How-to: Thermite hard drive destruction

posted Sep 16th 2008 6:50pm by
filed under: classic hacks, how-to, security hacks

After the overwhelming response to the Hackit we posted about automated hard drive destruction last fall, we finally decided to test out some thermite hard drive destruction ourselves. This has been done on The Screen Savers but they did not show up close results of the platters. So, aluminum and black iron oxide were procured through eBay, and until it arrived we watched some YouTube videos that showed a lot of fire and no real results. We decided to see what it would take to completely obliterate a drive.

With the amount of personal data stored on your computer, we all understand the importance of destroying the data that is stored on the platters of a hard drive before disposing of it. There are many ways to destroy a hard drive; software, physical disassembly, drills, hammers, magnets/electromagnets, and acid, but none are quite as outrageous and dangerous as thermite. That’s what we’re going to do here today. Follow along for pictures and videos of the results.

A couple different methods of containing the thermite above the hard drive were tried and we quickly found the best way is a clay flower pot with the drip tray for a lid. An Altoids tin was also tried, but it burned up to quickly. Molding a cement container was also attempted. Since thermite is extremely hard to ignite, sparklers that were left over from the 4th of July were used, and offered a very reliable method of ignition.

Our goal was to completely destroy the drive while it was still in the computer case. The theoretical application is to destroy the disk at a moments notice so it won’t fall into the wrong hands. After testing multiple methods, placing about 1 pound of thermite in a clay flower pot and lighting from the drain hole in the bottom yielded the best results. This could easily be placed in the 5.25″ bays above the drive.

A thermite reaction is a process in which the correct mixture of metallic fuels are combined with a metal oxidizer and ignited. Ignition itself requires extremely high temperatures, but once ignited, thermite supplies its own source of oxygen. It can potentially burn underwater when mixed properly. Thermite is usually used to weld railroad ties together.

The most common thermite is “black or blue iron oxide (Fe3O4), produced by oxidizing iron in an oxygen-rich environment under high heat” and Aluminum(Al). Red iron(III) oxide (Fe2O3), commonly known as rust, can also be used. There are many chemicals that can make thermite; the mixtures used to make thermite therefore vary, causing confusing and changing mixture ratios.

Since the oxidation of one substance involves the reduction of another, this type of reaction is often called redox reaction. In the following balanced reaction, 8Al + 3fe3O4 = 4Al2O3 + 9Fe + Heat. The element Al is oxidized, but Fe is reduced. This reaction is also called a displacement reaction because Al displaces Fe in the oxide. Because of the nature of this reaction, the correct ratio of substances is important to ensure the optimum amounts of fuel (aluminum) and oxygen (iron oxide) within the mixture. Thermite is very safe to handle because of the high ignition temperatures required, sparklers were used in this instance, however magnesium ribbon can also be used. We think an electric pyrogen igniter would be a far better choice for ignition, instead of unreliable methods.

There are two important aspects to ensure a successful reaction. Thorough/even mixing and smallest possible powder particle size. If thermite is not adequately mixed, it may be difficult to ignite or maintain the reaction. One problem when mixing thermite is the difference in weight between the aluminum and the iron oxide. This causes them to separate out rendering the thermite useless. The process used here with great success was five minutes in a rock tumbler. Powder particle size is measured with a measurement called mesh. Passing the powder through a mesh will determine the largest particle size, this reaction performs best with the smallest obtainable mesh size. The mesh size for aluminum was 1200 mesh and black iron oxide was 300 mesh.

The total enthalpy or heat content released is -3.677 kJoule per gram of Fe3O4/AL thermite. The ratio of Fe3O4 to aluminum powder by weight is about 3.22 to 1, according to the reaction’s stoichiometry. The reaction photographed was 200 grams of Aluminum and 644 grams of black iron oxide yielding 2368 kJoules of heat. This was more than was required to adequately destroy the hard drive, a smaller amount could have been used, and still destroyed the platters. It would have even been better controlled, or better yet contained within the computer case. What fun is that?

Using thermite to destroy a hard drive is a very violent and destructive process. Great care should be taken as the molten metal can splash and sputter for a long distance.

The reaction begins to sputter.

The thermite has just contacted the hard drive.

Things are really hot now!

Most of the reaction is completed.

The molten thermite, platters and most of the aluminum frame from the hard drive in the bottom of the case.

Above are the molten hard drive platters destroyed with 844 grams of thermite. It takes about this much thermite contained directly above the drive to get the job done, if it is not you will just get a superficial fire.

Over all the destruction of the drive and platters was accomplished in all cases in a matter of seconds. This is by far a guaranteed method of destroying data in a time of need. We’re pretty sure this will prevent most forensic data recovery methods.

Below is a video of Brainiac using thermite to burn cars and trying to stop the reaction with liquid nitrogen.

Here’s the directors cut of the thermite video which contains 4 extra minutes:

Finally, please do not try this.



93 Responses to How-to: Thermite hard drive destruction

  • ghos7man says:

    Awesome
    great video and indepth research
    One of your best articles yet

  • cde says:

    Doing this when there is a warrant for the drive will result in a judge being forced to assume the drive had the evidence about the crime you will be charged with. As such, it is worse then having possible circumstantial evidence.

  • Wait… I’m not satisfied the convection eddies of the molten platters is sufficiently random to be secure.

    I demand another writeup involving ammonium nitrate.

  • MRE says:

    @cde: yeah, not to mention the subsequent arson charges, destruction of property (if you live in an apartment), insurance hassles, etc that arise from burning down the house!

