Zero Data: The Hardest Part is Saying Goodbye

Destroying data isn't always easy, technologically or psychologically

If you listen to the podcasts on which I appear, you know that I’ve been talking about the concept of “zero data” lately, where I hope to aggressively decrease my need for local storage and move as much of my documents, music, photos, videos, and other data to the cloud as possible. In preparing for this move, I’ve had to confront dozens of old hard drives and hundreds of backup optical discs. And sometimes, it’s hard to say goodbye.

I have a lot of data. More to the point, I have a lot of backups, which is basically a way of saying that most of my data is redundant. Really redundant.

This all dates back to 1999, when I moved my family back to Boston from Phoenix after the birth of our first child. One of the first things I did upon arriving back at my parents’ home, where we lived until we bought a house in the area, was wipe out my PC and reinstall whatever version of Windows I was using at the time. Unfortunately, I formatted the wrong partition during Setup and deleted, among other things, my only copy of my Outlook-based email file (the dreaded PST), losing three or so years of email in the process.

So I got the backup religion.

Since then, I’ve tried to warn people, repeatedly, about not being a statistic. That is, rather than lose something valuable and then figure out a backup plan, do the right thing proactively. Hopefully, this has made a difference for a few people. But in my experience, it often takes a disaster like the one I brought down on myself to inspire people to do the right thing. If this does (or did) happen to you, hopefully what you lose is even less important than email.

Regardless, my serious data backups start, not coincidentally, in 1999. (I do have older backups, too, though, including an intriguing set of backups that are labeled “Floppy Archives 1993-1998” as well as numerous ZIP disk, tape, and other backup formats I long ago copied to a home server.) In 1999, I was all about the CD-R, of course, but as technology improved, I moved along to DVD-R, DVD+R, and DVD-R/DL. I never bothered with Blu-Ray backups because by the time that that format arrived, I was already using servers and then home servers to store my data redundantly.

Back then, “redundant” meant regular backups to what were then very, very expensive 1 TB external disks. I recall convincing my wife that we needed two of these monsters—Firewire 800-based Lacie Big Disks that cost $999 each and required a special card for my Windows Server-based server—so that we could keep one at home and one “off-site.” Which meant, go figure, at my parent’s house. Once a month, I’d wipe out the local copy, re-copy the entire contents of our data set to the drive, and then swap out the disk at my parent’s house.

(As an aside, my wife quickly interrupted what I had planned to be a very detailed explanation about why we needed $2000 worth of storage with, “if you know we need it, just buy it.” But what it boiled down to was a realization that the both of us were keeping all of our important personal and professional data on hard drives on a single server, and that if there was a theft, fire, or hard drive disaster, we’d be in a lot of trouble. My wife gets it.)

So I’ve been really good about backing up, especially since 1999. The downside to this attentiveness is that when you flash forward almost 14 years, I’ve also collected a rather unbelievable collection of both optical discs and hard drives. I can’t and won’t just throw these away because they all contain personal data. It all needs to be securely erased or physically destroyed first.

And that’s hard.

I’ve been planning on doing this for a few years. And given the home swaps we do, in which other families stay in our home for about three weeks each summer while we’re off (usually somewhere in Europe) staying in their home, I’ve had to figure out a way to store this stuff securely while I procrastinated. But this year is the start of Zero Data. So I’ve dug the discs and drives out of storage, dumped them on my office floor, and have started to sort through it all.

What a mess.

For the optical discs, my original plan was to wait for that once-a-year event in which my town lets you drive down to some facility and shred discs for free. After missing it for three years in a row, I finally decided that I would simply buy a disc shredder and do it myself.

For the hard drives, I had long ago purchased an excellent USB 2.0-to-SATA/IDE converter, which lets you connect internal drives of any kind to my PC via USB and then wipe them out securely. It takes a long time to do this, but it works.

There’s just one problem. It’s hard to say goodbye.

I mean, how do you destroy a disc that contains movies of your then two-year-old son? How do you destroy home movies, personal photos, or even less personal data from over a decade ago, if only because it has some—at least to you—historical significance?

