jaclaz when you say
´There is NO report ANYWHERE of ANYTHING EVER being recovered from a wiped hard disk (single pass), wiith the ONLY exception of this SINGLE report by PaulSanderson
http//www.forensicfocus.com/Forums/viewtopic/p=6518726/#6518726´this is also applied and correct for OLD hard drives?
Yes.
I will try again.
PaulSanderson is - to the best of my knowledge - the ONLY (reliable) person that EVER reported having recovered *something* from a wiped (single pass) hard disk.
His ONLY experiment has been on a 650 Mb drive.
The technology that made possible to fit 20 Gb in the same physical size of 3.5" is obviously NOT the same one as that used on a 650 Mb drive.
The report was about MFM/RLL disks.
http//
PRML/EPRML has been widely adopted since the late 1990's
http//
http//
http//
this poses a number of additional obstacles to the approach used, making it - if possible at all - extremely more difficult due to the changes in technology (servo-positioning) and enormously increased area density.
With vertical recording, there is simply no possibility.
http//www.forensicfocus.com/Forums/viewtopic/p=6559417/#6559417
Please read attentively the results of your search for Guttman (and his article INCLUDING the additions) the 35 passes have NEVER made ANY sense.
jaclaz
jhup yes, as the hard drive is still in use I wanted to store in it some information, like word documents, pdfs etc. 20GB are more than enough for that.
Go an buy 2 x 32GB memory chips (one for backup)
Go an buy 2 x 32GB memory chips (one for backup)
Memory chips? 😯
jaclaz
jhup yes, as the hard drive is still in use I wanted to store in it some information, like word documents, pdfs etc. 20GB are more than enough for that.
True, but I'd recommend against storing anything you want to subsequently retrieve on a very old hard drive the cumulative probability of it failing increases as time goes by.
Take mscotgrove's suggestion you can get a 32GB USB thumb drive for about 50 NZD (
Only time when you can recover anything from a disc would be in situations like these
1. The wipe software is defective and reads the harddrive parameters wrong, leaving the beginning or the end of a drive unwiped. That is why software like that need to be tested.
2. The system BIOS hands out the wrong parameters to the program (rare situation that i only have read about).
3. Someone wiped only one partition instead of the whole harddrive.
4. Because of time constraints, someone used a "smart" wipe which only overwrote existing files (allocated clusters).
5. Someone placed something in HPA/DCO which was not detected and wiped.
6. The data was not on the disc at all, it was on a USB stick or something else.
The general rule is that once wiped using a single pass - the data is gone.