Hey /g/ I am attempting to remove all traces of certain files from my arch linux install. I had them downloaded to an encrypted truecrypt container which I have since securely deleted with secure-delete. I was wondering if there are any other places that traces of these files could be found, like in some kind of file cache somewhere. Some of the files were images and I have removed the ~/.cache/thumbnails folder, also with secure-delete. Are there any other places that I should check and/or delete? Any help is appreciated.
>>52397963
Just thermite the drive, Peter
>>52397963
>>>/fbi/
DBAN with Department of Defense 5520 or physically destroy the drive.
This is assuming destroying all traces is very important however.
Go be a pedo somewhere else
Don't want to destroy the drive for obvious reasons, namely I want a working computer to give as a gift.
I have already wiped the directories mentioned securely, but perhaps wiping the free space would be a good idea.
I have absolutely never had anything pedo related on my drive at all.
The main reason I want to do this is:
1. To better understand what traces I am leaving behind with respect to file usage
2. I would like to give this computer as a gift to someone to help them learn about linux initially without them having to do a full arch install (although that would be the obvious end goal) and I don't want them finding all my old porn and sensitive documents. Any further constructive help would be very much appreciated as before.
dd if=/dev/zero of=/dev/sdx
Not recommended if you fell for the ssd meme
>>52400017
Got it thank you, zero the free space.
I am more interested in the traces left behind, like file caches or references to the deleted material. I know linux is least botnet, but is it safe to say that it does not have a file cache or places where it references files that may have been deleted? For instance (i know that this is a specific program reference) but I used serviio to stream some porn to my tv, I just simply deleted the library for this program (and later uninstalled it completely), but I am more looking for places that the deleted files may be referenced or backed up in part or in full.
>>52400101
Zero passing a drive is very insecure.
Even if you zero pass it 30 times you can recover things.
>>52400377
I am aware random is better, but as I said before where are there traces left behind? Any ideas? As great as linux is there must be something, just curious as to what that may be.
>>52400610
Nobody has ever recovered data off a zero-passed drive.
If you want to live the meme, do a zero-pass, a urandom one and a zero pass again.
>>52400101
If you fell for the GNOME/systemD meme Zeitgeist keeps a userlevel usage log
>>52400101
Check any programs you used to open the files on those drives, and look in their "Recently opened" list, or whatever. PDF readers, Video players, image viewers. Then overwrite those caches accordingly.
>>52401095
I uninstalled Zeitgeist some time ago and removed the log. Does systemD store it's own log somewhere?
>>52401318
Good info, I have tried to do that for vlc through the program but preventing it from storing history. The normal location for these type of cache files is ~/.cache correct?
