DigitalHax – Allows you to recover data from "Destroyed" Digital Ocean VM

Re:DigitalHax – Allows you to recover data from "Destroyed" ... by sukaka on Monday December 30, 2013 @08:29PM (#6988352)

how long does dd take? Could use an estimate. Ran dd for around 10 minutes this morning and got 500,000 lines, and it was still running.

update: finished in around 12 minutes. out.txt is around 10gb.

update: out.txt is around 54 million lines from wc -l out.txt. I'm using less with command [line number]G to poke around. I have an NYC1 droplet, and there's a lot of junk not mine.. text in other languages and python which i don't use

[ Parent | on HN ]

Re:DigitalHax – Allows you to recover data from "Destroyed" ... by gregimba on Monday December 30, 2013 @08:56PM (#6988452)

I am planning on adding some estimate. It really depends on the size of the image but it roughly takes 10 minutes. I believe to add an estimate you need two scripts running because of how dd works.

[ Parent | on HN ]

Re:DigitalHax – Allows you to recover data from "Destroyed" ... by sillysaurus2 on Monday December 30, 2013 @08:51PM (#6988434)

Thanks for the followup about how long dd takes. I was wondering as well.

May I ask, which droplet type were you running dd on? Micro?

[ Parent | on HN ]

Re:DigitalHax – Allows you to recover data from "Destroyed" ... by sukaka on Monday December 30, 2013 @09:00PM (#6988469)

no problem. The command "dd if=/dev/vda bs=1M | strings -n 100 > out.txt" in find.sh, which is the same as the one first mentioned today morning https://github.com/fog/fog/issues/2525. $20/month droplet

[ Parent | on HN ]

Re:DigitalHax – Allows you to recover data from "Destroyed" ... by sillysaurus2 on Monday December 30, 2013 @09:04PM (#6988480)

Thanks! I wonder how long it would take for someone to scrub their VM manually using dd before terminating it? Maybe the same length of time? 12 minutes seems a pretty reasonable amount of time, but since it's an SSD the writes could take >3x longer than the reads.

[ Parent | on HN ]

Re:DigitalHax – Allows you to recover data from "Destroyed" ... by gregimba on Monday December 30, 2013 @09:18PM (#6988531)

The other thing you could do instead of trusting Digital Ocean you could use shred on your sensitive files before you destroy the droplet.

[ Parent | on HN ]

Re:DigitalHax – Allows you to recover data from "Destroyed" ... by sillysaurus2 on Monday December 30, 2013 @09:22PM (#6988550)

That's true, but if you've already rm'd a bunch of sensitive files, their data unfortunately can't be shredded. So you'll have to make sure you've always used shred for everything since the beginning, which is good practice but probably rare.

[ Parent | on HN ]