[AusNOG] disposal of equipment

[Greg Anderson]

I am going to begin by being rather unhelpful and saying all this will
depend on how valuable access to your network will really be.  If you are a
giant tier one ISP, a bank, or even worse an intelligence agency, I doubt
you would put the resale value of a device less than $100K higher than its
ensured destruction (and that of it's contained data).

Being likely to be flash based / NVRAM, and most likely embedded into the
device (otherwise you would simply keep the storage media) - you are going
to have to be a pretty small player to be concerned about resale, yes?

And being a smaller player - who is really going to invest the time and
materials required to make your life difficult for no other potential gain?
 To recover something you have overwritten by either making a false config
you have copied nteenth times to fill and overwrite the storage - what is
any sensible person going to be able to do with the hardware to bring back
any kind of configuration data that can damage your network?


On 10 February 2014 10:46, Daniel Watson <daniel at glovine.com.au> wrote:

> I have heard that a large amount of data centres in the US use these types
> of devices,
>
> http://www.datalinksales.com/uploads/0100l.jpg
>
> I imagine this would be fun (For a few weeks at least) :D
>
> Another idea might be to look at a LOW level format which would flip the 0
> and 1's numerous times, this is another good way of destroying data
>
> D.
>
> ________________________________________
> From: AusNOG [ausnog-bounces at lists.ausnog.net] on behalf of Alex Samad -
> Yieldbroker [Alex.Samad at yieldbroker.com]
> Sent: Monday, February 10, 2014 11:45 AM
> To: Chris Gibbs; ausnog at lists.ausnog.net
> Subject: Re: [AusNOG] disposal of equipment
>
> So at what point do you destroy and not sell.
>
> So I am thinking inbuilt cmos/flash in a closed box, I could write a file
> over the config file, but does that really work, you need multiple write
> over the same blocks on HDs.  Do flash/cmos have the same issue.
>
> I am thinking about password for OSPF or BGP setups, all the per device
> password .... ie enable login die with the device..
>
> A
>
>
> > -----Original Message-----
> > From: AusNOG [mailto:ausnog-bounces at lists.ausnog.net] On Behalf Of
> > Chris Gibbs
> > Sent: Monday, 10 February 2014 11:32 AM
> > To: ausnog at lists.ausnog.net
> > Subject: Re: [AusNOG] disposal of equipment
> >
> > Are you kidding?
> >
> > Secure disposal of networking equipment is the responsibility of a
> network
> > engineer. Why the hell would sys admin care?????
> >
> > We use a DSD wipe method though a live CD called boot and nuke. If we
> can't
> > find a way to securely delete (i.e. onboard flash) and it is a high risk
> device,
> > we smash! Lots of fun.
> >
> > Chris Gibbs
> > Network and Security Engineer | Information Management & Technology
> > Gosford City Council P  (02) 43258888 M  0408 222 496 E
> > Chris.Gibbs at gosford.nsw.gov.au
> >
> > -----Original Message-----
> > From: AusNOG [mailto:ausnog-bounces at lists.ausnog.net] On Behalf Of
> > Daniel Watson
> > Sent: Monday, 10 February 2014 11:24 AM
> > To: Alex Samad - Yieldbroker
> > Cc: ausnog at lists.ausnog.net
> > Subject: Re: [AusNOG] disposal of equipment
> >
> > Hey Alex
> >
> > This post would be more suited over at AusSAG.net
> >
> > Please register over there and feel free to post this again to the SAG.
> >
> > D.
> >
> > ________________________________________
> > From: AusNOG [ausnog-bounces at lists.ausnog.net] on behalf of Alex Samad
> > - Yieldbroker [Alex.Samad at yieldbroker.com]
> > Sent: Monday, February 10, 2014 11:22 AM
> > To: ausnog at lists.ausnog.net
> > Subject: [AusNOG] disposal of equipment
> >
> > Hi
> >
> > So there are programs for wiping hard drives, but what about flash
> drives in
> > networking devices (or inbuilt storage)  is a simple del of files
> acceptable or
> > writing over the file with ?
> >
> > What process are people using to clean their equipment before selling
> >
> > Alex
> > _______________________________________________
> > AusNOG mailing list
> > AusNOG at lists.ausnog.net
> > http://lists.ausnog.net/mailman/listinfo/ausnog
> > _______________________________________________
> > AusNOG mailing list
> > AusNOG at lists.ausnog.net
> > http://lists.ausnog.net/mailman/listinfo/ausnog
> >
> > The information contained in this email may be confidential.
> > You should only disclose, re-transmit, copy, distribute, act in reliance
> on or
> > commercialise the information if you are authorised to do so. Gosford
> City
> > Council does not represent, warrant or guarantee that the communication
> is
> > free of errors, virus or interference.
> >
> > Gosford City Council complies with the Privacy and Personal Information
> > Protection Act (1998).
> > See Council's Privacy Statement at
> > http://www.gosford.nsw.gov.au/council/privacy.html
> > _______________________________________________
> > AusNOG mailing list
> > AusNOG at lists.ausnog.net
> > http://lists.ausnog.net/mailman/listinfo/ausnog
> _______________________________________________
> AusNOG mailing list
> AusNOG at lists.ausnog.net
> http://lists.ausnog.net/mailman/listinfo/ausnog
> _______________________________________________
> AusNOG mailing list
> AusNOG at lists.ausnog.net
> http://lists.ausnog.net/mailman/listinfo/ausnog
>



--
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20140210/4f11d8aa/attachment.html>