For starters, you need to remember than none of the stuff on these discs and disks isn’t already on my home server. It’s all backed up to the cloud, to Crashplan at least, and in the case of photos to other services as well.

But confronting these items, it’s hard not to pop a disc in the drive of my current PC—you have to think the next one won’t even have an optical disc—and watch a few minutes of a video, or look at a few old photos you’d forgotten about. There’s my son Mark, on a swing at Houghton’s Pond. Two, maybe three years old tops.

Sniff.

But you need to get over this. Breaking your connection to physical media—physical content of any kind, really, as this includes books, audio CDs, movie DVDs and Blu-Rays, photo albums, and so much more—is one of those societal and generational things that will not make any sense whatsoever to our children, but is in fact hard for people of a certain age. Saying goodbye to “stuff,” ultimately, is harder than the physical act of destruction. You almost have to steel yourself for it.

Regarding the particulars, I ended up getting a disc destroyer rather than a disc shredder; it damages discs on both sides, leaving the underlying data unreadable. It’s louder than hell and time consuming, but I was able to churn through a few boxes of discs in a couple of days. In fact, I spent much of Saturday finishing this up. You know, between short interludes where I verified one last time that I really did have that copy of the impossibly cute home movie from 2001 somewhere on the server. Yep, it’s safe.

Hard disks are a bit trickier, and I’ll be working on that one for some weeks (or even months) to come, I bet. The USB-to-hard disk tool I use works well, and it works with any type of hard drive I would have ever used in a server or home server. I have disks dating back many years—one is a piddling 20 GB IDE drive that was made in January 2001, fully 12 years ago (!!)—and securely erasing hard drives is very, very time consuming. In fact, I’m looking for recommendations in this area: I have yet to find a secure erase utility that I really like.

Some disks are unreadable and they simply won’t work. These will need to be physically destroyed, and while I’m not looking forward to a weekend in the garage with a sledgehammer, I could make that happen. But they need to be destroyed one way or the other. Now that the optical discs are pretty much done, I will turn my attention to that.

But there’s so much more.

Looking ahead, I’ve still got a home server with several terabytes of data, most of which is irrelevant to my daily life. And I’ve got a Windows 8-based “server” (really just a PC) with much less data that I’m testing to see whether it makes more sense from a home-based media share perspective. (Hint: Yes, almost certainly.) But reducing my local data usage is still going to require a lot of work, and a lot of planning. I’ll be turning my attention to that data, and the cloud services that can replace the local storage, next.

Discuss this Article 36

DaveLessnau
on Jan 13, 2013

You mention taking a hammer to the drives. I don't know if you mean breaking them open or just driving a spike into them. But, I'd say driving a spike through them would be easier. It's also much faster than secure erasing and (just guessing) even more secure: no one is ever going to spin a platter with a ragged, gaping hole in it.

TechHoarder
on Jan 13, 2013

Actually...I've done that and managed to recover the database I was needing. It took me weeks, but it worked!

MarcSilverTriple
on Jan 13, 2013

Regarding the Hard disk, why not simply dismantle them, and use a puissant magnet to throw out the data. At the end, once dismantled, my guess would be those being almost unusable or costing a lot for retrieving data from thos?

nixiang915
on Jan 13, 2013

For the hard drives, I think instead of hammering the whole thing, just take it apart. Hard drives are pretty tough and you really can't tell how much you damaged the actual disks from the outside. However, there aren't many screws holding one together, so why not take it apart and simply destroy the small metal disks' data with a magnet directly, I would think that takes less brutality.

LovalvoB
on Jan 13, 2013

Consider DBAN for the hard disks. It's too much work for a single disk, for but a LOT of disks, it's great. Hook up disks on every interface that you have, boot it up, and come back the next morning.

developer
on Jan 13, 2013

For disk shredding, at first I was using either DBAN or Linux version of BCWipe.

Now I am using Linux shred utility which I think it is the best. You can use just an *buntu live CD/DVD, and run as root:

shred -vn 25 /dev/sdx

where sdx is the hard disk you want to wipe.

