There's a great deal on a drive from Amazon Warehouse, but I'm a bit concerned about the quality of the drive and the fact I can't return it.
Anybody have any experience buying something like this?
First thing to do is check SMART data to see if there are any fails. Then looking at usage hours, spin ups, pre-fails / old-age to get a general idea how worn the drive is and for how long you could make use of it depending on risk acceptance.
If there are already several clusters relocated and multiple spin up fails, I'd probably return the drive.
Apart from all the reliability stuff: I'd check the content of the drive (with a safe machine) - if it wasn't wiped you might want to notify the previous owner, so she can change her passwords or notify customers about the leak (in compliance to local regulations) etc. - even if you don't exploit that data, the merchants/dealers in the chain might already have.
I will just paste my standard procedure when I onboard any new (or used) drive: Everybody has their own
skin careHDD check routine. This is mine:I first check the SMART status with CrystalDisk, after this a short smart test, full surface check with Macrorit, full h2testw run, CrystalDiskMark, and then I check with CrystalDisk once again if anything besides power on hours did change.
Will take some days for a large drive but in terms of work hours we talk about less than 5 minutes and it covers pretty much anything without being too excessive.
How easy is it to wipe or fake SMART data?
wipe or fake SMART data
My guess would be that it's stored in some kind of non-volatile memory, i.e. EEPROM. Not sure if anyone ever tried that, but with the dedication of some hardware hackers that seems at least feasible. Reverse engineering / overriding the HDD's firmware would be another approach to return fake or manipulated values.
I haven't seen something like that in the wild so far. What I have seen are manipulated USB sticks though: advertising the wrong size (could be tested with h2testw) or worse.
I've bought used / refurbished (not sure which) with erased smart data. It being all zeros was a clear sign of erased / tampered info. After running badblocks some relocated sectors showed up.