    Has anyone done an in depth recoverability analysis on a hard drive put in the microwave? Its far less like lighting the monk on fire in protest.

  • MRE says:

    and by the way.. this just feels really “anarchists cookbook” to me.
    I dunno… maby it feels a little much, because I dont walk around with aluminum foil on my head.

  • Fred says:

    In the main article text, it states “Thermite is usually
    used to weld railroad ties together.” The parts being welded
    in the video are rails; ties are the wooden, steel or
    concrete supports that rest on a bed of stone and support
    the rails.

  • Paul Klemstine says:

    Mix the Thermite with an oxidizer such as Potassium
    Chlorate, and the entire reaction will happen
    instantaneously. I just about blew my hand off lighting
    this with a match. Order everything you need here:
    http://unitednuclear.com

  • Randy says:

    “Finally, please do not try this.”

    Too late already did it!
    I love this stuff!

  • Rehab2021 says:

    Just surround your system with firebrick or a concrete enclosure
    and you’re all set. Great article.

  • stunmonkey says:

    If you put the sensitive drives in a heavy safe, along
    with any other documents you may require destroyed, you
    have no worries of danger or mess.
    Steel safes do contain it. I know, as there is already
    one company who makes such safes already. Embassies really
    tend to like ‘em.

  • threepointone says:

    what company makes these safes, and exactly how are they constructed? Unless i’m mistaken, thermite melts iron, so maybe they have some high temperature layer in it somewhere?

    I think there might be a way to stop the thermite–liquid nitrogen is actually a horrible candidate; although it [i]is[/i] really cold, it has very little heat capacity (which is probably more important in this case–you have to “sap” the energy from the reaction to prevent it from being able to sustain itself). A huge block of ice might actually do the trick (too lazy to do the calculations at the moment)

  • bad1deas says:

    Thermite is illegal to make. Doing so in a post 9/11 world
    is a very bad idea.

    The fbi have electron scanning microscopes and could gain
    back data from almost any level of destruction; termite is
    the one exception if the disc were to be completely
    incinerated then no level of data could be recovered.

    If the fbi are after you and you have prior knowledge
    better to format the laptop take your laptop to a
    public place make sure you are not followed. Place laptop
    down for ten minutes. Wait till it is stolen.

    OR format the drive … just toss it out … preferably
    somewhere where it wont be found. smash it up flush it
    piece by piece down a walmart toilet.
    anyone asks it died and you threw it away.
    nothing illegal about that…

  • rageahol says:

    have you tried igliting it with a model rocket starter? that would give you a nice option for computer control of the wanton destruction.

  • WestfW says:

    I have to disagree with the “finest powders possible” recomendation. I howned some commercial thermite once; it has quite coarse particles.
    Yes, this makes it significantly harder to ignite, but it also rsults in a somewhat slower and more controlled burn, yielding a nice directable stream of molten iron instead of a lot of splatter.

  • bad1deas, i know for a fact the cia, nsa, and nambla all watch this site.

    in fact, i think they’re probably on to you.

    you should probably avoid visiting here.

  • lodestar says:

    Meh, you only need to write zeroes to the drive once and then noone can recover the data.
    See: http://16systems.com/zero/index.html

  • ! Do you have any idea how many greenhouse and toxic gases
    are produced by that? :((

    did you hear that they managed to recover data from a hard
    disk the re-entered the atmosphere with Columbia?

  • Wolf says:

    @rageahol

    Neither model rocket ignighters or fireworks fuses get hot enough to ignight thermite, so far the most reliable way I foud to light it electrically is to take apart a some type of firework that burns brightly and place a small amount of the pyrotechnic mixture in contact with a model rocket ignighter.

    I was planning on making a video about HDD self destruction via thermite after we got talking about it, but It turned out that it actually takes quite a bit of thermite to pierce the shell of an HDD (ie, more than could be kept from piercing the computer case as well), so I deamed the experiment a failure and never put together a vid.

    If I get around to it, I’ll post some vids of my experiments with thermite on utube tomorrow.

  • Wolf says:

    Sorry about the typos, its hard to ensure your accuracy when you can only see the first 60 charcters or so in each paragraph…

  • fuzz says:

    @threepointone
    braniac did try playing with thermite vs a variety of materials, including ice (I’m sure it’s on youtube somewhere). The only thing that stood up to a flowerpot full was about an inch of tank armour. I suspect the greater mass of a tank of water would make a better heat sink than the equivilent volume of ice (only a few degrees colder), but like you I can’t be bothered to do the maths :)

  • Aquify says:

    ANyone look at the url at the end of one of the videos? It advertises a porn site. Great work there hackaday.

  • tehmeh says:

    why not use use the unix dd command to overwrite
    all the data with zeros? I thought they still haven’t found
    a way to recover data from that, simple as it may be.

  • @Insipid Melon says:

    cia, nsa, and nambla? wtf’s wrong with you? and bdw bad1deas just expresses
    personal opinion so i dunno what might the problem be lawl
    comeone… after him? who’re you to judge? and how come you know for sure, eh?

  • jeff says:

    quick and dirty source for thermite…

    look up cadwelding or exothermic welding

    any electrical supply house should have
    cadweld shots. These come prepackaged with
    igniting powder at the base of the cylinder.
    They come in a variety of sizes from 45 to
    250 and larger.Be damned careful with them
    though and DO NOT BREATHE IN THE FUMES!!!!

    -j

  • peruser says:

    who knew stochiometry could be so fun?

