N is the probability that doing this will result in the bankruptcy of your company, leaving you and all your co-workers unemployed and starving.
R is the number of hard drives discarded every year without first being erased
d is the fraction of those hard drives that are fished out of dumpsters
p is the fraction of recovered drives that are ever plugged in and fired up
e is the number of such drives that are subsequently listed on eBay because their contents look interesting
c is the number of competitors you have who browse eBay looking for trade secrets
x is the probability that your discarded drive contains something they can use
y is the probability that they do actually use that information
z is the probability that their use of such information ruins your company.
To estimate the risk that someone will work out it was you and sue/prosecute you for the damage you caused, calculate
(N / t) * m
where t is the number of people on your team, and m is the number of managers who are paying enough attention to work out who did what.
If you can prove that any of the coefficients involved is zero, then your strategy is risk-free. Otherwise there's a very small chance you'll bankrupt your company, starve your colleagues and end up in jail.
I also would not worry that much about leaking source code - the source alone is of limited value without the technical and domain knowledge required to use it. If you just want to copy stuff, you'll pirate the binary. Still, it's probably better to keep it private if you don't want to release it.
I'd be more concerned about private data on the drives. Private or confidential business email, test data with confidential information (think employee database or similar). That might cause you/your company lawsuits from affected parties.
So definitely wipe the disks. Even just checking that there's nothing sensitive on the disks is more work than just wiping them.
Without wiping it, it's very risky. If you see the disk on ebay, you'll find that most buyers will run a recovery software on it.
In order to sell it safely, it's enough to overwrite the whole disk once. The myth that it's possible to recover data after it has been overwritten is really a myth. Not even the NSA could do it.
If you don't have a special disk wiper, either use a script language to write a single big file onto the disk until it's full or format the disk and uncheck the "quick format" option. On Linux/Unix, use dd if=/dev/zero of=/dev/xxx and be really really sure that the device given is the correct one.
It all boils down to the unintended release of somebody's intellectual property with an associated value.
Who owns the Intellectual Property?
If it belongs to your company then the Board should be very annoyed to see an asset being released - it complicates corporate actions (Q. Is there any chance that other parties have access to this technology?)
SO WIPE THE DISK
If it belongs to a third party (perhaps work done by your company for them) then they'll be pissed (Q. Can we have our money back please?)
SO WIPE THE DISK
Aren't there any corporate IT standards in your organisation? Are you likely to get asked difficult questions?
I'd say it depends on the source code. I'm sure Google wouldn't risk throwing a hard-drive away that contains their complete search algorithm. That would sell on Ebay. On the other hand, if yours is 'just another application' for some insurance company which won't interest any living soul except for you and the company itself, then why bother?
Then again, if you're really concerned, just grab a big hammer and smash your harddrive to smithereens.
While the source code may be of limited value to a 3rd party there is always a bit more in the source code than just pure statements, there may be comments describing algorithms or trade secrets, names/email addresses of programmers/customers or code describing some encryption scheme/copy protection. If somebody is knowledgeable and has patience he can learn a lot from the code.
It is a question of how to treat information.Any proprietary information, source code, documents, or any other type of information that can fall into the hands of a competitor, or anyone else that may misuse or take advantage, is simply to be avoided. Unless it needs huge investments, big chunks of your time, and is generally causes hassles for you, there is no reason not to cleanup before you throw it out of your sight.
I am nervous that IP and information security (even if someone didnt strictly classify it as such) is stilla matter of debate in most of our work zones.
Any malicious, competent person with your source code has a much better chance of finding security holes and exploits in your system, even ones that you might not be aware of.
It may not compile, but it's a tour-guide into your world. Wipe it.
发布评论
评论（9）
德雷克方程指出
其中
要估计有人发现是您所为并因您造成的损害而起诉/起诉您的风险，请计算
其中 t 是团队中的人数，m 是充分关注谁做了什么的经理人数。
如果你能证明所涉及的任何系数为零，那么你的策略就是无风险的。否则，你的公司破产、同事挨饿甚至入狱的可能性很小。
The Drake Equation states that
where
To estimate the risk that someone will work out it was you and sue/prosecute you for the damage you caused, calculate
where t is the number of people on your team, and m is the number of managers who are paying enough attention to work out who did what.
If you can prove that any of the coefficients involved is zero, then your strategy is risk-free. Otherwise there's a very small chance you'll bankrupt your company, starve your colleagues and end up in jail.
我也不会太担心源代码的泄露——如果没有使用它所需的技术和领域知识，源代码本身的价值是有限的。如果你只是想复制东西，你就会盗版二进制文件。不过，如果您不想发布它，最好将其保密。
我更关心驱动器上的私人数据。私人或机密商业电子邮件，使用机密信息测试数据（例如员工数据库或类似数据库）。这可能会导致您/您的公司受到受影响方的诉讼。
所以一定要擦拭磁盘。即使只是检查磁盘上是否没有任何敏感内容，也比仅仅擦除磁盘需要更多的工作。
I also would not worry that much about leaking source code - the source alone is of limited value without the technical and domain knowledge required to use it. If you just want to copy stuff, you'll pirate the binary. Still, it's probably better to keep it private if you don't want to release it.
I'd be more concerned about private data on the drives. Private or confidential business email, test data with confidential information (think employee database or similar). That might cause you/your company lawsuits from affected parties.
