Re: Advice regarding servers and Wiping Drives after testing


Ansgar -59cobalt- Wiechers writes:
> Date: Sun, 2 Sep 2007 20:17:06 +0200
> To:
> Subject: Re: Advice regarding servers and Wiping Drives after testing

>> I see osx disk utility can with write zeros once, or write zeros many
>> times. Is there any advantage in multiple writes?

> The magnetic media in your harddisk are analog, so even after
> overwriting the media with zeroes there may be some residual magnetism
> left from which the original data might be reconstructed. However, that
> will require opening the case and examining the actual platters with
> Magnetoforce Microscopy or something.

I had heard it was easier than that.

Looking at the analog properties of the signal produced by the normal
read head is sufficient. The signal produced by a 1 written over a 0
is subtly different from the signal from a 1 written over a 1. And,
indeed, a 1 written over a 1 written over a 1 is itself subtly
different from a 1 written over a 1 written over a 0.

So just looking at the precise voltage coming out of the drive's own
read head lets you reliably "see" back a number of "generations".

If that is true, just adding some new digitising electronics to the
drive would let you read its previous states at normal drive access
speed. In which case I'd be very surprised if various government
agencies (at least) don't have the wherewithall to analyse a
drive very quickly.

The random variability associated with (enough) multiple re-writes
would mask these effects.

Robert.

--
Robert Inder Interactive Information Ltd, Registered in Scotland
07808 492 213 3, Lauriston Gardens, Company no. SC 150689
0131 229 1052 Edinburgh EH3 9HH
SCOTLAND UK Interactions speak louder than words

Relevant Pages

  • Re: Advice regarding servers and Wiping Drives after testing
    ... there is no more readable shadow data. ... > Subject: Re: Advice regarding servers and Wiping Drives after testing ... > overwriting the media with zeroes there may be some residual magnetism ... drive would let you read its previous states at normal drive access ...
    (Security-Basics)
  • Re: [Full-disclosure] Gutmanns research paper today
    ... trivial matter to read it back and verify that all the bytes are zeros. ... Alternatively, more stream based, you could dd /dev/random, tee that to ... Works great with tapes, should work for drives ...
    (Full-Disclosure)
  • Re: Opps! Erasing hard drive question?
    ... > Yes, drives can be unformatted, and deleted files can be undeleted. ... > available that overwrite everything on your drive with zeros. ... > even let you do that overwriting multiple times. ... there are sophisticated data recovery techniques that can ...
    (microsoft.public.windowsxp.general)
  • Re: I/O error with Spotlight
    ... That only happens with SCSI drives. ... Not IDE, ATA or SATA. ... to do a "low-level" reformat of the drive, I have not had one error. ... actually writes zeros. ...
    (comp.sys.mac.system)
  • need to zero out!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
    ... western digital drives come with a floppy that has a ... >I need to write zeros to me hard drive and start over, ...
    (microsoft.public.windowsxp.perform_maintain)