On 09/08/10 16:24, Martin A. Brooks wrote:
Just use DBAN.
We usually do, but Secure Erase is both much faster and more secure (it wipes areas DBAN can't get to), provided you have hardware that allows it to work. Most (modern) drives do, but a lot (most?) of mobos don't allow the commands through for security reasons. Thinking about this, having a virus that was able to send a secure wipe to a disk might be a very bad thing, so it's not a bad default, but it would be nice to be able to turn it off!
There is a DOS program (HDDErase) which can be run from a bootable disk the way that DBAN can, but it suffers the same problem when accessing the hardware, and I'd prefer to use hdparm as it will be more likely to tell me what is going on.