I imagine that the ATA security erase function would wipe the drive. If I had more time I would look up the ATA spec.
Paul, the several times mentioned paper
https://
is about the experimental finding that security erase has not been implemented fully or correctly on some SSD devices.
Out of 12 units tested only 4 were found to be reliable in the erasing through the ATA commands.
Of course on these 4 the Security erase worked alright.
jaclaz
I can´t remember exactly what´s the paper was nor the names of the researchers. But the paper was about some researchers testing USB flash media deletion by overwritting.I clearly remembar that the conclusión was the more the drive was overwritten, the less data retrieved.Of course this quote is not valid for any scientific study, but I am sure I read it, and it was not a comment from a forum.
So, acording your opinión and experience what usually can be found -in terms of meaningful/meaningless information, quantity etc- from, let´s say, a single zeroed USB Stich 4GB?
What are common forensic experiences regarding retrieving data from USB flash media?
What happens if the old USB drive one is deleted, is fully encrypted? that is if its size is 8MB you créate an encryoted container, 8GB filling all the drive? Does it affect anyway?
And finally(seriously) when we´re speaking of destroying is there any soaking substance suited for make chips unusable?( I do not like hammers lol
I can´t remember exactly what´s the paper was nor the names of the researchers. But the paper was about some researchers testing USB flash media deletion by overwritting.I clearly remembar that the conclusión was the more the drive was overwritten, the less data retrieved.Of course this quote is not valid for any scientific study, but I am sure I read it, and it was not a comment from a forum.
Good, and I am sure that you actually read it, but that doesn't change the fact that it is a vague reference about something you recall vaguely or that you are representing vaguely what you recall.
If you want some vague comments on that, it's OK.
What you posted makes NO SENSE, if the idea is to wipe and sell by writing over and over and exhausting the wear capability of the device, you will have a NON working device that you WON'T be able to sell.
So, acording your opinión and experience what usually can be found -in terms of meaningful/meaningless information, quantity etc- from, let´s say, a single zeroed USB Stich 4GB?
Nothing useful, but again, that does not mean in any way that the procedure is correct or "secure".
I have however drawn a probability estimation that you can find here, together with a visual representation of the SH-1 degausser®
http//
What are common forensic experiences regarding retrieving data from USB flash media?
Again this is a question that may be good for a poll, but I doubt that the G.I.'s will take part to it.
What happens if the old USB drive one is deleted, is fully encrypted? that is if its size is 8MB you créate an encryoted container, 8GB filling all the drive? Does it affect anyway?
Who knows?
What do you mean "affect"?
Any properly encrypted data is difficult to decrypt, partial encrypted data is likely "impossible", but still it cannot be defined "secure".
You are well beyond my "paranoid limit", ignore anything I tried to explain you and follow this guide/tutorial
http//
ignore also each and every comment, just trust that guide/tutorial "as is" and replocate it EXACTLY on each and every device.
And finally(seriously) when we´re speaking of destroying is there any soaking substance suited for make chips unusable?( I do not like hammers lol
Well, you can zap it electrically, it will be safer (for you) than any acid/corrosive soak.
jaclaz
What you posted makes NO SENSE, if the idea is to wipe and sell by writing over and over and exhausting the wear capability of the device, you will have a NON working device that you WON'T be able to sell
No. I already know that overwriting a flash device will destroy it gradually. I am not at this point speaking of reselling. It is now just out of curiosity, what happens with such a overwritten device?
And finally(seriously) when we´re speaking of destroying is there any soaking substance suited for make chips unusable?( I do not like hammers lol
Well, you can zap it electrically, it will be safer (for you) than any acid/corrosive soak.
How is it made?
jaclaz
How is it made?
You apply 12/24/36 V (your choice) with no current limiter below (say) 2 A on the pins of the memory and controller chips.
They make nice popping noises when frying….. though they do smell a bit.
If you don't plan to sell the device, then destroy it, and all the spare sectors within it will be gone, forever.
