Hi there, I used to have "Bitraser" to securely/completely remove files from hard drive (using a 7-stage rewriting algorythm), files could be possible (but very tough task) to recover I guess
however, I found out that an ImDisk ramdisk should be 100% secure once the drive is unmouted, right? since the RAM technically is volatile and will not be recovered afterwards (ofc not saving an image in the hard drive)...
am I right and unmounting my ImDisk ramdrive is the best solution to completely delete files?
Thanks in advance
Last edit: Ann Lee 2019-12-07
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
About ramdisks, if you are a true paranoid, you should keep some things in mind:
Use physical memory instead of virtual memory (see in the Advanced tab of the Ramdisk Configuration Tool). The virtual memory can be written to the page file. Of course, you don't need that if you have disabled the page file.
Once a volume is dismounted, its memory is freed. These memory blocks are then zeroed by the system, but not immediately. And it's impossible to know exactly when it's done. It's not an issue for the page file, but I would not say the same for a full hibernation.
The file system can also temporarily keep caches of your data after a dismount.
Be careful with the hibernation feature of Windows. The fast startup that was added in Windows 8 also uses the hibernation and can write the ramdisk content onto the hard drive.
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
thanks a lot, so let's conclude:
- hard drive removing is safe enough when use software with at least 1 or 2 passes, however, mine with 7 passes gives me more security, considering high-level companies for data recovery
- ImDisk is a 100% secure delete solution after enabling AWE (physical memory) when unmount AND shutdown PC
- never user hibernation
- not sure what do you mean with "The file system can also temporarily keep caches of your data after a dismount", how to clean such cache?
In my opinon, a small tool (new product?) for secure deletion should be developed, creating an easier interface with the optimized parameters to prevent any writes in disk and completely removal from physical ram, adding a feature to overwrite immediately the used RAM without the need to shutdown
As a suggestion, please remove the quick access in your PC window of the unmonted unit which still apperar after unmounting with an interrogation, making you to manually right-click and remove
Last edit: Ann Lee 2019-12-07
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
Hi there, I used to have "Bitraser" to securely/completely remove files from hard drive (using a 7-stage rewriting algorythm), files could be possible (but very tough task) to recover I guess
however, I found out that an ImDisk ramdisk should be 100% secure once the drive is unmouted, right? since the RAM technically is volatile and will not be recovered afterwards (ofc not saving an image in the hard drive)...
am I right and unmounting my ImDisk ramdrive is the best solution to completely delete files?
Thanks in advance
Last edit: Ann Lee 2019-12-07
About writing 7 times on your hard drive, you should read that:
https://www.howtogeek.com/115573/htg-explains-why-you-only-have-to-wipe-a-disk-once-to-erase-it/
About ramdisks, if you are a true paranoid, you should keep some things in mind:
Use physical memory instead of virtual memory (see in the Advanced tab of the Ramdisk Configuration Tool). The virtual memory can be written to the page file. Of course, you don't need that if you have disabled the page file.
Once a volume is dismounted, its memory is freed. These memory blocks are then zeroed by the system, but not immediately. And it's impossible to know exactly when it's done. It's not an issue for the page file, but I would not say the same for a full hibernation.
The file system can also temporarily keep caches of your data after a dismount.
Be careful with the hibernation feature of Windows. The fast startup that was added in Windows 8 also uses the hibernation and can write the ramdisk content onto the hard drive.
thanks a lot, so let's conclude:
- hard drive removing is safe enough when use software with at least 1 or 2 passes, however, mine with 7 passes gives me more security, considering high-level companies for data recovery
- ImDisk is a 100% secure delete solution after enabling AWE (physical memory) when unmount AND shutdown PC
- never user hibernation
- not sure what do you mean with "The file system can also temporarily keep caches of your data after a dismount", how to clean such cache?
In my opinon, a small tool (new product?) for secure deletion should be developed, creating an easier interface with the optimized parameters to prevent any writes in disk and completely removal from physical ram, adding a feature to overwrite immediately the used RAM without the need to shutdown
As a suggestion, please remove the quick access in your PC window of the unmonted unit which still apperar after unmounting with an interrogation, making you to manually right-click and remove
Last edit: Ann Lee 2019-12-07