StarDestroyer.Net BBS

Ace Pace wrote:Not if you do multiple overwrites.

I read an article written by a guy who worked in the electronic crimes for the FBI who basically said, 1 overwrite is sufficient. After doing that theres really no feasible way of recovering the data because it just doesn't exist anymore. The only reason the software does multiple overwrites these days is a "MY softwares better than yours!!!" kind of attitude.

Zac Naloen wrote:

Ace Pace wrote:Not if you do multiple overwrites.

I read an article written by a guy who worked in the electronic crimes for the FBI who basically said, 1 overwrite is sufficient. After doing that theres really no feasible way of recovering the data because it just doesn't exist anymore. The only reason the software does multiple overwrites these days is a "MY softwares better than yours!!!" kind of attitude.

Correct. If you're using something to overwrite the data, only a single pass is really needed today with such drives. Many will still stick with the 35 times idea, but it's pretty much redundant on all but the tiniest hard disks of yesteryear. You can then safely sell off your old drive and make some cash, though it's notas fun as getting some magnesium ribbon or making thermite to dispose of the platters.

Remember that the issue here isn't "what technical measures can prevent data recovery"; it's that Best Buy promised to destroy the drive but did not. I would be interested to know if:

a. the guy who told them it would be destroyed was full of shit,
b. a corrupt employee/subcontractor charged with destroying drives was actually selling them, or
c. a simple mistake in procedure resulted in the drive being sold instead of destroyed

Either way, hopefully Best Buy will get their act together, fire those responsible, and change their procedures to ensure that it won't happen again. (Maybe they can destroy the drives in front of you while you watch? It would be trustworthy and entertaining!)

There have been instances in the past of people selling on data to do with clients and keeping it covert. It wouldn't surprise me if someone latched on to the idea of doing this same thing with old hard drives. That is precisely why I either keep my old drives locked away, or erase them entirely. Can't trust anybody with such confidential information, the last thing you want is a company memo or your financial details being leaked.

I believe DoD standard when erasing data is to write all 1s then all 0s then all random data, then repeat 7 times.