Why shred does not reliably erase files on SSDs and modern filesystems, and what to do instead
Many runbooks still say to run shred on sensitive files before deleting them. On SSDs, copy-on-write filesystems and cloud volumes, overwriting in place often leaves the old data elsewhere. Why, and the methods that work: encryption, crypto-erase and device sanitize commands.