Re: Cops say everything can be pulled off computers,no matter how old,article link
- From: Mike Jones <Not@xxxxxxxxxxx>
- Date: Fri, 20 Feb 2009 13:55:09 GMT
Responding to AZ Nomad:
On Wed, 18 Feb 2009 12:29:28 GMT, Mike Jones <Not@xxxxxxxxxxx> wrote:
Responding to Nomen Nescio:
[..]
Retrieving encrypted information is a proper subset of "retrieving
any and all information."
On what planet?
If it's deleted it no longer exists and there's nothing to retrieve.
So quit playing this childish little semantics game, trying to cover
up the fact that you misread the article and posted a knee jerk
response.
Huh?
A deleted file only has its header chopped off. The data is still there
until something else is written over the disk space it used.
Not if the file is zeroed.
Not if the space is reused.
True, but physical "evidence" on the disk platter itself that the file
was there remains for several overwrites, like footprints in mud on top
of other footprints, and this is beyond simple file deletion, which was
the point I was responding to.
So, simply deleting a file doesn't mean it no longer exists, it just
means its not a file with a header to protect it, a "headless corpse" of
a file in effect, which is more than enough evidence required to conclude
an investigation, be that by legitimate authorities or illegal hackings.
The effectiveness of running over the "scene of the crime" enough times
to obliterate that evidence is dependant on who is doing the
investigation and just what they are seeking to confirm. IOW, how many
dots do they need to confirm other evidences? A lot fewer than some might
be comfortable with I'd suspect.
While the traditional wipeover process might be more effective these days
simply down to the smaller size of data "dots" on the modern HDD platter,
the effectiveness of reading old footprints is also more advanced. Then
there is the legal factor, where the focus seems to be drifing toward
legally assumed guilt rather than innocent by default. That is where even
an accusation by somebody with zero evidence can cost millions in defense
fees in some countries.
It all adds up, and the only effective way to clean a HDD platter is to
physically destroy it. Anything else is only managing risk factors.
A better option would be to avoid contamination in the first place, but
thats another subject.
--
*===( http://www.400monkeys.com/God/
*===( http://principiadiscordia.com/
*===( http://www.zenwalk.org/
.
- Follow-Ups:
- References:
- Prev by Date: Re: To whom it may concern
- Next by Date: 80% of internet users want privacy,article link
- Previous by thread: Re: Cops say everything can be pulled off computers,no matter how old,article link
- Next by thread: Re: Cops say everything can be pulled off computers,no matter how old,article link
- Index(es):
Relevant Pages
|
Loading
