RE: secure erasure of files?

From: Torrey Hoffman (Torrey.Hoffman@myrio.com)
Date: Tue Feb 12 2002 - 16:14:14 EST


IIRC, last time this topic came up, the best answer was:

Given modern disk hardware (block remapping) and operating
system behavior, no, there is no way to securely delete files
regardless of OS or filesystem.

(AFAIK, the transparent hardware block remapping cannot be
detected or worked around in software - any software - but
perhaps the IDE experts here know otherwise. )

If you don't want a sufficiently determined attacker to be
able to read your data from the disk, don't write it.

The solution is to use encryption and make sure your data is
never, ever written to disk unencrypted. In particular, use
encrypted swap and encrypted loopback filesystems.

Torrey

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/



This archive was generated by hypermail 2b29 : Fri Feb 15 2002 - 21:00:51 EST