Alt(R-TT) wrote:
drc wrote:
Alt(R-TT) wrote:
drc wrote:
http://www.cs.auckland.ac.nz/~pgut001/pubs/secure_del.html
This article is very outdated. For modern hard drives, it's practically unfeasible to recover data even after a single overwriting. And I say "practically" only for the "never say never" rule of life.
If you read the whole article, it discusses this at the end
Actually, it doesn't discuss, it confirms.
Not sure what the difference is...
Point being, if you read the article, it will give a background of concerns with erasing data so that you understand why some people think you need to run the 35-pass overwrite in DBAN (in fact this article is the basis of this belief) AND IT ALSO explains why this is no longer relevant, and why a single overwrite is as good as it gets on modern technology. The author has been adding sections at the end of the article to address newer technology, so the article as a whole is not outdated even though the techniques it is describing don't apply to modern drives.
My intention with posting the Gutmann article is that it is good for someone to understand exactly what people are referring to when they talk about some mythical ability to recover data that has been overwritten, and specifically why this is not possible today, hopefully helping to combat the internet myth about the NSA being able to recover your data unless you do the 35-pass overwrite.
The Article wrote:
In the time since this paper was published, some people have treated the 35-pass overwrite technique described in it more as a kind of voodoo incantation to banish evil spirits than the result of a technical analysis of drive encoding techniques. As a result, they advocate applying the voodoo to PRML and EPRML drives even though it will have no more effect than a simple scrubbing with random data. In fact performing the full 35-pass overwrite is pointless for any drive since it targets a blend of scenarios involving all types of (normally-used) encoding technology, which covers everything back to 30+-year-old MFM methods (if you don't understand that statement, re-read the paper). If you're using a drive which uses encoding technology X, you only need to perform the passes specific to X, and you never need to perform all 35 passes. For any modern PRML/EPRML drive, a few passes of random scrubbing is the best you can do. As the paper says, "A good scrubbing with random data will do about as well as can be expected". This was true in 1996, and is still true now.