Menu

Is ImDisk unmount the most secure deletion vs multiple-stage rewriting in hard drive software?

Ann Lee
2019-12-07
2019-12-07
  • Ann Lee

    Ann Lee - 2019-12-07

    Hi there, I used to have "Bitraser" to securely/completely remove files from hard drive (using a 7-stage rewriting algorythm), files could be possible (but very tough task) to recover I guess

    however, I found out that an ImDisk ramdisk should be 100% secure once the drive is unmouted, right? since the RAM technically is volatile and will not be recovered afterwards (ofc not saving an image in the hard drive)...

    am I right and unmounting my ImDisk ramdrive is the best solution to completely delete files?

    Thanks in advance

     

    Last edit: Ann Lee 2019-12-07
  • v77

    v77 - 2019-12-07

    About writing 7 times on your hard drive, you should read that:
    https://www.howtogeek.com/115573/htg-explains-why-you-only-have-to-wipe-a-disk-once-to-erase-it/

    About ramdisks, if you are a true paranoid, you should keep some things in mind:

    • Use physical memory instead of virtual memory (see in the Advanced tab of the Ramdisk Configuration Tool). The virtual memory can be written to the page file. Of course, you don't need that if you have disabled the page file.

    • Once a volume is dismounted, its memory is freed. These memory blocks are then zeroed by the system, but not immediately. And it's impossible to know exactly when it's done. It's not an issue for the page file, but I would not say the same for a full hibernation.
      The file system can also temporarily keep caches of your data after a dismount.

    • Be careful with the hibernation feature of Windows. The fast startup that was added in Windows 8 also uses the hibernation and can write the ramdisk content onto the hard drive.

     
    • Ann Lee

      Ann Lee - 2019-12-07

      thanks a lot, so let's conclude:
      - hard drive removing is safe enough when use software with at least 1 or 2 passes, however, mine with 7 passes gives me more security, considering high-level companies for data recovery
      - ImDisk is a 100% secure delete solution after enabling AWE (physical memory) when unmount AND shutdown PC
      - never user hibernation
      - not sure what do you mean with "The file system can also temporarily keep caches of your data after a dismount", how to clean such cache?

      In my opinon, a small tool (new product?) for secure deletion should be developed, creating an easier interface with the optimized parameters to prevent any writes in disk and completely removal from physical ram, adding a feature to overwrite immediately the used RAM without the need to shutdown

      As a suggestion, please remove the quick access in your PC window of the unmonted unit which still apperar after unmounting with an interrogation, making you to manually right-click and remove

       

      Last edit: Ann Lee 2019-12-07

Log in to post a comment.

Want the latest updates on software, tech news, and AI?
Get latest updates about software, tech news, and AI from SourceForge directly in your inbox once a month.