• Some users have recently had their accounts hijacked. It seems that the now defunct EVGA forums might have compromised your password there and seems many are using the same PW here. We would suggest you UPDATE YOUR PASSWORD and TURN ON 2FA for your account here to further secure it. None of the compromised accounts had 2FA turned on.
    Once you have enabled 2FA, your account will be updated soon to show a badge, letting other members know that you use 2FA to protect your account. This should be beneficial for everyone that uses FSFT.

Hard Drive Panic Button Possible? (100% data wipe)

Status
Not open for further replies.
ryan_975 said:
Though, I'm not sure how to actually go about having a separate but still useful storage system,
Click to expand...

Exactly. RAID over Internet ? Adding a layer of insecurity in the process (Internet) while destroying performance.
 
rive22 said:
I hate to say this and offend you, but even you obviously don't know what I'm talking about. You've clearly stated in your wording just like the guys here that you have no clue what I was trying to say, which is yet the simplest thing in the world. It has gone right over head.
Click to expand...

Striping doesn't improve security at all. You think if the NWO Soros Eugenics Fluoride Goons can get your first disk, they'll somehow be unable to get your second disk?
If you have a small Word doc with all of your account numbers on it, written to an encrypted striped array... Most of that is on one disk, encrypted or not.
Even if it's an internet iSCSI RAID0 and you manage to have your accomplice trash the other disk, that means they only get half of the data when they waterboard you for the passphrase. It doesn't increase the security of your data set.

ryan_975 said:
Encryption is more than just "A = Z, B = Y, ... Y = B, Z = A". It takes a mix of all sorts of data and combines them in mathematically reversible ways. So a file may not be split across the drive in an array, but the information needed to decrypt it very likely will be. If you keep the drives separated, that gives you more time to destroy at least one drives worth of data making it virtually impractical to ever recover anything on the drive that might be compromised. Though, I'm not sure how to actually go about having a separate but still useful storage system,
Click to expand...

In the case of AES block size is 128-256 bits. Far below stripe width. Are they doing something else to make the encryption blocks larger?
 
Last edited:
ryan_975 said:
Encryption is more than just "A = Z, B = Y, ... Y = B, Z = A". It takes a mix of all sorts of data and combines them in mathematically reversible ways. So a file may not be split across the drive in an array, but the information needed to decrypt it very likely will be. If you keep the drives separated, that gives you more time to destroy at least one drives worth of data making it virtually impractical to ever recover anything on the drive that might be compromised. Though, I'm not sure how to actually go about having a separate but still useful storage system,
Click to expand...

Exactly, :cool: Those poking at this concept, you would presume they knew what they were talking about therefore this would have been common knowledge to them which is what I assumed.

LightningCrash said:
Striping doesn't improve security at all. You think if the NWO Soros Eugenics Fluoride Goons can get your first disk, they'll somehow be unable to get your second disk?
If you have a small Word doc with all of your account numbers on it, written to an encrypted striped array... Most of that is on one disk, encrypted or not.
Even if it's an internet iSCSI RAID0 and you manage to have your accomplice trash the other disk, that means they only get half of the data when they waterboard you for the passphrase. It doesn't increase the security of your data set.



In the case of AES block size is 128-256 bits. Far below stripe width. Are they doing something else to make the encryption blocks larger?
Click to expand...

You're lost buddy. Thus I have no desire to explain it to you and your arrogance.
 
LightningCrash said:
Striping doesn't improve security at all. You think if the NWO Soros Eugenics Fluoride Goons can get your first disk, they'll somehow be unable to get your second disk?
If you have a small Word doc with all of your account numbers on it, written to an encrypted striped array... Most of that is on one disk, encrypted or not.
Even if it's an internet iSCSI RAID0 and you manage to have your accomplice trash the other disk, that means they only get half of the data when they waterboard you for the passphrase. It doesn't increase the security of your data set.



In the case of AES block size is 128-256 bits. Far below stripe width. Are they doing something else to make the encryption blocks larger?
Click to expand...

The block size maybe 128 bits, but I was talking about where the key to decrypt it, or the algorithm that generates the key permutations that encrypted it is stored.
 
ryan_975 said:
The block size maybe 128 bits, but I was talking about where the key to decrypt it, or the algorithm that generates the key permutations that encrypted it is stored.
Click to expand...

In the case of most XTS implementations the key is stored in RAM. Dropping a drive in a RAID0 array is a separate issue. If your decryption algorithm isn't stored on the encrypted stripe set, then what does breaking the array offer? You might lose the salt but that's 50/50 at that point.

rive22 said:
You're lost buddy. Thus I have no desire to explain it to you and your arrogance.
Click to expand...

Make claim that is criticized for being ridiculous and implausible.
Claim that everyone but yourself is ignorant and arrogant.

drescherjm said:
There is secure erase builtin to the drive but that would take hours and need power.
Click to expand...
In the case of rotating disks they may have some success interrupting the power. With SSDs you may be able to issue a TRIM for the whole disk. Forensics people have complained about SSDs continuing to erase when power is later attached to the drive for copying operations:
The X axis shows time and the Y axis shows the approximate percentage of the drive that has been zeroed out. In all three SSD runs, around 160 seconds from the log-in time (i.e. around 200 seconds from power-on), the SSD begins to wipe the drive. After approximately 300 seconds from log-in, the SSD consistently appears to pause briefly before continuing. 350 seconds after log-in, the SSD’s pre-existing evidence data has been almost entirely wiped.
Click to expand...
 
Last edited:
LightningCrash said:
In the case of most XTS implementations the key is stored in RAM. Dropping a drive in a RAID0 array is a separate issue. If your decryption algorithm isn't stored on the encrypted stripe set, then what does breaking the array offer? You might lose the salt but that's 50/50 at that point.

Make claim that is criticized by myself who has my head up my ass for being ridiculous and implausible.
Claim that everyone but yourself is ignorant and arrogant.
Click to expand...

butthead_slap.gif
 
It would be nice if every kind of storage media had a physical/mechanical read-only switch, including SSDs and magnetic HDDs.
 
/me attaches a bulk eraser to the server hosting this forum just so this thread can die... :D
 
I remember reading an article 10 years ago, during time of issues with the RIAA. It mensioned people using thermite above their hard drives. The article mensioned that during raids, they usually cut the power, meaning the computer kill device needed to be hooked up to a UPS.
 
Status
Not open for further replies.
Back
Top