Security Basics mailing list archives
RE: Interesting One
From: lvickers () us army mil
Date: Wed, 30 Oct 2002 14:21:29 -0500
What of the case of "defragging the disk". Does this not reset the drive space pointers? Mr. Leonard J. Vickers ERDC-ITL Alexandria . VA Chief, ITCC CEERD-IM-A V: (703)428-6616, F:(703)428-6747 -----Original Message----- From: Joe Barrett [mailto:barrettj () wam umd edu] Sent: Tuesday, October 29, 2002 8:33 PM To: Nero, Nick Cc: security-basics () securityfocus com Subject: Re: Interesting One Actually, the DoD standard is to write over the data 7 times, alternating between 0x00 and 0xFF. I can only assume that the NSA follows a similar (or perhaps more stringent) standard Joe Barrett ----- Original Message ----- From: "Nero, Nick" <Nick.Nero () disney com> To: "Dave Adams" <dadams () johncrowley co uk>; <security-basics () security-focus com> Sent: Tuesday, October 29, 2002 12:30 Subject: RE: Interesting One
Well, the NSA standard I believe is that zero-filling a drive (writing all 0's to the platter) will make the data impossible to recover, but I am sure there are some instances when this isn't the cause depending on how retentive the media is and all that. If is electromagnetically degaussed for an extended period of time, I can't imagine anything could recover the data. Nick Nero, CISSP -----Original Message----- From: Dave Adams [mailto:dadams () johncrowley co uk] Sent: Monday, October 28, 2002 5:06 PM To: security-basics () security-focus com Subject: Interesting One Greetings Folks, I had an interesting conversation today with someone from FAST (Federation Against Software Theft) They pretend not to be a snitch wing of the BSA. Anyway, to get to the point, the guy that came to see me said that their forensics guys could read data off a hard drive that had been written over up to thirty times. I find this very hard to believe and told him I thought he was mistaken but the guy was adamant that it could be done. My question is, does anyone have any views on this, or, can anyone point me to a source of information where I can get the facts on exactly how much data can be retrieved off a hard drive and under what conditions etc etc. Thanks Dave Adams This message (and any associated files) is intended only for the use of the individual or entity to which it is addressed and may contain information that is confidential, subject to copyright or constitutes a trade secret. If you are not the intended recipient you are hereby notified that any dissemination, copying or distribution of this message, or files associated with this message, is strictly prohibited. If you have received this message in error, please notify us immediately by replying to the message and deleting it from your computer. Messages sent to and from John Crowley (Maidstone) Ltd may be monitored. Internet communications cannot be guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses. Therefore, we do not accept responsibility for any errors or omissions that are present in this message, or any attachment, that have arisen as a result of e-mail transmission. If verification is required, please request a hard-copy version. Any views or opinions presented are solely those of the author and do not necessarily represent those of John Crowley (Maidstone) Ltd.
Current thread:
- RE: Interesting One lvickers (Oct 31)
- <Possible follow-ups>
- RE: Interesting One Jimmy Liang (Oct 31)
- Re: Interesting One easy (Oct 31)
- RE: Interesting One Michael Vaughan (Oct 31)
- Re: Interesting One Candice Ward (Oct 31)
- RE: Interesting One Tim Donahue (Oct 31)
- RE: Interesting One Carol Stone (Oct 31)
- RE: Interesting One Rygg Christian (Oct 31)
- RE: Interesting One Trevor Cushen (Oct 31)
- Re: Interesting One ONEILL David J (Nov 01)
- Re: Interesting One Greg van der Gaast (Nov 01)
(Thread continues...)