Re: [gentoo-user] {OT} Recovering data from a formatted hard disk

2006-02-02 Thread Neil Bothwick
On Wed, 1 Feb 2006 21:56:16 -0700, Richard Fish wrote: Again, my *guess* is that with a *very* modern drive where the manufacturers simply cannot squeeze any more data onto the platter, that even the NSA would not be able to recover any data. But it may be that is just what they /want/ us to

Re: [gentoo-user] {OT} Recovering data from a formatted hard disk

2006-02-02 Thread Alexander Skwar
Stroller wrote: On 31 Jan 2006, at 16:32, Alexander Skwar wrote: Stroller wrote: ... a data recovery specialist last year offered to return 17gigs worth of data from a hard drive that had died containing only 8 gigs of files. Died hard drives are a *COMPLETELY* different matter. The

Re: [gentoo-user] {OT} Recovering data from a formatted hard disk

2006-02-02 Thread Alexander Skwar
Stroller wrote: On 1 Feb 2006, at 18:27, Peter Volkov (pva) wrote: On Пнд, 2006-01-30 at 17:03 -0800, Grant wrote: I've heard that data can be recovered from a formatted hard diskIs it true? Short answer for your question is... No. It's not true. ... suppose you have deleted file.

Re: [gentoo-user] {OT} Recovering data from a formatted hard disk

2006-02-02 Thread Alexander Skwar
Grant wrote: Thanks Peter. That is quite contrary to what most of the other posts in this thread are saying. Too bad. But it's very much to what makes sense and what I've heard. Those are all just rumors and myths? I'd say so, yes. Or do you have SOLID FACTS that they are not rumors?

Re: [gentoo-user] {OT} Recovering data from a formatted hard disk

2006-02-02 Thread Alexander Skwar
Dale wrote: Grant wrote: Thanks Peter. That is quite contrary to what most of the other posts in this thread are saying. Those are all just rumors and myths? - Grant I think we all know it can be done. No, we don't. Governments do it all the time. Data recevery people do it

Re: [gentoo-user] {OT} Recovering data from a formatted hard disk

2006-02-02 Thread Dale
Alexander Skwar wrote: Dale wrote: Grant wrote: Thanks Peter. That is quite contrary to what most of the other posts in this thread are saying. Those are all just rumors and myths? - Grant I think we all know it can be done. No, we don't. Yes, some of us

Re: [gentoo-user] {OT} Recovering data from a formatted hard disk

2006-02-02 Thread Neil Bothwick
On Thu, 02 Feb 2006 12:32:16 +0100, Alexander Skwar wrote: Governments do it all the time. Data recevery people do it too. Do they? Why don't they advertise this? For the same reason the British government sold Enigma machines to Commonwealth countries for almost thirty years after they

Re: [gentoo-user] {OT} Recovering data from a formatted hard disk

2006-02-02 Thread Stroller
On 2 Feb 2006, at 11:28, Alexander Skwar wrote: This is not what normally (or at least, _always_) happens when you format a hard-drive. Well, depends on the definition of format. If you define format as overwrite partition table, than you're right. But that's hardly what I'd call format. I

Re: [gentoo-user] {OT} Recovering data from a formatted hard disk

2006-02-02 Thread Alexander Skwar
Dale wrote: Alexander Skwar wrote: Dale wrote: Grant wrote: I think we all know it can be done. No, we don't. Yes, some of us do. Well, some believe it to be possible. But not we all do think so and much less know it. Data recevery people do it too. Do they? Why don't they

Re: [gentoo-user] {OT} Recovering data from a formatted hard disk

2006-02-02 Thread Alexander Skwar
Stroller wrote: On 2 Feb 2006, at 11:28, Alexander Skwar wrote: This is not what normally (or at least, _always_) happens when you format a hard-drive. Well, depends on the definition of format. If you define format as overwrite partition table, than you're right. But that's hardly what

Re: [gentoo-user] {OT} Recovering data from a formatted hard disk

2006-02-02 Thread Ian Kester-Haney
All very interesting, the fact is that a hard drive is a physical medium and the magnetic field is very malleable. It is very possible to recover the data even if some random trash has been written over it. The way hard drives use elaborate algorithyms to 'guess' the contents with huge accuracy

Re: [gentoo-user] {OT} Recovering data from a formatted hard disk

2006-02-02 Thread Chris Woods
I think it's safe to say that none of us really knows what resources are available to certain organizations to aid in data forensics. I have personal experience with data recovery, at least peripherally. A company I worked for was the subject of an attack by a disgruntled ex-employee who