In Schroedinger cat's issue there wasn't the option to destroy the box no matter if the cat inside is alive or dead, you have this possibility, use it. wink
jaclaz
I set them up on a stand and use them to hone the sights on my rifle. Kill two birds with one stone (not literally of course).
However, I would like to know, just like of curiosity
I know that, destroying is the best way, but…is more difficult to recover meaningful data from a flash drive if you wipe it with zeroes? Are any possible track of information more damaged if overwriten?
However, I would like to know, just like of curiosity
I know that, destroying is the best way, but…is more difficult to recover meaningful data from a flash drive if you wipe it with zeroes? Are any possible track of information more damaged if overwriten?
Oh noes, again? 😯
Let's see (provided that you will accept a set of Q/A by a perfect stranger on the internet) if this will do ? .
Q1. How can I make sure that noone will recover data from my flash USB?
A1. A single 00 wipe is more than enough for all practical expectations of non recoverability of the contents.
Q2. But is it not better to make more passes, random passes, use any form of voodoo?
A2. Anything more that that will wear down the device a little bit more and is - again to all practical effects - unneeded.
Q3. But how to do the single 00 pass?
A3. The more suitable way is to use the USB stick controller manufacturer's "mass production tool" which normally allows to test (by writing all 00's) the WHOLE flash chips. This has the advantage that you can - as a side note - change the USB stick serial, so that traces of it's use on a PC cannot be anymore "coupled" with the actual item. You have to imagine this procedure as a "factory reset". But, to all practical effects, a simple 00 wipe of the accessible areas will do.
Q4. Where do I find these Mass Production Tools?
A4. Every manufacturer has a specific tool for a specific controller (and in some cases specific firmware for specific flash chips), such tools tend to get "leaked" often, and with some google searching you will be able to find places where they are available for download.
Q5. How are they operated?
A5. It depends, each tool may have specific requisites (as an example a number of them will ONLY work on XP), some will need to install a specific USB driver, since these tools are made by the (usually Chinese) manufacturers of the controller the English (where available) of their interface may be not exactly "Oxford English" and counterintuitive, the procedures to use them may vary greatly, the documentation is scarce, and most "talks" about them will be in Chinese or in Russian.
Q6. Is the procedure doable by an "end user"?
A6. Sure it is doable, the point would be if it is doable without messing the OS (with the "queer" drivers, if involved), or without "locking" the USB stick for good.
Q7. Is the procedure with a single 00 wipe pass through "normal" software "secure"?
A7. No. In the sense that it is not completely secure, as areas not reachable by the "normal" software may still contain some info.
Q8. Is the procedure through the controller Manufacturer's tools "secure"?
A8. No. In the sense that IF the flash chips are still fully operational it is "as secure as possible", but if some of the "spare sectors" have been in use, some areas may still hold some data. In any case the procedure may not be the same for *all* USB sticks/Manufacturer's tools/controllers and there are NO independent studies that certify it as being "secure" (and in any case that would be applicable only to the specific controller chip and flash chips models.
Q9. Will areas of the USB stick that can actually be recovered after a single 00 pass through "normal" software contain meaningful data, like my credit card number, SSN number, name, address, the p0rn movie I shot with my wife/lover, etc.?
A9. No. In the sense that we are talking of fragments of data, that even if they can be read not necessarily can be decoded/converted into "human readable" format. The probability that any of these data can actually contain anything meaningful is so low that the Heart of Gold Infinite Improbability Drive
http//
could be used for 3 (three) consecutive trips around the Universe without need to refuel.
Q10. Then what can be called "secure"?
A10. Physical destruction of the thingy.
Q11. But I don't want to destroy the USB stick, what can I do?
A11. Loop to Q1.
Q12. While we are at it, any advice about tin foil hats best design?
A12. Sure wink , tin foil is so nineties, we have a much better material nowadays, 3M Velostat
http//
Remember, if they are after you they will get you alright, resistance is futile!
jaclaz
thanks for your interesting and completr answer, jaclaz 😉
