On Thu, Mar 27, 2008 at 2:58 PM, Randall R Schulz <rschulz@sonic.net> wrote:
On Thursday 27 March 2008 09:50, Greg Freemyer wrote:
I would love a true reference (from the last 15 years). I have spent many hours looking into the question. The best I have seen is people claiming they can recover a bit here and bit there from modern drives. Not even any full bytes.
I have a NIST document that says labratory based recovery of data is impossible for disk drives 20GB or larger if the have been overwritten with a single pass of data. ie. Any data including all zeros.
That's not too surprising. All the new high-capacity drives use vertical recording and exploit giant magnetoresistance for reading. Thus there's much less magnetic energy associated with each bit recorded in these drives.
If you could give a reference (or some rough identifying information) for that NIST paper, I'd be interested in looking at it.
The url is: http://csrc.nist.gov/publications/nistpubs/800-88/NISTSP800-88_rev1.pdf And the quote in particular. NIST Special Publication 800-88 Guidelines for Media Sanitization August, 2006 "Advancing technology has created a situation that has altered previously held best practices regarding magnetic disk type storage media. Basically the change in track density and the related changes in the storage medium have created a situation where the acts of clearing and purging the media have converged. That is, for ATA disk drives manufactured after 2001 (over 15 GB) clearing by overwriting the media once is adequate to protect the media from both keyboard and laboratory attack." Greg -- Greg Freemyer Litigation Triage Solutions Specialist http://www.linkedin.com/in/gregfreemyer First 99 Days Litigation White Paper - http://www.norcrossgroup.com/forms/whitepapers/99%20Days%20whitepaper.pdf The Norcross Group The Intersection of Evidence & Technology http://www.norcrossgroup.com -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org