  • catch says:

    Maybe Hack a Day should contact a ‘data retrieval’ shop to see if they can actually do what they say they can. If they are such ‘master recovery experts’ It shouldn’t be too hard for them…hahahahahaha

  • Moejj says:

    hehheheheehhehhhhehhheheeehehhhehhehhhhe fire! fire!! hhheeheheheeehhhehhehehhee
    fire!! hheeheeeheeehheeef fire!! heeehheehheehee fire!!hehheheheehhehhhhehhheheeehehhhehhehhhhe fire! fire!! hhheeheheheeehhhehhehehhee hehheheheehhehhhhehhheheeehehhhehhehhhhe fire! fire!! hhheeheheheeehhhehhehehhee
    fire!! hheeheeeheeehheeef fire!! heeehheehheehee fire!!hehheheheehhehhhhehhheheeehehhhehhehhhhe fire! fire!! hhheeheheheeehhhehhehehhee
    fire!! hheeheeeheeehheeef fire!! heeehheehheehee fire!!
    fire!! hheeheeeheeehheeef fire!! heeehheehheehee fire!!hehheheheehhehhhhehhheheeehehhhehhehhhhe fire! fire!! hhheeheheheeehhhehhehehhee
    fire!! hheeheeeheeehheeef fire!! heeehheehheehee fire!!hehheheheehhehhhhehhheheeehehhhehhehhhhe fire! fire!! hhheeheheheeehhhehhehehhee
    fire!! hheeheeeheeehheeef fire!! heeehheehheehee fire!!hehheheheehhehhhhehhheheeehehhhehhehhhhe fire! fire!! hhheeheheheeehhhehhehehhee
    fire!! hheeheeeheeehheeef fire!! heeehheehheehee fire!!

  • Joe says:

    the broken? The broken.

    Formatting won’t clear it, there is still the data, its just tagged so that it doesn’t show up. Rewriting it allows residual magnetic data to remain so that a electron microscope can read the data. To clear it beyond recovery you need to rewrite with 0′s, 1′s 0′s 1′s 0′s 1′s rand, rand, rand.

    I’ve tried using ammonium nitrate (mixed with two other common but sensitive high explosives) on a hard drive – you’ll need a lot (kilogram?), if its only a little it will leave readable fragments.

    Adding a perchlorate to the mix turns your thermite into flash powder, you idiot.

    also there are no greenhouse gasses produced (until you start setting other things on fire) because Fe2O3+al=>fe+alxox

  • I agree with nicholas manie… you could have tried to reduce
    the amount of toxic shit you sprayed/burned by removing the drive from the
    case.

  • vector1 says:

    thank you for posting that joe. anyone who feels they have data which is very important to keep out of unwanted hands needs to read up on the latest forensic data recovery techniques and educate themselves. also reading about destruction methods for military classified material might provide some imformation, though the military has been notoriously bad at really protecting data, just making it such a pain to recover that its not valuable anymore to the enemy by the time they get it. the problem is that the government will pursue all avenues to prosecute you, they wont stop like a foreign military might when it becomes too difficult or time consuming.

    if you believe you have reason to go this far in destroying your data, do your homework, for your own protection. in the US at least there are ways to secure your data in such a way that the government cannot recover it legally because of rulings regarding the 5th amendment. and if you were taken to court on suspicion of crimes and they added thermite melting of your hard drive to it, there would be a really big shitstorm headed your way. depending on circumstances they may even charge you with assault on an officer, obstruction of justice, even attempted murder. remember all you have to do is hit a cop car which is chasing you, and youve made an attempt on the officer’s life with a deadly weapon. use the law to your advantage.

    if you live in a country where they just drag you off to a dungeon somewhere and torture you until you confess, then maybe you shouldnt be messing with data that sensitive :P

    also, with enough bits of data collected from ram/flash drives and other sources, they may not be able to prove that you had what they’re looking for, but they might be able to prove you -could have had- it, which might be enough. consider all of the places your data goes when it is accessed. and yes, you can read data from memory long after it has been powered off sometimes, depending on environmental conditions, and even data which has been overwritten. think of the value of a bit in an analog sense, the value of that bit isnt really a 1 or 0 as in strictly one value or another, its either closer to 1 or 0, and based on what kind of data overwrote the data they want to recover, they can build a pattern of the bit values and read what was there before. those old ‘decoder window’ toys, where you view a hidden message with a piece of red cellophane is a good example. you know the data overwriting the message is a given value [in this case the wavelegth of light refracted] and so you use a filter [the window] to remove that, leaving the message.

    if you consider that 0, 0, 1, 0, 1 might physically be represented as 0.34, 0.12, 0.88, 0.21, 0.97 in terms of magnetic field strength, or charge contained, and you know that a new write carries a bias on that device of .7 on avergae, then you would know that the data contained before writing of the current data was likely to be 1, 0, 1 or 0, 1, 1 and you can even tell what might have been stored there one more write previous. considering that you know what is stored there -now- you can build a map of probable overwritten data and prove good enough for a layman judge or jury who doesnt know a bit from an aardvark that youre guilty. this is why smashing your platters is ineffective. even if you tear up a piece of paper, you can put it together without much lost data and prove what it contained. platters are the same, they will piece the fragments together and read them with an electron microscope.

    i hope that kind of makes sense to you, i just woke up… blar, MOAR CAFFIENE.