At this moment I am performing a local backup by the way. :-)

However I have started a gradual data migration to Google Drive, which I think is very secure and reliable:

http://www.google.com/about/datacenters/inside/locations/index.html

http://www.google.com/about/datacenters

LhasaCM
on Jan 13, 2013

For the hard drives: find a local e-cycler that has a hard drive shredder. They remove the PCB to recycle it, then shred and recycle the drive itself. More secure than DIY, better for the environment, less time consuming for you, and not too pricey (I paid $5 per drive in the DC area).

JimmyFal
on Jan 13, 2013

I now have my OS on an SSD. My libraries point to an internal 1TB data drive. Outlook.com takes care of my emails, folders, and contacts, but I STILL back all that up to a .pst file just in case someone bombs the hundreds of replicating servers at Microsoft.

Once every couple of weeks I use Fbackup to copy the entire contents of the data drive 1 over to data drive 2. And then once a month I copy data drive 2 over to external data drive 3. Then once a year I copy data drive 3 over to data drive 4 that is kept offsite.

I keep all my working data and documents in Skydrive, and I backup Skydrive folder as part of those other backups.

So now when I have a computer failure, I can be up and running in an hour that used to take all day long.

Not sure why you bought a device to wipe the discs with, I just break them in half and toss them, and then the 20gb hd's get the sledge hammer. Some day, it will all be on Skydrive, but I will still backup the Skydrive.

And then someday I will die, and someone will take a look at those backup drives for a second, before tossing them in a garbage can. Sigh.

freeandeasy
on Jan 13, 2013

I'd like to hear what solution you decide on for the physical destruction. I have some old non-operational HDs in a stack waiting for me to figure out some way to deal with them, and if you invent the wheel, I'd rather just follow your lead on this one.

Oh, and I've tried an Axe before. Very not-good for destruction. If it came to that, I'd rather just unscrew the mounting and pry it up with a screwdriver, etc. I'm hoping there's a decent way to do this with a drill or similar.

MartinK
on Jan 13, 2013

All the effort to upload to the cloud.
Wouldn't it be much efficent to buy 3-4 high capacity harddisk and do it locally the traditional way.

Advantage:
1. less expensive
2. better privicy
3. less time consuming
4. no dependency on a company which may go out of business.
5. much faster recovery

Disadvantage.
1. only one physical location or effort transporting the backup to a friend
2. no online access. But who needs online access to ALL data?

Looking at the pros and cons I would refrain from spending that much time to such a project.

But good luck. Maybe you should keep some of your drives somewhere instead of distorying them too prematurely.

hydronus
on Jan 13, 2013

I realize I may face some scrutiny for this today but for your HD destruction if you have a friend that is a gun owner or collector a 22mm or 9mm hollow point and target practice from a safe distance is an amazing fun and complete way to destroy/ shatter the chrome disks in your HD's and commonly a friend in need of target practice will do it for free and well if you like the idea of target practice then it could be fun for you to alot more so then a hammer in the garage. On a more generous or eco minded side if your local high school has a chrome foundry yes they are small and some do mine did you can donate the chrome disks to be made into chrome decorations and well the students might even help in the disassembly and I have yet to see anybody recover data from a pile of chrome dust or from a hood ornament

hydronus
on Jan 13, 2013

For fyi yes the alloy is not chrome it is aluminum allow with some impurities so if you shop teacher don't know this then mention it and destroy but if they can handle chrome they can forge aluminum to they just need to know it chrome has a hotter and longer cool temp and time

richardcorder
on Jan 13, 2013

The quickest and most secure way to destroy a drive is with a hammer. Most of the disk platters are made of glass, and it's easy to hear when they shatter, you'll hear the broken glass rattling inside. Best to recycle after of course to keep the toxins out of the environment.

Timo47
on Jan 13, 2013

Question: you're now spending all this time on ensuring your physical media are properly destroyed but have you ever considered that you won't be able to do the same with the data stored in the cloud? There's no way for you to know you haven't left a footprint somewhere should you ever move your data from one cloud storage provider to another.

AlexFeren
on Jan 14, 2013

Precisely. Cloud backers tend to ignore (because of philosophical inconvenience) that their (personal) data stored elsewhere becomes someone else's property.
Obviously, it'll take some time to sink in, just as it has for all that semi-private information uploaded to Facebook.

jeffhex
on Jan 13, 2013

I've had GREAT success destroying data on CDs and DVD rapidly by microwaving them for just a few seconds. Quick, and quite a nice little light show. DO NOT GO MORE THAN 10 SECONDS!

For hard drive data I use DBAN. For non-working drives, simply drill a hole through them. DBAN takes longer (I tend to recycle the drives I get - I use the small ones a boot drives for backup servers that I build from hand-me-down PCs (quick and simple to install an OS, plug in a big drive, and run crashplan to backup a small LAN of computers for a client).

Oh, and I do hope you are using some sort of TNO (Trust No One) encryption for your private cloud-based data. US law has not yet caught up with the realities of cloud-based data and I fear they can claim as abandoned your info that is older than 6 months and access it without a subpoena.

pthurrott
on Jan 13, 2013

Hm. A drill might be perfect, thanks.

Kyn1000
on Jan 14, 2013

We use a drill at the office.

Though if you're looking for an excuse to have fun, I suggest thermite. Sadly, this idea was shot down at the office. Youtube has some nice videos.

TechHoarder
on Jan 13, 2013

On the rare occasion that I do decide to let got of a hard drive, I've found that all you need is to find a tree care service. They pull tree shredders to all their work and without fail, the workers get excited about tossing something metal through the grinder. More recently, I've disassembled drives for neighborhood kids and friends to show them how they work. Then I let my 'students' see how easily they break. Two problems solved at once. My data is gone, and some friends walk away understanding how important it is to backup!

MikeS
on Jan 13, 2013

Hard drives are made of soft metal. You can quickly and easily punch a few holes through the platters of a hard drive with a cordless drill. I use a large bit about 1/4" and drill 3 or 4 holes all the way through the drive.

SamR
on Jan 13, 2013

It is too early for me to think about putting everything in the cloud for two reasons. One emotional and one technical.

I do not trust the security of the cloud yet. Putting all my personal stuff where an enterprising hacker anywhere in the world can get it is a step too far at the moment. You have to trust the storage providers and so far I don't. Encrypting everything in Truecrypt containers is inconvenient at the present time too.

I live in Australia and hopefully within a year I will have fast fibre to my home. I I will then reappraise the situation but uploading my data now using ADSL is simply not feasible.

As others have said, with 3TB drives so cheap surely the cheapest solution is to constantly copy your data to encrypted drives as the cheapest large drives double in size. That way you have generations of backup. I do think though that ZIP discs can go as can any drive under 500GB.

Finally Paul, make sure you pay your cloud storage bill on time, update your Credit Card expiry date religiously and make arrangements for a backup person to have access to your data. Otherwise if you become incapacitated (or worse) one day your data will be erased and it will be like your personal digial life never existed.

freeandeasy
on Jan 13, 2013

This is one reason I use both dropbox and google drive for my files - while I might have a problem with either provider at some point in time, I hopefully will never have a problem with both simultaneously.

developer
on Jan 14, 2013

Google Drive has many datacenters worldwide: http://www.google.com/about/datacenters/inside/locations/index.html.

So I do not have reliability concerns. And it provides 5 GB storage space for free.

Regarding SamR's payment concerns, I haven't bought extra space so far, but I think one can buy the extra space he needs, for the whole year relatively cheap: https://www.google.com/settings/storage/?hl=en_US.

Something similar applies for Microsoft Skydrive: https://skydrive.live.com/Options/Upgrade

studio4llc
on Jan 13, 2013

Who in the world would ever trust Google with their data? I learned long ago to keep anything and everything related to Google away from my equipment. Google is more intrusive than the Feds.

BxPete
on Jan 14, 2013

I could not agree more. Google's business model is sifting through personal information and interactions to build profiles to market to businesses to obtain advertising revenue. This also goes for Facebook. Look at the recent issue with Instagram and what they wanted to do with uploaded pictures. Even though they sort of backed down, it still makes me uneasy.

developer
on Jan 15, 2013

I think Google's privacy policies are very good, they do not sell your data.

