Image
 
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 14 guests online
EH-Net Donations

Enter Amount:
$

Google Ads
ChicagoCon 2008f
chicagocon2008f_125x200banner.jpg
ChicagoCon 2008f
EH-Net News Feeds
Latest Additions
Book Recommendations





 
Advertisement

You are here: Home arrow Forum arrow Columnsarrow RichMarrow [Article]-The Business Case for HDD Wiping
Ethical Hacker Community Forums
September 05, 2008, 04:10:36 AM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Registration Now Open for ChicagoCon 2008f Oct 27 - Nov 2! Visit www.chicagocon.com.
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: [Article]-The Business Case for HDD Wiping  (Read 3268 times)
0 Members and 1 Guest are viewing this topic.
don
Editor-In-Chief
Administrator
Hero Member
*****
Offline Offline

Posts: 2235


Editor-In-Chief


View Profile WWW
« on: June 12, 2007, 09:26:57 AM »

RichM has a new topic for all of you in the trenches. It's not sexy, but everyone with a real day-to-day job in IT (regardless of whether your job description specifically states security) has the unfortunate need to deal with these types of issues. You'll even find a recommendation on a free open source tool to get the job done.

Thanks Rich.

Permanent Link: [Article]-The Business Case for HDD Wiping

Quote

This month's installment is inspired by all of the other tasks that require our attention which allows important things to slip through the cracks.  What amounts to general laziness is really just a symptom of a much bigger problem: lack of time.  As administrators we are expected to keep all machines (basically if it plugs into a wall, we should have encyclopedic knowledge about it) up to date, users should always be productive, oh and maintain a secure yet usable network.  If that was the end it might be manageable, but of course there is always several "special" projects that require research, testing and most importantly time to implement.  Therefore I understand when a menial task like formatting a hard drive doesn't get done, but I can't say that lack of time is a justifiable excuse.

Old hard drives are a rich source of unknown hidden treasures, even if they were only used by a temp or even a personal assistant.  As is very common in corporate times, passwords are shared without much issue.  If I had a nickel for each time I heard or watched a supervisor/Chief _____ Officer log into his assistant's machine, do some work, then log out, I would probably be writing this sitting in the sand under a palm tree.

In an effort to express the importance of sanitizing old hard drives, I present to you two scenarios, each with its own level of severity.  Ultimately you have to decide if the extra effort is justified for the potential "what ifs" that are outlined below.

Let the discussions begin,
Don
« Last Edit: June 12, 2007, 09:30:57 AM by don » Logged

CISSP, MCSE, CEH, Security+ SME
don
Editor-In-Chief
Administrator
Hero Member
*****
Offline Offline

Posts: 2235


Editor-In-Chief


View Profile WWW
« Reply #1 on: June 12, 2007, 09:37:01 AM »

As always, your support of our articles are greatly appreciated... and so are your diggs: Grin

http://digg.com/security/The_Business_Case_for_HDD_Wiping

Don
Logged

CISSP, MCSE, CEH, Security+ SME
jimbob
Sr. Member
****
Offline Offline

Posts: 284



View Profile WWW
« Reply #2 on: June 14, 2007, 08:13:02 AM »

The same goes for other types of media. Hard drives are particularly juicy, but consider what someone might find on a discarded CDs and other removable media after a spot of dumpster diving. I've personally seen business material on CD-R disks found in the trash. Disposal of such items ought to be treated in the same way as that of confidential paper waste.

Jim
Logged
Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.5 | SMF © 2006-2008, Simple Machines LLC
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.052 seconds with 23 queries.
 
Polls
Best for daily desktop use:
 
Support EH-Net
chicagocon2008f_125x200banner.jpg
ChicagoCon 2008f


Support EH-Net by
Buying all of your
Amazon items using
the search bar above.

cbtnuggets_logo_125.jpg
Try CBT Nuggets Free!
Recent Forum Topics
Vote For EH-Net

progenic.com
Click here to Vote!

Sadikhov.com
Top IT Cert Sites

binarica.com
Binarica Logo

Add to Technorati Favorites
technorati fave

chicagocon2008f_125x200banner.jpg
ChicagoCon 2008f
 
         
Advertisement

© 2008 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.