I think it's safe to say that none of us really knows what resources
are available to certain organizations to aid in data forensics.
I have personal experience with data recovery, at least peripherally.
A company I worked for was the subject of an attack by a disgruntled
ex-employee who ma
All very interesting, the fact is that a hard drive is a physical
medium and the magnetic field is very malleable. It is very possible
to recover the data even if some random trash has been written over
it. The way hard drives use elaborate algorithyms to 'guess' the
contents with huge accuracy s
Stroller wrote:
> On 2 Feb 2006, at 11:28, Alexander Skwar wrote:
>>>
>>> This is not what normally (or at least, _always_) happens when you
>>> format a hard-drive.
>>
>> Well, depends on the definition of "format". If you
>> define format as "overwrite partition table", than
>> you're right. But
Dale wrote:
> Alexander Skwar wrote:
>>Dale wrote:
>>>Grant wrote:
>>>I think we all know it can be done.
>>>
>>
>>No, we don't.
>>
>
> Yes, some of us do.
Well, some believe it to be possible. But not "we all" do think
so and much less "know" it.
>>>Data recevery people do it too.
>>>
On 2 Feb 2006, at 11:28, Alexander Skwar wrote:
This is not what normally (or at least, _always_) happens when you
format a hard-drive.
Well, depends on the definition of "format". If you
define format as "overwrite partition table", than
you're right. But that's hardly what I'd call "format"
On Thu, 02 Feb 2006 12:32:16 +0100, Alexander Skwar wrote:
> > Governments do it all the time.
> > Data recevery people do it too.
>
> Do they? Why don't they advertise this?
For the same reason the British government sold Enigma machines to
Commonwealth countries for almost thirty years after
Alexander Skwar wrote:
>Dale wrote:
>
>
>>Grant wrote:
>>
>>
>>
>>>Thanks Peter. That is quite contrary to what most of the other posts
>>>in this thread are saying. Those are all just rumors and myths?
>>>
>>>- Grant
>>>
>>>
>>>
>>>
>>>
>>I think we all know it can be done.
>>
Dale wrote:
> Grant wrote:
>
>>
>>Thanks Peter. That is quite contrary to what most of the other posts
>>in this thread are saying. Those are all just rumors and myths?
>>
>>- Grant
>>
>>
>>
>
>
> I think we all know it can be done.
No, we don't.
> Governments do it all the time.
> Data
Grant wrote:
> Thanks Peter. That is quite contrary to what most of the other posts
> in this thread are saying.
Too bad. But it's very much to what makes sense and what
I've heard.
> Those are all just rumors and myths?
I'd say so, yes. Or do you have SOLID FACTS that they are
not rumors?
A
Stroller wrote:
> On 1 Feb 2006, at 18:27, Peter Volkov (pva) wrote:
>
>> On Пнд, 2006-01-30 at 17:03 -0800, Grant wrote:
>>> I've heard that data can be recovered from a formatted hard
>>> diskIs it true?
>>
>> Short answer for your question is... No. It's not true.
> ...
>> suppose you have
Stroller wrote:
> On 31 Jan 2006, at 16:32, Alexander Skwar wrote:
>> Stroller wrote:
>>> ... a data recovery
>>> specialist last year offered to return 17gigs worth of data from a
>>> hard drive that had died containing only 8 gigs of files.
>>
>> Died hard drives are a *COMPLETELY* different matt
On Wed, 1 Feb 2006 21:56:16 -0700, Richard Fish wrote:
> Again, my *guess* is that with a *very* modern drive where the
> manufacturers simply cannot squeeze any more data onto the platter,
> that even the NSA would not be able to recover any data. But it may
> be that is just what they /want/ us
On 2/1/06, Grant <[EMAIL PROTECTED]> wrote:
> Thanks Peter. That is quite contrary to what most of the other posts
> in this thread are saying. Those are all just rumors and myths?
I think for what would be available for you, me, or ${megacorp} to
use, yes, it is rumor and myth. As I mentioned
Grant wrote:
>
>Thanks Peter. That is quite contrary to what most of the other posts
>in this thread are saying. Those are all just rumors and myths?
>
>- Grant
>
>
>
I think we all know it can be done. Governments do it all the time.
Data recevery people do it too. Years ago I worked at
> > I've heard that data can be recovered from a formatted hard
> > disk. Lucky for me I don't have any interest in actually doing this,
> > but I got in an argue\ment with a buddy last night about whether or
> > not it was possible. I'm sure I've read that the government and other
> > well-funde
On 31 Jan 2006, at 16:32, Alexander Skwar wrote:
Stroller wrote:
... a data recovery
specialist last year offered to return 17gigs worth of data from a
hard drive that had died containing only 8 gigs of files.
Died hard drives are a *COMPLETELY* different matter.
The additional 9gigs of dat
On 31 Jan 2006, at 13:19, Schleimer, Ben wrote:
I understand that writing zeros over the file should permanently
delete the data but couldn't the data be cached elsewhere on the
drive...
On 31 Jan 2006, at 13:31, Schleimer, Ben wrote:
I just read the docs for shred and it doesn't guaran
On 1 Feb 2006, at 18:27, Peter Volkov (pva) wrote:
On Пнд, 2006-01-30 at 17:03 -0800, Grant wrote:
I've heard that data can be recovered from a formatted hard
diskIs it true?
Short answer for your question is... No. It's not true.
...
suppose you have deleted file. This operation only
Peter Volkov (pva) wrote:
> On Пнд, 2006-01-30 at 17:03 -0800, Grant wrote:
>> I've heard that data can be recovered from a formatted hard
>> disk. Lucky for me I don't have any interest in actually doing this,
>> but I got in an argue\ment with a buddy last night about whether or
>> not it was po
On Пнд, 2006-01-30 at 17:03 -0800, Grant wrote:
> I've heard that data can be recovered from a formatted hard
> disk. Lucky for me I don't have any interest in actually doing this,
> but I got in an argue\ment with a buddy last night about whether or
> not it was possible. I'm sure I've read that
On 2/1/06, Alexander Skwar <[EMAIL PROTECTED]> wrote:
> Iain Buchanan wrote:
>
> > They both rely on the fact that you can read what _was_ once written to
> > the hard drive by examining the spaces. So that's one method.
>
> Yes, in theory that might be possible - but how comes, that not
> even th
> > Almost everyone seems to agree that recovering data from a formatted
> > drive is possible. What is the process by which this is done? I've
> > read here that:
> >
> > 1. The space between tracks contains historical data information.
> >
> > and:
> >
> > 2. There is a difference between a tra
Iain Buchanan wrote:
> They both rely on the fact that you can read what _was_ once written to
> the hard drive by examining the spaces. So that's one method.
Yes, in theory that might be possible - but how comes, that not
even the data recovery companies advertise this? And also, do
you have so
Uwe Thiem wrote:
> On 31 January 2006 15:19, Schleimer, Ben wrote:
>> I understand that writing zeros over the file should permenately delete the
>> data
>
> Don't believe people telling that.
Why not? I would believe those people.
> The data will still be recoverable
Will it? Why is it, that
On Tue, 2006-01-31 at 17:39 -0800, Grant wrote:
>
> Almost everyone seems to agree that recovering data from a formatted
> drive is possible. What is the process by which this is done? I've
> read here that:
>
> 1. The space between tracks contains historical data information.
>
> and:
>
> 2.
> > I understand that writing zeros over the file should permenately delete the
> > data
>
> Don't believe people telling that. The data will still be recoverable (with
> the right hardware). That is so because overwriting a "0" with a "0" will
> lead to another level of manetic field than overwrit
On 31 January 2006 15:19, Schleimer, Ben wrote:
> I understand that writing zeros over the file should permenately delete the
> data
Don't believe people telling that. The data will still be recoverable (with
the right hardware). That is so because overwriting a "0" with a "0" will
lead to anot
Schleimer, Ben wrote:
> I understand that writing zeros over the file should permenately delete the
> data but couldn't the data be cached elsewhere on the drive, especially with
> journalling filesystems??
Yes, that's pretty much possible. It could also
happen, that the data is on a remapped (d
Stroller wrote:
> On 31 Jan 2006, at 01:03, Grant wrote:
>
>> Hello! I've heard that data can be recovered from a formatted hard
>> disk.
>
> Yes, it's fairly trivial, for someone who cares enough to try, to
> retrieve data from a disk that's merely been formatted.
Oh, is it? Please explain h
Grant wrote:
> Hello! I've heard that data can be recovered from a formatted hard
> disk.
Were did you hear that? I've got a hard time
believing that - as long as a format is somewhat
like "dd if=/dev/zero of=/dev/hda".
> Lucky for me I don't have any interest in actually doing this,
> but I go
In Canada, all government surplus computers have all the HD's removed
and are sent out to be destroyed. I believe the HD's are melted down.
The odd time they miss an HD and the news media have a field day with
it. I have seen several demos where data on an HD that was formatted,
repartitioned and
> Someone will know (I don't) what the density is on a modern platter.
The highest density platters today are close to 100Gbit / square inch.
So no, you won't see the bits with the naked eye!
-Richard
--
gentoo-user@gentoo.org mailing list
On 1/31/06, Iain Buchanan <[EMAIL PROTECTED]> wrote:
> If you "shred" or "wipe" the data (run random data over the disk many
> times, with a bit of magic formulas thrown in) then apparently the FBI /
> CIA / KGB / WTFC has a magnetic data recovery tool to see what bit was
> written before the curre
Iain Buchanan wrote:
>On Tue, 2006-01-31 at 06:56 -0600, Dale wrote:
>
>
>>Iain Buchanan wrote:
>>
>>
>>
>>I have heard the same thing. I have watched some of them on TV get data
>>off some unbelievable drives. Some had bent platters, serious
>>scratches, been formatted a few times etc etc
write the code as cleverly as possible, you are,
by definition, not smart enough to debug it." - Brian W. Kernighan
- Original Message
From: Dale <[EMAIL PROTECTED]>
To: gentoo-user@lists.gentoo.org
Sent: Tue 31 Jan 2006 02:56:25 PM IST
Subject: Re: [gentoo-user] {OT} R
> -Original Message-
> From: Iain Buchanan [mailto:[EMAIL PROTECTED]
> Sent: 31 January 2006 08:11
> To: gentoo-user@lists.gentoo.org
> Subject: Re: [gentoo-user] {OT} Recovering data from a
> formatted hard disk
>
>
> On Tue, 2006-01-31 at 07:27 +, St
, if you write the code as cleverly as
> possible, you are,
> by definition, not smart enough to debug it." -
> Brian W. Kernighan
>
>
>
> - Original Message
> From: Dale <[EMAIL PROTECTED]>
> To: gentoo-user@lists.gentoo.org
> Sent: Tue 31 Jan 2006
On Tue, 2006-01-31 at 06:56 -0600, Dale wrote:
> Iain Buchanan wrote:
>
> >
> >
> >I've heard of government departments filing down the old HD's into
> >little pieces, then mixing them in cement for the next building project.
> >Could be an urban legend though.
> >
> >All of the above is subject t
Iain Buchanan wrote:
>
>
>I've heard of government departments filing down the old HD's into
>little pieces, then mixing them in cement for the next building project.
>Could be an urban legend though.
>
>All of the above is subject to my own bad memory :)
>
>
I have heard the same thing. I hav
On Tue, 2006-01-31 at 07:27 +, Stroller wrote:
> On 31 Jan 2006, at 01:03, Grant wrote:
>
> > Hello! I've heard that data can be recovered from a formatted hard
> > disk.
>
> Yes, it's fairly trivial, for someone who cares enough to try, to
> retrieve data from a disk that's merely been fo
On 31 Jan 2006, at 01:03, Grant wrote:
Hello! I've heard that data can be recovered from a formatted hard
disk.
Yes, it's fairly trivial, for someone who cares enough to try, to
retrieve data from a disk that's merely been formatted. Although I've
never tried to do so myself I regularly
On Tuesday 31 January 2006 01:03, Grant wrote:
> Hello! I've heard that data can be recovered from a formatted hard
> disk. Lucky for me I don't have any interest in actually doing this,
> but I got in an argue\ment with a buddy last night about whether or
> not it was possible. I'm sure I've re
Hello! I've heard that data can be recovered from a formatted hard
disk. Lucky for me I don't have any interest in actually doing this,
but I got in an argue\ment with a buddy last night about whether or
not it was possible. I'm sure I've read that the government and other
well-funded institutio
43 matches
Mail list logo
