Questions tagged [ssd]

A solid-state drive (SSD, also known as a solid-state disk although it contains neither an actual disk nor a drive motor to spin a disk) is a solid-state storage device that uses integrated circuit assemblies as memory to store data persistently.

Filter by
Sorted by
Tagged with
0 votes
0 answers
16 views

How to wipe SSD [duplicate]

I would like to know how to wipe a SSD securely to remove virus malware and all data on it in a way that it could be reusable and can be used again.
Dijangosophdj's user avatar
0 votes
0 answers
119 views

I need help properly encrypting my computer SSD

My main laptop recently broke down and i've been forced to use an older laptop I had in storage. This machine was encrypted years ago with veracrypt and only has an SSD. It's around 250 GB of storage. ...
Elizabeth Vogue's user avatar
0 votes
0 answers
79 views

Is there a way to find the devices my SSD was plugged in?

I gave my laptop for repair to a technician now I suspect he might have copied my files to another pc by probably plugging in my SSD to other devices. I already tried checking the properties but idk ...
TARUN's user avatar
  • 1
1 vote
0 answers
129 views

USB SSD Backdoor command issue [closed]

In our company we have many SpeedFaster 2TB USB SSDs. They were working perfectly until our endpoint protection software was updated. Currently they work only for a few seconds and are then blocked ...
SSDKaput's user avatar
0 votes
1 answer
1k views

Can a deleted file on an SSD with trim enabled be recovered? [duplicate]

I'm just wondering from a security stand point if a deleted file on an SSD with trim enabled can be recovered? I've did some research and it would seem it is impossible unless for some reason trim ...
Curt Rand's user avatar
  • 239
1 vote
1 answer
160 views

Reasons for recovering small amounts of deleted data from SSDs

In their 2018 paper "Solid state drive forensics: Where do we stand?", Vieyra et al. discuss recovering deleted data from SSDs. For their experiments, they wrote large amounts of text to ...
Matthias Braun's user avatar
1 vote
1 answer
368 views

2min for SECURITY ERASE UNIT

Running hdparm -I /dev/sda on a SanDisk SSD PLUS 1000GB produces this: not supported: enhanced erase 2min for SECURITY ERASE UNIT What does that mean? I assume that I could do hdparm --security-erase ...
Matthias Braun's user avatar
0 votes
0 answers
171 views

Self-encrypting drive - eDrive vs ATA Security

Let's for a moment forget about the possible drawbacks of SEDs themselves. One of the upsides of SEDs is that the encryption key never leaves the drive but wouldn't using eDrive negate this advantage ...
Brickwall's user avatar
0 votes
1 answer
559 views

Can you infect a SSD firmware with malware?

Are the updates signed? Or can anyone make a piece of software to do this?
Hormoz's user avatar
  • 171
0 votes
1 answer
217 views

Can ransomware impact SSD drives?

I was watching this DefCon talking about Solid State Drives (SSDs) destroying forensic and data recovery jobs. It was interesting to note, that the speaker did acknowledge that it is unknown how long ...
user5623335's user avatar
2 votes
1 answer
2k views

ThinkShield secure wipe - SSD does it forbid data recovering?

I have to give my computer back to my boss. I want to delete all the data from my SSD. I found "ThinkShield secure wipe" which is implemented in the BIOS apparently. It gives me two options: ...
mat's user avatar
  • 23
0 votes
1 answer
107 views

Does an SSD store software-encrypted data in unencrypted form somewhere?

I use LUKS encryption on my entire drive. Do SSD drives ship with any storage areas which store unencrypted data, even though the data is saved encrypted on user-available SSD storage? Maybe inside ...
CurtisB's user avatar
  • 33
0 votes
1 answer
1k views

NVMe Self Encrypting Drive - How to use ATA Security?

I own a Samsung 980 Pro which, according to its own specification, supports Class 0, TCG/Opal 2.0 and IEEE16667. Since it's an NVMe drive, I cannot use hdparm in order to set up class 0 encryption but ...
Brickwall's user avatar
0 votes
1 answer
929 views

ATA Enhanced Secure Erase - why is everything 0?

I was erasing a SSD with ATA secure erase and thought about the following: When enhanced secure erase is performed on a SSD or NVMe which supports this operation, the master key which is used to ...
brot's user avatar
  • 3
1 vote
1 answer
231 views

Can SD cards on mobile phones and tablets truly be erased?

When performing a factory reset on Android devices, it is my understanding that the pointers to the data located in the SD card are simply erased while the data itself remains intact, waiting for ...
Anon1337's user avatar
2 votes
1 answer
2k views

How can I wipe an infected SSD [duplicate]

Recently my PC fell subject to some malware. The malware is hidden and all the antivirus software can't find/detect it. The things it has done so far is spyware like, it disabled System Restore from ...
Galagyy's user avatar
  • 21
0 votes
1 answer
487 views

SSD supports hardware AES encrytion. hdparm does not report a "Security" section. Should I be concerned?

Note that this is a different case from similar question asked 7 years ago, here: hparm -I /dev/sda does not report a Security section - should I be concerned? In my case the SSD (part number: ...
kalabic's user avatar
48 votes
8 answers
18k views

Have I properly destroyed my SSD?

I held every chip (without desoldering, they were still onboard) in a lighter flame for a minute or two. They started "popping" a little if that indicates anything. Then I drove a nail into ...
ThrowawayGuest10's user avatar
0 votes
2 answers
1k views

If an SSD uses TRIM, is there any reason to destroy it physically to protect one's data?

If an SSD uses TRIM such as a Mac with TRIM support when it deletes files, I've been told that it is completely unrecoverable. Therefore, is it ever really better protection to physically destroy the ...
sangstar's user avatar
1 vote
1 answer
1k views

Veracrypt SSD encryption security analysis vs HDD

I have a SSD and wanted to use VeraCrypt for plausible deniability and protection against any & all level attacks e.g. state sponsored, non sponsored. My goal was to use a VM and place it in the ...
corey robert's user avatar
-1 votes
1 answer
277 views

If SSDs cannot be securely wiped then why can't we recover files after crypto virus attack?

It is my understanding that SSDs do not allow user to overwrite any specific file completely (wear-leveling). So in case of ransomware attack such as CryptoLocker, doesn't that mean there is still, ...
Mr. Engineer's user avatar
9 votes
1 answer
4k views

Should I trust that the Android factory reset actually erases my data?

I bought a Galaxy S20 Fe, logged my LastPass in it and all of my accounts (google, twitter, etc). Now it has a malfunction and I'm going to have to send it back to get my money back. When I factory ...
Guerlando OCs's user avatar
1 vote
3 answers
819 views

Reccomended way to securely erase SSD storage of a smartphone? [duplicate]

As far as what I understand there are different approaches and I have a few doubts regarding each of them: On the one hand, it seems that factory reset does not securely erase itself data from SSD ...
Lorenzo's user avatar
  • 11
-1 votes
1 answer
261 views

Can data be stored anywhere else on a MacBook besides the SSD?

Imagine the following scenario: There exist all kinds of information on my SSD. Now I take away the SSD of my MacBook Pro, replace it, and reboot. I should have a MacBook that is on factory settings, ...
iamaghost's user avatar
1 vote
1 answer
157 views

If I re-install an encrypted version of Ubuntu on my laptop and fill my entire SSD up with a large .txt file, does this securely wipe the SSD? [duplicate]

I'm looking for an easy way to securely wipe the SSD of my Ubuntu machine. As I'm using a fairly new Dell XPS 13 and am quite a noob with Ubuntu I don't want to use any fancy commands, that might ...
user avatar
1 vote
1 answer
356 views

Can M.2 docking stations be used to make forensic images of (Bitlocker encrypted) M.2 disks?

I am looking into M.2 docking stations such as the Maiwo K3016S as shown below. Is it possible to use such docking stations optionally in combination with a USB- or software write-blocker, in order ...
Bob Ortiz's user avatar
  • 6,635
4 votes
1 answer
2k views

Data recovery from TRIMmed SSDs

Assuming a given SSD supports TRIM, and is on a physical bus that supports sending that command, and the connected computer is running an OS that is aware of TRIM: If the drive is formatted, or has ...
craig65535's user avatar
6 votes
1 answer
769 views

What's the DRAT word of my SSD?

This article on forensicfocus.com says the following about Deterministic Read After TRIM (emphasis mine): As a result, the data returned by SSD drives supporting DRAT as opposed to DZAT can be all ...
Matthias Braun's user avatar
5 votes
1 answer
2k views

Does formatting an SSD securely delete all data?

This article on thomas-krenn.com states: Because an ATA trim will be performed by NTFS with Windows 7 or when formatting using Ext4 from mke2fs 1.41.10 or XFS from xfsprogs 3.1.0, the secure erase ...
Matthias Braun's user avatar
3 votes
2 answers
4k views

ATA Secure Erase is too fast

I have two SSDs in my laptop. one is SATA 500GB and the other is M.2 SATA 250 GB. I used the following steps for both to securly erase them so that I can sell the laptop: unfreeze the drives: sudo ...
j doe's user avatar
  • 31
0 votes
1 answer
141 views

Securely erase firmware secret key

I have an SSD with the option (with ATA-commands) to erase the firmware for security reasons. In the firmware flash cells, the secret key is stored for encrypting the data on the fly. When I ask the ...
Aard's user avatar
  • 25
2 votes
1 answer
322 views

Check TRIM space on SSD

Is it possible to 'view' the space that TRIM would take care of to see if that space was really wiped? I am using both Windows and Linux.
userman48's user avatar
1 vote
1 answer
208 views

Can I recover files that I had on windows from a SSD that I converted to apfs (mac) and which method or tool to use? [closed]

I had some files that I want to recover from windows, but I formatted the ssd drive to macos (apfs)? Is there a tool or method to recover those files?
George's user avatar
  • 11
2 votes
1 answer
1k views

I snapped my micro SD card into 8 pieces before throwing it away. Should I be worried that someone can get my data?