  • vector1 says:

    i’d like to see someone do a writeup on how the ‘ironkey’ supposedly overwrites data using that proprietary ‘flash trash’ crap…

  • Roly says:

    Can we get a bit real about data recovery please? Forensic science is wonderful, particularly now in the recovery of “trace DNA”, but physics is physics.

    These platters have not only been heated to *white* heat, they have been partially *burned* (oxidised) to smoke, partially *vapourised*, and partially splattered about the place as dags ranging own to the microscopic.

    When that main glob finally cools it will be a fruit cake of platter material and actual coating that remains and hasn’t been literally sprayed about the room or gone up in smoke. Good luck in recovering magnetic domains from condensed coating vapour.

  • Xeracy says:

    hey, thats looks like the stuff that poured out of the twin towers… interesting…

  • thephysicist says:

    Filling the hard drive case with molten iron is probably the most effective data destruction method there is. When you heat a (ferro)magnetic material above its Curie temperature thermodynamics takes over and the magnetic domains become randomly oriented. Hard drives are usually iron or cobalt based, ie. they are ferromagnetic and therefore subject to that effect. Filling the drive with molten iron is a pretty effective way to raise the magnetized areas on the platters above the Curie point and hence obliterate the data. To add to that, as the iron cools inside the drive it will become somewhat magnetic on its own adding a lot of noise to any magnetic readings you somehow manage to get. This would be dramatically more effective than zeroing your drive.

    If you were really paranoid, as would be implied if you’re considering destroying your hard drive with thermite, add an electromagnet near the drive during the heating process. The external field will bias the magnetic domains in the cooling iron/drive and the noise level in any data left will go through the roof.

    Or better yet, use a changing field or multiple fields.

    If you recover the data, call the Nobel prize committee.

  • poopysock5 says:

    lol you crazy conspiracy theorist. You could always crash a 767 into your hard drive. that might do the trick

  • nulloutput says:

    “Thermite is usually used to weld railroad ties together.”

    Railroad ties are usually wooden (sometimes concrete) and used to keep the gauge correct
    while transferring the load into the ballast. I think the word
    you are looking for is rail, or possibly track.

  • (K)NaB says:

    We, in my line of work, us a a similar mixture called “Cad-weld” to bond bare copper cable (like 500 mcm) to ground rods in sub-stations.

  • Obvious says:

    TrueCrypt is a far better solution.

  • sumguy says:

    what I really want to see is someone containing
    thermite so that it might be used for safe data
    destruction. I’ll definitely get around to some
    experiments with refractory cement, but I’d love
    for someone to beat me to it. I imagine a nice
    big cement block that contains a usb hard drive
    and a container of thermite, flip a switch and
    the data is destroyed without a wisp of smoke.

  • Yosh says:

    Uhmmm… Why not just take the thing apart and toss the platters in the microwave…Toss the circuitboard in the broiler and be done w/ it.. 30 secs on high and those little platters are fried.

    I mean.. By the time you realize the feds are coming
    what do you have 3 mins? Ok I’m going to mix my thermite now… Now mister..Yea you with a suit…Watch me lite this thermite… Hang on let me place my magnesium wick… I’m lighting the torch now… everyone has a microwave or a stove… Also make sure to destroy your motherboard and ram while you are at it… There happens to be some recoverable data there.. Or here is an idea.. obey the laws and be a good little boy and then maybe the government will let you keep their computer… And a little of their money.. And even let you sleep in their clothes in their house..And mow their lawn. ;-)

  • Nitori says:

    Why not have something that can inject tungsten carbide powder into the drive at a moments notice?
    Combine that with a small app that steps the drive head back and forth and it should physically destroy the magnetic coating very quickly so no one can recover the data.
    Another solution some drives have glass platters it might be possible to rig something that will shatter the platters this must be done while it’s spinning as to completely shatter the platters vs just break them into large chunks.
    This combined with AES encryption should be effective enough to stop most if not all forensics.
    Most stuff on CSI is bullshit they even have trouble recovering data off bios locked drives and it’s very expensive.
    BTW I’m sick of the post 9-11 BS some idiots bring up we need to vote these anti terror a–holes out and get our personal freedoms back.

  • Stephen says:

    Not environmentally friendly! What hazardous chemicals did you release into the atmosphere doing this?

    Isn’t there a green way to destruct the drive?

  • jesh says:

    chemicals released:
    iron and aluminum oxide from the thermite.
    aluminum oxide, iron oxide, carbon (burned paper), possibly silica (glass platters) from the drives.
    iron oxide from steel case structure, if you burn the whole case.
    various chemicals from the boards, if the PCB’s are incinerated, depending on the age and ROHS status of the manufacturer and product.

    All in all, not all that bad. Many worse ways to destroy the thing.

    Green disposal of most electronics seems to involve shredding, sorting by reclaimable metal, and reuse.
    If you’re worried about data retrieval, you don’t send said storage device out to be recycled. You have some way to destroy it before it leaves your control.

    MS has locked bins that are then shredded (bin and all, from what I understand) before it leaves the MS campus. And that is just for the servers that host various data.
    Military destruction typically involves drilling holes through stuff.
    The reason thermite is available is for destruction of assets when you don’t have time to do it the slow way. Drop a thermite grenade on top of a locked filing cabinet. All the paperwork inside just became worthless.
    Toss one in a fire safe, and close the door. Depending on how well it is designed, you may just have a self contained incinerator, with no outside damage. All critical information/material now gone.

    Completely aside from the paranoia aspect, thermite is just plain cool to watch go up, and even more impressive in person, when you can look through the hole you just burned through an old wreck!

  • Any word on how this affects your home owner’s insurance rates?

  • Joe says:

    @yosh – I’ve seen this done so that it is all a prebuilt assembly. You hit the button and the thermite in the bay’s over the hd ignites and torches it. That way you only need seconds of warning (of course, you’re more likely to light it by accident, but its a trade some are willing to make.

    @thephysicist – awesome. I was trying to work out if that would work like that. Does sufficient concussion also screw up the bias?

  • nubie says:

    More practically could you use a single platter and a dual lathe to cut all the magnetic media off of both sides?

    Might have to beef up the motor to withstand the strain of the lathe blades, but it should be able to work down to a 2.5″ hard drive no problem, especially if you mount it to the head on the sturdy aluminum part and only use the outside edge of the platter.

    Use a clean room to replace the top of the drive with one containing a thermite payload, and use only a single platter, then shape the thermite load to burn in a path toward the center of the drive, as it spins the metal will fling itself away and be totally destroyed. Just melting the top of the platter and using only the top of the platter for data would work too (there should be sufficient density in current drives for plenty of info).

    What about a “quarter shrinking” coil, bent in a funny pattern to make the magnetic field funky as possible, it should EMF erase the spinning platter just fine :).

    I follow the course of don’t do stuff that would require this sort of behavior, but I am intensely curious as to the truth of these recovery stories.

    It stands to reason that if a company could win the great zero challenge they wouldn’t come forward, as the risk to their business that the increased scrutiny of their clandestine clients would face would be high.

    I don’t see why it isn’t possible to map magnetic currents, and I bet the govmnt has invested millions or possibly billions in it, considering the worth to espionage.

  • Mark Esler says:

    I like how many comments this one got as compared to the rest :D

  • nambla says:

    thermite was used in bringing down twin towers – these are just the facts. thermite compounds were found at the site, and videos of the towers burning clearly show the same molten metal spraying reaction as the videos above. Finally, the molten steel at the base of the towers that smoldered for weeks, just like lots and lots thermite would do. whether or not the government did it….well now thats not been proven as fact….so its a theory

  • yosh says:

    @Joe… Yea I can see it now.. I’d install my hard drive destroyer into my computer get my dream Machine exactly where I want it..I fall asleep at my desk hit the little red button and poof I’m at a bar in the clouds doing Jaegerbombs with Heath Ledger, Elvis, JFK and Princess Diana and they would be wondering if my death was a conspiracy….Yosh OuT.

  • yosh says:

    Heck… Why not just build an incinerator and mount everything inside using environmentally friendly hemp rope… You feel the heat coming you press the button and poof… Computer what computer. Heck you could buld a cluster server in there too… All wireless.. A dummy terminal as a monitor… You could even run a program from the computer to incinerate itself remotely from your telephone. EEE PC… OR whateva.. Please guys leave the thermite for outside..

  • cunt says:

    Wow “bad1deas,” formatting you hard drive and allowing all your recoverable data to deliberately fall into the wrong hands is pretty much the best idea ive ever heard.

    though I think a better idea is if you hear the FBI at your door, just ctl-alt-delete and end the process explorer.exe, when they try to use your computer they won’t be able to click on anything! that’ll show em whos boss

  • Paul says:

    I can imagine how the airplanes made mostly of aluminum would react with twin towers frame of iron, causing an unintentional thermite reaction.

  • ixenn says:

    best method for data destruction. Take a saw with a blade that has a .375″ kerf and slowly turn it into swarf.

  • I have some very sensitive data that I must use for my job and, unfortunately, which I must retain for five years after it ceases to be relevant. The data are only for my eyes and a few officials at my workplace. So I took up a particularly gruesome task of researching how to enable a safe, automated self-destruction process.

    I currently have an explosive round above the top shield of the drive. Its detonator is linked to a 12V power connector which is driven by a relay controlled by an LED header. I had to write a small program to prompt for three separate passwords before lighting the “LED” (thankfully it’s easy to test by hooking up the relay to an automotive light).

    Advantages: It can be set off at a moment’s notice from anywhere if necessary, so long as the server is powered.

    Problems: I do not know if the amount of explosive is inadequate, adequate, or wildly overpowered. I do not know if the shielding I mounted above it is sturdy or enclosed enough to direct enough of the blast down into the drive through its lid. I am pretty sure it is probably very illegal almost anywhere. since the server is a server, any inherent security flaw could potentially enable an outsider to read the data anyway, circumventing the physical protection. because the server is off-site, i cannot immediately know if it has been detonated by some other means than myself.

    I had a second thought (probably more elegant) but I didn’t have a clue how to do it right. Maybe some geniuses here could help because I’d prefer it over explosives. I would want two solenoids hooked up to very sharp center-punches. One would be near the center of the platters, above the drive lid and the other would be over the drive lid near the very outside of the platter enclosure. I would need a pair of tubes and a pair of glass tanks for gravity feed into the hole near the center of the lid: hydrochloric acid in one and nitric acid in the other. Once the “fill” and “air” holes had been punched, the acids would somehow gravity feed into the drive. As the platters spin the acids would be both mixed and tossed all over the inside of the enclosure, and as these two acids mix they create a particularly corrosive, stinky liquid that would be ideal for drive destruction. I just wish I could implement that one; too many missing pieces exist, though.

  • nambla says:

    thermite is a finely ground mixture of specific compounds – iron oxide would not have been present by accident – plus, if crashing an aircraft into a skyscraper produces thermite, then i bet i could crash my Sunfire into the grand canyon and at the bottom i would find a BMW. It’s possible right?? The right raw materials are present!

  • The Angellick Trooper says:

    srry dudes but do you know how a harddrive is actualy build its not the platter but kind of paste shit where the little magnet thingy’s are on whipe it of someway and the date is lost forever and can never be restored so do what i do make something to put the voltage of ur system so hai that the harddisk wil turn to fast and lose the paste or shake it real hard belive me it does the trick and i even dit test it with sending the disk to a recovery place so before saying something stupit test it first ow srry for the typeo’s becuase my englis is not that good

  • Nitori says:

    How the towers went down was fishy from an engineering stand point esp when. An idiot on Discovery who was not a real structural engineer said it’s impossible for a large building to topple they can only implode on them selves when in the Kobe earth quake some large buildings did exactly what Mr retard said was impossible fall over.
    But back on the subject termite may be showy but why not do something less suspicious such as introduce emery powder inside the drive?
    Or have a large magnetic coils on top of the drive hooked to some big caps charged to lets say 1200V?
    Have the EMP system fire 3 times reversing the polarity each time?

  • Wwhat says:

    You know it’s well known and mentioned in various articles and programmes about the WTC that it had several vaults, also underneath the towers, and it’s also known there were some shady organisations and spooks that had offices in the WTC (I hear rumsfeld was actually in the WTC at the time of the attack for instance).
    Now it seems obvious that some of those vaults had some stuff in it that they don’t want to get out, and seems quite possible/likely that they took measures for that, measures like the one described here, that is I’m guessing they had in fact thermite in/under the WTC to destroy material that might get in the wrong hands.
    So perhaps the heat observed was actually thermite but not involved in bringing down the place but as a reaction to the building going down and them destroying material (evidence/secret files/illegal-stuff/maybe biological material and whathaveyou).
    Ponder on that one.

  • newstroll says:

    Lots of trouble to mix yourself. Most any electric/industrial supply outlet will have a product called “CadWeld” Comes in “Shots” containers about the size of a 35mm film cannister. The commercial version is generally contained in a graphite mold which is placed over the item to be exothermically welded. The reaction can be sparked using a ignition powder or via an igniter similar to that used for model rockets. A small brass disc holds the material inside the mold before the reaction starts, then burns through and allows the molten metal to flow down into the joint. Radio stations and large electrical system designers (such as server farms) use the product when creating a solid ground system.
    To my knowledge “Exothermic Welding” products are not restricted, but it would be a good idea if you actually looked as if you knew what you were doing when you attempt to make the purchase. Most wholesale houses will not sell unless you have a commercial electricians license, but there are plenty of contractors out there who might be convinced that you have a real need for it…or buy them enough beer…

  • Unklegwar says:

    Super duper side benefit is all the toxins you are releasing into the air and ground there. Nice going.

  • Sigh says:

    Ok.

    1. People who post comments should read previous comments first.
    2. WTC theories are clearly not related to this topic. Im sure there are forums out there for that. This topic is about hard drive destruction
    3. This ought to cover everything needed in regards to non-physical data destruction of drives http://www.cs.auckland.ac.nz/~pgut001/pubs/secure_del.html
    4. Yes. The chances of someone recovering your data is low, very low if youve digitally destroyed it. However if your dealing with alphabet agencies, do you want to risk it only to find out you get to be the test puppy they implement Scanning transmission electron microscopy on successfully?
    5. Hippies worried about a little AlO and Fe? Fuck off. One burning PC is not a big deal. Go to india and check out the INSANE computer landfills there where the heavy metals are just leaching into the earth. Then come back and talk. Until then, if you want to tell me how to capture all my emissions and recycle and collect each little component and do my bit when im frantically destroying my computers, you clearly arent using your head.
    6.Yes, there are many more easy/safe ways to destroy your data, not necessarily as quick or as easy to setup (setting up depends on preparedness) but this article was clearly NOT meant to be tried at home. If you want to destroy data use magnets to repolarise magnets. And do it multiple times. EMPs in reversing directions (say oh i dont know. 50 times a second) should do the trick REAL quick.

    Bah. See what ignorance has made me do? Ive gone on a rant at 3 in the morning!

    If your going to comment people, for the love of god. KNOW what your talking about and NO! NO! We do NOT want to hear your 9/11 WTC shit.

    /rant

  • McCarl says:

    you people are fucking crazy and have too much time on your hands.

  • James says:

    Go look up some ATF regulations. The legal shitstorm you’ll get into when they do chemical tests and find that you’ve illegally manufactured an incendiary mixture is far worse than whatever horrible crimes you think you’ve been committing on your computers. This is probably the stupidest idea in terms of trying to get yourself out of trouble that I’ve ever seen.

  • A guy says:

    honestly, y’all need to check on some of the things you type before typing them. If you do any research on thermite then you would have known that it is a perfectly legal incendiary mixture to own/manufacture for your own use, so is dynamite and other explosives. I am not saying you won’t get into trouble if you get caught with it, you will because of all this bullshit freedom taking away shit and you will need a good lawyer to keep them from twisting the truth. But there is no law saying you can’t make them, even on the AFT website they have a PDF that states the law that you can own and manufacture any high explosive so long as it is for your own private use and will not be given or sold to anyone else.

    That is besides the point, Thermite isn’t and will never be an explosive, it is a highly energetic reaction that is labeled as an incendiary mixture and would never explode even if you put it in a pipe with the ends closed.

  • sigh says:

    It would just melt the pipe. :P

    Could you link us to that PDF to stop people complaining?

  • A guy says:

    To: sigh and everyone else

    ================================================
    I WILL NOT BE RESPONSIBLE FOR WHAT YOU DO WITH THIS INFORMATION.

    DO NOT TAKE MY WORDS FOR IT, LOOK IT UP YOURSELF, I AM IN NO WAY SAYING THAT IT IS COMPLETELY LEGAL TO BLOW STUFF UP. CHECK WITH THE AFT FOR THE ABSOLUTE LAW, THIS IS WHAT I DID. I HAVE LOOKED THE FOLLOWING INFORMATION UP ON THEIR WEBSITE AND HAVE ASKED THE AFT THEMSELVES, YOU DO THE SAME.
    =================================================

    Below are some documents that I have looked up from the ATF website. The very last one is an email from me to the ATF asking if the making of small amounts of explosive for your own use was legal.

    http://www.atf.gov/explarson/safexpact/documents/scenarioqa.pdf

    Look at 1b.

    List of explosives

    http://www.atf.gov/explarson/07explist-fedregister.pdf

    Not defined as an explosive and neither are the components

    This is a quote from an email I sent to ask them about making small amounts of explosive,

    “You do not need a license to manufacture if you are manufacturing for your own use however there are qualifiers/caveats as explained in our newsletter pertaining to the manufacture of bi-nary explosives. This article that appears in the June 2004 ATF Explosives Industry Newsletter covers the qualifiers/caveats. You can access the article at our website atf.gov:”

    This is the message I sent the ATF

    “I have tried, successfully,
    making my own black powder but I found out that this could be possibly
    illegal so I was doing some research. I was looking at getting a license
    for manufacturing but as I was reading Q&A there was a question saying
    what is a manufacturing license for and the answer was that is was for
    making explosives for selling and the use in businesses. Later it says
    you do not need a manufacturing license for personal use but technically
    I will be making the explosive. I don’t plan to allow any one to use
    these other than me and I do not plan on making any large amounts(no
    more than 50 grams of any substance in a month or so). I also found in
    another Q&A that a person could purchase dynamite for farm/ranch use
    with out a license. I do live on a ranch and there could be the
    possibility that there may be a stump or something removed. I am greatly
    confused right now and need help. I will not continue to do anything
    illegal as there is no reason to break the law. If this is illegal I
    will do my best to get a license so I can continue my experiments.”

    Hope this help, also don’t forget to check state laws.

  • A guy says:

    P.S.

    sorry forgot to add in there, I couldn’t find the original pdf I had found, I know it is still there I just didn’t want to take any longer looking for it.

    This should be enough anyways.

  • A guy says:

    I noticed a huge typo, right under the link for the list of explosives where it says “not define as” it should say

    “thermite is not defined as”

  • sigh says:

    Cheers mate. Hopefully that shuts people up

  • THAT. IS. AMAZING. (Insert sarcasm here.)

  • jimbo says:

    Will this void the hd warranty?

  • ModZilla says:

    workaround for spewing all this fire and brimstone just to fry a disk platter is: a nice five and half pound sledge, using the wedge end of course, be sure to invert the drive before stiking! Try it => go green…:)MZ

  • ModZilla says:

    with any combustion there are gases, although they are not inert, they are stored not in a green house but in the ambient airflow, particulate matter is more of a threat to air quality within the danger zone, unless you live in LA or Denver; as a direct product of such combustion-the main threat is the byproduct of any combustable which is H20, being that its not pure and may have traces of formaldehyde, heavy mtls such as lead, white metal and a little arsenic which is everywhere these days, not good! Why spread it around?

  • PacoBell says:

    Gawd! The number of would-be amateur woodchuck chemists/enviro-wackos here decrying the deplorable emission of mythical vapors here is truly deserving of a facepalm for the whole human race. For the last time, the thermite reaction itself produces no harmful offgassing, be it formaldehyde, lead, arsenic, etc. By the laws of science, you can’t spontaneously generate elements that aren’t part of the reaction. Now, if the entire destruction apparatus was enclosed in an appropriate ceramic crucible and isolated from the rest of the components, the peripheral components (i.e. drive controller PCB) may not even produce significant detrimental byproducts. And who’s to say that even those gasses/particulates won’t be sequestered within the molten metal?

  • Aura says:

    I have to agree with PacoBell, anyone here who believes the thermite creates toxic crap should go back to school… seriously I learned this stuff at 14. No by-products are produced into the air through this. The intense heat however could pose a problem with the metal, but in all honesty, its negligable.

    On the data recovery side, I’ve done some data recovery, I’ve written encryptions, I’ve read up on the history of data recovery/encryption/etc, I’ve put a lot of effort into researching forensics of computers as this was at one point what I wanted to do for a career. So, taking that all into consideration, I know a fair bit about recovery methods ;) First off, formatting or any software methods for that matter are utterly useless, given enough time you could easily get data back, the only encryption that can perfectly secure data is a One Time Pad, however its just dumb to even consider using one (Wikipedia it if you want to know why)… drilling/sawing/smashing a hard drive into tiny peices is as useful as handing a passworded drive to a PC geek. On a 500GB HDD, a square cm of HDD would give you many gigabytes of data… Degaussing is a good method (which someone mentioned), basically destroying the magnetic field via heat or intense magnetic radiation, there is no logical or theoretical method for recovering data in these cases, so a lot of places do this. Finally, the government and “secret” organisations generally prefer total destruction of a hard drive by using similar things to thermite, purely because whilst no theoretical method exists for degaussed data recovery, its possible someone could find a way some day (and then theres those paranoid people who believe the government can do it but won’t admit it). You’ll also need to completely destroy the RAM, as its been proven that data can be recovered from RAM under certain condition (I believe they extracted data from RAM some 50 hours after the PC was powered off).

