Re: Hard Drive Write Blocker

From: Ryan Russell (ryanat_private)
Date: Wed May 23 2001 - 17:15:15 PDT

  • Next message: erinat_private: "Re: Hard Drive Write Blocker"

    On Tue, 22 May 2001, Erin Kenneally wrote:
    
    > In a nutshell, this adapter is hardware-based and thus works at the physical
    > level to block writes to IDE drives.  The adapter simply accepts all 'write'
    > commands but fails to act upon them.  Specifically, all 'write' commands are
    > trapped through the SCSI command set.  Furthermore, the recent modifications
    > in the firmware continues to block write commands, but reports (spoofs) an
    > acknowledgement to the contrary- i.e., that it has written the requested
    > data- to the requesting application. This allows many Windows backup/imaging
    > programs to continue, without failure -- whereas most will hang after not
    > receiving a signal that the 'write' was completed.
    
    I saw a demo of a similar device from Guidance Software (EnCase) at SANS
    Baltimore last week:
    
    http://www.guidancesoftware.com/encase/fastbloc_promo.htm
    
    Are these based on the same thing, or competing products, or what?
    
    					Ryan
    



    This archive was generated by hypermail 2b30 : Wed May 23 2001 - 19:33:52 PDT