You guys are on the right track. I'm a big fan of full disk encryption. On top of securing your data, it offers the safest form of software-based data erasure. If you overwrite the first gigabyte of the device, you destroy the encryption key and any hope of recovering the contents. Zeroing out the first gigabyte takes only seconds, too, so it's simultaneously safer and faster than DBAN.