Charlie said:
I read somewhere that as a drive wears the head to track alignment
"Can" slip far enough that later erasure does not always complete the
job and so with a program that can (say) half step the heads
recovery of some data may be possible.
That was the theory on old drives, on new drives that never really was
an issue. On the old class of drives it was thought to be an issue, and
what you say was thought to be possible, but not with any software
methods, it was thought to be possible with the use of sophisticated
laboratory equipment. That is why the practice of multiple wipes (as
many as 35 wipes!) was advocated and widely used, but even on these old
drives no one was ever capable of recovering data on a properly wiped
hard drive. However, with wobbly floppy diskettes some have actually
proven the technique that you describe.
Also with NTFS there's the somewhat mysterious issue of Alternate
File Streams.
That is a non-issue, on a securely wiped drive there is nothing at all
left on it, the alternate data streams are zero written along with the
files.
Given the number of completely worthless "Security" programs out
there how does one really tell if a drive has been "Securely" wiped.
So I think much of what has been said here is accurate as far as it
goes, but I also think it is impossible to completely rule anything
out.
I reckon superglueing broken platters together is probably as close
to impossible as it's going to get so I will stick with the 4 pound
hammer
The irony of the "sledge hammer" method is that by using the very
sophisticated microscopy methods that that the sledge hammer proponents
claim are "supposed" to "possibly" uncover files on securely wiped
drives it is possible to recover data on pieces of hard drives that are
as little as 1/125 of an inch in size! It would be a daunting task of
astronomical proportion and no one would care to do this on a drive just
for a fishing expedition, but if there was really important information
or evidence known to be on the drive it could be recovered if someone
wanted to pay. That particular scenario is a proven one, recovering
data on broken or bent platers has been done, but it isn't something
that would be done unless there was a real big fish to be caught! For
all practical purposes recovering data on a drive with bent or broken
platters is deemed to be nearly impossible, it would cost a king's
ransom but it is not beyond the means of exotic data recovery to recover
data on bent or broken platters, a properly wiped drive on the other
hand is beyond these exotic data recovery techniques.
If you are paranoid to that point then, yes, the only 100% absolutely
sure method is to do like Ken says and melt the drive! The deal is that
as far as securely wiped drives go no one has ever recovered data on
them. The risk is that the actual wipe might fail because of sloppy
users not using the right software or wipe method or because of
mechanical drive failure. In the case of mechanical failure the wiping
software cannot wipe all the sectors on the drive, however using the SE
commands secure erase software will or should alert the users that
mechanical problems prevent 100% secure erasure. Secure erase
overwrites all the sectors on a drive, including those that have been
marked as damaged or unusable and made unavailable to operating systems.
In fact for the extremely paranoid secure erasure is safer than the
sledge hammer! So your only other alternative is to go to a steel plant
or foundry and pitch the drive in the melting pot! Of course you have
to go to the steel plant and pitch it in the pot yourself, if you are
that concerned that data will be recovered on the drive you will not
trust anyone else with the task.
http://searchsecurity.techtarget.com/expert/KnowledgebaseAnswer/0,289625,sid14_gci1273281,00.html
http://cmrr.ucsd.edu/people/Hughes/CmrrSecureEraseProtocols.pdf
http://cmrr.ucsd.edu/people/Hughes/DataSanitizationTutorial.pdf
http://search.yahoo.com/search?ei=UTF-8&fr=yfp-t-501&cop=mss&p=verify+secure+erasure&x=0&y=0
http://cmrr.ucsd.edu/people/Hughes/SecureErase.shtml
John