Slashdot Mirror


The Homemade Hard Disk Destroyer

Barence writes "All businesses have sensitive data they need to destroy when they replace PCs, but disposing of hard disks properly can be an expensive business. This has led one IT manager in the UK to come up with his own, homemade solution — Bustadrive. It uses a powerful 'hydraulic punch' to physically deform a hard disk, rendering it virtually unreadable, and requires nothing more than a pull of the lever on the front — similar to a drinks-can crusher. PC Pro tested the Bustadrive, and also sought the opinions of data destruction companies as to whether the device was really as effective as hoped, or just a fun way to mangle a hard disk or two."

48 of 497 comments (clear)

  1. Overkill? by Miros · · Score: 4, Insightful

    Why not just use a degausser? or DBAN?

    1. Re:Overkill? by Anonymous Coward · · Score: 4, Interesting

      I'd just use my rifle and a few rounds of .308 Winchester (or .303 British, 7.5mm Swiss, 8mm Mauser, whatever). Problem solved...

      If you really want to go low tech, a sledgehammer would do fine.

    2. Re:Overkill? by LordLimecat · · Score: 5, Informative

      Thats probably because you used some silly setting like Gutmann. Just use pseudorandom and be done with it. (esp since gutmann isnt really relevant anymore....)

      Pseudorandom wipe can apparently do an 80gb drive (hooked up via usb) in about 40 minutes.

      If youre doing multiple passes, you may want to make sure that doing it via overwrites (rather than destruction) is really good enough for your data :)

    3. Re:Overkill? by ByOhTek · · Score: 5, Interesting

      Where I used to work (~5 years ago), we used an erasure tool that wrote random data over the entire drive (10 times), then introduced the drive to "Mr. Band Saw" in the machine shop, to quarter the platters, on any DoD/DoE stuff

      --
      Self proclaimed typo king, and inventor of the bear destroying coffee table (patent not pending).
    4. Re:Overkill? by mellon · · Score: 4, Interesting

      A degausser weakens the magnetized regions, but it's still at least theoretically possible to read it if it's not done thoroughly enough. What I don't get is why you don't just take it apart and sand the platters clean. There's zero chance of reading it after that, and it's a lot less energy intensive than actually chunking the platters. Extra credit if you use the disk drive motor to spin the disk so that you can sand it without any actual effort...

    5. Re:Overkill? by emocomputerjock · · Score: 4, Insightful

      I was agreeing with you.

    6. Re:Overkill? by jonadab · · Score: 5, Funny

      Because for a system administrator, paranoia is a basic job requirement. Consequently, when it comes to data security, there's no such thing as too much overkill. Even when you have subjected the drive to a thermite reaction, let it cool, and ground the whole resulting mess down to the consistency of talcum powder, you still have to scatter the ashes over at least a thousand square miles of ocean, just to be sure. Ideally, you'd scatter half the ashes over the central Pacific, some of them over the north Atlantic, and the rest over the southern ocean.

      Extra bonus points if you scrub the platters with fluorine trichloride before putting it through the thermite reaction.

      Even then, you'll never be fully comfortable with the job until you destroy the entire galaxy that the drive was in. Maybe the whole universe. You can't be too sure.

      --
      Cut that out, or I will ship you to Norilsk in a box.
    7. Re:Overkill? by maxwell+demon · · Score: 5, Informative

      Even then, you'll never be fully comfortable with the job until you destroy the entire galaxy that the drive was in. Maybe the whole universe. You can't be too sure.

      Just destroying the universe after the disk failed isn't enough. If many-worlds is true (and the paranoid sysadmin must consider this possibility), the fact that you destroyed the universe in this world doesn't guarantee that the data isn't destroyed in any other world. Indeed, you have to setup the universe-destroying device before writing the first bit of data onto the drive, and have it automatically triggered if it can't detect any accesses to the drive any more (after all, you might forget to activate it by hand in some of the universes). Only by setting it up before writing data you ensure that it will be in every universe where the disk contains any data, despite all the universe splitting going on.

