Residual Data - How to not fuck your life up

I wanna sell my laptop i've used for 3 years. I've had some real spicy memes on there over that time and I can't afford to have people recover them if they buy it.
My laptop has an SSD OS drive and an HDD secondary. Whats the best way to stop people recovering data from the drives?

Other urls found in this thread:

ata.wiki.kernel.org/index.php/ATA_Secure_Erase
twitter.com/SFWRedditGifs

sell it without the drives.

Grab a DOD wipe iso from the internet and boot to it. It deletes / re-writes data to your drive like 10 times so no one can ever recover shit from it. That is what we use at the Hospital I work for to make sure patient data is not compromised.

Who the fuck is gonna buy a laptop without drives?
Im guessing I can't run this on my OS drive?

If you want to keep the OS intact then use CCleaner or whatever and wipe free space several times

Wiping is fine unless the people you give it to submit it to a Manhattan Project directed by the finest minds in cryptanalysis and cyber forensics dedicated to uncovering your spicy memes.
The likelihood of that happening is left as an exercise to OP.

Is CCleaner safe again? After the whole malware thing?

Boot into Derrick's or DoD nuke, wipe the drive, then reinstall OS and just don't set it up with an account.

The malware only infected an old version of the 32-bit binary.

I don't have a disc copy or USB copy of the OS. Can I just run a windows 10 media flash drive on it or will that require a key?
So i'm good to use it, right?

No. Read what I wrote. That clearly means it's not safe to use. Are you retarded, user?
I bet your spicy memes are pony futa.

copy insane amounts of tranny porn on the drive. I mean over and over again
make them regret they recovered your data

disc drives running a 1 pass with cc cleaner makes all data unrecoverable - run a 3 pass like the airforce if you want.

check ssd's iirc the can't be wiped with this method or some shit. i would just replace the drive and keep your one

lel I did this with my sd card before trashing it.

Full-disk encryption and then just format

Current conclusion:
Run CCleaner on the OS drive to save the OS
Run DOD wipe iso on HDD because that doesnt have anything that needs to be saved.

Good plan or bad plan?

details pls

If it came with windows 10 on it, you can just use a windows 10 usb and it will grab the key from your internal system.

Even if i DOD Iso the drive?
It came with Windows 8, does this change that?

>I don't have a disc copy or USB copy of the OS. Can I just run a windows 10 media flash drive on it or will that require a key?
If if has Windows 10 on it right now it will just week. Windows 10 activation is tied to the motherboard, you can reinstall Windows 10 to the same motherboard over and over again without a key.

Just werk*

Pretty sure W10 ties the key to the motherboard, even if it's a key from previous version. If you updated to W10, it should be tied. Just reinstall from usb.

This

Ooh, thanks! That's a great idea on behalf of manufacturers. I guess I'll just DOD the whole thing and reinstall windows.
Any issues? if not then threads good to be deleted. Thanks everyone :)

>Even if i DOD Iso the drive?
The image isn't hybrid, dding won't work. The best route is to use their tool to make a flash drive with it.

This. You can also input a Windows 7/8 key of it asks you for one.

If you use full-disk encryption then any data recovered afterward will be encrypted

How does one full-disk encrypt? Is this guaranteed?

I see on W10 there's a system setting for encryption. Will this encrypt across both drives or just OS?

No, because it doesn't encrypt empty space.
Just boot any live usb, use random fill on any deleting software

So what i'm hearing is that the better option is just to boot a DOD iso and reinstall os

y

step 1: use a USB stick or DVD's to create recovery media. it could either be in your start menu, or you need to press shift while clicking the restart button in windows. you'll see a menu to restart in recovery mode and inside recovery mode you'll have the option to create the USB or DVDs.