    At the end of the day, the simple rule of thumb is don’t be a dumbass, stay out of trouble… don’t get caught ;)

  • greenman says:

    hey! thermite = heat = GLOBAL WARMING!! (duh)

  • NOdaddy.com says:

    toss HD into deep spot in ocean: drive unrecoverable and data destroyed

  • Dave says:

    Some of you people are fucking stupid.

    The rest of you, I admire your intelligence and cunning originality.

  • owlland says:

    i am not sure how well this would work but why not have a container of Acid above HDs . break container when needed to destroy HD. ?????

  • mastermac says:

    excellent experiment. several points in response to comments:

    1. aluminum and aluminum oxide are toxic to humans. don’t breathe it. don’t eat it. that said, using thermite to destroy an HD presents less toxic materials into the environment than the process of making the PC and chassis to begin with, so get a grip, get a life, and don’t buy any more computers if you’re so worried about it.

    2. thermite itself is not considered an explosive although it will sputter molten metal in a semi-explosive manner. however, thermite in combination with sulphur, copper and/or magnesium can be used as an explosive. further, the explosive bolts NASA uses for decoupling rocket stages are thermite. further, thermate is explosive, and nano-thermate is highly explosive.

    3. the military and intel dispose of HDs in two ways: strong magnetic fields (strong enough to actually warp the platters) and incinerators. acid might be used too, idk.

    4. of course it was an inside job, see “The Ghost in the Machines: Evidence of Foreknowledge in the WTC Hard Drive Recoveries” http://journalof911studies.com/volume/2008/GhostWTC.pdf

  • Dan Fruzzetti says:

    @threepointone dude whoah hold on… you mix a huge block of ice with a sealed fire box or whatever and you get a massive bomb complete with shrapnel.

  • ak77 says:

    According to the examples above: Flowerpot (mostly) pwns Thermite. Although I did see a couple of cracked examples, the leakage is generally through the hole in the bottom.

    Perhaps put HDD in a long planter pot (like a window box), to contain the reaction?

  • PiNG says:

    @Aaron
    Your right…this was done on the broken years ago. Only they used a laptop.
    http://revision3.com/thebroken/ep3

  • fine recipe! ;-). I love studying this site. Where did you get this exquisite weblog template from? Salutations from new orleans.

  • anon says:

    That computer tower looks like WTC7 on 9/11.

  • Yeah learn something everyday.

  • mofo says:

    apparently you can melt playdough into thermite in the right quantities and make a mouldable thermite block which can be stuck anywhere. like to see someone try it.

  • shred says:

    i have this GNU tool called shred.

    shred -itterations=20 –zero /dev/sda

  • MrBishop says:

    Yeah im doing this, I am also going to build a enclosure that prevents anything from getting out once it “self destructs”; I am thinking clay+concrete (probably 2-3 layers of clay panels/tiles with concrete or something else heat resistant holding it together). oh and shred, yeah I have the same tool, its great to do a 35 pass system when you have a week to spare, but these kinds of setups are for 10<15 second guarantee's. now if you don't mind I have to go find my lead lined hat with two layers of tin. (one on the out, one in the in.) ;-)

  • john c says:

    A powerful heating element incorporated into the drive, or an induction heating coil would heat the platters enough to destroy the magnetic domains within the platters,job done, no destruction of the rest of the room, no outward signs that anything is amiss while the men in suits are invading the room, no chance of being charged with arson or assault with an explosive device, just quiet privacy.Could be worked of a decent lead acid battery within the case rigged to a tilt switch so if the computer is moved or stolen, data is gone.Ram does not hod residual data, without a strobe refresh the data is gone.

  • TheShadow says:

    As an IT technician, I have to agree on the forensics aspect. This would securely wipe the drive permanently.

    I would point out that the weakness of the software method is that it takes time. I’ve erased a lot of hard drives and it takes anywhere from 20min-2 hours to securely wipe the drive. If at some point a paranoid crackdown does occur, you are simply not going to have that kind of time. If you think your wiping software will do the job, try wiping a drive then using over the counter forensics software to access the data. Unless the drive is overwritten several times the data can still be retrieved. Overwriting an entire drive takes time. Time you may not have.

    An alternative method, if you’re just getting rid of an old drive is to remove the platters and take an angle grinder to them. All the data is stored on the magnetic coating on the disk. Remove the surface and, and there is no realistic means of retrieving the data that I am aware of. The platters themselves are made of aluminum and wouldn’t retain much, if any data from magnetism. (being non-ferrous)

    Further, thermite is not explosive.

    It is also totally legal. There are even some folks trying to use it as an alternative energy source. http://www.youtube.com/watch?v=UxCXFOjKTWY It is fairly low in pollution values, especially in a controlled burn environment.

  • TheShadow says:

    SAFETY NOTE TO ABOVE: wear adequate eye and respiratory protection on the angle grinder method. The coating is poisonous if inhaled.

  • Leave a Reply

    XHTML: You can use these tags: <a href="" title="" rel=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <pre> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

    Hack a Day serves up fresh hacks each day, every day from around the web as well as hacking related news.

    Send us your hacks










         




    Hacks

    Resources