Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | Re: [BugTraq] Peter Gutmann data deletion theaory? |
|---|---|
| Date: | Sun, 24 Jul 2005 12:15:36 +1200 |
Unlike DRAM and SRAM, Flash etc. has no continual or repetitive amplification function. Traces of previous charges may remain, but I doubt they would be recoverable, except perhaps by the most drastic forensic techniques
I would expect flash memory content to be easily recoverable when opening the chip.
- and even then, each write or erase operation would reduce the remnants further still.
True, but don't put yourself to rest on it. Ever noticed that flash memory is always smaller than the power of two which it is advertised as? Memory is manufctured in matrices, so where is the missing memory? I suggest these two possibilities: memory blocks coming out of manufacture damaged are "turned off" (prevented from being used), a percentage of memory blocks is reserved for defect management. As everything flash uses a simple sort of FAT filesystem on these memories, the same areas get repeatedly used and worn out, rendering the thing useless very early. As a result, I expect flash memory to have defect management similar to hard disks - when you think you're overwriting it, you're in reality writing elsewhere. For either flash or hard disk you'll need to get past internal defect management to sanitise the data. Or physically destroy the memory media - always safest. Volker -- Volker Kuhlmann is possibly list0570 with the domain in header http://volker.dnsalias.net/ Please do not CC list postings to me.
| Previous by Date: | RE: Peter Gutmann data deletion theaory?, dave kleiman |
|---|---|
| Next by Date: | [Full-disclosure] UnixWare 7.1.4 UnixWare 7.1.3 UnixWare 7.1.1 : RPCBind updated to prevent remote Denial of Service attack, please_reply_to_security |
| Previous by Thread: | Re: [BugTraq] Peter Gutmann data deletion theaory?, Robin Whittle |
| Next by Thread: | RE: Peter Gutmann data deletion theaory?, dave kleiman |
| Indexes: | [Date] [Thread] [Top] [All Lists] |