Home page logo

fulldisclosure logo Full Disclosure mailing list archives

Re: [OT] Hard drive recovery (WAS CoolWebSearch)
From: Andrew Farmer <andfarm () teknovis com>
Date: Fri, 30 Jul 2004 18:42:04 -0700

On 30 Jul 2004, at 18:01, John Kinsella wrote:
On Fri, Jul 30, 2004 at 05:35:46PM -0400, Raj Varada wrote:
Did you really mean "whatever can be done can be UNdone"?
How about a format C:? (I haven't seen "unformat" in a very long time.)

Data can be read off a hard drive until it's been written over like
what...8 times IIRC?  So, in theory, one "format C:" can be undone. ;)

Well, DOS format doesn't overwrite anything but the metadata by default. So that's pretty easy to undo as long as you have some idea of how data was laid

If you're talking about overwritten data, though, you can't recover wiped
data without a cleanroom, specialized equipment, and a LOT of time -
especially with newer hard drives, as bit sizes shrink and on-drive error
correction and compression get more complex.

Attachment: PGP.sig
Description: This is a digitally signed message part

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]