[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: test disk from cgsecurity versus data security
Peter_22@xxxxxx wrote:
> Just today I saw "test disk" from http://www.cgsecurity.org/ while being
> at work. I didn´t run it at home on my own disc but my question might be a
> serious concern. As "test disk" is able to restore overwritten/shredded
> (dev/urandom) or erased (dev/zero) partitions, how secure is encrypted
> root as aespipe reads data from one partition, pipes it through aes and
> writes it back to the same partition?
Where does it say that it can recover overwritten sectors?
Matthias Schniedermeyer wrote:
> When you have overriden a sector there is NO WAY for SOFTWARE to get the
> old contents(*).
Uploading new customized DSP firmware to the disk controller may be able to
recover earlier sector data. Data recovery companies doing that probably
have to sign very restrictive non-disclosure agreements to get firmware
sources from disk manufacturers. Distributing such sources under GPL... no
chance.
--
Jari Ruusu 1024R/3A220F51 5B 4B F9 BB D3 3F 52 E9 DB 1D EB E3 24 0E A9 DD
-
Linux-crypto: cryptography in and on the Linux system
Archive: http://mail.nl.linux.org/linux-crypto/