Security Basics mailing list archives

Re: Hard Drive Forensics Question


From: Ansgar Wiechers <bugtraq () planetcobalt net>
Date: Mon, 6 Oct 2008 22:42:59 +0200

On 2008-10-06 Razi Shaban wrote:
Which is more likely to appear on a normal hard drive that has not
been tampered with or set up: Entire blocks of 0s, or random malformed
data?

How does knowing that the disk has been wiped help with recovering the
overwritten data?

Regards
Angar Wiechers
-- 
"All vulnerabilities deserve a public fear period prior to patches
becoming available."
--Jason Coombs on Bugtraq


Current thread: