[Dshield] Secure Data Removal

Johannes B. Ullrich jullrich at sans.org
Fri Jun 4 14:39:48 GMT 2004

>  I was wondering
> now how one could be able to retrieve data from a hard
> drive that has been completely overwritten with 0's?
> Or is my assumption wrong?

IMHO, there is a lot of myths about secure vs. insecure
data removal. If you overwrite a disk with 0's once, the
data is gone for all practical purposes. Recovery (if
possible at all) would require the disassembly of the disk
and reading the data with specialized hardware.

In particular if you overwrote the data by mistake and
need to get it back ;-).

CTO SANS Internet Storm Center               http://isc.sans.org
phone: (617) 837 2807                          jullrich at sans.org 

contact details: http://johannes.homepc.org/contact.htm
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://www.dshield.org/pipermail/list/attachments/20040604/2b8822bb/attachment.bin

More information about the list mailing list