Dave Bailey
Dave Bailey

Data returns from the dead

Sensitive data must be carefully removed before firms discard old hard drives

Written by Dave Bailey

The IDE hard drive in a modern PC should be good for at least five years, and probably a lot longer if properly looked after. The mean time between failure for the average hard drive is currently about half a million hours of operation, or about 57 years.

I haven't seen a hard drive failure yet and I'd like to think that my appointment with the grim reaper of the storage world is still a fair way off. By "properly looked after", I mean that a disk should be regularly defragmented and checked for errors using a tool such as Windows' Scandisk. An increase in the number of bad sectors on a disk is usually a clear indication that the drive is getting close to failure.

When the day at last dawns and you get the message "No boot device detected" on startup, then, providing you've got a current backup of your data, you would expect that you could safely get rid of the drive.

But getting rid of a hard drive means different things to different people. My own method of disposing of a drive would probably involve a sledgehammer somewhere along the line.

If you're planning to upgrade to a bigger hard drive, reformatting the old one and putting it up for sale on eBay may be the worst thing you can do.

Your hard drive contains a rich stratum of data from your PC's working life and a format doesn't entirely remove all trace of what was stored on it.

And there are many unscrupulous people out there who would like nothing better than to mine what you thought was unrecoverable data on your old disk.

If you've been buying stuff online, even over secure connections, it may be that your credit card number is on the hard disk somewhere, along with corporate passwords and other interesting information, such as address books or sensitive documents.

Does your company have a policy for dealing with failed drives and for safely disposing of drives from expired desktops?

If you think this is just raving paranoia, then consider an IEEE study about data mining from second-hand computers by a couple of MIT researchers - see the web address below.

Entitled Remembrance of Data Passed: A Study of Disk Sanitisation Practices, it makes interesting and sometimes alarming reading for IT managers. The authors were able to retrieve thousands of credit card numbers from old systems.

In the US, the Supreme Court has ruled that legislation governing privacy does not extend to discarded items. So it appears that when your company disposes of its old computers in the US, it is giving away its rights over any of the data held on those computers.

So how do you sanitise your computer if you're selling it? The US Department of Defense lists three ways to do this: physically destroy the drive; degauss the drive to randomise the magnetic domains; or overwrite the entire disk area many times over with random data so that old information is obliterated. But if your paranoia knows no bounds, then there's always the oxyacetylene blowtorch option.

Have your say: reply to IT Week

Tags:

reader comments

related articles

Tank

Army data cops prepare for Iraq trials

Evidence gathered from computer systems to be used in war crime cases 06 Oct 2003

 

Data Protection Act

How the Data Protection Act affects the way firms can process information and monitor their staff 25 Aug 2003

related whitepapers

today's top stories

Best practice: Five steps to achieving your e-commerce goals

Brian Walker of Forrester Research gives his top tips for ensuring e-commerce success 06 Jul 2009

Google meets the NHS? Politicians show their IT naivety again

The Tories like technology. They increasingly seem to think IT is going to help them win the General Election due next year.... 06 Jul 2009

How to maximise the value of your IT networking investment

A panel of experts discuss networking strategies that deliver real value to business 03 Jul 2009

Reaching the email zero count

I have noticed something quite bizarre today. Both my inboxes (work and personal) are empty – somehow I have managed to work... 06 Jul 2009

Habitat gets a web site makeover

The furniture retailer is revamping its online presence to provide a fully transactional web site. CIO Jacques Dekock explains why 02 Jul 2009

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

More available - click 'submit' to view

Existing User

Newsletter user login:

Advertisement

Jobs

Related jobs

Job of the week

Job alerts

Sign up here

Find your next job

IT Salary Checker

Check salary here

Advertisement

White papers

Search white papers

Top categories

VPN, Extranet and Intranet Solutions

WAN/ LAN Solutions

Network Security

Interoperability-Connectivity

Grid/ Utility Computing

Latest poll

Would you use social networking sites to look for a job?

Would you use social networking sites to look for a job?

Tell us what you think about job hunting through LinkedIn, Facebook, Twitter etc

View poll results

Latest audio and video articles

network cablesVideo

How to maximise the value of your IT networking investment

A panel of experts discuss networking strategies that deliver real value to business 03 Jul 2009

green footprintsVideo

How to manage enterprise energy use - and the role IT can play

A panel of experts explore how firms can get to grips with their carbon footprint and make smarter use of energy 01 Jul 2009

Latest in-depth articles

Phil PavittAnalysis

From tracks man to tax man

Phil Pavitt, outgoing chief information officer for Transport for London, talks to Rosalie Marshall about the lessons he will take to his new role at HMRC 02 Jul 2009

UPS worker making a deliveryAnalysis

Global standardisation delivers benefits at UPS

Delivery giant sees benefits of central IT solution 02 Jul 2009

Advertisement

Primary Navigation