      --
      The Tao of math: The numbers you can count are not the real numbers.
    8. Re:Overkill? by ehren_m · · Score: 5, Funny

      What's the best way to get red wine out of cotton? This guy: Thermite.

    9. Re:Overkill? by Scrameustache · · Score: 5, Funny

      Even if only one technician in the entire world, with a billion-dollar lab, is capable of recovering the data from a zero'd drive, it's too much of a risk. What if that one technician is Chinese?

      Oh, that's ok, my data isn't written in Chinese...

      --

      You can't take the sky from me...

    10. Re:Overkill? by mlts · · Score: 4, Insightful

      There is one simple thing about physical destruction. It is obvious to an observer that the drive is unusable. If someone has a pile of drives, one before DBAN, one after, it wouldn't be hard for someone to move some drives into the after pile either as a prank, or perhaps to get the information once it leaves the location. Physical destruction prevents this from happening, because almost anyone can tell the difference between a pile of scrap metal and a hard disk that looks like it might function.

    11. Re:Overkill? by ripnet · · Score: 5, Funny

      Just mark the drive 'fragile' and post it via CityLink (UK courier firm)... guaranteed that THAT data wont be seen again...

    12. Re:Overkill? by Shakrai · · Score: 5, Funny

      Beside, just reformat a few times--first with reiser, then NTFS, then another Linux format, then whatever you want to use in the end. Pretty hard to unscramble all that.

      It's easy to unscramble reiser. You just have to offer it a reduced sentence in exchange for telling you where the body is ;)

      Thank you, I'll be here all night....

      --
      I want peace on earth and goodwill toward man.
      We are the United States Government! We don't do that sort of thing.
    13. Re:Overkill? by TheRaven64 · · Score: 4, Insightful

      Who are you trying to keep the data safe from? If it's a foreign government willing to do a molecular scale image of the entire disk with a scanning tunnelling electron microscope and then have a large team of people painstakingly apply heuristics and get back some small fraction of the stored data in a few years time and after spending several tens of millions of dollars on the project, then this is indeed good advice. If, on the other hand, you're worried about commercial data theft, then a single dd pass is enough.

      --
      I am TheRaven on Soylent News
    14. Re:Overkill? by TheRaven64 · · Score: 5, Informative

      Note that there are two dimensions to security. One is how big a problem it is if the secret leaks, the other is how long this is true for. Troop movements in Iraq, for example, could cost lives if they are leaked today, but if they are leaked next month then the data is irrelevant. The NIST recommendations that suggest destroying the drive are based in the principle that the secrets may be important in 20-50 years. They factor in attacks that are hypothetical now, but could become practical over this timeframe. For a commercial entity, this level of paranoia is rarely required. Most businesses don't have any data that would be a problem if it leaked even 5 years in the future - even credit card numbers have a shorter lifespan than that, so if someone recovered a five-year-old list of credit card numbers they wouldn't get anything of value.

      --
      I am TheRaven on Soylent News
    15. Re:Overkill? by inviolet · · Score: 4, Funny

      [What if the one well-funded hacker who can recover the data is Chinese?]

      Oh, that's ok, my data isn't written in Chinese...

      Doesn't matter. They could still read images, sound recordings, schematics, spreadsheets of numbers...

      Well, they COULD, except the West uses a different binary encoding scheme than the Chinese. Over here everything is written as ones and zeros, but over there everything is written as ones and zewos. And I doubt they have the technology to convert.

      --
      FATMOUSE + YOU = FATMOUSE
    16. Re:Overkill? by rsmith · · Score: 4, Informative

      If you read the enhanced version on his homepage, he says that he didn't update the paper because it is practically unfeasable to try and restore overwritten data from a modern disk. In the epilogue he says:

      Any modern drive will most likely be a hopeless task, what with ultra-high densities and use of perpendicular recording I don't see how MFM would even get a usable image, and then the use of EPRML will mean that even if you could magically transfer some sort of image into a file, the ability to decode that to recover the original data would be quite challenging.

      --
      Never ascribe to malice that which is adequately explained by incompetence.
    17. Re:Overkill? by rsmith · · Score: 4, Informative

      Gutmann's paper was based on 1990-era technology. And even then you didn't need all 35 passes, just the ones that correspond to the encoding used on the disk. If I read the enhanced version of the paper correctly, restoring even plainly overwritten data from a modern disk is a hopeless task.

      --
      Never ascribe to malice that which is adequately explained by incompetence.
  2. Stand drill by Nikademus · · Score: 5, Informative

    I just use a stand drill. I goes through all the platters and the circuitboard.
    Fairly easy to find and purchase.

    --
    I gave up with the idea of an useful sig...
    1. Re:Stand drill by A.+B3ttik · · Score: 4, Funny

      I goes through all the platters and the circuitboard.

      IM IN UR GARAGE GOES THRU UR HDDRV.

    2. Re:Stand drill by BenevolentP · · Score: 5, Funny

      Whatever happened to just taking hike to closest Mt. Doom and throwing disk to molten lava hole?

    3. Re:Stand drill by Anonymous Coward · · Score: 4, Insightful

      I'd guess the foundry people would object to contaminating their carefully selected alloy...

    4. Re:Stand drill by mellon · · Score: 4, Insightful

      Dude, haven't you read the Trilogy? It takes half a book just to cross Mordor, plus there's Orcs and shit. That's way more trouble than it's worth. And have you ever tried to find Middle Earth on a map? Sure, lots of people have theories, but what with continental drift and such, it's all pretty obscure. How can you be sure the volcano you use is *really* Mount Doom in this late, degenerate age?

    5. Re:Stand drill by damburger · · Score: 4, Funny

      Its emotionally draining, because just before the hard drive goes into the molten metal you realise it has Learned the Value of Human Life.

      --
      If we can put a man on the moon, why can't we shoot people for Apollo-related non-sequiturs?
    6. Re:Stand drill by necro81 · · Score: 4, Interesting

      You mean, after freezing and shattering it with liquid nitrogen?

    7. Re:Stand drill by value_added · · Score: 5, Funny

      The folks in Accounting must love your expense and mileage reports.

    8. Re:Stand drill by Scrameustache · · Score: 5, Funny

      Dude, haven't you read the Trilogy? It takes half a book just to cross Mordor, plus there's Orcs and shit. That's way more trouble than it's worth. And have you ever tried to find Middle Earth on a map? Sure, lots of people have theories, but what with continental drift and such, it's all pretty obscure. How can you be sure the volcano you use is *really* Mount Doom in this late, degenerate age?

      Because of all the Orcs and shit?

      --

      You can't take the sky from me...

  3. This is just a controlled hammer by wjh31 · · Score: 4, Funny

    Just give the hard drive to your kid with a hammer, tell them to go nuts, come back 10 mins later with a dustpan and brush and you are sorted.

    1. Re:This is just a controlled hammer by Hyppy · · Score: 4, Informative

      If they're reusable afterwards, you didn't use a proper degausser.

    2. Re:This is just a controlled hammer by zygotic+mitosis · · Score: 5, Funny

      Well, if you like the kid, sure..

    3. Re:This is just a controlled hammer by Opportunist · · Score: 5, Funny

      Good safety advice! Never go close to kids without protective gear.

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
  4. lots of options out there! by farnham · · Score: 4, Insightful

    My drill press makes for a very effective drive killer.

    Use what you got!

    --
    pending committee review
  5. 7.62mm holes by Bob+the+Super+Hamste · · Score: 4, Interesting

    I have always preferred putting some 7.62mm holes through old hard drives at a distance of 50 to 100m. Just remove the electronics so you don't end up with circuit board debris all over and old hard drives make great targets.