step 2. boot the ultimate boot CD. go in to HDD -> disk wiping -> darik's boot and nuke (dban)
you navigate with the arrow keys and the space bar.
press space bar to select the drive.
press M for method and pick quick wipe = 1-pass zeroes (should be enough) then press enter
press V and pick no verify (unless you're paranoid, but it'll double the time) and press enter
make sure you did select the drive (should have star by it) then press F10

step 3: use the recovery media to restore the laptop to factory settings. at the end, don't bother to boot into it. the person receiving the laptop will have to enter their info and a laptop network name when they first login. take some time to wipe the laptop with some isopropyl alcohol to make it all shiny and new-looking and fingerprints-free before giving it.

alternate step 2:
boot from linux USB or DVD
from command prompt type
dd if=/dev/zero of=/dev/sdX bs=1M
*replace X with the target drive letter.

alternate step 2:
also using linux live CD or USB. you'll have to go to software center and install hdparm (which is small enough to install on the live distro)
if you have bad sectors and suspect they have data on them, use hdparm enhanced secure erase (note: secure erase does not wipe bad blocks. enhanced secure erase does)
ata.wiki.kernel.org/index.php/ATA_Secure_Erase
the only step to change is when you issue the command, replace the --security-erase flag with --security-erase-enhanced

I must say, I don't advocate loading OEM bloatware, but at least you'll be 100% sure all the drivers are included and any weird hardware is supported without having to mess with the windows 10 default install.

Thank you for the detailed steps! You are the MVP, user!

>dd if=/dev/zero of=/dev/sdX bs=1M
>zero
You are gonna have a bad time.

Use this:

openssl enc -aes-128-ctr -pass pass:"$(dd if=/dev/random bs=128 count=1 2>/dev/null | base64)" -nosalt /dev/sdX

I usually use thinkvantage secure data disposal. It’s got settings to wipe low 1 pass medium 3 high 4 and dod7. It writes different bit patterns on each wipe and you can select the disk to wipe or just wipe em all

Media creation tool from their website for win10

I’d nuke em all and then reinstall

Guttman

Every secondhand laptop I bought did not have a hdd/ssd

This

shred /dev/sda -zv
What ya gonna do 'bout it?

It's retarded. You never need a second pass, a random pass will do, no need for three. Zero it after the random if you want, that's all you have to do.

Sensible tier: dod wipe 3 pass
Paranoid tier: dod wipe 7 pass
Seek help tier: guttmann 20 pass
Paranoid schizophrenia with audiovisual hallucinations tier: keep the current hdd, buy a cheap hdd and put it inside

Is the "ultimate boot CD" and " dariks boot and nuke" something in recovery mode, or is it something I need download and burn to a CD?

download and burn
or you could use an usb stick

I have my recovery drive and my DBAN drive at the ready.
Previously, I've been able to boot from usb by using ESC on startup. Since then, i've reinstalled windows, and ESC nor f2 are working. Any ideas?

CCleaner was never safe. Don't tamper with the registry with automated tools, you'll break something. The windows disk cleanup tool does everything else CCleaner does natively.

As for your laptop, wow everything and reinstall Windows fresh.

Disaster averted, I was able to enter the BIOS and sort it out. DBAN is currently running. So a single quick pass should do, right?

It's very common for poorfags that buy used laptops to get no drive for the exact reasons you'd worry about

>I'm guessing I can't run this on my OS drive?
If you think you can't run it because it would delete the operating system in the progress, and the program would stop running, then you are incorrect. You put DBAN on a usb, boot from the usb, and then nuke all drives. It's gonna take long though.

If you mean that you want to keep your windows install intact, then boot a linux live usb, and run something like
sudo dd if=/dev/urandom of=/mnt/output.file
or
sudo dd if=/dev/urandom | pv | sudo dd of=/mnt/output.file
if you want to see the progress, after mounting your drive under /mnt, until it throws an error saying no free space left. This will overwrite your free space with random garbage, making your deleted files unreadable. If you're extra paranoid, you can repeat it multiple times, but doing it once should make your files practically unrecoverable, unless you're selling your laptop to the NSA. Alternatively, if you haven't yet deleted your files, you can use the linux software called srm (secure remove, it's basically DBAN for single files), to delete the images permanently.
Since we are talking about images here, you should make sure you also delete all the thumbnails generated by the OS, but I have no idea where those are stored on windows.