<?xml version="1.0"?>
<?xml-stylesheet type="text/css" href="http://www.forensicswiki.org/w/skins/common/feed.css?303"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
		<id>http://www.forensicswiki.org/w/index.php?title=Epilogue_to_Gutmann's_1996_paper&amp;feed=atom&amp;action=history</id>
		<title>Epilogue to Gutmann's 1996 paper - Revision history</title>
		<link rel="self" type="application/atom+xml" href="http://www.forensicswiki.org/w/index.php?title=Epilogue_to_Gutmann's_1996_paper&amp;feed=atom&amp;action=history"/>
		<link rel="alternate" type="text/html" href="http://www.forensicswiki.org/w/index.php?title=Epilogue_to_Gutmann%27s_1996_paper&amp;action=history"/>
		<updated>2013-05-23T18:25:13Z</updated>
		<subtitle>Revision history for this page on the wiki</subtitle>
		<generator>MediaWiki 1.20.3</generator>

	<entry>
		<id>http://www.forensicswiki.org/w/index.php?title=Epilogue_to_Gutmann%27s_1996_paper&amp;diff=223&amp;oldid=prev</id>
		<title>Uwe Hermann: Reverted edit of Porker, changed back to last version by Simsong</title>
		<link rel="alternate" type="text/html" href="http://www.forensicswiki.org/w/index.php?title=Epilogue_to_Gutmann%27s_1996_paper&amp;diff=223&amp;oldid=prev"/>
				<updated>2006-04-16T16:57:31Z</updated>
		
		<summary type="html">&lt;p&gt;Reverted edit of Porker, changed back to last version by Simsong&lt;/p&gt;
&lt;table class='diff diff-contentalign-left'&gt;
				&lt;col class='diff-marker' /&gt;
				&lt;col class='diff-content' /&gt;
				&lt;col class='diff-marker' /&gt;
				&lt;col class='diff-content' /&gt;
			&lt;tr style='vertical-align: top;'&gt;
			&lt;td colspan='2' style=&quot;background-color: white; color:black;&quot;&gt;← Older revision&lt;/td&gt;
			&lt;td colspan='2' style=&quot;background-color: white; color:black;&quot;&gt;Revision as of 16:57, 16 April 2006&lt;/td&gt;
			&lt;/tr&gt;&lt;tr&gt;&lt;td colspan=&quot;2&quot; class=&quot;diff-lineno&quot;&gt;Line 1:&lt;/td&gt;
&lt;td colspan=&quot;2&quot; class=&quot;diff-lineno&quot;&gt;Line 1:&lt;/td&gt;&lt;/tr&gt;
&lt;tr&gt;&lt;td class='diff-marker'&gt;−&lt;/td&gt;&lt;td style=&quot;background: #ffa; color:black; font-size: smaller;&quot;&gt;&lt;div&gt;&lt;del class=&quot;diffchange diffchange-inline&quot;&gt;Man shot dead at vehicle checkpoint&lt;/del&gt;&lt;/div&gt;&lt;/td&gt;&lt;td class='diff-marker'&gt;+&lt;/td&gt;&lt;td style=&quot;background: #cfc; color:black; font-size: smaller;&quot;&gt;&lt;div&gt;&lt;ins class=&quot;diffchange diffchange-inline&quot;&gt;''In the time since this paper was published, some people have treated the 35-pass overwrite technique described &lt;/ins&gt;in &lt;ins class=&quot;diffchange diffchange-inline&quot;&gt;it more as a kind of voodoo incantation to banish evil spirits than the result of a technical analysis of drive encoding techniques&lt;/ins&gt;. &lt;ins class=&quot;diffchange diffchange-inline&quot;&gt;As &lt;/ins&gt;a &lt;ins class=&quot;diffchange diffchange-inline&quot;&gt;result, they advocate applying the voodoo to PRML and EPRML drives even though it will have no more effect than a simple scrubbing with random data. In fact performing the full 35-pass overwrite is pointless for any drive since it targets a blend &lt;/ins&gt;of &lt;ins class=&quot;diffchange diffchange-inline&quot;&gt;scenarios involving all types of (normally-used) encoding technology, which covers everything back to 30+-year-old MFM methods (if you don't understand that statement, re-read &lt;/ins&gt;the &lt;ins class=&quot;diffchange diffchange-inline&quot;&gt;paper). If you're using a drive which uses encoding technology X, you only need to perform the passes specific to X, and you never need to perform all 35 passes. For any modern PRML/EPRML drive, a few passes of random scrubbing is the best you can do. As the paper says, &amp;quot;A good scrubbing with random data will do about as well as can be expected&amp;quot;. This was true in 1996, and is still true now.''&lt;/ins&gt;&lt;/div&gt;&lt;/td&gt;&lt;/tr&gt;
&lt;tr&gt;&lt;td class='diff-marker'&gt;−&lt;/td&gt;&lt;td style=&quot;background: #ffa; color:black; font-size: smaller;&quot;&gt;&lt;div&gt;&lt;del class=&quot;diffchange diffchange-inline&quot;&gt;A man has been shot dead by police at a vehicle checkpoint &lt;/del&gt;in &lt;del class=&quot;diffchange diffchange-inline&quot;&gt;Northern Ireland&lt;/del&gt;. &lt;del class=&quot;diffchange diffchange-inline&quot;&gt;Officers fired &lt;/del&gt;a &lt;del class=&quot;diffchange diffchange-inline&quot;&gt;number &lt;/del&gt;of &lt;del class=&quot;diffchange diffchange-inline&quot;&gt;rounds during &lt;/del&gt;the &lt;del class=&quot;diffchange diffchange-inline&quot;&gt;incident &lt;/del&gt;on &lt;del class=&quot;diffchange diffchange-inline&quot;&gt;Church Street &lt;/del&gt;in &lt;del class=&quot;diffchange diffchange-inline&quot;&gt;Ballynahinch&lt;/del&gt;, &lt;del class=&quot;diffchange diffchange-inline&quot;&gt;County Down&lt;/del&gt;. &lt;del class=&quot;diffchange diffchange-inline&quot;&gt;The man shot dead &lt;/del&gt;was the&lt;/div&gt;&lt;/td&gt;&lt;td class='diff-marker'&gt;+&lt;/td&gt;&lt;td style=&quot;background: #cfc; color:black; font-size: smaller;&quot;&gt;&lt;div&gt;&amp;#160;&lt;/div&gt;&lt;/td&gt;&lt;/tr&gt;
&lt;tr&gt;&lt;td colspan=&quot;2&quot;&gt;&amp;#160;&lt;/td&gt;&lt;td class='diff-marker'&gt;+&lt;/td&gt;&lt;td style=&quot;background: #cfc; color:black; font-size: smaller;&quot;&gt;&lt;div&gt;&lt;ins class=&quot;diffchange diffchange-inline&quot;&gt;''Looking at this from the other point of view, with the ever-increasing data density &lt;/ins&gt;on &lt;ins class=&quot;diffchange diffchange-inline&quot;&gt;disk platters and a corresponding reduction &lt;/ins&gt;in &lt;ins class=&quot;diffchange diffchange-inline&quot;&gt;feature size and use of exotic techniques to record data on the medium&lt;/ins&gt;, &lt;ins class=&quot;diffchange diffchange-inline&quot;&gt;it's unlikely that anything can be recovered from any recent drive except perhaps one or two levels via basic error-cancelling techniques&lt;/ins&gt;. &lt;ins class=&quot;diffchange diffchange-inline&quot;&gt;In particular the the drives in use at the time that this paper &lt;/ins&gt;was &lt;ins class=&quot;diffchange diffchange-inline&quot;&gt;originally written have mostly fallen out of use, so &lt;/ins&gt;the &lt;ins class=&quot;diffchange diffchange-inline&quot;&gt;methods that applied specifically to the older, lower-density technology don't apply any more. Conversely, with modern high-density drives, even if you've got 10KB of sensitive data on a drive and can't erase it with 100% certainty, the chances of an adversary being able to find the erased traces of that 10KB in 80GB of other erased traces are close to zero.''''&lt;/ins&gt;&lt;/div&gt;&lt;/td&gt;&lt;/tr&gt;
&lt;tr&gt;&lt;td colspan=&quot;2&quot;&gt;&amp;#160;&lt;/td&gt;&lt;td class='diff-marker'&gt;+&lt;/td&gt;&lt;td style=&quot;background: #cfc; color:black; font-size: smaller;&quot;&gt;&lt;div&gt;&amp;#160;&lt;/div&gt;&lt;/td&gt;&lt;/tr&gt;
&lt;tr&gt;&lt;td colspan=&quot;2&quot;&gt;&amp;#160;&lt;/td&gt;&lt;td class='diff-marker'&gt;+&lt;/td&gt;&lt;td style=&quot;background: #cfc; color:black; font-size: smaller;&quot;&gt;&lt;div&gt;&lt;ins class=&quot;diffchange diffchange-inline&quot;&gt;http://www.cs.auckland.ac.nz/~pgut001/pubs/secure_del.html&lt;/ins&gt;&lt;/div&gt;&lt;/td&gt;&lt;/tr&gt;
&lt;/table&gt;</summary>
		<author><name>Uwe Hermann</name></author>	</entry>

	<entry>
		<id>http://www.forensicswiki.org/w/index.php?title=Epilogue_to_Gutmann%27s_1996_paper&amp;diff=222&amp;oldid=prev</id>
		<title>Porker at 13:48, 16 April 2006</title>
		<link rel="alternate" type="text/html" href="http://www.forensicswiki.org/w/index.php?title=Epilogue_to_Gutmann%27s_1996_paper&amp;diff=222&amp;oldid=prev"/>
				<updated>2006-04-16T13:48:23Z</updated>
		
		<summary type="html">&lt;p&gt;&lt;/p&gt;
&lt;table class='diff diff-contentalign-left'&gt;
				&lt;col class='diff-marker' /&gt;
				&lt;col class='diff-content' /&gt;
				&lt;col class='diff-marker' /&gt;
				&lt;col class='diff-content' /&gt;
			&lt;tr style='vertical-align: top;'&gt;
			&lt;td colspan='2' style=&quot;background-color: white; color:black;&quot;&gt;← Older revision&lt;/td&gt;
			&lt;td colspan='2' style=&quot;background-color: white; color:black;&quot;&gt;Revision as of 13:48, 16 April 2006&lt;/td&gt;
			&lt;/tr&gt;&lt;tr&gt;&lt;td colspan=&quot;2&quot; class=&quot;diff-lineno&quot;&gt;Line 1:&lt;/td&gt;
&lt;td colspan=&quot;2&quot; class=&quot;diff-lineno&quot;&gt;Line 1:&lt;/td&gt;&lt;/tr&gt;
&lt;tr&gt;&lt;td class='diff-marker'&gt;−&lt;/td&gt;&lt;td style=&quot;background: #ffa; color:black; font-size: smaller;&quot;&gt;&lt;div&gt;&lt;del class=&quot;diffchange diffchange-inline&quot;&gt;''In the time since this paper was published, some people have treated the 35-pass overwrite technique described &lt;/del&gt;in &lt;del class=&quot;diffchange diffchange-inline&quot;&gt;it more as a kind of voodoo incantation to banish evil spirits than the result of a technical analysis of drive encoding techniques&lt;/del&gt;. &lt;del class=&quot;diffchange diffchange-inline&quot;&gt;As &lt;/del&gt;a &lt;del class=&quot;diffchange diffchange-inline&quot;&gt;result, they advocate applying the voodoo to PRML and EPRML drives even though it will have no more effect than a simple scrubbing with random data. In fact performing the full 35-pass overwrite is pointless for any drive since it targets a blend &lt;/del&gt;of &lt;del class=&quot;diffchange diffchange-inline&quot;&gt;scenarios involving all types of (normally-used) encoding technology, which covers everything back to 30+-year-old MFM methods (if you don't understand that statement, re-read &lt;/del&gt;the &lt;del class=&quot;diffchange diffchange-inline&quot;&gt;paper). If you're using a drive which uses encoding technology X, you only need to perform the passes specific to X, and you never need to perform all 35 passes. For any modern PRML/EPRML drive, a few passes of random scrubbing is the best you can do. As the paper says, &amp;quot;A good scrubbing with random data will do about as well as can be expected&amp;quot;. This was true in 1996, and is still true now.''&lt;/del&gt;&lt;/div&gt;&lt;/td&gt;&lt;td class='diff-marker'&gt;+&lt;/td&gt;&lt;td style=&quot;background: #cfc; color:black; font-size: smaller;&quot;&gt;&lt;div&gt;&lt;ins class=&quot;diffchange diffchange-inline&quot;&gt;Man shot dead at vehicle checkpoint&lt;/ins&gt;&lt;/div&gt;&lt;/td&gt;&lt;/tr&gt;
&lt;tr&gt;&lt;td class='diff-marker'&gt;−&lt;/td&gt;&lt;td style=&quot;background: #ffa; color:black; font-size: smaller;&quot;&gt;&lt;div&gt;&amp;#160;&lt;/div&gt;&lt;/td&gt;&lt;td class='diff-marker'&gt;+&lt;/td&gt;&lt;td style=&quot;background: #cfc; color:black; font-size: smaller;&quot;&gt;&lt;div&gt;&lt;ins class=&quot;diffchange diffchange-inline&quot;&gt;A man has been shot dead by police at a vehicle checkpoint &lt;/ins&gt;in &lt;ins class=&quot;diffchange diffchange-inline&quot;&gt;Northern Ireland&lt;/ins&gt;. &lt;ins class=&quot;diffchange diffchange-inline&quot;&gt;Officers fired &lt;/ins&gt;a &lt;ins class=&quot;diffchange