mailing list archives
Re: Interesting One
From: "Pablo Gietz" <pablo.gietz () nuevobersa com ar>
Date: Fri, 1 Nov 2002 16:12:32 -0300
I think that if any data would be recovered after rewritten 30 times, we can
expect a disk of 20GB have 600GB of data to be recovered. Also we need to
know the correct nth version of the FAT in order to recover clusters in the
right order. I think this is really difficult to do.
Pablo A. C. Gietz
Jefe de Seguridad Informática
Nuevo Banco de Entre Ríos S.A.
Te.: 0343 - 4201351
----- Original Message -----
From: "Dave Adams" <dadams () johncrowley co uk>
To: <security-basics () security-focus com>
Sent: Monday, October 28, 2002 7:06 PM
Subject: Interesting One
I had an interesting conversation today with someone from FAST
Against Software Theft) They pretend not to be a snitch wing of the BSA.
Anyway, to get to the point, the guy that came to see me said that their
forensics guys could read data off a hard drive that had been written
up to thirty times. I find this very hard to believe and told him I
he was mistaken but the guy was adamant that it could be done. My
is, does anyone have any views on this, or, can anyone point me to a
of information where I can get the facts on exactly how much data can be
retrieved off a hard drive and under what conditions etc etc.
This message (and any associated files) is intended only for the
use of the individual or entity to which it is addressed and may
contain information that is confidential, subject to copyright or
constitutes a trade secret. If you are not the intended recipient
you are hereby notified that any dissemination, copying or
distribution of this message, or files associated with this message,
is strictly prohibited. If you have received this message in error,
please notify us immediately by replying to the message and deleting
it from your computer. Messages sent to and from
John Crowley (Maidstone) Ltd may be monitored.
Internet communications cannot be guaranteed to be secure or error-free
as information could be intercepted, corrupted, lost, destroyed, arrive
late or incomplete, or contain viruses. Therefore, we do not accept
responsibility for any errors or omissions that are present in this
message, or any attachment, that have arisen as a result of e-mail
transmission. If verification is required, please request a hard-copy
version. Any views or opinions presented are solely those of the author
and do not necessarily represent those of John Crowley (Maidstone) Ltd.
- RE: Interesting One, (continued)