Instagram belongs to Facebook. I think Google+ I am using, is far better in privacy than Facebook.

BrickEngraver
on Jan 13, 2013

I like the idea of the tree shredder--also local junk yard or Aluminum can recycling center should have the equipment you need. Personally like the idea of target practice. Or just take down to the local shooting range which I would assume even MA has one, and let them go at it.

roncerr
on Jan 13, 2013

Try Googling "destroy data hard disk tape eraser". You'll find plenty of degaussing solutions. I have an old tape eraser I bought in the 70s which caused the tape to vibrate in time with the 60 Hz signal. I imagine it would do the same to any hard drive, without even taking it apart. (Drive densities are so high they are barely readable, anyway.)

Bruce McDonald
on Jan 13, 2013

The drill is the way to go. I destroy hard disks all the time and three quick holes in three quadrants of of the hard drive is all it takes. Can never be read, spun up or used again.

Harry Buttle
on Jan 14, 2013

Why not cut up the smaller HDDs with an angle grinder and then burn the bits? the ones big enough to be useful, you'll have to go through the secure format.

Johan
on Jan 14, 2013

I'd second the DBAN solution, safe and easy. However, I'd also recommend taking the disks apart.
(For fun and profit! It adds a level of destruction and if you manage to pry out the magnets in the disk head actuator assembly you will have two extremely powerful magnets to play with.)

DaveHelps
on Jan 14, 2013

When I format a disk on my Mac (relax purists, I use Win8 via Boot Camp 99% of the time) I get options to quick format, secure format, or DoD-compliant secure format - http://support.apple.com/kb/TA24002 has details.

jimbie882
on Jan 14, 2013

I still have many CDs and hard drives laying about although I have two year old computer with a 1 TB hard drive that has all my documents, pictures, videos, and movies. It is hard to get rid of them, but I must. I already use Carbonite as a backup. I have a 500 MB portable hard drive as a secondary local backup. I'm ready to purchase a new portable hard drive with a minimum 1 TB size if I can get a good deal. This is an issue of time and money, but mostly time.

williamsjm
on Jan 14, 2013

I've moved all my pictures, documents and mp3s to Skydrive. It took almost two weeks to move everything. I'm glad it's done and I'm not looking back.

My wife recently had her laptop stolen and of course nothing was backed-up. She's a convert to SkyDrive now too.

The system certainly isn't fool-proof but it's good enough (and getting better) and being able to access my data from just about any internet connected device is sweet.

sulliweb
on Jan 14, 2013

My only comment on the DBan mentions is that you can't do that within Windows. It's a boot disk (as far as I know), so you end up taking up a machine with a single task. I use TrueCrypt to wipe my drives. As nutty as it sounds, tell TC to encrypt the entire disk, it literally writes random data over every sector in order to create the volume (again to the best of my knowledge). At this point, the data is being wiped/overwritten with random Psuedo-Data, and I'm free to use my PC for more enjoyable activities, like maybe another walk down memory lane... Just a thought.

nerd911
on Jan 14, 2013

I have two main approaches. If I am destroying drive, I purchased a bustadrive.com (which is a manual press or modified car jack that has a metal spike). It splits the drive in half, then I take a batch to our local scrap metal recycling plant for the shredding (free or get paid by weight if you have more metals to get rid of). I can drop them drives off with confidence and walk away (since they are already split).

If I am re-using a pulled drive, I use diskology.com disk jocky pro unit. This will destroy data on drive x1 or x7 DOD (also disk clones and verifies integrity). I use this to keep processing separate in my work area and not on my pc.

Of course, I do charge for my services, so I am willing to spend for the devices.

Please or Register to post comments.

IT/Dev Connections

Las Vegas
September 30th - October 4th

Paul ThurottYou'll have the opportunity to experience:
• 120 Technical
Sessions
• Networking with Peers
• Expert Speakers


Come See Paul Thurrott & Mary Jo Foley in Person!

Register Now

Office 365 InfoCenter

Get the latest insight and info from Paul

Read Now!

What I Use