Security Basics mailing list archives

Re: Hard Drive Forensics Question


From: "anonymous pimp" <anonymouspimp () gmail com>
Date: Tue, 7 Oct 2008 21:56:24 +0400

It's more suspicious, more likely to have the company spread bad word
of the guy. Wiping a disk clean pretty much implies guiltiness.

On Tue, Oct 7, 2008 at 12:42 AM, Ansgar Wiechers
<bugtraq () planetcobalt net> wrote:
On 2008-10-06 Razi Shaban wrote:
Which is more likely to appear on a normal hard drive that has not
been tampered with or set up: Entire blocks of 0s, or random malformed
data?

How does knowing that the disk has been wiped help with recovering the
overwritten data?

Regards
Angar Wiechers
--
"All vulnerabilities deserve a public fear period prior to patches
becoming available."
--Jason Coombs on Bugtraq



Current thread: