Tag: ebay

Hard drive platter spinning

Don’t destroy used hard drives! Wipe them and reuse or sell them with confidence!

The advice to not use a hard drive from eBay is not the best advice. You should fully wipe the drive (a zero fill will do) and then install a new OS on it. The old data will be 100% unrecoverable and you won’t unnecessarily destroy a perfectly good piece of equipment. Please don’t advocate for this kind of wasteful drive destruction.

Yes, a zero fill is more than enough. The “DoD secure wipe” was designed for hard drives from the 80s and early 90s that used FM/MFM/RLL data modulation. Today, drives use [E]PRML and other advanced techniques instead.

Yes, Peter Guttmann wrote a paper about recovering data from hard drives that said you could easily do so, but that was in the era of widespread MFM/RLL drives, and Guttmann himself later walked back his recommendations:

“In the time since this paper was published, some people have treated the 35-pass overwrite technique described in it more as a kind of voodoo incantation to banish evil spirits than the result of a technical analysis of drive encoding techniques. As a result, they advocate applying the voodoo to PRML and EPRML drives even though it will have no more effect than a simple scrubbing with random data. In fact performing the full 35-pass overwrite is pointless for any drive since it targets a blend of scenarios involving all types of (normally-used) encoding technology, which covers everything back to 30+-year-old MFM methods (if you don’t understand that statement, re-read the paper). If you’re using a drive which uses encoding technology X, you only need to perform the passes specific to X, and you never need to perform all 35 passes. For any modern PRML/EPRML drive, a few passes of random scrubbing is the best you can do. As the paper says, “A good scrubbing with random data will do about as well as can be expected”. This was true in 1996, and is still true now.”

Hard drive platter and arm
It’s a miracle that these things work at all.

Quoting Donald Kenney:

“PRML uses a different approach to improving storage density. To permit greater data density, recorded data amplitude is reduced and bits are packed together more closely. The digital signal is then recovered using digital signal processing techniques on the analog data stream from the drive. PRML achieves a 30-40% improvement in storage density over RLL modulation without PRML. EPRML modifies the algorithms used in PRML to achieve additional improvements claimed to be 20-70%.”

The extremely low magnetic amplitude in [E]PRML modulation puts the analog data signal on the platter so close to the noise floor that a DSP is required to apply filters to the noise to recover the data signal. A simple zero fill will push the previous (very weak) signal firmly back into the noise floor. Snatching data from an MFM drive using a scanning tunneling electron microscope relied on the strong amplitude of the data writes being “messy,” as in the magnetic domains of previous writes (sometimes multiple layers of them) would still be detectable “around” the current writes because so much of the surface was influenced by the previous writes that unnecessary “leakage” of the magnetic domains would occur, and subsequent writes wouldn’t necessarily be able to “reach” all of the affected areas.

PRML techniques massively boost data density; doing so makes the margins in which you’d locate this “leaked” data so tight that there isn’t much room for it to exist in the first place, but on top of that, the strength of the write is an order of magnitude weaker. It’s frankly a miracle of modern science that the data so close to the noise floor and with such an insanely tiny amount of surface area can be read back at all. One simple overwrite pass will destroy the data beyond even the abilities of any given three-letter agency to get it back.

So, in short, a one-pass zero-fill of the drive is enough to “sanitize” the data therein. Please don’t throw away or destroy hard drives just because someone else used them before, and if you’re selling a computer, just wipe the drive completely and your now-destroyed data is perfectly safe from prying eyes.

I am TIRED of missing hard drive caddies on eBay!

PLEASE, people, if you need to remove a hard drive from a laptop computer for data privacy purposes, PUT THE CADDY AND SCREWS BACK IN THE UNIT OR IN THE BOX when you want to sell it off!  I understand that some corporations need to remove and destroy hard drives from their surplus laptops out of irrational paranoia (you DO know that a zeroed hard drive’s old data is only readable to someone with a clean room and scanning tunneling electron microscope and tons of highly specialized skills, right? RIGHT?) but there’s simply no excuse for not taking 60 seconds to unscrew up to four screws, put them in a piece of folded-over clear tape, and shoving the entire caddy assembly and taped-up screws and interface connector (where applicable) back in the unit!

The problem is that purchasing a laptop with no hard drive caddy and related equipment usually means being completely unable to install a hard drive into the unit without trying to source a caddy from another source.  That means extra time, money, and frustration…and it also means that you’re less likely to sell your laptop!  If you do sell it, you’ll get significantly less since it’s not working and the buyer can’t just buy a hard drive and slap it in.

If you run a business that removes hard drives from laptops and then sells them, be it by surplus sales or auctions or eBay stores, PLEASE put the hard drive caddy back in the unit!

Denying PayPal payments for eBay sales

eBay forces you to “Accept” any form of payment sent via PayPal, even if the auction in question is in dispute, as in my case where I accidentally listed a $120 LCD for $21 and it “sold.” The listing was wrong, but the buyer had issued payment already. The listing wasn’t the problem anymore, but disposing of the issued payment so the buyer could get the funds back wasn’t possible without accepting and refunding, losing a couple of bucks in the process. The “Deny” button is grayed out. Luckily, PayPal’s programming team aren’t all that bright, because they failed to build a basic check into the system when the change was made: the validation of what “accept” is set to against the payment’s status. Because of this glaring programming error, as of this writing you can deny payments that eBay wants to force you to accept.