The card was a 16gb SanDisk micro SD card (monolithic).
user avatar
1 vote
2 answers
353 views

How can one encrypt a file and be sure the original file can not be recovered on a SSD?

Let's say that I have an unencrypted file and I'm trying to encrypt it and make sure the original file can not be recovered from my disk. If I, for example, create an archive, put the file into it and ...
Usersasajid30832d's user avatar
1 vote
0 answers
285 views

Secure deletion on Android

My understanding is if I delete photo001.jpg, this deletes the index and assigns it to the free space to be overwritten. So this brings me onto my next scenarios. If I have a device capable of 8gb ...
Shaun Wilson's user avatar
-3 votes
2 answers
608 views

Can viruses of one ssd transfer to another ssd?

I have 2 ssds both with Windows 10. If I boot the 2nd ssd and start downloading infected files can my primary ssd be infected too?
luciano cometto's user avatar
0 votes
1 answer
2k views

What degree of physical destruction is sufficient to ensure an SSD is not readable?

My organization has upgraded a few printers and decommissioned the internal SSD hard drives by passing the memory chips through a band saw, cutting each chip into halves, and in some cases tearing ...
Monica Apologists Get Out's user avatar
7 votes
4 answers
26k views

How to physically destroy an SSD at home?

SSDs seem to be notoriously tricky to properly erase (see for example this question and answers here). An easier and potentially safer solution could be to physically destroy the SSD device. I am ...
fgysin's user avatar
  • 744
4 votes
2 answers
28k views

How to securely erase the free space on an SSD in windows 10?

I would like to wipe ALL free space on my SSD which Windows 10 is installed on, so that no previously deleted file can be recovered. How can I achieve this?
Lost Crotchet's user avatar
1 vote
1 answer
552 views

Can file recovery tools recover deleted small files from SSD drive's NTFS Master File Table?

According to this page and site, small files are kept in Master File Table when filesystem is NTFS. Let's assume that computer is using Windows 10 and a SSD drive with TRIM support. If a user ...
ccccc1cc's user avatar
0 votes
3 answers
907 views

How sufficient are these steps to prevent deleted SSD files from being recovered?

I'm selling a 4-year-old Dell PC with Windows 10 and two SSDs and I want to be sure that nobody can recover anything from my personal deleted files. So far I've done the following. Completely ...
Joe's user avatar
  • 133
0 votes
1 answer
1k views

Is Opal-based full disk encryption fully working for Linux? [closed]

I'd like to know to manage the password purely via the BIOS and not need to run any utility e.g. sedutil.
user avatar
1 vote
0 answers
552 views

Can SSD data be recovered through Forensic Explorer?

I am trying to recover deleted files from a SSD using Forensic Explorer. Once the image processing on the SSD had been completed using the write blocker, I opened up AccessData FTK Imager and then I ...
Ciph3r8's user avatar
  • 11
3 votes
1 answer
10k views

Veracrypt system encryption on SSD, do I have to trim the disk right after finishing? How?

I want to encrypt my OS that is on an SSD (Windows 7, x64, mbr partition style). From what I know Veracrypt will encrypt the whole disk, not only the actual data. Not only! it will "fill" the empty ...
veracryptuser's user avatar
5 votes
2 answers
1k views

How does full disk encryption cater for overprovisoned disk space in flash devices and can this result in data leakage?

My understanding is that flash based devices such as SSDs are over-provisioned and do not advertise the additional blocks of storage available to the operating system. The over-provisioned blocks of ...
Motivated's user avatar
  • 1,523
29 votes
5 answers
5k views

Does the destruction of sensitive information limit the choice of hard drives to non-flash based devices?

Working with a non-profit organization,it's common to reuse hard drives that have previously stored highly sensitive information such as medical and financial records. This is primarily driven by cost-...
Motivated's user avatar
  • 1,523
1 vote
2 answers
4k views

Samsung EVO 970 SSD on laptop without TPM - secure erase, is the drive encrypted?

I have a Dell XPS 9550. This was shipped without a TPM. I have since installed a Samsung 970 EVO SSD which as I understand is a self-encrypting drive (SED) and, what I am not sure about is, it can be ...
RemarkLima's user avatar
6 votes
2 answers
4k views

Is it possible to take an image of the firmware of HDD and SSD?

I suspect that both my HDD and SSD may be infected. Is it possible to take an image of the firmware? How do I go about doing it?
ssdhddinfected's user avatar
5 votes
1 answer
467 views

Does full disk encryption offer mitigation in the case of the firmware of an SSD being compromised?

Suppose the firmware of an SSD or HDD has been compromised by rogue actors either through "interdiction" (interception) or via the internet. They are able to exfiltrate data and conduct surveillance ...
ssdhddinfected's user avatar