So definitely wipe the disks. Even just checking that there's nothing sensitive on the disks is more work than just wiping them.
如果不擦拭的话，风险很大。如果您在 eBay 上看到该磁盘，您会发现大多数买家都会在其上运行恢复软件。
为了安全地出售它，覆盖整个磁盘一次就足够了。数据被覆盖后可以恢复的神话实际上是一个神话。连美国国家安全局都做不到。
如果您没有特殊的磁盘擦除器，请使用脚本语言将单个大文件写入磁盘直至其已满，或者格式化磁盘并取消选中“快速格式化”选项。在 Linux/Unix 上，使用 dd if=/dev/zero of=/dev/xxx 并非常确定给定的设备是正确的。
Without wiping it, it's very risky. If you see the disk on ebay, you'll find that most buyers will run a recovery software on it.
In order to sell it safely, it's enough to overwrite the whole disk once. The myth that it's possible to recover data after it has been overwritten is really a myth. Not even the NSA could do it.
If you don't have a special disk wiper, either use a script language to write a single big file onto the disk until it's full or format the disk and uncheck the "quick format" option. On Linux/Unix, use
dd if=/dev/zero of=/dev/xxxand be really really sure that the device given is the correct one.这一切都归结为某人的知识产权及其相关价值的无意泄露。
谁拥有知识产权？
如果它属于您的公司，那么董事会应该会非常恼火地看到资产被释放 - 它使公司行为变得复杂（问：其他方是否有可能可以使用这项技术吗？）
所以擦拭磁盘
如果它属于第三方（也许是您的公司为他们完成的工作）那么他们会很生气（问：我们可以拿回我们的钱吗？）
所以擦拭磁盘
您的组织中没有任何企业 IT 标准吗？您可能会被问到困难的问题吗？
所以擦拭磁盘
It all boils down to the unintended release of somebody's intellectual property with an associated value.
Who owns the Intellectual Property?
If it belongs to your company then the Board should be very annoyed to see an asset being released - it complicates corporate actions (Q. Is there any chance that other parties have access to this technology?)
SO WIPE THE DISK
If it belongs to a third party (perhaps work done by your company for them) then they'll be pissed (Q. Can we have our money back please?)
SO WIPE THE DISK
Aren't there any corporate IT standards in your organisation? Are you likely to get asked difficult questions?
SO WIPE THE DISK
我不会冒这么大的风险。我会在我想要赠送/出售的每个硬盘上执行此操作：
从 Live CD/USB 启动 Linux 系统并运行：
I wouldn't take such a big risk. I'd do it on every hard disk I want to give/sell:
Boot up a Linux system from a Live CD/USB and run:
我想说这取决于源代码。我确信谷歌不会冒险扔掉包含完整搜索算法的硬盘。那会在 Ebay 上出售。另一方面，如果您的申请只是某家保险公司的“另一项申请”，除了您和公司本身之外，对任何活着的人都不会感兴趣，那么为什么还要麻烦呢？
话又说回来，如果你真的很担心，就拿起一把大锤子，把你的硬盘砸成碎片。
I'd say it depends on the source code. I'm sure Google wouldn't risk throwing a hard-drive away that contains their complete search algorithm. That would sell on Ebay. On the other hand, if yours is 'just another application' for some insurance company which won't interest any living soul except for you and the company itself, then why bother?
Then again, if you're really concerned, just grab a big hammer and smash your harddrive to smithereens.
虽然源代码对第三方的价值可能有限，但源代码中总是比纯粹的语句多一点，可能有描述算法或商业秘密的注释、程序员/客户的姓名/电子邮件地址或描述某些内容的代码。加密方案/复制保护。如果某人知识渊博并且有耐心，他可以从代码中学到很多东西。
底线是：安全总比后悔好。
While the source code may be of limited value to a 3rd party there is always a bit more in the source code than just pure statements, there may be comments describing algorithms or trade secrets, names/email addresses of programmers/customers or code describing some encryption scheme/copy protection. If somebody is knowledgeable and has patience he can learn a lot from the code.
The bottom line: better be safe than sorry.
这是一个如何对待信息的问题。任何专有信息、源代码、文档或任何其他类型的信息可能落入竞争对手或任何其他可能滥用或利用的人手中，都应该避免。
除非它需要巨大的投资、大量的时间，并且通常会给你带来麻烦，否则没有理由不在你把它扔出你的视线之前进行清理。
我感到紧张的是，知识产权和信息安全（即使有人没有严格将其分类）在我们大多数工作区域仍然是一个有争议的问题。
It is a question of how to treat information.Any proprietary information, source code, documents, or any other type of information that can fall into the hands of a competitor, or anyone else that may misuse or take advantage, is simply to be avoided.
Unless it needs huge investments, big chunks of your time, and is generally causes hassles for you, there is no reason not to cleanup before you throw it out of your sight.
I am nervous that IP and information security (even if someone didnt strictly classify it as such) is stilla matter of debate in most of our work zones.
任何掌握您的源代码的恶意、有能力的人都有更好的机会在您的系统中发现安全漏洞和漏洞，甚至是您可能不知道的漏洞和漏洞。
它可能无法编译，但它是您世界的导游。擦吧。
Any malicious, competent person with your source code has a much better chance of finding security holes and exploits in your system, even ones that you might not be aware of.
It may not compile, but it's a tour-guide into your world. Wipe it.