Re: [git-users] How to clear history of all repo url that has been accessed from local machine?

2014-12-01 Thread Konstantin Khomoutov
On Mon, 1 Dec 2014 12:35:38 -0500
wor...@alum.mit.edu (Dale R. Worley) wrote:

> > From: OC0915566 
> 
> > My company is upgrading the laptops and so, they're selling the old
> > ones. The problem is, we've been using the old laptops to access
> > remote git repos and the employer would like to clean all possible
> > traces of repo URLs that have been accessed in these laptops. How
> > do I do this?
> 
> At the least, "reformat" the disks to destroy *all* the current files,
> because many places on the disk is evidence of past activities.  You
> need to be more careful if the information you are trying to remove is
> truly valuable to outsiders.

It worth reiterating that mere reformatting does not destroy the data.
These days, "quick" formatting means merely recreating the filesystem
metadata (a small fraction of space on a typical particion) while "full"
formatting means the same plus scanning the blocks to detect those
which are "bad" (unreadable) -- a feature which is hardly needed on
today's hardware which performs internal remapping of failed sectors.
See [1] for more info.

Hence the only way to ensure safety is wiping disks (which is typically
done by filling all addressable space on the drive by random (or
specially cooked) data, several times).

1. http://support.microsoft.com/kb/302686

-- 
You received this message because you are subscribed to the Google Groups "Git 
for human beings" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to git-users+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [git-users] How to clear history of all repo url that has been accessed from local machine?

2014-12-01 Thread Dale R. Worley
> From: OC0915566 

> My company is upgrading the laptops and so, they're selling the old ones. 
> The problem is, we've been using the old laptops to access remote git repos 
> and the employer would like to clean all possible traces of repo URLs that 
> have been accessed in these laptops. How do I do this?

At the least, "reformat" the disks to destroy *all* the current files,
because many places on the disk is evidence of past activities.  You
need to be more careful if the information you are trying to remove is
truly valuable to outsiders.

Dale

-- 
You received this message because you are subscribed to the Google Groups "Git 
for human beings" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to git-users+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [git-users] How to clear history of all repo url that has been accessed from local machine?

2014-12-01 Thread Konstantin Khomoutov
On Mon, 1 Dec 2014 08:25:03 -0600
John McKown  wrote:

[...]
> > ​You should really ask this sort of question on a "data destruction"
> group. It really isn't a git thing.​
> 
> But since I'm already flapping my jaws: Personally, I would use
> something like a "disk wipe utility". I am not really a Windows user
> (I use Linux), but you can Google for it to get some good hits. Such
> as: http://www.diskwipe.org/ which is not to be taken as a
> recommendation by me for this product, but is just an example. There
> are many such. If you are really worried about proprietary
> information, then I'd strongly suggest getting a "DOD quality" wipe.
> Another thing to think about is the other software on the laptop,
> especially the Windows. Windows in _NOT_ free! And you really should
> see what it would take to transfer the Windows license on the
> existing hardware to a new user. The same with any other "non free"
> software. If you don't, your company _might_ be libel to the
> copyright owners and be subject to being sued. I'm not really too
> sure of this latter, but if this is a large enough company, I'd run
> it by the legal department just for comfort.

By the way, this thought crossed my mind as well when I was writing my
response.  EULA explicitly prohibits relicensing, so yes, while IANAL,
I concur that consulting legal department would be a good thing.

-- 
You received this message because you are subscribed to the Google Groups "Git 
for human beings" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to git-users+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [git-users] How to clear history of all repo url that has been accessed from local machine?

