>Date:    Thu, 18 Feb 1999 13:53:11 -0800
>From:    Garry Hamilton <[EMAIL PROTECTED]>
>Subject: Re: Restoring disk data
>
>If you record over data, the original data is
>non-recoverable, except by REALLY expensive
>analog recovery methods (laboratory/spy stuff).

Garry..  I agree with your explanation.

Now, there is a problem that even the "wipe" utilities
do <not> handle..  and, this is an area which can, if
some-one simply want's <any> data from you, well,
it's there.

When you use the Norton wipefile, any version, it does
<not> delete the name-of-the-file-entries in the root-
directory, or the file allocation table (fat); because
that usually screws-up your disk too much.

In other words, you might see something like this, using
Nortons disk editor, and looking at the Root Directory:
________________________________________________________

Note: a @ indicates an erased file

Filename     Date          Cluster   Attribute   Volume
--------     -----         -------   ---------   ------

MY_DISK      01-01-2000    2                     YES

SURVPC.051   02-19-1999    35        A

@ECRET.MSG   09-14-1996    493

--------------------------------------------------------

So, the <Name> (except for the first letter), and <Date>,
<remain>; even if the files' actual <Contents> were "Wiped"
(over-written) from it's physical (cluster) location on the disk.

This may be enough "evidence", depending on the circumstances.

Regards, Gregory.

To unsubscribe from SURVPC send a message to [EMAIL PROTECTED] with 
unsubscribe SURVPC in the body of the message.
Also, trim this footer from any quoted replies.

Reply via email to