-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 On 2016-10-26 10:29, Chris Laprise wrote: > On 10/26/2016 12:46 PM, maritnez wrote: >> you have a file that contains sensitive banking data and would like to >> delete it without leaving any traces on your system. >> >> you can 'move it to trash' >> which moves it to the trash >> >> you can then press the delete button in your trash container but >> is this really securely deleting the file without any chance of recovering >> it? >> >> >> how to delete files without leaving ANY trace from it? >> > > I think the surest non-physical method is to make sure the data is encrypted > in the first place, and throw away the key/passphrase. On a typical Qubes > configuration, this would mean re-encrypting and reinstalling the OS if your > data was on the same LUKS volume as the OS. > > FWIW, Qubes supports SSD TRIM by default. This might provide a certain level > of data erasure if you are using an SSD, leaving less data behind *on > average*. However, its not something you should rely on when deleting > specific files. Some SSDs and HDDs also have a "secure erase" feature which > erases the entire drive. > > Chris >
Building on what Chris said, here are your general options, from best to worst: 1. Physical destruction of the storage medium. (usually overkill) 2. Make sure the data is encrypted before it ever touches the storage medium (then wipe the encryption headers, if any, or keep the key secret). 3. Delete the files and overwrite them with a tool like "shred", and/or delete them normally, then wipe all free space. - -- Andrew David Wong (Axon) Community Manager, Qubes OS https://www.qubes-os.org -----BEGIN PGP SIGNATURE----- iQIcBAEBCgAGBQJYEYPNAAoJENtN07w5UDAw52QP/iJRsrLIIijGrqyodtVsQK4V a32qoLHOUIcfSByrSJp/u2atmnByysYtomYiNv588YELihEWnf7q8oLdynd5b3Q3 WxtlBO4fQQZN8f2f2oRDir3zDKkRZLRTEN7R7LjQoEE56teQubEDTCqqWYNOrnmC sOeabKJd0lA8dLn6/xTRymhE657/kjJPurIEggfnfQrD0FQ1BsxYyfUhhiW1ESAT 4g/vpKz6IX7NyYfthTo/ZrT/wBU8dtxz48mSCimZI6qB3Cm2OVnNpRAqkRIeHjxY XU7TN5+/g/qk92SuY2rUCjjIaXCbJrQD+TeOd7cHqV+8um8WXf+5K4hdGhKc3swR BoUDFw3ezwT9KvpWQbKXsHvg4ZtoNuQRTQySXekcJBh08CwiLnnP1eGmE4pgGs5C 6OibzIr127QmArLDNJCc23d+Nl40Clw6YBP8aAhlompc6aaAD9vRAs6LY+Sf6LGO 9UC+XMwX7II1C+rrBVqTrTDt/wd8WX5USM7P9pTpex1JDEzMfgCIoAeQwE5Gs/Xx kSgnM6FZ9PuGmcFjNcgypU2a41rex6eWt4lW83v+Ap1IGtHVP4GrXiTNe3f35L3x lsMzrlmY3528caS16csSrpc8kK9wXbL0Br+QC2vKxoMriytWkA1XKvMR0Vs+t72r /Hxds8+YON1+jVQ4M9Dj =cFrz -----END PGP SIGNATURE----- -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/469b9004-da06-0086-17ff-961499026141%40qubes-os.org. For more options, visit https://groups.google.com/d/optout.