2014-12-01 Thread Konstantin Khomoutov
On Sun, 30 Nov 2014 15:32:45 -0800 (PST)
OC0915566  wrote:

> My company is upgrading the laptops and so, they're selling the old
> ones. The problem is, we've been using the old laptops to access
> remote git repos and the employer would like to clean all possible
> traces of repo URLs that have been accessed in these laptops. How do
> I do this? We used Git Bash and Conemu. Will uninstalling Git Bash
> and Conemu be enough to delete all repo URL history in the laptops?
> or are these repo URL never been saved to local disk in the first
> place? Thanks

As to Git bash, the answer is "most probably yes" because bash saves
the input history to a file under the user's home directory (and you're
probably deleting the user profiles [1]).  As to Conemu, the answer
is also "probably yes": "native" Windows software tends to use registry
for storing all kinds of random stuff, including history, and
contemporary programs would store this data in a personal user's
registry hive (which is just a set of files under the user's home
directory) so if you're deleting user profiles [1] you're deleting this
data as well.

Looking at the issue from another perspective... does knowing URLs of
those repos give away that much to a prying eye?  What matters is
repository contents not where that contents is located.  If you have
some private repos accessible publicly then have them properly
protected -- say, by using SSH keys, and have these keys properly
maintained.

Note that if you're absolutely paranoid (and you might have reasons to
be [2]), you have to wipe (and I mean it, not just format) hard drives
and then install Windows there (either from a rescue partition/DVD if
you're using whatever the vendor installer or from your own images).
If the buyer does not care much, installing FreeDOS after wiping could
be just fine.  It really depends on the expectations.

[1] If not, you really have to.
[2] When you're deleting an object from the filesystem, the object's
data stays intact and can be recovered using specialized software
unless it happens to later be overwritten by other filesystem
operations (typically -- storing new files).  Google for "TestDisk"
as one popular example.

-- 
You received this message because you are subscribed to the Google Groups "Git 
for human beings" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to git-users+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [git-users] How to clear history of all repo url that has been accessed from local machine?

2014-12-01 Thread John McKown
On Sun, Nov 30, 2014 at 5:32 PM, OC0915566  wrote:

> Hi all,
>
> My company is upgrading the laptops and so, they're selling the old ones.
> The problem is, we've been using the old laptops to access remote git repos
> and the employer would like to clean all possible traces of repo URLs that
> have been accessed in these laptops. How do I do this? We used Git Bash and
> Conemu. Will uninstalling Git Bash and Conemu be enough to delete all repo
> URL history in the laptops? or are these repo URL never been saved to local
> disk in the first place? Thanks
>
> ​You should really ask this sort of question on a "data destruction"
group. It really isn't a git thing.​

But since I'm already flapping my jaws: Personally, I would use something
like a "disk wipe utility". I am not really a Windows user (I use Linux),
but you can Google for it to get some good hits. Such as:
http://www.diskwipe.org/ which is not to be taken as a recommendation by me
for this product, but is just an example. There are many such. If you are
really worried about proprietary information, then I'd strongly suggest
getting a "DOD quality" wipe. Another thing to think about is the other
software on the laptop, especially the Windows. Windows in _NOT_ free! And
you really should see what it would take to transfer the Windows license on
the existing hardware to a new user. The same with any other "non free"
software. If you don't, your company _might_ be libel to the copyright
owners and be subject to being sued. I'm not really too sure of this
latter, but if this is a large enough company, I'd run it by the legal
department just for comfort.


  --
The temperature of the aqueous content of an unremittingly ogled
culinary vessel will not achieve 100 degrees on the Celsius scale.

Maranatha! <><
John McKown

-- 
You received this message because you are subscribed to the Google Groups "Git 
for human beings" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to git-users+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[git-users] How to clear history of all repo url that has been accessed from local machine?

2014-12-01 Thread OC0915566
Hi all,

My company is upgrading the laptops and so, they're selling the old ones. 
The problem is, we've been using the old laptops to access remote git repos 
and the employer would like to clean all possible traces of repo URLs that 
have been accessed in these laptops. How do I do this? We used Git Bash and 
Conemu. Will uninstalling Git Bash and Conemu be enough to delete all repo 
URL history in the laptops? or are these repo URL never been saved to local 
disk in the first place? Thanks

-- 
You received this message because you are subscribed to the Google Groups "Git 
for human beings" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to git-users+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.