Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Bugtraq
[Top] [All Lists]

Re: Peter Gutmann data deletion theaory?

Subject: Re: Peter Gutmann data deletion theaory?
Date: Sat, 23 Jul 2005 10:27:54 +0200

His theory no longer does hold true. His 1996 paper is available at
http://www.cs.auckland.ac.nz/~pgut001/pubs/secure_del.html, targeting
MFM and RLL disk technology, where a typical 5.25" disk held 20-80MB
(yes, MEGAbyte, not GB). His recommendations were based on old magnetic
disc technology where each bit was represented by the magnetical
orientation on the platter (north=1, south=0). After that came other
technologies, where bits are defined by changes of the magnetic field
even down to probabilistic field measurements - which allowes tighter
data packing but rendered the base of his recommendations useless.

Overwriting the data a couple of times seems to be relatively effective
for modern disks.

In my opninion, the best way to destroy your data is to keep it
encrypted and then destroy the keys.

Recovery will succeed in only recovering a fraction of the data;
but with an unknown key and a typical encryption algorithm where
a single bit changed in the input changes all bits in the output,
recovery will need to find quite a bit more than the 1 bit per byte
required to recover typical text.

OTOH I have seen one company with a *really* thorough disk & tape 
cleaning technique: 

      1. writing zeroes all over
      2. low level format
      3. shredding the disc drive into small pieces
      4. magnet treatment of the scrap metal
      5. burning in their own waste incinerating plant


Note that many of the people using such technologies do this
to prevent against future breakthrouhgs in recovery technology.
So it's required only for data with a long half-life.

Casper

<Prev in Thread] Current Thread [Next in Thread>