Ethical Hacking Training at InfoSec Institute Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | Re: DCO discovery & removal, capabilities of imaging & wiping tools |
|---|---|
| Date: | Fri, 13 May 2005 21:54:56 +0200 |
Thanks for your frankness, Thor, and for the fast response in fixing the problem. Being straight encourages trust... Best wishes Mark Furner On Thursday 12 May 2005 18:21, "Thor Arne Johansen <thorj@ibas.no>" may have written: ->In-Reply-To: <4281C818.2080803@foi.se> -> ->Arne Vidström writes: ->> ->>Another really bad thing is that disk wipe tools do not wipe a disk with ->>a DCO set on it. For example, the very common tool ExpertEraser 2.0 from ->>IBAS can be tricked into wiping as little of a disk as wished by setting ->>a DCO on the disk before the wipe. ->> -> -> ->I hope this is not considered spamming the group. I just want to make sure the community has the correct information regarding our product ExpertEraser. -> ->It is true as Vidström claims that EE version 2.0 lack support for DCO (as do most competing products). -> ->When we became aware of this weakness (26.04.2005) we investigated, and corrected the problem. All versions shipped after this friday (13.05.2005) will support DCO. -> ->Now one could (and should) argue that we should have known about DCO from the moment it was proposed in the t13 commitee. Our response to that is that we are not happy with allowing this miss to happen. In fact we are downright embarressed, and will make every effort to prevent anything similar from happening in the future. -> ->So, even though we are not proud of our DCO miss, the fact is that ExpertEraser now supports DCO. -> ->-- -> ->Thor Arne Johansen ->Technical Director & CTO ->Ibas AS -> ->----------------------------------------------------------------- ->This list is provided by the SecurityFocus ARIS analyzer service. ->For more information on this free incident handling, management ->and tracking system please see: http://aris.securityfocus.com -> -> -- Mark Furner Scheideggstr. 14 8400 Winterthur Switzerland ++41 (0)52 233 05 61 ++41 (0)78 641 15 92 mark.furner@gmx.net mfurner@hispeed.ch ----------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | 2005 DFRWS Update, Gary Palmer |
|---|---|
| Next by Date: | Journal of Digital Investigation and DFRWS, eco |
| Previous by Thread: | Re: DCO discovery & removal, capabilities of imaging & wiping tools, Thor Arne Johansen |
| Next by Thread: | Generic read-only IDE driver for Windows?, Jyri Hovila |
| Indexes: | [Date] [Thread] [Top] [All Lists] |