Re: test disk from cgsecurity versus data security

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Peter_22@xxxxxx wrote:
> Just today I saw "test disk" from http://www.cgsecurity.org/ while being
> at work. I didn´t run it at home on my own disc but my question might be a
> serious concern. As "test disk" is able to restore overwritten/shredded
> (dev/urandom) or erased (dev/zero) partitions, how secure is encrypted
> root as aespipe reads data from one partition, pipes it through aes and
> writes it back to the same partition?

Where does it say that it can recover overwritten sectors?

Matthias Schniedermeyer wrote:
> When you have overriden a sector there is NO WAY for SOFTWARE to get the
> old contents(*).

Uploading new customized DSP firmware to the disk controller may be able to
recover earlier sector data. Data recovery companies doing that probably
have to sign very restrictive non-disclosure agreements to get firmware
sources from disk manufacturers. Distributing such sources under GPL... no
chance.

-- 
Jari Ruusu  1024R/3A220F51 5B 4B F9 BB D3 3F 52 E9  DB 1D EB E3 24 0E A9 DD

-
Linux-crypto:  cryptography in and on the Linux system
Archive:       http://mail.nl.linux.org/linux-crypto/



[Index of Archives]     [Kernel]     [Linux Crypto]     [Gnu Crypto]     [Gnu Classpath]     [Netfilter]     [Bugtraq]
  Powered by Linux