're looking for.
Which would be the better solution.
A small terracotta pot without a hole in the bottom of it + a small amount of thermite is the cheapest way, thermite is cheap and reasonably easy to make.
Ok, do that in your office and see how many minutes your job lasts once the fire's out.
Even if we did it outside at my place of work, we'd get complaints from the neighbors. A mechanical/hydraulic crusher/bender thing could be made into something that looks like an office appliance.
Nothing says "no data recovery" like a drive reduced to its elemental components.
Except it's not. Burning is generally a process of rapidly combining reactants, not dividing them up. Plus, it's rather environmentally unfriendly - having a cloud of smoke go up is frowned upon in most places these days.
Putting moderation advice in your
A lot lower for alloys so it really depends on what it is. If we assume it's pure iron and a decades old drive then you are correct but small traces of other alloying elements have a dramatic effect (eg. for most stainless steel it's below room temperature in the extreme example).
There's a discussion at http://www.ocforums.com/archive/index.php/t-454159.html of a few different magnetic materials used in drives and Curie points with a few links to where they got the source data from.
Let me pull a bugtraq posting from 2005 out for perusal. There are other interesting tidbits in that thread too.
http://seclists.org/bugtraq/2005/Jul/0464.html
===
From: dave kleiman
Date: Sun, 24 Jul 2005 15:30:30 -0400
Here is a quote directly from Peter I received Saturday, he asked to have it
passed on to the list.
-Snip-
>I'd love to hear some thoughts on this from security and data experts
>out there.
People should note the epilogue to the paper:
Epilogue
In the time since this paper was published, some people have treated the
35-
pass overwrite technique described in it more as a kind of voodoo
incantation to banish evil spirits than the result of a technical analysis
of drive encoding techniques. As a result, they advocate applying the
voodoo to PRML and EPRML drives even though it will have no more effect
than
a simple scrubbing with random data. In fact performing the full 35-pass
overwrite is pointless for any drive since it targets a blend of scenarios
involving all types of (normally-used) encoding technology, which covers
everything back to 30+-year-old MFM methods (if you don't understand that
statement, re-read the paper). If you're using a drive which uses
encoding
technology X, you only need to perform the passes specific to X, and you
never need to perform all 35 passes. For any modern PRML/EPRML drive, a
few
passes of random scrubbing is the best you can do. As the paper says, "A
good scrubbing with random data will do about as well as can be expected".
This was true in 1996, and is still true now.
Looking at this from the other point of view, with the ever-increasing
data
density on disk platters and a corresponding reduction in feature size and
use of exotic techniques to record data on the medium, it's unlikely that
anything can be recovered from any recent drive except perhaps one or two
levels via basic error-cancelling techniques. In particular the the
drives
in use at the time that this paper was originally written have mostly
fallen
out of use, so the methods that applied specifically to the older, lower-
density technology don't apply any more. Conversely, with modern high-
density drives, even if you've got 10KB of sensitive data on a drive and
can't erase it with 100% certainty, the chances of an adversary being able
to find the erased traces of that 10KB in 80GB of other erased traces are
close to zero.
Peter.
===
"Rune Kristian Viken" - http://www.nwo.no - arca
Mail it to yourself via registered mail and then refuse deliver. Once it enters the Post Office loop, it'll never be seen again.
Ok, do that in your office and see how many minutes your job lasts once the fire's out
charred corpses don't terminate jobs
Plus, it's rather environmentally unfriendly
data processing including the manufacture and operation of hard drives is already environmentally unfriendly, and oxidizing metals is one way to get them back toward the more natural state for this world
Comment removed based on user account deletion
If you are wiping a hard disk to reassign within a company, and the hard drive isn't requiring top security, I've found that using HDDErase and DBAN are a good combo. HDDErase performs a complete erase on the controller level using ATA firmware commands (zeroing even the relocated sectors), then following up by usage of DBAN will put the chance of any recovery past anyone but the most determined.
Bonus points if you use TrueCrypt or BitLocker, so to ensure that a HDD is wiped, you just do a quick format, or a once over with zeroes. If you format a BitLocker drive in Windows 7, the format command explicitly zeroes out the areas with the volume keys on it making it impossible to recover the rest of the volume (more info here http://technet.microsoft.com/en-us/library/cc512654.aspx).
Reduce - Buy the biggest disks you can afford, they're worth repurposing and you won't have to spend as much on successors or the attendant labor.
Reuse - Repurpose disks for other purposes. Use last years' disks as part of your backup solution. Secure-format them on a low-power machine and put them on eBay.
Recycle - There must be SOMEONE willing to break the drives down and give you back the platters for destruction. There's significant aluminum in some of those drives.
All this crushing, drilling, and shooting of drives is fun. But it's also extremely wasteful. I understand destroying the drives if lives are at stake, but otherwise, stop.
"You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"