Re: Advice regarding servers and Wiping Drives after testing

I believe the DoD standards is to write over 7 or 9 times to ensure
there is no more readable shadow data.

On 12 Sep 2007 12:21:18 +0100, Robert Inder <robert@xxxxxxxxxxxxxxxxx> wrote:

Ansgar -59cobalt- Wiechers writes:
> Date: Sun, 2 Sep 2007 20:17:06 +0200
> To:
> Subject: Re: Advice regarding servers and Wiping Drives after testing

>> I see osx disk utility can with write zeros once, or write zeros many
>> times. Is there any advantage in multiple writes?

> The magnetic media in your harddisk are analog, so even after
> overwriting the media with zeroes there may be some residual magnetism
> left from which the original data might be reconstructed. However,
that
> will require opening the case and examining the actual platters with
> Magnetoforce Microscopy or something.

I had heard it was easier than that.

Looking at the analog properties of the signal produced by the normal
read head is sufficient. The signal produced by a 1 written over a 0
is subtly different from the signal from a 1 written over a 1. And,
indeed, a 1 written over a 1 written over a 1 is itself subtly
different from a 1 written over a 1 written over a 0.

So just looking at the precise voltage coming out of the drive's own
read head lets you reliably "see" back a number of "generations".

If that is true, just adding some new digitising electronics to the
drive would let you read its previous states at normal drive access
speed. In which case I'd be very surprised if various government
agencies (at least) don't have the wherewithall to analyse a
drive very quickly.

The random variability associated with (enough) multiple re-writes
would mask these effects.

Robert.

--
Robert Inder Interactive Information Ltd, Registered in
Scotland
07808 492 213 3, Lauriston Gardens, Company no. SC
150689
0131 229 1052 Edinburgh EH3 9HH
SCOTLAND UK Interactions speak louder than
words




--
- Melissa Augustine
"maybe it's a user problem"

Relevant Pages

  • Re: Advice regarding servers and Wiping Drives after testing
    ... > Subject: Re: Advice regarding servers and Wiping Drives after testing ... >> I see osx disk utility can with write zeros once, ... > overwriting the media with zeroes there may be some residual magnetism ... drive would let you read its previous states at normal drive access ...
    (Security-Basics)
  • Re: How can an .EXE be decoded?
    ... As Kevin pointed out, heating the drive up can cause it to lose its magnetism, ... The amazing part of forensic data recovery is not so much in recovering trashed ... drives, but in recovering data that has been overwritten. ... so traces of previous data are still present along ...
    (microsoft.public.vb.general.discussion)
  • Re: How can an .EXE be decoded?
    ... magnetic at cold temperatures, and less so at warm temperatures. ... magnetism, ... The amazing part of forensic data recovery is not so much in recovering ... trashed drives, but in recovering data that has been overwritten. ...
    (microsoft.public.vb.general.discussion)