LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 04-22-2010, 09:43 AM   #16
spampig
Member
 
Registered: Feb 2010
Location: /Earth/UK/England/Hampshire
Distribution: Debian, Ubuntu, CentOS, Slackware
Posts: 262
Blog Entries: 2

Rep: Reputation: 56

The Youtube link posted above may help. At some point in the talk he mentions it and the paper from where it came. I can't find it in a quick look at his site: http://www.myharddrivedied.com/ but a deeper dig around may get you there.
 
Old 04-22-2010, 09:50 AM   #17
H_TeXMeX_H
LQ Guru
 
Registered: Oct 2005
Location: $RANDOM
Distribution: slackware64
Posts: 12,928
Blog Entries: 2

Rep: Reputation: 1301Reputation: 1301Reputation: 1301Reputation: 1301Reputation: 1301Reputation: 1301Reputation: 1301Reputation: 1301Reputation: 1301Reputation: 1301
I know the theory behind how it might be done, but AFAIK it's never been done. I'll keep looking, but I haven't found anything about anyone actually doing it for real.

Are you talking about the infamous:
http://en.wikipedia.org/wiki/Gutmann_method

see criticism section. I agree that it is a voodoo incantation.
 
Old 04-22-2010, 10:18 AM   #18
spampig
Member
 
Registered: Feb 2010
Location: /Earth/UK/England/Hampshire
Distribution: Debian, Ubuntu, CentOS, Slackware
Posts: 262
Blog Entries: 2

Rep: Reputation: 56
That's a good read - thanks.

With the single wipe it is alleged that some forensic recovery is not impossible, but the amount of work and time - versus the reliability of the result would be be interesting to see in the wild. It must get even more complex if the file system is encrypted.

For the average 'sold on eBay' type of drive, it's pretty safe to say a single wipe of any pattern will render data unrecoverable with the caveat of any sectors that are marked as bad during the life of the drive. It may be possible to recover data from them - but again I see nothing more than suggestion or theory on this.

For me the Secure Erase method is a winner in my eyes. It does not consider sectors, it wipes tracks, it's fast and it's to DOD standards.
 
Old 04-22-2010, 10:37 AM   #19
catkin
LQ 5k Club
 
Registered: Dec 2008
Location: Tamil Nadu, India
Distribution: Debian
Posts: 8,578
Blog Entries: 31

Rep: Reputation: 1208Reputation: 1208Reputation: 1208Reputation: 1208Reputation: 1208Reputation: 1208Reputation: 1208Reputation: 1208Reputation: 1208
Quote:
Originally Posted by H_TeXMeX_H View Post
I didn't know they could recover it at all. Any links ? Cuz I would like to see some undeniable proof for this urban myth, that if you wipe once with zeros, the gubmint using uber technology, can still reliably recover something.
From the Secure Erase FAQ (it's a Word document, an interesting read):

Q: Is any data left after a secure erase?

A: Investigations at CMRR at UCSD have shown that a single pass secure erase at lower frequencies results in no remaining data signals and a second erase reduces this signal only slightly more. The resulting data signal to noise ratio (SNR) at the magnetic drive head is below that required to recover data using a disk drive channel1. The only recorded signal left in these experiments is a small amount of highly distorted track edge recording which is extremely difficult to recover data from even if the disk is removed from the drive and tested on a spin-stand.


EDIT: "channel1" is my mis-transcription of "channel" with a reference to Secure Erase of Disk Drive Data, Gordon Hughes and Tom Coughlin, IDEMA Insight 2002, http://www.tomcoughlin.com/techpapers.htm

Last edited by catkin; 04-22-2010 at 10:40 AM.
 
1 members found this post helpful.
Old 04-22-2010, 10:57 AM   #20
H_TeXMeX_H
LQ Guru
 
Registered: Oct 2005
Location: $RANDOM
Distribution: slackware64
Posts: 12,928
Blog Entries: 2

Rep: Reputation: 1301Reputation: 1301Reputation: 1301Reputation: 1301Reputation: 1301Reputation: 1301Reputation: 1301Reputation: 1301Reputation: 1301Reputation: 1301
Quote:
Originally Posted by catkin View Post
EDIT: "channel1" is my mis-transcription of "channel" with a reference to Secure Erase of Disk Drive Data, Gordon Hughes and Tom Coughlin, IDEMA Insight 2002, http://www.tomcoughlin.com/techpapers.htm
That's a very good paper, I will save it for future reference. Well, I guess the conclusion is that if you want to be extra sure, you can do a one or two pass random erase. However, even they say that the error rate for recovering even 1 pass zeroed is quite high.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Best 1TB external hard drive? tommytea Linux - Newbie 2 07-05-2009 02:32 PM
adding another 1TB drive to raid5 array. javaholic Linux - Server 5 08-26-2008 10:59 AM
Ext3 Filesystem overhead on a 1TB drive Lommer Linux - Newbie 7 03-20-2008 08:55 AM
Problems with WD My Book 1TB external drive BWebb Linux - Hardware 2 03-20-2008 01:34 AM
Mac User Completley: Completley New to Linux! HELP! nelio87 Linux - Newbie 2 06-22-2002 09:46 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 08:16 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration