5 ms·
> Those in high-risk, high-sensitivity situations should assume that a “secure-erase” of a card is insufficient to guarantee the complete erasure of sensitive d
by dooglius 8y ago
> Those in high-risk, high-sensitivity situations should assume that a “secure-erase” of a card is insufficient to guarantee the complete erasure of sensitive data.
People in such situations should be encrypting anything sensitive that goes onto external storage anyway, you shouldn't be in a position where you have to "secure-erase" anything.
- dronescanfly 8y agoDestruction of data is still safer than the non-zero chance of breaking your encryption measure.
- deleted 8y ago[deleted]
- pbhjpbhj 8y agoMaybe "secure erase" caches, swap space, and RAM - don't know if it's true but I understand RAM can hold a pattern when powered down, sufficient to be recovered if you need it enough. Anything you consume unencrypted gets displayed unencrypted at some point and so is stored in some way in clear-text (unless you use external mechanical means for the last step?).
- icebraining 8y agoSwap can be encrypted just fine. As for RAM encryption, Linux already supports it, if you're using a very new AMD CPU with SME: https://github.com/torvalds/linux/blob/master/Documentation/x86/amd-memory-encryption.txt https://github.com/torvalds/linux/blob/master/Documentation/...