Re: [gentoo-user] {OT} Recovering data from a formatted hard disk

2006-02-01 Thread Alexander Skwar
Iain Buchanan wrote: They both rely on the fact that you can read what _was_ once written to the hard drive by examining the spaces. So that's one method. Yes, in theory that might be possible - but how comes, that not even the data recovery companies advertise this? And also, do you have

Re: [gentoo-user] {OT} Recovering data from a formatted hard disk

2006-02-01 Thread Grant
Almost everyone seems to agree that recovering data from a formatted drive is possible. What is the process by which this is done? I've read here that: 1. The space between tracks contains historical data information. and: 2. There is a difference between a track written with a

Re: [gentoo-user] {OT} Recovering data from a formatted hard disk

2006-02-01 Thread Richard Fish
On 2/1/06, Alexander Skwar [EMAIL PROTECTED] wrote: Iain Buchanan wrote: They both rely on the fact that you can read what _was_ once written to the hard drive by examining the spaces. So that's one method. Yes, in theory that might be possible - but how comes, that not even the data

Re: [gentoo-user] {OT} Recovering data from a formatted hard disk

2006-02-01 Thread Peter Volkov (pva)
On Пнд, 2006-01-30 at 17:03 -0800, Grant wrote: I've heard that data can be recovered from a formatted hard disk. Lucky for me I don't have any interest in actually doing this, but I got in an argue\ment with a buddy last night about whether or not it was possible. I'm sure I've read that

Re: [gentoo-user] {OT} Recovering data from a formatted hard disk

2006-02-01 Thread Stroller
On 31 Jan 2006, at 13:19, Schleimer, Ben wrote: I understand that writing zeros over the file should permanently delete the data but couldn't the data be cached elsewhere on the drive... On 31 Jan 2006, at 13:31, Schleimer, Ben wrote: I just read the docs for shred and it doesn't

Re: [gentoo-user] {OT} Recovering data from a formatted hard disk

2006-02-01 Thread Stroller
On 31 Jan 2006, at 16:32, Alexander Skwar wrote: Stroller wrote: ... a data recovery specialist last year offered to return 17gigs worth of data from a hard drive that had died containing only 8 gigs of files. Died hard drives are a *COMPLETELY* different matter. The additional 9gigs of

Re: [gentoo-user] {OT} Recovering data from a formatted hard disk

2006-02-01 Thread Grant
I've heard that data can be recovered from a formatted hard disk. Lucky for me I don't have any interest in actually doing this, but I got in an argue\ment with a buddy last night about whether or not it was possible. I'm sure I've read that the government and other well-funded

Re: [gentoo-user] {OT} Recovering data from a formatted hard disk

2006-02-01 Thread Dale
Grant wrote: Thanks Peter. That is quite contrary to what most of the other posts in this thread are saying. Those are all just rumors and myths? - Grant I think we all know it can be done. Governments do it all the time. Data recevery people do it too. Years ago I worked at a

Re: [gentoo-user] {OT} Recovering data from a formatted hard disk

2006-02-01 Thread Richard Fish
On 2/1/06, Grant [EMAIL PROTECTED] wrote: Thanks Peter. That is quite contrary to what most of the other posts in this thread are saying. Those are all just rumors and myths? I think for what would be available for you, me, or ${megacorp} to use, yes, it is rumor and myth. As I mentioned

Re: [gentoo-user] {OT} Recovering data from a formatted hard disk

2006-01-31 Thread Iain Buchanan
On Tue, 2006-01-31 at 07:27 +, Stroller wrote: On 31 Jan 2006, at 01:03, Grant wrote: Hello! I've heard that data can be recovered from a formatted hard disk. Yes, it's fairly trivial, for someone who cares enough to try, to retrieve data from a disk that's merely been formatted.

Re: [gentoo-user] {OT} Recovering data from a formatted hard disk

2006-01-31 Thread Dale
Iain Buchanan wrote: I've heard of government departments filing down the old HD's into little pieces, then mixing them in cement for the next building project. Could be an urban legend though. All of the above is subject to my own bad memory :) I have heard the same thing. I have

Re: [gentoo-user] {OT} Recovering data from a formatted hard disk

2006-01-31 Thread Iain Buchanan
On Tue, 2006-01-31 at 06:56 -0600, Dale wrote: Iain Buchanan wrote: I've heard of government departments filing down the old HD's into little pieces, then mixing them in cement for the next building project. Could be an urban legend though. All of the above is subject to my own bad

Re: [gentoo-user] {OT} Recovering data from a formatted hard disk

2006-01-31 Thread Schleimer, Ben
the code as cleverly as possible, you are, by definition, not smart enough to debug it. - Brian W. Kernighan - Original Message From: Dale [EMAIL PROTECTED] To: gentoo-user@lists.gentoo.org Sent: Tue 31 Jan 2006 02:56:25 PM IST Subject: Re: [gentoo-user] {OT} Recovering data from a formatted

Re: [gentoo-user] {OT} Recovering data from a formatted hard disk

2006-01-31 Thread Dale
Iain Buchanan wrote: On Tue, 2006-01-31 at 06:56 -0600, Dale wrote: Iain Buchanan wrote: I have heard the same thing. I have watched some of them on TV get data off some unbelievable drives. Some had bent platters, serious scratches, been formatted a few times etc etc etc, After

Re: [gentoo-user] {OT} Recovering data from a formatted hard disk

2006-01-31 Thread Richard Fish
On 1/31/06, Iain Buchanan [EMAIL PROTECTED] wrote: If you shred or wipe the data (run random data over the disk many times, with a bit of magic formulas thrown in) then apparently the FBI / CIA / KGB / WTFC has a magnetic data recovery tool to see what bit was written before the current bit

Re: [gentoo-user] {OT} Recovering data from a formatted hard disk

2006-01-31 Thread Richard Fish
Someone will know (I don't) what the density is on a modern platter. The highest density platters today are close to 100Gbit / square inch. So no, you won't see the bits with the naked eye! -Richard -- gentoo-user@gentoo.org mailing list

Re: [gentoo-user] {OT} Recovering data from a formatted hard disk

2006-01-31 Thread Alexander Skwar
Grant wrote: Hello! I've heard that data can be recovered from a formatted hard disk. Were did you hear that? I've got a hard time believing that - as long as a format is somewhat like dd if=/dev/zero of=/dev/hda. Lucky for me I don't have any interest in actually doing this, but I got in

Re: [gentoo-user] {OT} Recovering data from a formatted hard disk

2006-01-31 Thread Alexander Skwar
Stroller wrote: On 31 Jan 2006, at 01:03, Grant wrote: Hello! I've heard that data can be recovered from a formatted hard disk. Yes, it's fairly trivial, for someone who cares enough to try, to retrieve data from a disk that's merely been formatted. Oh, is it? Please explain how!

Re: [gentoo-user] {OT} Recovering data from a formatted hard disk

2006-01-31 Thread Uwe Thiem
On 31 January 2006 15:19, Schleimer, Ben wrote: I understand that writing zeros over the file should permenately delete the data Don't believe people telling that. The data will still be recoverable (with the right hardware). That is so because overwriting a 0 with a 0 will lead to another

Re: [gentoo-user] {OT} Recovering data from a formatted hard disk

2006-01-31 Thread Grant
I understand that writing zeros over the file should permenately delete the data Don't believe people telling that. The data will still be recoverable (with the right hardware). That is so because overwriting a 0 with a 0 will lead to another level of manetic field than overwriting a 1

Re: [gentoo-user] {OT} Recovering data from a formatted hard disk

2006-01-31 Thread Iain Buchanan
On Tue, 2006-01-31 at 17:39 -0800, Grant wrote: Almost everyone seems to agree that recovering data from a formatted drive is possible. What is the process by which this is done? I've read here that: 1. The space between tracks contains historical data information. and: 2. There is

Re: [gentoo-user] {OT} Recovering data from a formatted hard disk

2006-01-31 Thread Alexander Skwar
Uwe Thiem wrote: On 31 January 2006 15:19, Schleimer, Ben wrote: I understand that writing zeros over the file should permenately delete the data Don't believe people telling that. Why not? I would believe those people. The data will still be recoverable Will it? Why is it, that there

Re: [gentoo-user] {OT} Recovering data from a formatted hard disk

2006-01-30 Thread Mike Williams
On Tuesday 31 January 2006 01:03, Grant wrote: Hello!  I've heard that data can be recovered from a formatted hard disk.  Lucky for me I don't have any interest in actually doing this, but I got in an argue\ment with a buddy last night about whether or not it was possible.  I'm sure I've read