    --
    Time to offend someone
    1. Re:7.62mm holes by IBBoard · · Score: 5, Funny

      7.62mm seems like an unusual size for a drill bit, and what kind of drill are you managing to use at up to 100m? Seems like a longer distance than I've seen any normal pillar drill move over.

      I do agree that not removing the circuit board causes lots of debris, though, and is especially dangerous when it spins off at an angle!

  6. Oblig... by rumith · · Score: 4, Funny

    Nuke your old hard drive from the orbit. It's the only way to be sure.

  7. Re:Destroy the data, not the drive by chill · · Score: 4, Interesting

    I bet it takes less time to plug the machine in and boot off a CD than it does to open the case, remove the drive, and then smash it.

    Not if you actually let the software RUN, it doesn't. Using DBAN on a 500 GB drive can take days, whereas this solution takes a few minutes at most. Your solution is only practical if you have one hard drive to destroy, and it is attached to a machine. The usual situation is the hard drive died and you replaced it with a good one, now need to make sure the dead one is REALLY dead before you toss it. Or, you have a batch of them that need to go because you're refreshing PCs.

    --
    Learning HOW to think is more important than learning WHAT to think.
  8. Gutmann was wrong by feenberg · · Score: 5, Informative

    There is no need to physically destroy a drive to prevent data from being read. The claims of Gutmann that it was possible to read overwritten sectors were never sustained by his sources. I investigated this years ago and reported in Can Intelligence Agencies Read Overwritten Data that he was very much overwrought. I see he has gone on to tilt at other windmills since he propagated that myth.

    1. Re:Gutmann was wrong by Anonymous Coward · · Score: 5, Insightful

      Physically overwritten sectors are (almost) certainly unrecoverable. But what about remapped 'bad' sectors? AFAIK these cannot be accessed in any way by software wiping tools, but could be accessed and potentially read by tweaked drive firmware. They might be overwritten if you use the drive's own firmare erase command if it supports this.

    2. Re:Gutmann was wrong by TheRaven64 · · Score: 4, Insightful

      And how many of these are there? SMART can tell you how many sectors have been remapped, and I've only seen this over 50 on a hard drive that completely failed a few hours later. 50 512-byte sectors works out to be 25KB of data, taken at random from the data ever written to the disk. What is the probability of this being something useful? If you use encryption or compression on the disk - or the files - then these sectors will contain data that is completely meaningless without the relevant headers.

      --
      I am TheRaven on Soylent News
  9. Re:Not 100%, but otherwise cost-effective given ri by Peter+Steil · · Score: 5, Informative

    This is not effective, I've successfully recovered drives where the PCB had been smashed, broken, etc. You just need to find the same model and replace with that.

  10. Re:The Columbia test by dbIII · · Score: 4, Interesting

    You don't need to melt the platters. You just need to get them hot enough to no longer be magnetic - that is above the Curie temperature for the alloy, which will be somewhere around 200C or so. When the magnetic domains reform there is none of them to be in the same place as they were before with the exception of a few edges on grain boundaries. Get even hotter and you'll change the grain size or even completely change the crystal structure and get grains in completely different places and sizes when it cools down.
    That means heating the whole drive for long enough that the platters get hot and not just heating the outside of the thing the drive is in for a few minutes.

  11. Re:I'll fuck it up good. by larry+bagina · · Score: 5, Funny

    the topic is hard drive destruction, not sex.

    --
    Do you even lift?

    These aren't the 'roids you're looking for.

  12. In the real world, fire is a bad solution by name_already_taken · · Score: 5, Insightful

    Which would be the better solution.

    A small terracotta pot without a hole in the bottom of it + a small amount of thermite is the cheapest way, thermite is cheap and reasonably easy to make.

    Ok, do that in your office and see how many minutes your job lasts once the fire's out.

    Even if we did it outside at my place of work, we'd get complaints from the neighbors. A mechanical/hydraulic crusher/bender thing could be made into something that looks like an office appliance.

    Nothing says "no data recovery" like a drive reduced to its elemental components.

