Re: Are "Shredded" Files Really Gone?

From: Bill Unruh (unruh_at_string.physics.ubc.ca)
Date: 07/20/03

  • Next message: LLFormat: "Re: COTSE? (off on a tangent ...)" 
    Date: 20 Jul 2003 15:43:26 GMT

    "potkec@netscape.com" <potkec@netscape.com> writes:

    ]> mine how anything was done. Now I don't want to get too into detail
    ]> because it may be beyond scope for this board, but there are programs
    ]> that will determine (based on machine architecture) when random was
    ]> called, what sector was the disk on etc;.,, etc.
    ]>
    ]> segment /:/ AntiOffline.com
    ]>

    ]Let me add something to this before I get bombarded with the "How!...'s:

    ]For those curious on random ( rand() ) wipes, who haven't taken a comp
    ]science course in school... Functions are the same across the board on
    ]certain comps. Eg: An SGI machine will go through different motions
    ]when making certain sys calls.

    ]If say someone had physical access to the machine, and determined what
    ]time/day/etc the file was created, it is possible to recreate the file
    ]after it has been wiped based on the structure of the disk. When you
    ]defrag/optimize you're rearranging the bits, hence if someone had
    ]physical access it wouldn't matter if they determined the aforemen-
    ]tioned date/time/etc., since things are now diff on the disk sectors.

    ]I know of someone who went to IT and Harvard who wrote a program to
    ]do just that recreate something after it has been purged even if it
    ]was written over a few times if you had physical access to the comp
    ]in question. It was processor specific and it determined how the
    ]system made calls to wipe the file, backtracked and actually did
    ]recreate files which had been written over numerous times.

    Sounds like complete nonsense to me.

  • Next message: LLFormat: "Re: COTSE? (off on a tangent ...)"

    Relevant Pages

    • Re: Are "Shredded" Files Really Gone?
      ... For those curious on random ) wipes, who haven't taken a comp ... If say someone had physical access to the machine, ... it is possible to recreate the file ... after it has been wiped based on the structure of the disk. ...
      (alt.computer.security)
    • Re: Problem installing Windows XP
      ... will lose all the data on that drive when you delete and recreate the ... Oh and you'll have to format the new partition before you can ... Setup will also step you through that. ... >> I note that you did not report if this disk is the primary ...
      (microsoft.public.windowsxp.setup_deployment)
    • Re: Netbackup x OpenVMS questions ?
      ... needed to recreate that disk drive should it need to be recreated. ... procedures and the restore the data files. ... But the lack of /IMAGE for a system disk is far more problematic not only ... Note also that in the backup of your data files, any files that are alias (set ...
      (comp.os.vms)
    • Re: Are "Shredded" Files Really Gone?
      ... >If say someone had physical access to the machine, ... >after it has been wiped based on the structure of the disk. ... >recreate files which had been written over numerous times. ...
      (alt.computer.security)
    • Re: Floppy drive
      ... attempt to read the disk on comp #2 it opens it correctly. ... I uninstalled the drive and let windows reinstall it...same ... bought a new floppy drive and the same problem remains, i.e., all drives work ...
      (microsoft.public.windowsxp.general)