Check out my latest product, BuildFactory

Incriminating Evidence
While I slept today, I put up an away message of: "thinking of all the different ways to destroy evidence"Leaving it up as a joke, and a not-really-clever alternative to "Away" I received some interesting messages while I was out, from "evidence? what did you do?" to the weirdest one:
what sort?
the FBI cant do forensics on Linux systems, they have to outsource the job to a firm in Canada
so im guessing state goons are just as crummy if not worse
so if its HDD stuff I'd run a cron job to touch every file on the HDD (mess up all the timestamps), then delete them
then run a shredder with something like 20 overwrites
then set it up as removeable storage and fill it with whatever torrents you think would be fun, delete and shred that
then thermite.
Always with the thermite.
I know some interesting people.
[tags: destroyingevidence, thermite, fbi]
Replies
Thermite. Tesla coil. Forget the overwriting methods, you have limited assurance. Even fsync + sleep interleaving doesn't guarantee you will work around modern hd caching tech. Gutmann patterns (35 pass overwrite with a random metric -- perhaps arc4 is nice) -- I implemented this in obsd rm.c, but theo rejected it and quickly called me paranoid... it was a tight implementation though other then the aforementioned prob with caching which was handled with forced fsyncs. There is however limited evidence I've seen that it's effectiveness is useful with today's media. Of course OSX ties into srm which I believe it does a DOD-5220 9 pass for secure wipe in the gold master starting in panther... but I could be full of shit.
Write reply
This item is closed, it's not possible to add new comments to it or to vote on it


