Feeds

Clearing swap and hibernation files properly

Two neglected open books

  • alert
  • submit to reddit

SANS - Survey on application security programs

Sensitive data asleep

Now for hibernation, or suspend-to-disk, on Windows 2K and XP. Enabled by default on XP, this gimmick takes a snapshot of memory and writes it to disk so your computer can hibernate and "wake up" more quickly than it could from a dead stop. In practice, it's not that much help, and few users express much enthusiasm for it. So its benefits are questionable, while it poses a serious challenge to good data hygiene. The size of the corresponding hidden file, called hiberfil.sys, will roughly match the amount of RAM on the system.

Naturally, an incredible amount of sensitive data could be dumped to disk when hibernation is activated. So if you're at all concerned about privacy and data hygiene, this file has to go, and the area it occupies has to be wiped properly.

1. Begin by disabling hibernation. Go to Control Panel ==> Power Options, to launch the Power Options Properties dialogue box. Select the tab labelled "Hibernate", and clear the tick-box beside the option, "Enable hibernation". Click the Apply button, close the dialogue box, and reboot your machine.

2. Next, open Windows Explorer and navigate to the root directory, i.e., My Computer ==> Local Disk (C:). Look for hiberfil.sys, and delete it if it's present. Now, empty your Recycle Bin.

3. Finally, perform a secure wipe of your disk's free space and file slack space.

As far as I know, current Linux distros do not hibernate or suspend-to-disk by default, although a user can implement it using the swap partition as the hibernate file. In that case you would need a swap partition about twice the size of system RAM, and you will have to recompile your kernel, as certain features need to be built in to the kernel, rather than being loaded as modules. But clearing hibernation data properly is as easy as running the WipeSwap.sh script as described previously.

So once again, when it comes to privacy and security, Linux users have it a lot easier than Windows users. And cheaper, too. ®

High performance access to file storage

More from The Register

next story
Obama allows NSA to exploit 0-days: report
If the spooks say they need it, they get it
Putin tells Snowden: Russia conducts no US-style mass surveillance
Gov't is too broke for that, Russian prez says
Snowden-inspired crypto-email service Lavaboom launches
German service pays tribute to Lavabit
Mounties always get their man: Heartbleed 'hacker', 19, CUFFED
Canadian teen accused of raiding tax computers using OpenSSL bug
Heartbleed exploit, inoculation, both released
File under 'this is going to hurt you more than it hurts me'
Arts and crafts store Michaels says 3 million credit cards exposed in breach
Meanwhile, Target investigators prepare for long process in nabbing hackers
Canadian taxman says hundreds pierced by Heartbleed SSL skewer
900 social insurance numbers nicked, says revenue watchman
prev story

Whitepapers

SANS - Survey on application security programs
In this whitepaper learn about the state of application security programs and practices of 488 surveyed respondents, and discover how mature and effective these programs are.
Combat fraud and increase customer satisfaction
Based on their experience using HP ArcSight Enterprise Security Manager for IT security operations, Finansbank moved to HP ArcSight ESM for fraud management.
The benefits of software based PBX
Why you should break free from your proprietary PBX and how to leverage your existing server hardware.
Top three mobile application threats
Learn about three of the top mobile application security threats facing businesses today and recommendations on how to mitigate the risk.
3 Big data security analytics techniques
Applying these Big Data security analytics techniques can help you make your business safer by detecting attacks early, before significant damage is done.