    Except it's not. Burning is generally a process of rapidly combining reactants, not dividing them up. Plus, it's rather environmentally unfriendly - having a cloud of smoke go up is frowned upon in most places these days.

    --
    Putting moderation advice in your .sig lowers your karma!
  13. There was an interesting bugtraq thread in 2005. by arcade · · Score: 4, Insightful

    Let me pull a bugtraq posting from 2005 out for perusal. There are other interesting tidbits in that thread too.

    http://seclists.org/bugtraq/2005/Jul/0464.html

    ===
    From: dave kleiman
    Date: Sun, 24 Jul 2005 15:30:30 -0400

    Here is a quote directly from Peter I received Saturday, he asked to have it
    passed on to the list.
    -Snip-
    >I'd love to hear some thoughts on this from security and data experts
    >out there.
    People should note the epilogue to the paper:
        Epilogue
        In the time since this paper was published, some people have treated the
    35-
        pass overwrite technique described in it more as a kind of voodoo
        incantation to banish evil spirits than the result of a technical analysis
        of drive encoding techniques. As a result, they advocate applying the
        voodoo to PRML and EPRML drives even though it will have no more effect
    than
        a simple scrubbing with random data. In fact performing the full 35-pass
        overwrite is pointless for any drive since it targets a blend of scenarios
        involving all types of (normally-used) encoding technology, which covers
        everything back to 30+-year-old MFM methods (if you don't understand that
        statement, re-read the paper). If you're using a drive which uses
    encoding
        technology X, you only need to perform the passes specific to X, and you
        never need to perform all 35 passes. For any modern PRML/EPRML drive, a
    few
        passes of random scrubbing is the best you can do. As the paper says, "A
        good scrubbing with random data will do about as well as can be expected".
        This was true in 1996, and is still true now.
        Looking at this from the other point of view, with the ever-increasing
    data
        density on disk platters and a corresponding reduction in feature size and
        use of exotic techniques to record data on the medium, it's unlikely that
        anything can be recovered from any recent drive except perhaps one or two
        levels via basic error-cancelling techniques. In particular the the
    drives
        in use at the time that this paper was originally written have mostly
    fallen
        out of use, so the methods that applied specifically to the older, lower-
        density technology don't apply any more. Conversely, with modern high-
        density drives, even if you've got 10KB of sensitive data on a drive and
        can't erase it with 100% certainty, the chances of an adversary being able
        to find the erased traces of that 10KB in 80GB of other erased traces are
        close to zero.

    Peter.
    ===

    --
    "Rune Kristian Viken" - http://www.nwo.no - arca
  14. Easiest, Cheapest by Anonymous Coward · · Score: 5, Funny

    Mail it to yourself via registered mail and then refuse deliver. Once it enters the Post Office loop, it'll never be seen again.

  15. whiner by rubycodez · · Score: 5, Funny

    Ok, do that in your office and see how many minutes your job lasts once the fire's out

    charred corpses don't terminate jobs

    Plus, it's rather environmentally unfriendly

    data processing including the manufacture and operation of hard drives is already environmentally unfriendly, and oxidizing metals is one way to get them back toward the more natural state for this world

  16. Comment removed by account_deleted · · Score: 4, Insightful

    Comment removed based on user account deletion

  17. Reduce, Reuse, Recycle by drinkypoo · · Score: 5, Insightful

    Reduce - Buy the biggest disks you can afford, they're worth repurposing and you won't have to spend as much on successors or the attendant labor.

    Reuse - Repurpose disks for other purposes. Use last years' disks as part of your backup solution. Secure-format them on a low-power machine and put them on eBay.

    Recycle - There must be SOMEONE willing to break the drives down and give you back the platters for destruction. There's significant aluminum in some of those drives.

    All this crushing, drilling, and shooting of drives is fun. But it's also extremely wasteful. I understand destroying the drives if lives are at stake, but otherwise, stop.

    --
    "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"