Security Basics mailing list archives

Re: Hard Drive Forensics Question


From: Ansgar Wiechers <bugtraq () planetcobalt net>
Date: Mon, 6 Oct 2008 22:41:24 +0200

On 2008-10-06 Razi Shaban wrote:
On Mon, Oct 6, 2008 at 1:23 AM, Murda Mcloud wrote:
And why do you feel that random is better?

If it is actual files that are copied, they may be recovered.

How? Could you show us a single (credible) report where even a single
file has been recovered from a halfway recent harddisk after that disk
was overwritten with zeroes?

Regards
Ansgar Wiechers
-- 
"All vulnerabilities deserve a public fear period prior to patches
becoming available."
--Jason Coombs on Bugtraq


Current thread: