flat assembler
Message board for the users of flat assembler.

Index > Windows > HDD format

Author
Thread Post new topic Reply to topic
Kermil



Joined: 26 Oct 2005
Posts: 35
Location: Russia
Kermil
How Can I erase all data from HDD that nobody can recovery it? Program must work in running Windows XP or Window 2000. What is the method for deleting?
Post 28 Feb 2007, 09:08
View user's profile Send private message ICQ Number Reply with quote
bogdanontanu



Joined: 07 Jan 2004
Posts: 403
Location: Sol. Earth. Europe. Romania. Bucuresti
bogdanontanu
The method is like this:

1) Carefully extract the HDD from the PC case.
2) Smash the HDD with a big hammer repeatedly until it turns into smaller pieces.
3) Put the HDD pieces into a open flame owen preheated at 2500 degrees Celsius
4) Leave the pieces cook for about 12 hours at 2000 degrees Celsius.
5)collect the ashes and disperse them over the ocean

This should do it.

Otherwise recovery specialists might still recover bits and pieces of information by using an electronic microscope or out of track reading equipment.
Post 28 Feb 2007, 11:43
View user's profile Send private message Visit poster's website Reply with quote
HyperVista



Joined: 18 Apr 2005
Posts: 691
Location: Virginia, USA
HyperVista
bogdanontanu - Laughing , but so true!

Quote:
The method is like this:

1) Carefully extract the HDD from the PC case.
2) Smash the HDD with a big hammer repeatedly until it turns into smaller pieces.
3) Put the HDD pieces into a open flame owen preheated at 2500 degrees Celsius
4) Leave the pieces cook for about 12 hours at 2000 degrees Celsius.
5)collect the ashes and disperse them over the ocean

This should do it.


Here's an interesting article about some security firm purchasing hard drives and other memory devices on e-bay and analyzing them to find personal data.

http://news.bbc.co.uk/2/hi/technology/4229550.stm

From this article:
Quote:
If users were worried about potentially sensitive data, said Mr Steggles, they should use a professional forensics firm to erase it

"Alternatively," he said "they could smash it to bits."
Post 28 Feb 2007, 12:34
View user's profile Send private message Visit poster's website Reply with quote
Kermil



Joined: 26 Oct 2005
Posts: 35
Location: Russia
Kermil
Guys, if I write some data over the existing data, the data has to disappear or am I wrong? What is the principle of operation of programs which secure clear the files?
Post 28 Feb 2007, 12:51
View user's profile Send private message ICQ Number Reply with quote
Kermil



Joined: 26 Oct 2005
Posts: 35
Location: Russia
Kermil
Article is interesting, but as I understood all people didn't clear the data from HDD at all or they cleared partition table.
Post 28 Feb 2007, 12:56
View user's profile Send private message ICQ Number Reply with quote
okasvi



Joined: 18 Aug 2005
Posts: 382
Location: Finland
okasvi
Post 28 Feb 2007, 13:38
View user's profile Send private message MSN Messenger Reply with quote
HyperVista



Joined: 18 Apr 2005
Posts: 691
Location: Virginia, USA
HyperVista
Quote:
Article is interesting, but as I understood all people didn't clear the data from HDD at all or they cleared partition table.


Kermil, that true. I thought it was funny that the concluding sentence echoes bogdanontanu's recommendation to totally destroy the hard disk for true security.

okasvi - the dban untility is very interesting, but I wonder if it will hold up to scanning electron microscope examination of the hard drive media after running the utility. This is the advanced forensic technique mentioned by bogdanontanu. It's very, VERY effective in recovering data from magnetic media, even if the data has been overwritten many many times and even smashed. Shocked
Post 28 Feb 2007, 14:04
View user's profile Send private message Visit poster's website Reply with quote
f0dder



Joined: 19 Feb 2004
Posts: 3170
Location: Denmark
f0dder
There still seems to be debate, though, just how viable the electron microscope "data recovery" is, and who (if any at all) can actually do it... not to mention that reconstruction would be an excessively slow and painful affair Smile
Post 28 Feb 2007, 14:07
View user's profile Send private message Visit poster's website Reply with quote
HyperVista



Joined: 18 Apr 2005
Posts: 691
Location: Virginia, USA
HyperVista
Quote:
There still seems to be debate, though, just how viable the electron microscope "data recovery" is, and who (if any at all) can actually do it... not to mention that reconstruction would be an excessively slow and painful affair


Yes. Very true. Usually only governments have the resources to mount such an analysis. And YES, it is absolutley a very slow and painful undertaking (counting and recording individual magnetic bands on the media - 1s and 0s lined up against one another). But in some cases, for the people involved in such activity, the pain is worth it.
Post 28 Feb 2007, 14:14
View user's profile Send private message Visit poster's website Reply with quote
Kermil



Joined: 26 Oct 2005
Posts: 35
Location: Russia
Kermil
Thanks, Guys. But main question remains, how to erase all data from HDD? We have runnging Windows XP. I know that we can use CreateFile function to get the access to logical disk. But how can I get access to partition table? Should I write driver or may be I can do this in user mode? Give some links on articles please. Thanks in advance.
Post 28 Feb 2007, 14:26
View user's profile Send private message ICQ Number Reply with quote
LocoDelAssembly
Your code has a bug


Joined: 06 May 2005
Posts: 4633
Location: Argentina
LocoDelAssembly
CreateFile doc wrote:
Disk Devices
Windows NT: You can use the CreateFile function to open a disk drive or a partition on a disk drive. The function returns a handle to the disk device; that handle can be used with the DeviceIOControl function. The following requirements must be met in order for such a call to succeed:

· The caller must have administrative privileges for the operation to succeed on a hard disk drive.
· The lpFileName string should be of the form \\.\PHYSICALDRIVEx to open the hard disk x. Hard disk numbers start at zero. For example:

String Meaning
\\.\PHYSICALDRIVE2 Obtains a handle to the third physical drive on the user's computer.


· The lpFileName string should be \\.\x: to open a floppy drive x or a partition x on a hard disk. For example:

String Meaning
\\.\A: Obtains a handle to drive A on the user's computer.
\\.\C: Obtains a handle to drive C on the user's computer.
Post 28 Feb 2007, 14:36
View user's profile Send private message Reply with quote
Kermil



Joined: 26 Oct 2005
Posts: 35
Location: Russia
Kermil
Thanks. But if you remember we have running Windows XP. What is the behavior of Windows if I will write zeros to the Windows partition. How can I complete erasing of data properly?
Post 28 Feb 2007, 14:42
View user's profile Send private message ICQ Number Reply with quote
LocoDelAssembly
Your code has a bug


Joined: 06 May 2005
Posts: 4633
Location: Argentina
LocoDelAssembly
Windows XP is NT based so \\.\PHYSICALDRIVEx works but you will probably need apart of the requirements listed above, be able to lock the drive too. If you are planning to erase the hard drive where Windows runs then I think you will not be able to lock it, but if you want to erase a secondary drive then I think it could work (as chkdsk can).

Another possibility could be some reverse engineering of the disk manager to see how it can modify the MBR Smile (perhaps some native app helper that runs at boot?)
Post 28 Feb 2007, 14:51
View user's profile Send private message Reply with quote
Kermil



Joined: 26 Oct 2005
Posts: 35
Location: Russia
Kermil
Thanks.
Post 28 Feb 2007, 14:57
View user's profile Send private message ICQ Number Reply with quote
tantrikwizard



Joined: 13 Dec 2006
Posts: 142
tantrikwizard
Kermil wrote:
Thanks. But if you remember we have running Windows XP. What is the behavior of Windows if I will write zeros to the Windows partition. How can I complete erasing of data properly?
Grab any bootable linux distro CD and type
Code:
dd if=/dev/zero of=/dev/hd??    

where the first ? in hd?? is the hard drive letter starting at a and the second ? is the partition number of the drive. e.g. /dev/hdc3 = 3rd partition on 3rd hard drive. ommit the partition number to wipe the whole drive. (hda1 = 1st drive 1st partition, hdb1 = 2nd drive 1st parition)
Post 28 Feb 2007, 20:44
View user's profile Send private message Visit poster's website Yahoo Messenger MSN Messenger Reply with quote
Display posts from previous:
Post new topic Reply to topic

Jump to:  


< Last Thread | Next Thread >
Forum Rules:
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Copyright © 1999-2020, Tomasz Grysztar.

Powered by rwasa.