Don't Let Your Data Get Away from You - 001

This is the first in a number of posts about how you keep your data safe.  Data, for most of you, are your photos; emails; Word, Excel, and PowerPoint documents; your music files; financial records; and any other personal or business information you store on your PC.  These posts will apply to both Windows PCs and Apple PCs unless specifically stated.

There are many ways to keep your data safe:
  • backing up regularly to an external drive
  • having a second drive in your computer that mirrors your main drive, so that if one drive fails, the other is identical to it and can take over running the machine
  • backing up to an online storage company
  • making sure your PC is protected via a firewall, virus protection, spam blocker, and spyware protection
  • making sure you walk the web with caution
  • don't respond to pop ups telling you your computer is infected
  • open emails responsibly
  • destroying your hard drive before throwing it away (or better yet, recycling it)
I will post about and explain all of these over time.  I don't want anyone's head exploding due to the amount of information they get from here all at once.

So, I'll tackle the easiest one first.  When the time comes to get a new computer, and you want to dispose of the old one, PLEASE recycle all components.  There are a number of recycling centers in most cities and you can find them simply by Googling "recycle computer" and adding the name of your town or city, or the nearest one, if you don't live IN one.  Some places will even allow you to ship the equipment to them freight free and send you a box to boot!  (A little double entendre there.)

For example, I Googled "computer recycle Atlanta" and got:
There were 10 other pages of results.  I have used the first two, as well as the Roswell Recycling Center in the past.  However, Roswell Recycling allows only residents of the City of Roswell to use the electronics aspect of the center.

As for the last two, they are excellent resources on where and how to recycle electronic in Georgia.

Please get that I used the word "electronics".  You can also recycle your old VCR, digital camera, TV, and other similar stuff at most centers.

Now, there is one thing you MUST do before recycling your PC.  Remove the hard drive (or get someone to do it for you) and destroy it physically.  Erasing it WILL NOT protect your data from someone who really wants it.  Smashing it with a sledge hammer will do it, although it might destroy your driveway, too.  

I use a 1/4" or 1/2" titanium drill bit and punch three holes through the platters in the drive all the way through the electronics on the bottom.  I use a scrap 2"x4" under the drive to keep the bit from ruining my table.  I even give my clients a certificate of destruction.  I use a Sharpie to write their name on the drive, I drill the drive, photograph it, and attach the photo in Microsoft Word to a certificate that I send them as proof of the destruction.

Another insight into my character - I LOVE DOING THIS!  I help my clients and I get paid to destroy a sensitive piece of electronics hardware all at the same time.  My job is soooo cool!

Anyway, more on this topic in a few days.

 

What did you think of this article?




Trackbacks
  • No trackbacks exist for this post.
Comments

  • 7/6/2008 2:27 AM James wrote:
    If you don't trust overwriting the data multiple times, then aren't you already into the real of three letter agencies?

    It seems to me they wouldn't have much trouble reading the undamaged sections of the helpfully labeled hard drives.

    It seems to me that a funner^Wbetter solution would be thermite.
    Reply to this
    1. 7/6/2008 9:20 AM Sid Plait wrote:
      Thermite is good.  I just don't know where I'd set it off.  C4 is more fun, though.  You just have to watch out for flying fragments.

      Once the holes are drilled, it takes way too much effort to get data, and you'd only get part of it.  Maybe the CIA (think Mulder here) could do it.

      Once again, keep in mind I'm working with homeowners and really small businesses.

      Reply to this
  • 7/7/2008 9:14 PM Chris wrote:
    I've heard people who provide good credentials to claim the title of computer security expert say that the average hard drive data, when over-written once, is pretty much irretrievable, and that multiple over-writes are redundant. You contradict this assertion. Who am I to believe? Do you have any test I can perform to confirm your stance?
    Reply to this
    1. 7/8/2008 12:00 AM Sid Plait wrote:
      I have also read differing opinions.  Some say once is good enough.  Others say the DOD method or total destruction of the hard drive are the only ways to be sure. 

      I have no direct proof either way except to say that a client of mine overwrote data on his hard drive, and I took it to a specialty house that recovers data from drives that no longer work as well as data recovery on drives that have been formatted and/or overwritten.  They claim to have recovered data from drives formatted and with the operating system and applications reinstalled.  They were able to recover about 80% of his data, and told me if we wanted to spend more money, they felt certain they could recover at least 80% of the rest.  It would just take time and special equipment.

      That was a number of years ago, and now I use Cherry Data Systems  in North Atlanta.  They don't make the same claims, but they do a great job of data recovery when the job goes beyond my skills and equipment.  I spoke to one of their technicians several years ago about drilling, and he told me that if I did that I would likely never have to worry about someone stealing the data.  (Once again, if Fox Mulder got ahold of the drive, who knows?)

      As always, I prefer to err on the side of conservatism for my clients.  Therefore, I practice physical destruction of the drive platters.

      Reply to this
Leave a comment

Submitted comments are subject to moderation before being displayed.

 Enter the above security code (required)

 Name (required)

 Email (will not be published) (required)

 Website

Your comment is 0 characters limited to 3000 characters.