Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have read about dd and see that it can be used to securely wipe a HDD. But there is also a program called DBAN to wipe the HDD as well.

I know that using a live gnu-linux ISO I can wipe my HDD by issuing following command several(say 25) times

sudo dd if=/dev/urandom of=/dev/sda# bs=4M

my question is what's the difference between using dd and DBAN and can one claim that one of them is superior to the other and why?

thanks

share|improve this question
up vote 1 down vote accepted

Using dd with (u)random will write random data (once), with no guarantees on how random that data might be.

DBAN, as a specialized drive wiping tool has a more sophisticated random number generator, and supports various wiping patterns, including a few that are compliant with DoD regulations for wiping sensitive data.

share|improve this answer
1  
As long as the original bits are changed is it really matters how "random" are the changed values? – destan Jan 5 '13 at 21:47
    
The amount of randomness is potentially important, but it depends on what you're solving for. If you're an average user looking to sanitize a drive before throwing it away, writing all 0's is sufficient... On the other hand, if you're looking to secure confidential data you probably need something closer to the DoD wipe (or other more drastic methods). – BowlesCR Jan 7 '13 at 18:49

There is a huge difference:

  • With dd (any any other method to write to the drive with lots of data until it is full) you are overwriting old data with new data. Compare it to getting a pencil written notebook and filling all the pages with new text.
  • With the 'secure erase yourself' command used by DBAN (or other tools, such as via hdparm) you tell the drive to fully erase itself. You do not generate data and send it to the drive. The drive itself does all the work.
share|improve this answer
    
So are you telling that DBAN takes advantages of hardware capabilities/features for erasing it? Are you sure about it? – destan Jan 5 '13 at 21:45
    
DBAN sends the command to the drive. How much advantage the drive takes of that is up to the manufacturer or the drive. – Hennes Jan 5 '13 at 22:25

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .