The Slow Mo Guys videoed a hard disk drive at 1,000 frames per second to show how it works and then they destroyed it.
Don’t try this at home!
Ralph Bach has been in IT long enough to know better and has blogged from his Bach Seat about IT, careers, and anything else that catches his attention since 2005. You can follow him on LinkedIn, Facebook, and Twitter. Email the Bach Seat here.
Multi-function printers (MFP) can scan, copy, fax, and print. The lowly office copier can now send emails, host web-based administrative pages, and even tell you when the ink is low. While doing all that, MFPs can store image files on onboard hard drives, which can contain sensitive, personally identifiable information (PII). Compliance with standards/laws such as PCI-DSS, HIPAA, Sarbanes Oxley, state privacy laws, etc., may force MFPs to be secured.
SecureState suggests some general questions to ask when trying to understand the criticality of these copier systems and to show some due diligence:
• Are these devices accessible on the network? If so, how is “Administrative” access controlled?
• How long are the image files retained on these systems?
• If the copier is compromised, can the attackers capture sensitive data?
• If a hard drive fails, does the replacement process follow the usual standard for securely destroying the disk?
• What are some of the services enabled on these devices? Is there an administrative website, SNMP client, or SMTP server? How about the accounts and passwords of the administrative websites; are they set to default accounts and passwords?
SecureState says If you answered “No” or “I don’t know” to these questions, some of the issues more than likely need to be addressed.
Just like any network appliance, MFPs and other print devices are small computers connected to the network that have memory, storage, processors, an operating system, and full-fledged web servers. These devices can hold sensitive information. Before that old printer is decommissioned, ensure the copier hard drive is securely wiped. If the existing device does not have advanced security options such as disk encryption or immediately overwriting data, the hard drive should be removed and securely wiped or destroyed separately before being decommissioned.
Recommended best practices for multi-function printers and copiers with disk drives:
If the copier processes restricted data, it MUST have encryption and image overwrite. For devices that process restricted data but do not have the necessary security features:
If possible, buy the required security modules and enable the features.
Xerox—Newer Xerox (XRX) devices have security features that often need to be turned on. For more information, see the Xerox Information Security Guides.
Ricoh—Security options for Ricoh’s (7752) have to be purchased separately. For more information, see the Ricoh Common Security Features Guide (PDF).
Canon—Security options for Canon (CAJ) devices must be purchased separately. For more information, see Canon Security Solutions for iR and iP Devices (PDF).
HP – All HP (HPQ) multi-function printers have hard drives.
There is a disk-wipe utility for all MFPs.
All they focused on was the costs; they did not ask any of the due diligence questions pointed out in this post. They had no plans on wiping the HDDs on the 12 networked copy/scan/print Ricohs. It is pretty clear that all the info on the HDDs was bound for South America or else on the secondary market, as I wrote about here.
Ralph Bach has been in IT long enough to know better and has blogged from his Bach Seat about IT, careers, and anything else that catches his attention since 2005. You can follow him on LinkedIn, Facebook, and Twitter. Email the Bach Seat here.
The International Disk Drive Equipment and Materials Association (IDEMA), the industry group which promotes the technological, manufacturing, marketing, and business needs of the disk drive industry, is leading the Big Sector initiative to update computer hard disk drives from 512 bytes to 4,096 bytes (4 Kilobytes) sectors.
IDEMA claims the need to change the hard drive sector size which has been consistent for thirty years, developed as hard disk sizes grew. 
The old 512-byte sectors limited the amount of error correction required to handle more data on the newest drives. Dr. Martin Hassner of Hitachi GST said: “(The) increasing areal density of newer magnetic hard disk drives requires a more robust error correction code (ECC), and this can be more efficiently applied to 4096-byte sector lengths” in a 2006 TechWorld article. According to the trade group, the change to 4 Kb sectors will allow hard drives to continue to grow to 2 Tb in size.
Western Digital (WDC) is the first manufacturer to release products under this initiative. WD calls these drives Advanced Format. According to an article at AnandTech, In order to reach the 2 Tb size Western Digital and other drive manufacturers have developed a 512 b emulator which resides on the drive controller for the Microsoft (MSFT) Windows 5.x family (Windows 2000, XP, 2003, Windows Home Server) which are unaware of 4 Kb sectors.
AnandTech says the emulators will allow Windows 5.x systems to continue to think they are seeing 512 b but there are still problems. The article reports that the Windows 5.x family has a habit of misaligning the first disk partition under the new system which will result in poor default performance. The Windows 6.x family (Vista, 2008, Win7) and later are programmed to take into account the alignment issues. This also creates issues for imaging software. Drive imaging software like Norton’s Ghost needs to be 4 Kb aware. Otherwise, it may inadvertently create misaligned partitions with any Windows product. The article claims that all current imaging products will write misaligned partitions and/or clusters.
Linux and Apple (AAPL) Mac OS X are not affected by this issue. Western Digital has tested modern versions of both operating systems and officially classifies them as not-affected. They also found that Linux and Mac OS X drive imaging products are also unaffected.
Western Digital is offering two solutions to solve the misalignment issue. The first solution is specifically geared towards Win 5.x. The first option is to use an offset created by jumpering pins on an Advanced Format drive. This will force the drive controller will use a +1 offset. This crude hack means the operating system is no longer writing to the sector it thinks it’s writing to. Jumpering is simple to activate and effective in solving the issue on a PC with a single partition. If multiple partitions are installed this hack cannot be used because the offset can damage later partitions. The offset can not be later removed without repartitioning the drive, because that would break the partition table.
The second method of resolving misaligned partitions is through the use of Western Digital’s WD Align utility available online from WD. The utility moves a partition and its data from a misaligned to an aligned position. This is the recommended solution for using multiple partitions under Win 5.x, along with correcting any misaligned partitions generated by imaging software. The utility also serves as the only way to find an Advance Format drive without physically looking at it.
AnandTech calls the WD Align utility the recommended solution for single-partition drives being used under Win 5.x too since it prevents breaking the partition table. The amount of time needed to run the utility depends on the amount of data that needs to be moved and not the partition size (it simply ignores empty space), so it’s best to run the utility immediately after creating a partition or installing Windows, as there’s less data to move around.
The first Advanced Format drives are WD Caviar Green drives using multiple 500GB platters which are now available. There are two ways to identify these drives:
1) They all have 64 Mb of cache – the first WD Caviar Green drives to come with that much cache; and
2) They all have EARS in the drive model number, e.g. WD10EARS.
It seems that WD is not pushing these drives as part of any major product launch. The new drives are quietly entering the marketplace. The IDEMA plan called for everyone to have 4 Kb sector drives by 2011, so there will be similar soft-launches from the other manufacturers over the next year. It is reasonable to expect all the HDD manufacturers to have similar problems with Win 5.x, All of the vendors will have to support WinXP, in one way or another until at least 2014, when extended MS support for WinXP ends.
Ralph Bach has been in IT long enough to know better and has blogged from his Bach Seat about IT, careers, and anything else that catches his attention since 2005. You can follow him on LinkedIn, Facebook, and Twitter. Email the Bach Seat here.
