I’ve previously discussed why you shouldn’t just throw out or recycle your computer without wiping the drive first to protect your identity and files in a 404 Tech Support article Before you recycle/garbage that old computer. If you’re deleting files from your computer that need to be kept from prying eyes, you should be using a secure deleting application for the same reason. The open-source application I recommend for that task comes in the form of Eraser 6.
The same analogy used in the previous article holds true for justifying why you should use Eraser 6. A file on a disk can be compared to a house in a neighborhood. In Windows, when you delete a file (even Empty the recycle bin) all you really did is take the address off the house and put up a ‘lot for sale’ sign. If somebody knows where to look, they’ll be able to find it until a new file comes in and takes over that space. A secure deleting tool comparably bulldozes the house and fills the lot with a bunch of random bricks and mortar with the ‘lot for sale’ sign still up in the yard.
[Editor’s note: this review was written by Freewaregenius contributor Jason H. Check out his tech blog: 404techsupport.com].
Eraser 6 is a free, open-source application hosted on SourceForge and with its own site at http://eraser.heidi.ie/. The current version of Eraser 6.0.6 supports Windows XP, Vista, and Windows 7. An older version (5.7) is still kept around to support Windows 9X/ME. While Eraser 5.8.8 provides a portable version that you can throw on your USB jump drive to take with you for your erasing needs on the go.
Installing the latest version of Eraser gives you the option of integrating Eraser in the the Explorer context menu. This allows you to right-click a file or folder and choose to Erase the file or Erase it upon restart. You can also drag directories or files into the Eraser window to delete them immediately. Be careful with this latest version though, there’s no prompt for confirming the process. While erasing, the system tray icon (a red nuclear symbol) will pulsate. For single files this will only take a few seconds, but for big files and folders this can take a bit of time. The amount of time taken will also depend upon the method used to write over the files and how many passes it makes. All of this can occur in the background so time doesn’t seem like it should be too much of a problem. A bigger factor should be the resources it consumes as it runs in the background as a service. While Eraser was actively deleting a large directory it used between 55-70MB of memory, while just idling it used only a few MBs.
A cool feature of Eraser is that you can set up tasks. These can be run manually, immediately, or scheduled to run at restart or a recurring time (hourly, daily, or weekly). I like this flexibility because it allows me to adapt Eraser to my needs. Let’s say I make my own “last chance” directory. Any files that get moved into the C:DeleteMe directory will get deleted every Friday at 5:00 or if a log is written every week to a directory and we delete it for privacy reasons after keeping it around for troubleshooting purposes, we could add a directory and filters to only include that file to get deleted regularly. You can also have it Empty and Erase the Recycle Bin contents regularly so you don’t even have to change your regular habits.
You can also configure Eraser so that certain files or folders are placed where the erased files were in case it’s needed for plausible deniability.
You can download Eraser and learn more from its homepage.
Use of a Windows application to “securely erase” files is a very poor choice. IT is unable to remove files that are in use at the time it is run, for one thing.
A much better choice is Darik’s Boot & Nuke, which is included in the Ultimate Boot CD for Windows, and available by itself from http://www.dban.org/
DBAN will allow you to totally wipe all files – including Windows – off the hard drive, and can be set to erase it to Department of Defense specifications, if you feel the need for that much security.
Icesnake, you’ll see that DBaN is the software I recommend in the article (first link of the article) for wiping your drive for security.
Clearly you don’t want to be wiping your drive and reinstalling Windows every time you have to delete a file that might have personally identifying information. That situation is where Eraser comes in.
Also Eraser is able to get around removing locked files by scheduling those for deletion upon restart. It is used for “securely erasing” files or folders. DBaN is used for “securely erasing” an entire hard drive and all of its operating systems, folders, and files. Two different purposes.
In my opinion Eraser 6 is terrible and bug riddled, just check their forums. I had it installed for about 10 minutes before returning to version 5. I tried to set it up to use pseudorandom and it kept popping up some error every time I went to erase. It’s also not as user friendly, in my opinion, as version 5.
I do also find it funny that on the site they quote the cost of developing Eraser as $2.3 million.
Carbonize, I’ve heard a lot of these complaints as well and took it into consideration in my article. However, I never experienced any of the issues first-hand so I still recommended Eraser 6 because of some of the subtle features. I do like 5.8′s portable version though and will probably continue using that on the day-to-day basis.
Darik’s Boot and Nuke has it’s own shortcomings..
http://cmrr.ucsd.edu/people/Hughes/SecureErase.shtml
The SecureErase software will erase your entire hard disk in seconds..
Note: The following video is kind of boring, but has really good information near the end of it as well as the start of 2/6 that is listed on Youtube.. Which is where we find out about SecureErase..
http://www.youtube.com/watch?v=fst8IZup44c
HTH,
Kent
Another good program is Evidence Nuker.