Hello,
  Anyone have an idea how to secure erase the catalog and databases from
  inside EDB ? (eg, an sql script ?)

Thank you

--
Charalampos Michael - [Creation Power] - http://www.creationpower.gr

Charalampos


You can use SQL to drop the databases and tables (check the explorer for the code) but I suspect that's not what you're asking for. What do you mean by "secure erase"?

Roy Lambert [Team Elevate]

Michael,

<< Anyone have an idea how to secure erase the catalog and databases from
inside EDB ? (eg, an sql script ?) >>

When you say "secure erase", do you mean like the NSA's secure deletion of
files (wiping) ?

--
Tim Young
Elevate Software
www.elevatesoft.com

Dear Tim,

> << Anyone have an idea how to secure erase the catalog and databases from
> inside EDB ? (eg, an sql script ?) >>
>
> When you say "secure erase", do you mean like the NSA's secure deletion of
> files (wiping) ?

Well something like that. IOW, not bee able to get the data back by
using recovering tools.

--
Charalampos Michael - [Creation Power] - http://www.creationpower.gr

Charalampos


That's what I suspected you might mean. The only two things I can think of are:

1. Write an external function to call third party software to wipe the physical files on the disc (making sure they're closed first) then DROP the database.

2. In a script do the following
    DELETE FROM table
     INSERT INTO table a load of junk thus (if I understand what ElevateDB does) overwriting the existing values
    OPTIMIZE table
    loop a couple of times just to be sure
    DROP

At worst you'd have an unzapped catalog

Roy Lambert

Dear Roy,

> That's what I suspected you might mean. The only two things I can think of are:
>
> 1. Write an external function to call third party software to wipe the physical files on the disc (making sure they're closed first) then DROP the database.
>
> 2. In a script do the following
>      DELETE FROM table
>       INSERT INTO table a load of junk thus (if I understand what ElevateDB does) overwriting the existing values
>      OPTIMIZE table
>      loop a couple of times just to be sure
>      DROP
>
> At worst you'd have an unzapped catalog

Thank you Roy. It's isn't a fully secure way but it's something.
I ask Tim is it's possible to add something full secure in his
"wish list".

--
Charalampos Michael - [Creation Power] - http://www.creationpower.gr

Charalampos


Another thought just occurred to me. I'm encrypting all of my sensitive tables so if you do that then apply my no. 2 method I think it will be about as secure as it gets short of hitting the hard drive with a big hammer.

I've done that on a few old PCs recently and its sooooooo satisfying

Roy Lambert

Dear Roy,

> Another thought just occurred to me. I'm encrypting all of my sensitive
> tables so if you do that then apply my no. 2 method I think it will be
> about as secure as it gets short of hitting the hard drive with a big
hammer.
>
> I've done that on a few old PCs recently and its sooooooo satisfying

I guess thought an improvement of your suggestion ?
(The example is for for C/S)

Steps:
1) Stop the EDB Server
2) Delete all the databases files except the catalog
   (use have to use a separate service application)
3) Start EDB Server and open the tables (it will recreate empty ones)
5) Add a couple records with some junk (random)

So this should be the quickest way that i can think which it should
take a couple of seconds ...

Optional for 100% secure results but time consuming:
Defrag your hard drive

So using and encrypted catalog of course ...

What do you think ?

Thank you

--
Charalampos Michael - [Creation Power] - http://www.creationpower.gr

Charalampos


I thought of that, but 1) it can't be done in sql and 2) you want secure delete which means overwriting the existing data. Just deleting the files that make up a table will not achieve that unless you use one of the "shredder" applications. Its possible, but very unlikely, that the OS will give ElevateDB the same clusters for the new table files that were in the old ones.

A lot depends on your definition of secure and just what you want to accomplish.

Roy Lambert

Dear Roy,

> I thought of that, but 1) it can't be done in sql and
> 2) you want secure delete which means overwriting the existing data.
> Just deleting the files that make up a table will not achieve that
> unless you use one of the "shredder" applications. Its possible, but
very unlikely,
> that the OS will give ElevateDB the same clusters for the new table
> files that were in the old ones.
>
> A lot depends on your definition of secure and just what you want to accomplish.

You're correct ...

Thanks Roy!

--
Charalampos Michael - [Creation Power] - http://www.creationpower.gr