Totally scrub windows 10

Discussion in 'privacy technology' started by hidden, Nov 30, 2016.

  1. hidden

    hidden Registered Member

    Joined:
    Jun 1, 2010
    Posts:
    117
    Got a ssd laptop with win 10 installed. Would like to migrate to another os befire using.

    "Paranoid", as they call it, because of all the opaque communications back to MS, and hidden/unknown files, so don't know if an uninstall would actually wipe out the whole thing, even passive traces. So how to do a complete wipe......

    Also, is there a database that tells which Intel chips are the old, more private type, and which are the new, improved and less private models.
     
  2. guest

    guest Guest

    Just use Dban , wipe the drive , reinstall whatever OS you like.
     
  3. kaljukass

    kaljukass Registered Member

    Joined:
    Apr 27, 2011
    Posts:
    244
    Do you really want to recommend violate SSD permanently? Or you do not know what is SSD and how to use it?
     
  4. roger_m

    roger_m Registered Member

    Joined:
    Jan 25, 2009
    Posts:
    8,627
    While you could do that, it's pointless. All you need to do delete the OS partiton when installing another OS.

    It won't destroy the SSD, just completely erase everything.
     
  5. The only wiping software I would even consider using is ADISA certified.

    DBAN is very old software and is out of date it does not delete Host Protected Area (HPA) and Device Configuration Overlay (DCO).
     
  6. TomeiNingen

    TomeiNingen Registered Member

    Joined:
    Nov 8, 2016
    Posts:
    50
    Location:
    Fort Meade, Maryland
    @hidden - Securely erasing the drive is really only necessary if obscuring the data that was once on the drive is important to you. To that end, thanks to wear leveling, SSDs are notoriously difficult (if not impossible) to securely erase.

    To knock Win10 off the drive completely just create a bootable Linux USB and use GParted to format and partition the drive, then install whichever OS you're opting for. I'd recommend using something derived from Debian or Arch with grsecurity and LUKS enabled. I prefer grsecurity over SELinux because of the role the NSA played in SELinux's development, if we're being paranoid. If your hardware supports virtualization then shoot for a Qubes installation, or better yet Qubes-Whonix (VM).

    What are your system specs? If you get a Debian-based install going you can run the lspci and dmidecode commands which should give you a quick grasp of your hardware and a quick search on Intel's site should take it from there.
     
    Last edited: Nov 30, 2016
  7. @roger_m the point @kaljukass is making relates to

     
    Last edited by a moderator: Nov 30, 2016
  8. guest

    guest Guest

    you ask for an overkill method, i gave you one...Anyway you don't need a military-grade wiping if just for installing another OS.

    i don't think his "paranoia" goes so far...he just wants delete classic datas. However, if he really believes MS may hide some "secret-spy" telemetry measures in those areas , well he has to follow your advice. :D
     
  9. TomeiNingen

    TomeiNingen Registered Member

    Joined:
    Nov 8, 2016
    Posts:
    50
    Location:
    Fort Meade, Maryland
    Is it really all that far-fetched with all that we've seen and now know, though? :confused:
     
    Last edited: Dec 1, 2016
  10. JConLine

    JConLine Registered Member

    Joined:
    Apr 16, 2009
    Posts:
    108
    If you're really worried then get or make a LiveCD of GParted and delete every partition on your SSD drive. Using Gparted create new partitions and format them to the appropriate file system. You can install a good Linux like Mint or Fedora or if you prefer install Windows 7, or you can even do a dual-boot setup, Windows and Linux. Anyway, it's not difficult to get rid of Windows 10.
     
  11. roger_m

    roger_m Registered Member

    Joined:
    Jan 25, 2009
    Posts:
    8,627
    Thanks, I wasn't aware of that.
     
  12. Well the Dutch have a saying in French "c'est le ton qui fait la musique" ;)
     
  13. Setcho

    Setcho Registered Member

    Joined:
    Sep 1, 2010
    Posts:
    51
    Location:
    UK
    I have an SSD made by Sandisk and they provide a secure erase utility that creates a bootable USB, see here http://kb.sandisk.com/app/answers/detail/a_id/16678/~/secure-erase-and-sanitize perhaps your SSD manufacturer provides a similar function. Also there is an internal secure erase program on the Parted Magic distro, older free editions can be found on the Ultimate boot cd. see here http://www.overclock.net/t/1227597/how-to-secure-erase-your-solid-state-drive-ssd-with-parted-magic

    I cannot vouch for the effectiveness of these methods as I've never tried to recover anything after using them I can only say that they appear to work.
     
  14. No. It is not paranoid/paranoia to wipe the hard drive you use for your main OS.

    Gparted does not wipe all sectors of the disk. You are just deleting partitions not the data that resides on the disk.
     
  15. roger_m

    roger_m Registered Member

    Joined:
    Jan 25, 2009
    Posts:
    8,627
    There's no need to do this. Even a quick format will be fine. Yes, there will still be old data on the hard drive. But it will only be accessible wth data recovery software.
     
  16. Maybe I just like that "clean" feeling knowing all sectors have been erased beyond recovery.

    But I still prefer wiping the disk to a clean state no matter what.
     
  17. hidden

    hidden Registered Member

    Joined:
    Jun 1, 2010
    Posts:
    117
    Thanks for the responses. The details are somewhat over my head but that just means I have to buckle down.

    The spirited discussion tells me that I may be overly distrustful of MS and their low-down ways, but I'm not alone in this, especially given what I've read here about w10.

    I've made a back-up copy of my os, but it can only be installed on my machine. How much info to make this happen is in bios or elsewhere, I wonder.

    I just want to start with a clean machine for all the usual reasons, but so complicated and so uncertain. Sucks.
     
  18. roger_m

    roger_m Registered Member

    Joined:
    Jan 25, 2009
    Posts:
    8,627
    There's nothing complicated, it is very easy and straightforward:
    How to Reset Your Windows 10 PC.
     
  19. hidden do what YOU feel comfortable with. No one can tell you what to do.

    If you want to scrub/wipe the disk before use just do it.
     
  20. guest

    guest Guest

    If it was a Win10 OS shipped with the machine , there is nothing you can do.

    complicated? not so much, time consuming ? yes

    are you in these cases:

    1- Do you own military-grade/sensitive corporate/prototype blueprints/illegal stuff on your machine?
    2- Are you a political dissident/terrorist/pedophile/wanted person?
    3- Do you worry very much that your web behavior could be traced for some commercial purposes?

    If you are in one of those cases, quit Windows and go Linux , you will be a bit more "private" there. If not enjoy Win10.
     
  21. hidden

    hidden Registered Member

    Joined:
    Jun 1, 2010
    Posts:
    117
    Sorry I haven't followed closely. Christmas chaos.

    I certainly do plan to totally leave MS. My question is how to TOTALLY leave. If there is no unique info in bios, then MY w10 could be copied into any other computer. I do appreciate the "How to wipe SSD" info.

    At this point I suppose LEAs can legally install callhome on everybody, now that we're all suspects. KInda discouraging.

    Maybe disposable tablets are the way to go.
     
  22. guest

    guest Guest

    Wipe the drive, install other OS. that is it.

    you bought Windows or it was shipped with the computer?

    1- bought win10 DVD's : you can install it on new computer
    2- shipped Win10 or free upgrade from WinX to Win10: you can't move it ;

    http://www.howtogeek.com/261053/when-can-you-move-a-windows-license-to-a-new-pc/
     
  23. hidden

    hidden Registered Member

    Joined:
    Jun 1, 2010
    Posts:
    117
    Not trying to move W10. It seems that I can reinstall a backup copy I made only on this one computer after I wipe the drive. This implies that there is a unique program/bios ID link that remains after I copy a backup and wipe. To my thinking, SSD wipe is not a total exit from MS.

    Also, Schneier, https://www.schneier.com/ , on Friday 12/23, has some links downcolumn in Squid about identifying Intel backdoored chips, etc.
     
  24. Minimalist

    Minimalist Registered Member

    Joined:
    Jan 6, 2014
    Posts:
    14,881
    Location:
    Slovenia, EU
    AFAIK this data is stored on MS' servers and not on your hardware. This way you can reactivate when reinstalling Win 10 without entering activation key.

    EDIT: some info here: http://www.zdnet.com/article/microsoft-quietly-rewrites-its-activation-rules-for-windows-10/
     
  25. guest

    guest Guest

    Of course, MS won't allow the same copy of windows installed on several computers, especially if the license is OEM. MS is a business , not charity ^^

    The license is hardware-based stored on MS servers. which is good because , i don't have to worry about my license key be lost or stolen.

    i don't know what kind of activity you do, but you are way too much paranoid. PoC is not means you are under active scrutiny.
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.