hmm...

Story: Secure Deletion of Data in LinuxTotal Replies: 4
Author Content
olefowdie

Jun 21, 2012
12:44 PM EDT
those are some fancy programs/commands for something really dead simple.

why not use "dd if=/dev/zero of=/home/user/myfile.txt"
JaseP

Jun 21, 2012
1:14 PM EDT
Some of them rewrite the space over and over to avoid forensic reconstruction of the data... Your example might not be thorough enough for a high security environment.
skelband

Jun 21, 2012
6:20 PM EDT
Indeed, if the file is on an SSD, different pages may be assigned to the written 0s rather than rewriting the old pages due to wear leveling.

In this case, it may well be insufficient to destroy the data.

It's amazing what can be recovered using forensic techniques where disk pages have been rewritten even a number of times. The whole subject blows my mind.
gus3

Jun 21, 2012
6:37 PM EDT
When spinning platters are the medium, and you just want to clear the old data in the unused space:

1. Get root.

2. Go to a directory on the volume you want to scrub. Any directory will suffice.

3. Issue the following command:
dd if=/dev/zero of=zeros bs=1048576
This will fill up the volume with a zero file. (If you aren't root, you'll get only ~95% of the volume.)

4. Then issue this command:
shred -vu zeros
This will wipe the formerly unused space, then release it once again for new files. Voila!

Unless the volume is already over 90% used, the journal isn't going to be a concern. It may slow things down, but it will be forced to commit writes to the dnodes long before write coalescing becomes an issue.
jezuch

Jun 22, 2012
1:46 AM EDT
Yeah, secure delete is tricky. http://arstechnica.com/security/2012/06/personal-data-put-at...

Quoting:why not use "dd if=/dev/zero of=/home/user/myfile.txt"


Won't work on a copy-on-write filesystem like btrfs. It probably won't work on any modern filesystem, even if it usually does in-place writes.

For SSD's it *may* be enough if your filesystem supports discard (the famed TRIM command in ATA land) and you just remove the file (and it's not present in any snapshots). But I would not bet on it.

Posting in this forum is limited to members of the group: [ForumMods, SITEADMINS, MEMBERS.]

Becoming a member of LXer is easy and free. Join Us!