data shredder

[Steve Flynn]

On Mon, Dec 21, 2009 at 3:52 PM, Rashkae <ubuntu at tigershaunt.com> wrote:
> Steve Flynn wrote:
>> On Mon, Dec 21, 2009 at 1:36 PM, Amedee Van Gasse (ub)
>> <amedee-ubuntu at amedee.be> wrote:
>>
>>> Can you name a few of those forensics softwares? + documentation about how
>>> they actually work and what the conditions are to get usable results?
>>> Preferably something recent, not some outdated standards published by the
>>> USA government (I don't trust foreign governments on that subject, I don't
>>> even trust my own government).
>>
>> In the news recently - COFEE (Computer Online Forensic Evidence Extractor)
>>
>> http://www.google.co.uk/search?q=coffee+forensic+tool should get you
>> started... you can easily find it on the Torrent sites.
>>
> Coffee is not even close to being able to recover data that's been
> overwritten, even by a single pass of zeros.   Even in theory,
> recovering that kind of data would require removing the platter from the
> hard drive and carefully scanning the surface with some star trek
> sounding gizmo microscope, then using software to make a 'best guess'
> about the contents, (not that tricky if the data was written once to a
> pristine drive then overwritten once with zeros, but that's a best case
> scenario for recovery.)

I know Rashkae.

Amadee asked for some examples of forensic software - no more, no less.

I've had the dubious pleasure of attempting to recover data from a
partially degaussed 3490E cartridge using internal IBM software. Not
for the faint of heart.

-- 
Steve
When one person suffers from a delusion it is insanity. When many
people suffer from a delusion it is called religion.

09 F9 11 02 9D 74 E3 5B D8 41 56 C5 63 56 88 C0