full-disclosure - Re: [OT] Hard drive recovery (WAS CoolWebSearch)

lists.openwall.net		lists / announce john-users owl-users popa3d-users / xvendor oss-security / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4
Open Source and information security mailing list archives

Order Openwall GNU/*/Linux 2.0 on a CD with delivery worldwide

[<prev] [next>] [<thread-prev] [thread-next>] [month] [year] [list]

From: andfarm at teknovis.com (Andrew Farmer)
Subject: Re: [OT] Hard drive recovery (WAS CoolWebSearch)

On 30 Jul 2004, at 18:01, John Kinsella wrote:
> On Fri, Jul 30, 2004 at 05:35:46PM -0400, Raj Varada wrote:
>> Did you really mean "whatever can be done can be UNdone"?
>> How about a format C:? (I haven't seen "unformat" in a very long 
>> time.)
>
> Data can be read off a hard drive until it's been written over like
> what...8 times IIRC?  So, in theory, one "format C:" can be undone. ;)

Well, DOS format doesn't overwrite anything but the metadata by 
default. So
that's pretty easy to undo as long as you have some idea of how data 
was laid
out.

If you're talking about overwritten data, though, you can't recover 
wiped
data without a cleanroom, specialized equipment, and a LOT of time -
especially with newer hard drives, as bit sizes shrink and on-drive 
error
correction and compression get more complex.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: PGP.sig
Type: application/pgp-signature
Size: 186 bytes
Desc: This is a digitally signed message part
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20040730/13e08dd6/PGP.bin