Deep Recovery

well you got to be guilty because you keep going on about this msn log, so you obviously know there is something incriminating you have said done via msn linking you to this?
 
They busted down your door? :D

no tear gassing the place and coming in through the windows

ohhh i wanted you to be been committing adultery and now your other half is trying to prove it to squeeze more money out of you/not allow you to get a penny
that would spice up the forums :p

yeah the data should be able to be retrieved see u in 3 to 5
 
Last edited:
The only time data is actually erased is when it is overwritten - but even then it needs to be overwritten about 20 times before high end forensics can no longer piece it together again.

A myth I'm afraid, overwrite it once and it's gone.
 
Not true. I can get data back thats been overwritten up to 5 times using software available from the internet.

Phorensic labs can recover data thats been overwritten many times that.
 
I fail to see why MSN would save each and every chat log from every single person using their network, it's just not viable.
 
Not true. I can get data back thats been overwritten up to 5 times using software available from the internet.

Phorensic labs can recover data thats been overwritten many times that.

Really? Show me this magic software that can somehow intuit what was on a particular sector prior to the current contents. I think you misunderstand the term "overwrite".
 
Really? Show me this magic software that can somehow intuit what was on a particular sector prior to the current contents. I think you misunderstand the term "overwrite".

Nope, I'm fairly sure he doesn't. Hard drives rely on mechanical heads for the writing so if the head is marginally off (and we are talking millionths of an inch levels) then the data block will be overwritten only partially and this can be repeated multiple times which means given enough time, funds and knowledge plus specialised equipment (electron microscopes) it is possible to read off some or all of the data.

I think the US DoD standards are for a 9x pass to be secure, after which point if you are in that much trouble I'd suggest a non-extraditable country and preferably also deep-sixing the offending drive.
 
IIRC, if you do a 'quick' format then the data will be recoverable by software because the only thing overwritten is the partition table.

A full format will overwrite the data, making it unavailable to standard software but still easily recoverable through forensic methods which analyse the physical drive.
 
A myth I'm afraid, overwrite it once and it's gone.
A simple $79 program can recover data from sectors that have been written over, what do you expect software with millions in r&d behind it can do?

The only real way to destroy data on a disk is to phsyicaly destroy it.
 
Really? Show me this magic software that can somehow intuit what was on a particular sector prior to the current contents. I think you misunderstand the term "overwrite".

Ok, whats the definition of term 'overwrite' that makes it impossible for software to recover data.

I've used this software and this software to recover data that has been overwritten by my understanding of the term.
 
Nope, I'm fairly sure he doesn't. Hard drives rely on mechanical heads for the writing so if the head is marginally off (and we are talking millionths of an inch levels) then the data block will be overwritten only partially and this can be repeated multiple times which means given enough time, funds and knowledge plus specialised equipment (electron microscopes) it is possible to read off some or all of the data.

I think the US DoD standards are for a 9x pass to be secure, after which point if you are in that much trouble I'd suggest a non-extraditable country and preferably also deep-sixing the offending drive.

No, he does, there is no software tool that will recover data that has actually been overwritten.

You are referring to sections of a paper produced by Peter Gutmann, which specifically referenced the encoding of data on low density MFM drives, the type we stopped using in the late 80s. I suggest you follow the link and read his epilogue regarding such techniques and modern drives.
http://www.cs.auckland.ac.nz/~pgut001/pubs/secure_del.html
One overwrite is sufficient.
 
Back
Top Bottom