A Glimpse Inside Google's South Carolina Data Center 89
miller60 writes "Google today released a video showcasing the security and data protection practices in its data centers. Filmed at the company's South Carolina data center, it provides a look at Google's wiping of data and (literal) shredding of hard drives."
Amazon's East Coast Data Center (Score:5, Funny)
Amazon also released photos of their East Coast datacenter today. [exstatic.org]
Re: (Score:2)
I want a video of Amazon's data center (Score:4, Insightful)
I want a video of Amazon's data center about 36 hours ago instead.
Ultimate Security (Score:4, Funny)
...of course there's no better way to protect your data - my basement door is securely locked, and I shred my HD's daily. And mom rarely lets anyone past the front door.
Re: (Score:1)
Re: (Score:2, Funny)
Shredding hard drives is a pointless waste. (Score:3, Insightful)
Call every data recovery company you can find and ask them the following:
"I have a hard drive which was zeroed out, with one pass, accidentally. Can you recover the data for me?"
You will not find a single "yes" answer. It's impossible. It's a myth, or a theoretical attack.
Maybe the CIA should worry about stuff like this, but you shouldn't, and Google really shouldn't. Those hard drives could be reused or recycled.
Re:Shredding hard drives is a pointless waste. (Score:5, Insightful)
They're only being discarded because they've started to fail. So giving them away would be a bit of a dick move, regardless of whether it's a privacy threat or not.
As for the shredding, my bet would be that they're just following a data-destruction spec from 10-20 years ago, when wiping really wasn't a surefire way to destroy data.
Re:Shredding hard drives is a pointless waste. (Score:4, Insightful)
Re: (Score:3)
I knew someone in the IT recycling business. They had some big customers interested in security, such as the DoD. They had a machine much larger than the one shown, which would shred anything put into it. The guarantee was that every piece that came out would have no dimension larger than 0.25 inches.
They sold this mixed scrap metal to other companies who had methods for sorting the various metals out, and then they were paid based on the total metals. This included sendin
Re: (Score:3)
I didn't quite get the Google demonstration on their destruction of a drive. First they wipe it, verify it's wiped, bend the plates, and then shred it? Why? It would save a lot of time and manpower to just shred them.
Shredding requires extremely noisy machinery and therefore it would not be practical to hold it in the most secure area where the drives are kept. The shredding is probably a redundant step, partially to catch any screwups and partially just to allow customers to tick off the "shreds drive" requirement box.
I'd expect the scrap would also be worth a lot more, just having run it through a fragmenter can double the value per ton.
If you thermite your drives I'd assume you'll end up with a not-so-nice chunk of a
Re: (Score:2)
Thank you. Now it makes more sense. Well, at least the shredding versus melting. Since the unit they're using did not appear to be too large, all it would require is a soundproof room, or a room separate from the offices. One site I did work at had us dispose of our trash ourselves. So we'd tote al
Re: (Score:1)
Re: (Score:2)
Recycling raw materials has been common practice in manufacturing for decades. And if you can't reuse that material in-house, then you do what you must to get the best price/lowest cost to get it the hell off site. My guess is that they get a better return on pre-shredded metal and get the assurance that some red-neck isn't going to take a truck load of t
Re: (Score:3, Interesting)
Google probably shreds them so that they don't get bought by some low-rent operator and show up in "new" machines.
They're low-end drives, incidentally. Google uses cheap parts and redundancy, accepting that hardware will fail regularly. I'm surprised they even bother to test failed drives.
Re: (Score:2)
If I am a PHB at Google, I would not want people trying to get their hands on discarded hard drives as it would be happening on company time but for attempted private gain. As soon as a drive is shredded, geek interest (and lost work productivity) ends.
Re: (Score:2)
They're only being discarded because they've started to fail. So giving them away would be a bit of a dick move, regardless of whether it's a privacy threat or not.
As for the shredding, my bet would be that they're just following a data-destruction spec from 10-20 years ago, when wiping really wasn't a surefire way to destroy data.
I would think that they'd be shredding (and crushing) the hard disks because it's faster than sitting around and waiting to overwrite disks, especially with larger hard disks. Shredding also works on disks that are damaged and unable to function.
Re: (Score:2)
They're only being discarded because they've started to fail.
This is surprising - they must pay very low electric rates. I've consolidated a bunch of 300GB drives onto a pair of 2TB drives and the power pay-back is on the order of a year.
when wiping really wasn't a surefire way to destroy data.
It still isn't. Drive manufacturers won't tell you if their drives are certified to correctly implement ATA Secure Erase. Without it, all your re-allocated sectors still have the raw data.
I use block-level encrypti
Re: (Score:3)
Call every data recovery company you can find and ask them the following: "I have a hard drive which was zeroed out, with one pass, accidentally. Can you recover the data for me?"
You will not find a single "yes" answer. It's impossible. It's a myth, or a theoretical attack.
If the hard drive had any bad sectors which were automatically reallocated from the pool of spare sectors, your "accidental" zeroing of the sectors would not have cleared those. Therefore, there is the potential for some data recovery even if it's only a few kilobytes at a time. Additionally, it's impossible to visually tell the difference between a drive with all data intact and a drive that had been zeroed out. Shredding the drive removes all doubt as to its status.
Re: (Score:1)
IMO, they should have invented a robot to disassemble the drives and chuck the metal parts into a large recycling bin, and run the platters through the shredder instead. Much slower, but the largest chunk of metal in a drive is the case itself, and contaminating the metal with all the PCB parts is just makes it all wasteful.
Or maybe I'm missing something and there's a way to separate all the rare metals in the PCB chips from the recycleable metals when they're all shredded together without having to re-smel
Re:Shredding hard drives is a pointless waste. (Score:5, Funny)
Yeah, sure. Google will just invent a hard-drive disassembling, sorting, and recycling robot. Are you fucking nuts? What's next, Google will just invent some self-driving robot car?!
Re:Shredding hard drives is a pointless waste. (Score:5, Insightful)
A very, very common failure mode for a hard drive is that it continues working until either the electronics or the mechanics of the drive fails. At this point, it's too late to zero it out.
Now that it has failed, how does one erase it? Well, one can either try to put the platters in a new enclosure with fresh mechanics and fresh electronics...
or one can destroy it.
Guess which one is cheaper. :-)
Re: (Score:1)
Mod parent +1 Dot On.
Re: (Score:2)
Shredding hard drives is not pointless, and neither are the other steps taken.
It may seem redundant to first wipe the drives, then shred them, but if you think about it both steps are necessary. Wiping them is the best method to ensure that no data is recoverable, but remember that drives are pulled from service when they're failing. Can you trust a failing drive to successfully zero itself? Even verifying that you can successfully read all of the zeros from the disk after writing them doesn't prove th
Re: (Score:2)
Nope... predictions are that mainstream encryption (eg. AES256) will be trivially crackable within 5-10 years
Cite?
Re: (Score:2)
The magnetic fields are stored as analog waves which take different forms based on the previous data stored. If all you did was single pass zero a HD, the bits that use to be ones will look different than bits that use to be zeros because of the shape of the wave. The problem is getting access to this low level data. You need custom hardware that doesn't return ones and zeros but the shape of the magnetic fields.
No one but powerful or governments could get access to this equipment... or anyone who owns a co
Re: (Score:1)
Agreed. The usual answer will be no, unless you have very deep pockets. The effort to recover data is almost always not worth what you're trying to recover.
The whole reason for them being discarded is they'd started to fail or past their safe usable lifetime. Anyone willing to buy them is simply burning money.
Re: (Score:1)
Google servers (Score:2)
Anybody know if the "Google web server" [datacenterknowledge.com] at the same website as in the article is actually real?
I mean, do they really have a 6-inch battery contraption hanging off the side of every one of their web servers?
Re: (Score:1)
yes. each webserver has a builtin PSU+UPS.
Re: (Score:2)
As the other reply says, it has a UPS+PSU builtin, it is actually a lot more efficient. Because a normal UPS converts the power coming into the UPS for the batteries, then it gets converted again when it is sent to the PSU, the PSU converts it again...
All of that is a waste.
If you have the UPS next to the PSU, you convert the power ones coming into the PSU, it sends power to the board/CPU and so on and also to the UPS if it needs to be charged. When the PSU does not get power, the UPS delivers power to the
Re: (Score:2)
And be quick about it. A body left in the hot aisle will be a bloated, putrid mass alarmingly quickly.
Re: (Score:1)
Well, when *was* the last time you saw Chris DiBona, huh?
That's nice and all. (Score:3, Insightful)
Anybody, anybody? Bueller?
Sure, the fact that the datacenter isn't a shack with no access controls is nice; but mostly from an uptime and efficiency perspective. When it comes to large web players, Google definitely among them, physical attackers are so far down the list of information security concerns that they might as well not rate(for the users, that is. Obviously the operators would face significant costs if people were breaking in and grabbing stuff all the time).
Re:That's nice and all. (Score:4, Insightful)
So, hands up anyone whose privacy concerns RE:Google had to do with people stealing hard drives or breaking into datacenters, rather than Google mining them...
You and I might not worry about that, but keep in mind Google is trying to convince government and industry to outsource much of their internal email and other IT operations to Google's servers. I'd imagine they would like to be reassured that nobody will walk in and grab their confidential data.
Re:That's nice and all. (Score:4, Insightful)
Data center robberies are actually rather common, so physical attackers should definitely be pretty high up on the list. A google search for "data center robbery" turns up tons of results. One particularly bad offender is C I Host, who had their data center broken into four times in three years. At least one of those times, someone cut through the wall of the datacenter to gain access. Other times, well, it turns out that pointing a gun at someone is a rather good way to get around all that fancy security.
Re: (Score:2)
People don't think of data center robberies, but with the economy in the skids, the guys who would rob banks are starting to wise up to data centers.
Until recently, the most security a data center would have on staff would be a guard in front, and maybe another to run rounds. Data center locks are intended to keep geeks and skulkers out. Most places do not factor in people who will be more than happy to blow the brains out of the secretary at the desk to get her badge and keys, so they can get access to t
Re: (Score:2)
I'm not sure why anyone needs to be where they can physically access the guard. Why not use a man trap where a card access badge is used to enter the trap, the outer door secured (locking the person in), the ID of the person is verified (local scanner and camera), and then the inner door released? All of this can be done without physical staff anywhere near the location. If you have many of these such data centers it makes more sense to centralize your security staff anyway.
Cameras, motion sensors, and o
Re: (Score:2)
The man trap is SOP for Switch and Data, er, Equinix data centers. Amazon security is on par with Google. Go into a data center and you'll note the Amazon cage right away... it's the one that looks like a prison camp.
7 out of 10 could do better (Score:2)
mining inside (c) (Score:1)
So, hands up anyone whose privacy concerns RE:Google had to do with people stealing hard drives or breaking into datacenters, rather than Google mining them
It's a wild world but you're safely locked inside a cage - together with Dr. Evil himslef.
Hard drives need upgraded (Score:4, Interesting)
Re: (Score:1)
Hey, we need some hardware to shoot a video.
Here's some shitty old stuff we don't care about anymore.
Re: (Score:3)
What's wrong with IDE? You can pick up crates of 500gb drives for dirt cheap these days, about half the cost of what a SATA will cost, about a 1/3 of the cost of scsi, and about a 1/10th the cost of fibre channel.
Re: (Score:1)
Low speed, non-hot-pluggable, and a mess that is the IDE cable.
Re: (Score:1)
What a pity Google didn't realize this, right? Quick, apply for a position with them so you can help them out, since you're obviously so much smarter than all the Google employees in charge of hardware. ;)
Re: (Score:3)
Re: (Score:2)
> It's not like they're running a bunch of W2k8 RAID5 servers. Everything is massively redundant and replaceable.
I love those RAID5 servers, too bad they are not redundant and replaceable.
Re: (Score:3)
If you're pulling the entire rack when it fails, non-hotpluggable doesn't matter too much especially in terms of redundancy.
Re: (Score:1)
What's wrong with IDE? You can pick up crates of 500gb drives for dirt cheap these days, about half the cost of what a SATA will cost .....
Not necessarily so, at least in the case of laptop IDE vs laptop SATA.. I have a sideline "business" buying up broken Dell laptops, fixing/cleaning them up, installing Linux, and reselling. Since 99% of these systems come with no drive, I have to factor in a new drive for the system, and for the older IDE models, I'm having trouble finding 80-120GB IDE drives at a competitive price, while the equivalent SATA drives are dirt cheap.
Re: (Score:1)
Laptop 2.5" drives are a whole different category.
Re: (Score:2)
about half the cost of what a SATA will cost
How's the power cost? Are these old inventory or are drive manufacturers charging a premium for SATA (when it should be the cheaper option by this point)?
Re: (Score:2)
They're still making new ide drives, and probably will for another 5 years. But you can get 4200-5200rpm drives in the choice of your brand pretty easily.
Re: (Score:1)
Re:Hard drives need upgraded (Score:4, Informative)
Wrong. Google stores its data all over the place, including on each individual server. They designed their own networked filesystem [wikimedia.org] for the purpose. If they really didn't store data locally, they'd almost certainly PXE boot and avoid drives on each server altogether. I suspect the video just used some dated footage (from a training or other internal video perhaps?), as this article [cnet.com] clearly shows SATA drives. Every server has two drives, and since no one node is critical for anything they also wouldn't bother with RAID1 for an OS boot drive as you suggest.
Re: (Score:2)
Looks like they're also installing ECC PC2100 Memory. Wow. That file footage has been collecting dust.
Re: (Score:1)
In the video you see five libraries with between 12 and 24 drives per library. But you cannot see how many storage cells and how many robots are in each library. That would put the drive to robots ratio between 1.5 and 6 for the libraries you see there. Maybe the number of drives was not chosen to match a desired robot to drive ratio, but a desired storage cell to drive ratio. Those libraries only support up to about 10k stor
Re: (Score:2)
Hey, google hires everyone. They just put the people in the jobs they are good at.
Re: (Score:1)
Sometimes these spammers have no clue.
Ganty
Serious question: (Score:1)
Re: (Score:3)
Revealed: Google’s new mega data center in Finland [pingdom.com]
Re: (Score:1)
http://www.youtube.com/watch?v=aFhlGgcU0To [youtube.com]
security guards (Score:1)
Speaking of Google security (Score:1)
Re: (Score:1)
Re: (Score:2)
Re: (Score:1)