The Green Book from the rainbow series discusses this subject and lays
down the standard for such programs.
Gadi (i.e. ge),
geat_private
--------
gevronat_private
PGP Key: 2048/2048 (Size) 0x2D3D6741 (ID).
Fingerprint: 0EB3 00BC 974B 3C2B 336D 6486 ECA5 2D0D 2D3D 6741.
-----Original Message-----
From: Rainer Gerhards [mailto:rgerhardsat_private]
Sent: Sunday, August 10, 2003 11:19 PM
To: koxenrider@sol-biotech.com; forensicsat_private
Subject: RE: Program to wipe data from disk free space
Hi,
Thanks for your effort, which is appreciated. You should, however, be
aware that a single overwrite is not necessary to really delete
evidence. There is a federal standard (I don't remember the source :()
on how this should be done. I think it specifies you need to overwrite
each position at least seven times, each time with a different pattern.
Otherwise it is possible to recover the data with some advanced methods
(don't ask me which they are, maybe someone can step in?).
Rainer
> -----Original Message-----
> From: koxenrider@sol-biotech.com [mailto:koxenrider@sol-biotech.com]
> Sent: Saturday, August 09, 2003 5:33 PM
> To: forensicsat_private
> Subject: Program to wipe data from disk free space
>
>
>
>
> To indulge my paranoia I wrote a little ANSI C program to
> write random
>
> data to a drive. I wrote it targeted toward Windows, but it
> should work
>
> with minimal editing on any machine with an ANSI C compiler.
> It can be
>
> found at http://www.sol-biotech.com/code/wipeIt/wipeIt.c and
> I placed it
>
> in the public domain.
>
> -----------------------------------------------------------------
> This list is provided by the SecurityFocus ARIS analyzer
> service. For more information on this free incident handling,
> management
> and tracking system please see: http://aris.securityfocus.com
>
>
-----------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service. For
more information on this free incident handling, management
and tracking system please see: http://aris.securityfocus.com
-----------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
and tracking system please see: http://aris.securityfocus.com
This archive was generated by hypermail 2b30 : Wed Aug 13 2003 - 06:12:13 PDT