I wrote some of the folks people suggested, here is what I got back from the EFF:
>Adrian, > >Thank you for contacting the Electronic Frontier Foundation. Our attorneys do not have experience with this particular scenario, but it s a question that people ask quite often. We would be very >interested in seeing your article when it is done, if you would not mind emailing it to this address. > >Regards, > >Eva Galperin I'll see what else I find. By the way Brad, that Granick video was a nice find, thanks. Adrian On Mon, Jan 11, 2010 at 2:42 PM, Mad Marv <[email protected]> wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > I'd ping the guys at Cyberspeak's podcast (cyberspeak.libsyn.com) and > ask them for an example of a bulletproof data retention policy and reuse > of hard drives after wiping. > > > I can think of many valid reasons for wiping a drives freespace > > routinely: > > > > 1. Protect privacy from others with physical access. > > 2. Fear that the machine might be stolen. > > 3. Donating the machine. > > 4. Reallocating the machine to someone of a different security level. > > Numbers 1 and 2 are a bit suspect. The non-white space on a hard drive > is just as valuable if not more so, and wiping free space doesn't > protect that info. Numbers 3 and 4 don't sound routine if you're > talking about individual hard drives being wiped every week or so. But, > they do fit into a policy for re-purposing hardware. > > One more idea to add to the list: Wipe a hard drive that has been > infected with malware prior to re-imaging. > > Marv > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.10 (MingW32) > Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org > > iEYEARECAAYFAktLf0AACgkQkOgHKNOb0dG7tACfWs2Hjf+LlOZ2XWd5ERCUMnYN > jYMAn3ebXHvNnBgu+b1HsNcDi1Z7DxeR > =I84M > -----END PGP SIGNATURE----- > _______________________________________________ > Pauldotcom mailing list > [email protected] > http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom > Main Web Site: http://pauldotcom.com >
_______________________________________________ Pauldotcom mailing list [email protected] http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom Main Web Site: http://pauldotcom.com
