RE: Program to wipe data from disk free space

From: Rainer Gerhards (rgerhardsat_private)
Date: Sun Aug 10 2003 - 23:18:32 PDT

  • Next message: Volker Tanger: "Re: Using dd.exe to make forensic images of NTFS drives" 

    Hi,

Thanks for your effort, which is appreciated. You should, however, be
aware that a single overwrite is not necessary to really delete
evidence. There is a federal standard (I don't remember the source :()
on how this should be done. I think it specifies you need to overwrite
each position at least seven times, each time with a different pattern.
Otherwise it is possible to recover the data with some advanced methods
(don't ask me which they are, maybe someone can step in?).

Rainer

> -----Original Message-----
> From: koxenrider@sol-biotech.com [mailto:koxenrider@sol-biotech.com] 
> Sent: Saturday, August 09, 2003 5:33 PM
> To: forensicsat_private
> Subject: Program to wipe data from disk free space
> 
> 
> 
> 
> To indulge my paranoia I wrote a little ANSI C program to 
> write random 
> 
> data to a drive.  I wrote it targeted toward Windows, but it 
> should work 
> 
> with minimal editing on any machine with an ANSI C compiler.  
> It can be 
> 
> found at http://www.sol-biotech.com/code/wipeIt/wipeIt.c and 
> I placed it 
> 
> in the public domain.
> 
> -----------------------------------------------------------------
> This list is provided by the SecurityFocus ARIS analyzer 
> service. For more information on this free incident handling, 
> management 
> and tracking system please see: http://aris.securityfocus.com
> 
> 

-----------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

    This archive was generated by hypermail 2b30 : Mon Aug 11 2003 - 12:24:40 PDT