any software for ge...
 
Notifications
Clear all

any software for getting secure erased data back?

25 Posts
10 Users
0 Likes
1,601 Views
(@tonyc)
Posts: 27
Eminent Member
 

This article supports the position that it is not possible to recover data that has been over written http//www.nber.org/sys-admin/overwritten-data-guttman.html

I also use and encourage the use of dban. It's fast and has lots of wiping options. For my non-techie friends and family that may have trouble with creating a CD from an image etc., it is possible to wipe a drive using a FULL FORMAT in Windows Vista and Windows 7. See http//support.microsoft.com/kb/941961

The Microsoft document only mentions Windows Vista but it is easy enough to verify that Windows 7 does the same process with a simple test.

TonyC

 
Posted : 14/01/2013 12:13 am
(@williamsonn)
Posts: 85
Trusted Member
Topic starter
 

Dear Sirs thanks for your answers. However me not being an expert, there are things I do not understand.

mscotgrove

One write and your data has gone - unless you are using a 10 year old disk drive, or you have the good/bad luck that the sector has been remapped by the P / G List in the drive

I have not understood what happens, then, If you erase an IDE HDD more than 10 y/o, using a tool like ccleaner, and a 7pass erasing. wink

 
Posted : 14/01/2013 6:58 am
(@williamsonn)
Posts: 85
Trusted Member
Topic starter
 

Is totally erased far beyond recovering or, what happens is what suggets twjolson? In such a case,a 10 y/o , or older hard drive should be erased with a 35pass wiping?

 
Posted : 14/01/2013 7:01 am
(@bithead)
Posts: 1206
Noble Member
 

If you have 10 year old drives around and want to wipe them I would not waste computer time writing 35-passes to the drive, just use the wiebeTECH RWB. It would be much quicker (and satisfying).

 
Posted : 14/01/2013 7:16 am
jhup
 jhup
(@jhup)
Posts: 1442
Noble Member
 

Is totally erased far beyond recovering or, what happens is what suggets twjolson? In such a case,a 10 y/o , or older hard drive should be erased with a 35pass wiping?

. . . Are you going to reuse this 10-year old HDD? If not, why are you wiping it? Just physically destroy it.

 
Posted : 14/01/2013 7:23 am
jaclaz
(@jaclaz)
Posts: 5133
Illustrious Member
 

hello
i though his was not possible but I have read about certain softwares supposedly capable of recovering securely erased devices(from 1 to 7 passes)erased using deleting software like ccleaner.
is this true?

No.

There is NO report ANYWHERE of ANYTHING EVER being recovered from a wiped hard disk (single pass), wiith the ONLY exception of this SINGLE report by PaulSanderson
http//www.forensicfocus.com/Forums/viewtopic/p=6518726/#6518726

The difference is that while with very old hard disks this was possible in theory, with any "recent" hard disk this is not possible, not even in theory.

Search the board for threads with "Guttman" as keyword.

jaclaz

 
Posted : 14/01/2013 3:43 pm
PaulSanderson
(@paulsanderson)
Posts: 651
Honorable Member
 

There is NO report ANYWHERE of ANYTHING EVER being recovered from a wiped hard disk (single pass), wiith the ONLY exception of this SINGLE report by PaulSanderson
http//www.forensicfocus.com/Forums/viewtopic/p=6518726/#6518726

The difference is that while with very old hard disks this was possible in theory, with any "recent" hard disk this is not possible, not even in theory.

Oh, I would say we did it in fact D - just not in a commercially viable way and certainly not for a complete disk or even a major part of a complete disk.

 
Posted : 14/01/2013 3:55 pm
jaclaz
(@jaclaz)
Posts: 5133
Illustrious Member
 

Oh, I would say we did it in fact D - just not in a commercially viable way and certainly not for a complete disk or even a major part of a complete disk.

Sure you did. D
But what you did was a partial recovery from a 650 Mb hard disk that used a particular technology.
The fact that you did not "complete" the project or it did not make it through a "Commercial" or only "viable/replicable" method/product doesn't mean that someone else might not have done the same (and kept silent about it, let's say that some national securilty agency has that same capabilities).

The point I was tying to make is that - limited to a part of a hard disk - you were able to recover some partial data because in theory it was possible, whilst with newer hard disks technology it is not possible anymore, not even in theory.

jaclaz

 
Posted : 14/01/2013 4:09 pm
(@williamsonn)
Posts: 85
Trusted Member
Topic starter
 

jaclaz when you say

´There is NO report ANYWHERE of ANYTHING EVER being recovered from a wiped hard disk (single pass), wiith the ONLY exception of this SINGLE report by PaulSanderson
http//www.forensicfocus.com/Forums/viewtopic/p=6518726/#6518726´

this is also applied and correct for OLD hard drives?

 
Posted : 14/01/2013 4:51 pm
(@williamsonn)
Posts: 85
Trusted Member
Topic starter
 

Is totally erased far beyond recovering or, what happens is what suggets twjolson? In such a case,a 10 y/o , or older hard drive should be erased with a 35pass wiping?

. . . Are you going to reuse this 10-year old HDD? If not, why are you wiping it? Just physically destroy it.

jhup yes, as the hard drive is still in use I wanted to store in it some information, like word documents, pdfs etc. 20GB are more than enough for that.

 
Posted : 14/01/2013 5:01 pm
Page 2 / 3
Share: