Hard drive - wipe

[kuby]

Had my first customer that wants the hard drive out of the copier they leased. Their IT guy says there is information that someone could get with the right software. I told him that the drive has already been wiped, reformated, partition deleted, reformated, partition deleted and put in the machine and reformatted and system software reloaded. So there is nothing that can be gotten off the drive. He says he can still get the information off. I don't think he can, but I wanted your information on this. I know all about the TV show that show them getting information off, that is why we delete the partition and go through the steps we take and then reload everything. Am I wrong in thinking he can get information long gone after what we did?

Thanks

[Hemlock]

If you wanna be a pedantic about it (and have the time to spare) why not offer him the drive and ask him to show you what's still there?

[nick55]

I've heard about it. Even all data were erased/deleted, still can be recovered w/ the right tool and probably the only recovery source that could do it is the fbi..the surest way to keep ur confidential file is to install a new hard drive and smashed ur old one.....just a thought...

[Jules Winfield]

The guy would have to have access to same kind of forensic recovery software that the FBI uses in order to recover the original data off of that hard drive. And then I still doubt it would be possible. Download the UBC4WIN utility suite, create the bootable CD and run the hard drive wiping software from the CD. One or two passes with that should satisfy the guy unless he's just being a total douchebag (which is probably the case).

[kuby]

Hey he is a IT guy, what do you think?

Think $ 350.00 for the hard drive is fair. Since all lease machine must be returned in working condition. I have to get another drive and reload everything.

Thanks

[Hemlock]

After you pull the drive and give it to him, tell him you had to ghost it to keep the machine running. Enjoy watching his head asplode.

[costd]

From my past life when I worked with "Buck Rodgers" stuff attached to No Such Agency - If you have access to the right equipment (and the knowledge/desire to do it) yes, most of the data could still be recovered HOWEVER it is not something your "typical" hacker could do. That is why the govt always physically destroys hard drives (floppies, tapes, and anything that records using magnetism). So technically he is correct though I doubt he knows why.

What we do is if they insist on having the HDD, we give it to them and then charge them for a replacement drive and the tech time to reload the system software.

A "ghost" of a HDD that has been cleared first, as you have done, will not contain the residual data.

[JustManuals]

You don't need the FBI to recover a reformatted HD. There are tools around to do it very easily.

Paul@justmanuals.com

[SCREWTAPE]

You get those tools online.

Replace the drive. This would be the best way to assure the client that confidential and other sensitive information on the drive is in there hands to do what they want to do with it.

Charge them for labor and for the HDD.

[kuby]

Yes that is what I am going to do....I would still like to see them get anything off of it.

[Canuck]

What model copier is it? Yeah, just sell him a new HDD to put back in the machine. Meanwhile could probably hack his network easily......

[SCREWTAPE]

Yes that is what I am going to do....I would still like to see them get anything off of it.

Truly what ever you try to do about the info on the drive, it won't clear it entirely.

The best way is to destroy it!

Copy Machines, a Security Risk? - CBS News Video

[mrfixit51]

Hey he is a IT guy, what do you think?

Think $ 350.00 for the hard drive is fair. Since all lease machine must be returned in working condition. I have to get another drive and reload everything.

Thanks

Hi Kuby,, It is IT,, they are making the request, I say bill like IT does. The cost of the drive is not the only thing billable here. You need to acquire the drive, and charge the going rate for a drive that would not be covered under a service contract, plus the the hour or so of time that would be required to get that copier back on it's feet so it can be returned to the leasing company in running condition. So for say $600-$700, the customer can have their $50 drive back....

They had the opportunity when they leased the box to either get hard drive encryption or hard drive erase kit as a $500 option. Their purchasing mistake should not become your problem...

And for what it is worth,, I got in touch with the guy from that news story,,, and he mentioned that the networks over played the risk,, to make their news story more interesting I suppose. He runs a security company that provides certified data destruction.. Imagine all that free advertising for his business,,, what do you suppose his motivation was in that news story???

Did the customer protect themselves on their new replacement machine by purchasing either of the mentioned options??

[mtech]

Mr.Fixit is absolutely right! If they want to really keep the HDD from being tapped then they need to take possesion of the original and destroy it themselves. Pay for a replacement and the labor to reload the OS to have the copier in working condition for return. No moaning or groaning! That is just how it is! Next time they buy/lease a copier you know HDD stuff will be addressed! Welcome to the new world! A few hundred bucks won't break the companies IT budget! Tech's should not fall for the Boo-Hoo! Even if the companies most precious secrets may be discovered, truth is, no one is really that interested in them in the first place. The companies are just paranoid and have big heads! The more they pay for data destruction the more important they must be! Sorry, don't think so.

[KenB]

Funny, but it seems that the customers IT departments who whine the most about being charged for copier / printer HDD surrender don't think twice about shredding drives that were in PCs that they are returning after the leases are up.