delete forever
in [Windows XP]
|
Prev: printers disappearing
Next: Flash Player
From: Mike S on 18 Jun 2010 08:21 On 6/18/2010 3:45 AM, Jose wrote: > On Jun 17, 11:24 pm, "shank"<sh...(a)tampabay.rr.com> wrote: >> Is there a way to delete files and/or select emails without being recovered >> by forensics? >> >> Assuming yes, is there a way to prevent forensics from detecting if you >> performed a delete action? >> >> thanks > > You must remember that no matter what tool you choose to use, the > forensic recovery person has that tool too (and better ones). > > If I see some "completely remove" tool like Eraser come along, I am > going to get it too and use Eraser on my system and then I am going to > figure out how to recover at least some information from a system that > has been Erased. I will know what an Erased system looks like and > what to do. > > If I suspect you have used Eraser to delete your files, I am going to > already know how it works, what it does, what it doesn't do, what it > leaves behind and where it leaves it. > > I am always going to try to be one step (or maybe leaps and bounds) > ahead of any free Internet tool. > > If you are worried at all about your stuff, then you need to turn the > tables in such a way that you are a step ahead. You would have to > know what I have available (software and/or humans) and do something > that exceeds the capabilities of my resources and remove your data in > such a way that the resources I have will not be able to recover it or > the methods to recover it have not been invented yet. > > Trouble is, you will never know the resources I have, but I probably > already know the resources you have and what they look like and have > already practiced recovering (at least something) from them many, > many times before you even heard of them. Good reply. I just took a few classes at a junior college here and in one of them we talked about how these programs work. IIRC the hdd writes the 1 or 0 to the hdd media but the areas just to the edges of the bit area get magnetized too, and I believe you can overwrite the bit area but the edges will retain some of the charge they had from the value of the previous bit, and the forensic program can detect this. Sorry it's short an any technical details or facts, that's what a guy in our class who had some sort of military technical training said. But it agrees with the previous poster, they have tools we probably can't begin to understand.
From: Mike S on 18 Jun 2010 08:22 On 6/18/2010 4:54 AM, Bob I wrote: > Let face it, you will ALWAYS be wondering if you got it erased!. LOL > shank wrote: >> Is there a way to delete files and/or select emails without being >> recovered by forensics? >> Assuming yes, is there a way to prevent forensics from detecting if >> you performed a delete action? >> thanks
From: Bob I on 18 Jun 2010 08:45 DOD said this in 2001. http://www.google.com/url?sa=t&source=web&cd=7&ved=0CC4QFjAG&url=http%3A%2F%2Fwww.drms.dla.mil%2Fturn-in%2Fusable%2Fcpu-memo-jun01.pdf&rct=j&q=reading+previous+%2Bfiles+by+reversing+the+magnetic+field+on+hard+drive&ei=UmkbTPq0EpLOM8nF8P8M&usg=AFQjCNGNC7aRmO-yXjBlY2t5KCUazjpZZQ Mike S wrote: > On 6/18/2010 4:54 AM, Bob I wrote: > >> Let face it, you will ALWAYS be wondering if you got it erased!. > > > LOL > >> shank wrote: >> >>> Is there a way to delete files and/or select emails without being >>> recovered by forensics? >>> Assuming yes, is there a way to prevent forensics from detecting if >>> you performed a delete action? >>> thanks > >
From: Craig Coope on 18 Jun 2010 08:51 On Thu, 17 Jun 2010 23:24:35 -0400, "shank" <shank(a)tampabay.rr.com> wrote: >Is there a way to delete files and/or select emails without being recovered >by forensics? > >Assuming yes, is there a way to prevent forensics from detecting if you >performed a delete action? > >thanks > Remove HDD. Place in microwave. -- The Zero ST
From: Bob I on 18 Jun 2010 09:19
Craig Coope wrote: > On Thu, 17 Jun 2010 23:24:35 -0400, "shank" <shank(a)tampabay.rr.com> > wrote: > > >>Is there a way to delete files and/or select emails without being recovered >>by forensics? >> >>Assuming yes, is there a way to prevent forensics from detecting if you >>performed a delete action? >> >>thanks >> > > > Remove HDD. Place in microwave. > Replace microwave. |