Results 1 to 6 of 6

Thread: Total wipe out data

  1. #1

    Total wipe out data

    Dear Antionline Members,

    I just want to ask if there is any tools or procedures that can wipe out data in harddisk so that any deleted data cannot recovered.

    Thanks,

  2. #2
    Senior Member t34b4g5's Avatar
    Join Date
    Sep 2003
    Location
    Australia.
    Posts
    2,391

    Question

    pull the drive apart, and pull the platters out and smash 'em into millions of pieces.

    do a google search for
    Darik Horn's DBAN (Darik's Boot and Nuke)


    Last edited by t34b4g5; July 29th, 2007 at 09:53 AM.

  3. #3
    Senior Member nihil's Avatar
    Join Date
    Jul 2003
    Location
    United Kingdom: Bridlington
    Posts
    17,188
    Hello c0redump, and welcome to AO.

    I just want to ask if there is any tools or procedures that can wipe out data in harddisk so that any deleted data cannot recovered.
    1. Physical destruction. The drives are crushed, pulverised (reduced to powder) then incinerated or dissolved in acid. You do the same to the RAM as well.

    2. Remove platens, wipe them in a bulk handling electro-magnet then incinerate them.

    3. Electronically wipe them. This involves writing patterns of zeros and ones over the original data.

    The theory is that you can assume that data can be recovered unless physically destroyed. Dr. Peter Gutmann wrote his treatise in 1998......... and reflects the HDD technology of that era. His theory remains just that, a theory. Some partial recovery has been demonstrated in carefully controlled and orchestrated laboratory conditions, but in real life this is CSI/NCIS bullcrap. If you want to learn more, just Google "magnetic remnance" and "track overlay"

    Just look in the commercial marketplace? nobody offers the service......... and data recovery is a highly lucrative market

    If you overwrite the data once, it is gone for all practical purposes, and certainly cannot be recovered with a software application. Three times is DoD-22M compliant and 7 would be a practical certainty. Anymore and you are either paranoid or you don't know what you are doing.......... you should have used methods #1 or #2 supra

    What you need to be sure of is that you wiped all the data, and all instances of it. Think of backups, temporary files, cache files, MRUs, page files and so on. This is how overrated applications like EnCase get their information. Wipe it properly and they are useless.

    Tools?

    1. Darik's "Boot and Nuke" (DBAN)

    http://dban.sourceforge.net/

    2. "Eraser"

    http://www.tolvanen.com/eraser/


    Remember, it is not good practice to attempt to wipe from within the operating system drive itself. You need to do it from external media or with the target drive as a slave.

    EDIT:


    Physical data recovery requires:

    1. A "clean room"
    2. Sophisticated equipment
    3. Highly trained personnel
    4. Complex analysis software
    5. Massive computing power
    6. A lot of time

    Look at "electron tunneling microscopy" and you will get the point. If you are examining at that level of detail it isn't long before gigabytes become terabytes.
    Last edited by nihil; July 29th, 2007 at 10:56 AM.

  4. #4
    I just want to wipe out the new data in MFT .
    I tried many tools but still the new data in MFT can recovered.
    Last edited by c0redump; July 29th, 2007 at 01:54 PM.

  5. #5
    AO Curmudgeon rcgreen's Avatar
    Join Date
    Nov 2001
    Posts
    2,716
    The most important thing is, if you have sensitive data,
    do not use a Microsoft operating system.
    Even the experts do not know how many hidden
    ghost copies exist of stuff like browser cache, emails
    directories and whatnot. These extra copies assist the
    "magic" that makes the OS so user friendly, but if you
    are trying to run an illegal gambling racket or a kiddie
    porn server, you better suspend the box over a vat
    of hydrofluoric acid on a thin string Snip it when
    the SWAT team batters the door down.
    I came in to the world with nothing. I still have most of it.

  6. #6
    Senior Member nihil's Avatar
    Join Date
    Jul 2003
    Location
    United Kingdom: Bridlington
    Posts
    17,188
    I just want to wipe out the new data in MFT .
    I tried many tools but still the new data in MFT can recovered.
    And just why would that be a problem, and just what data are in the master file table?

    All I can suggest is that you are up to no good as there is nothing "personal" in the MFT...... but it might be used to trace those responsible for misdeeds................?

    This is a security site..............we do not advise **** **** wannabees. You had better justify your request pretty quickly......................

    Social engineering attempted by retards.............. oh yeah, I just love that............ kinda gives me a justification for producing thermonuclear devices.

    EDIT:

    The most important thing is, if you have sensitive data,
    do not use a Microsoft operating system.

    Testicles!.....and you do know why that is RCG
    Last edited by nihil; July 29th, 2007 at 08:31 PM.

Similar Threads

  1. Windows Error Messages
    By cheyenne1212 in forum Miscellaneous Security Discussions
    Replies: 7
    Last Post: February 1st, 2012, 02:51 PM
  2. Port List
    By ThePreacher in forum Miscellaneous Security Discussions
    Replies: 17
    Last Post: December 14th, 2006, 09:37 PM
  3. Newbies, list of many words definitions.
    By -DaRK-RaiDeR- in forum Newbie Security Questions
    Replies: 9
    Last Post: December 14th, 2002, 08:38 PM
  4. Information Leakage from Optical Emanations
    By E5C4P3 in forum Miscellaneous Security Discussions
    Replies: 5
    Last Post: March 7th, 2002, 07:35 AM
  5. Traceroute: under the hood
    By antihaxor in forum Non-Security Archives
    Replies: 0
    Last Post: January 24th, 2002, 05:42 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •