Home page logo
/

bugtraq logo Bugtraq mailing list archives

Paper - Hiding Data in Hard-drive Service Areas
From: Ariel Berkman <aberkman () gmail com>
Date: Tue, 19 Feb 2013 09:30:34 +0200

Hi,

We've recently released a paper discussing the ability to hide data in
hard-drive service areas.
The paper is available for download at:
http://www.recover.co.il/SA-cover/SA-cover.pdf

The introduction section is pasted below:

In this paper we will demonstrate how spinning hard-drives’ service areas
can be used to hide data from the operating-system (or any software using the
standard OS’s API or the standard ATA commands to access the hard-drive).
These reserved areas are used by hard-drive vendors to store modules that in
turn operate the drive, and in a sense, together with the ROM, serve as the
hard-drive’s internal storage and OS. By sending Vendor Specific Commands
(VSCs) directly to the hard-drive, one can manipulate these areas to read
and write data that are otherwise inaccessible. This should not be confused
with DCO or HPA which can be easily detected, removed and accessed via
standard ATA commands.

Thanks,
Ariel.
--
Recover Information Technologies LTD.
http://www.recover.co.il


  By Date           By Thread  

Current thread:
  • Paper - Hiding Data in Hard-drive Service Areas Ariel Berkman (Feb 21)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault