Can you recover from this? Super Guru's only :O)

[guru]

If I had a Seagate drive (7200.10) with customer data on it and started N2 via terminal could you recover data from this drive?

Any thoughts welcome

[Doomer]

if N2 has gone far enough it wipes out SA including zone tables, adaptives, VBAR formula and defect lists
It is a small chance that somebody will be able to regenerate zone tables and defect lists from the CERT logs from the previous selfscan but I think it is not profitable for DR company to do such a case

[networkpc3000]

if you can you will get good profit for your work, congratulation!

[guru]

Hi Doomer... Cool, you know what I talk about.

I would also say that the CERT logs are gone so there is no log of Test 2 or Log 3 ;o)

So, still possible?

[Doomer]

zone tables and defect lists are not formed on Tests 2 and 3, so to recover Zones Tables and Defect Lists we don't need Logs from test 2 and 3 we need logs from other tests unfortunately VBAR formula located in adaptives which are gone on Test 2 but still it is possible (theoreticaly) to find it
It would take a lot of research I think that's not worth it

[guru]

Ok... ALL logs have been erased... N2 has erased the SA but not completed and I wrote the wrong app code to the drive to to put the candle on top of the cake :O)

Now can it be done? :OP

[scratchy]

What about if it's been disolved in a tub of Nitric Acid ?

[Doomer]

Ok... ALL logs have been erased... N2 has erased the SA but not completed and I wrote the wrong app code to the drive to to put the candle on top of the cake :O)

Now can it be done? :OP

Well if you want to go that far
You should create default zone tables and adaptives
After that you can read a data sector using read long terminal command
After that you should decode ECC, get LBA number from ECC-code and use ECC algorithm to restore/check data consistance in a sector and save that sector on a destination drive
Repeat that procedure for all sectors on a drive
it's that easy

[guru]

Ok ok :O) Very good!

What drive can I fk very quickly so that data is not recoverable?

BTW A hammer or degausser is not an option.. Needs to be pure ATA Vendor command or via Terminal

[guru]

read long ter minal! I will be old and die before I recover it :O) :LOL:

[Doomer]

read long ter minal! I will be old and die before I recover it :O) :LOL:

That's why each guru needs a disciple - to finish what master couldn't make

[guru]

kashmar!

Anyway, so.... What drive can I kill quick (Using ATA VU commands)which would make recovery impossible ?

Trying to find a make and maybe model that is very delicate with regard to losing SA area ;o)


(I meant read long via terminal is sloooooooooooooooooooooooooooow)

[scratchy]

Realistically, if you are doing this to certify destruction, you may find yourself in trouble. What we cant do today we may well be able to do tomorrow.

There are techniques that are commonly used where bypassing the firmware is a starting point for recovery. The only trusted way is to overwrite the data area to DTD specs.

There is hardware (e.g. Image Masster http://www.ics-iq.com/index.cfm/action/ ... N=62681577) This one wipes 9 disks at a time - quickly.

<itch>

[guru]

I think we all know that the overwrite of the full disk pack is needed to erase data beyond any wizards out there... :O)As long as there are no re mapped sectors of course :Op

Im just trying to think of a "Quick" way to damage the drive to the fullest extent...without a hammer/degausser or a rather large banana :O)

[DavisMcCarn]

The CIA put them in an incinerator....... 2,500 degrees for 30 minutes?