The logs are stored on an SSD , which is literally the only part you need to replace when donating or reselling a PC. Any enterprise company should have a policy ensuring SSD destruction.
Most laptops will last a long time assuming they aren't abused. I guess the SSD wears out, but that's a 50$ part.
Counterpoint: enterprises shouldn't be incentivized to produce physical waste containing toxic components that are virtually only available from supply chains that abuse human rights and cause mass ecological devastation.
this idea that we should just shred perfectly working components because an asshole in a suit doesn't understand FDE (or just... wiping the drive) is bad for everybody in the log run.
The alternative is corporations just trash the entire laptop. With the rise of soldered ssds( Apple for one) this is possible.
Maybe argue for better recycling ?
It only takes one half awake IT guy to forget to wipe a few drives to spook companies.
In my world if MegaCorp offloads used laptops to a non profit, and the non profit just has to throw in a cheap SSD, that's a win.
trade secrets must take a backseat to human rights and toxic pollution from mines.
Or personal medical information, which in some cases( STI status, etc) can ruin thousands of lives if leaked.
The solution is recycling the destroyed drives, not banning secure data destruction.
There is reason we don't store raw plain password in database, even if we know data in database should not be leaked.
Why? Drives should already be encrypted, at which point you just lose the key and it's unrecoverable.
I don't trust HP firmware to wake the laptop from sleep in one attempt, let alone trust them to securely store their telemetry (that they won't let me see directly).
> BitLocker essentially trusts self-encrypted drives to do their job, and defaults to the drive”s hardware encryption.
But that was 2018; the result was that in 2019 https://support.microsoft.com/en-us/topic/september-24-2019-... happened:
> Changes the default setting for BitLocker when encrypting a self-encrypting hard drive. Now, the default is to use software encryption for newly encrypted drives. For existing drives, the type of encryption will not change.
And in any event, I would tend to argue that the matter of reselling is secondary: The problem is that the affected disks are effectively unencrypted, and that's a problem regardless. If your disks are properly encrypted, then reselling them should be safe.
You don't have to worry about IT forgetting to wipe a drive or something.
You have a policy that says we take the SSD out before sending it to the reseller/donating.
A used SSD is a bad idea anyway, everything else on a laptop can more or less work indefinitely
Using a used SSD( Refurbished assuming direct from manufacturer might be ok) feels like digging though someone else's stuff.
Maybe they cleaned it, maybe they left business docs or other sensitive data. The risk to reward is too great.
Look at the SMART stats, format the drive, and install your OS. For people shopping laptops under $250, that seems like a better path than a new SSD.
Physical destruction is cheap and effective insurance against this.
If you care at all about data leaks, there's literally no reason to not destroy decomissioned frives and a lot of very real potential risks in not destroying it.
It may be "nicer" to a hypothetical second user, but you don't care about them and new drives are dirt cheap anyway.