diffchange-inline&quot;&gt;number &lt;/ins&gt;of &lt;ins class=&quot;diffchange diffchange-inline&quot;&gt;rounds during &lt;/ins&gt;the &lt;ins class=&quot;diffchange diffchange-inline&quot;&gt;incident &lt;/ins&gt;on &lt;ins class=&quot;diffchange diffchange-inline&quot;&gt;Church Street &lt;/ins&gt;in &lt;ins class=&quot;diffchange diffchange-inline&quot;&gt;Ballynahinch&lt;/ins&gt;, &lt;ins class=&quot;diffchange diffchange-inline&quot;&gt;County Down&lt;/ins&gt;. &lt;ins class=&quot;diffchange diffchange-inline&quot;&gt;The man shot dead &lt;/ins&gt;was the&lt;/div&gt;&lt;/td&gt;&lt;/tr&gt;
&lt;tr&gt;&lt;td class='diff-marker'&gt;−&lt;/td&gt;&lt;td style=&quot;background: #ffa; color:black; font-size: smaller;&quot;&gt;&lt;div&gt;&lt;del class=&quot;diffchange diffchange-inline&quot;&gt;''Looking at this from the other point of view, with the ever-increasing data density &lt;/del&gt;on &lt;del class=&quot;diffchange diffchange-inline&quot;&gt;disk platters and a corresponding reduction &lt;/del&gt;in &lt;del class=&quot;diffchange diffchange-inline&quot;&gt;feature size and use of exotic techniques to record data on the medium&lt;/del&gt;, &lt;del class=&quot;diffchange diffchange-inline&quot;&gt;it's unlikely that anything can be recovered from any recent drive except perhaps one or two levels via basic error-cancelling techniques&lt;/del&gt;. &lt;del class=&quot;diffchange diffchange-inline&quot;&gt;In particular the the drives in use at the time that this paper &lt;/del&gt;was &lt;del class=&quot;diffchange diffchange-inline&quot;&gt;originally written have mostly fallen out of use, so &lt;/del&gt;the &lt;del class=&quot;diffchange diffchange-inline&quot;&gt;methods that applied specifically to the older, lower-density technology don't apply any more. Conversely, with modern high-density drives, even if you've got 10KB of sensitive data on a drive and can't erase it with 100% certainty, the chances of an adversary being able to find the erased traces of that 10KB in 80GB of other erased traces are close to zero.''''&lt;/del&gt;&lt;/div&gt;&lt;/td&gt;&lt;td class='diff-marker'&gt;+&lt;/td&gt;&lt;td style=&quot;background: #cfc; color:black; font-size: smaller;&quot;&gt;&lt;div&gt;&lt;/div&gt;&lt;/td&gt;&lt;/tr&gt;
&lt;tr&gt;&lt;td class='diff-marker'&gt;−&lt;/td&gt;&lt;td style=&quot;background: #ffa; color:black; font-size: smaller;&quot;&gt;&lt;div&gt;&amp;#160;&lt;/div&gt;&lt;/td&gt;&lt;td class='diff-marker'&gt;+&lt;/td&gt;&lt;td style=&quot;background: #cfc; color:black; font-size: smaller;&quot;&gt;&lt;div&gt;&lt;/div&gt;&lt;/td&gt;&lt;/tr&gt;
&lt;tr&gt;&lt;td class='diff-marker'&gt;−&lt;/td&gt;&lt;td style=&quot;background: #ffa; color:black; font-size: smaller;&quot;&gt;&lt;div&gt;&lt;del class=&quot;diffchange diffchange-inline&quot;&gt;http://www.cs.auckland.ac.nz/~pgut001/pubs/secure_del.html&lt;/del&gt;&lt;/div&gt;&lt;/td&gt;&lt;td class='diff-marker'&gt;+&lt;/td&gt;&lt;td style=&quot;background: #cfc; color:black; font-size: smaller;&quot;&gt;&lt;div&gt;&lt;/div&gt;&lt;/td&gt;&lt;/tr&gt;
&lt;/table&gt;</summary>
		<author><name>Porker</name></author>	</entry>

	<entry>
		<id>http://www.forensicswiki.org/w/index.php?title=Epilogue_to_Gutmann%27s_1996_paper&amp;diff=221&amp;oldid=prev</id>
		<title>Simsong at 03:55, 27 October 2005</title>
		<link rel="alternate" type="text/html" href="http://www.forensicswiki.org/w/index.php?title=Epilogue_to_Gutmann%27s_1996_paper&amp;diff=221&amp;oldid=prev"/>
				<updated>2005-10-27T03:55:55Z</updated>
		
		<summary type="html">&lt;p&gt;&lt;/p&gt;
&lt;p&gt;&lt;b&gt;New page&lt;/b&gt;&lt;/p&gt;&lt;div&gt;''In the time since this paper was published, some people have treated the 35-pass overwrite technique described in it more as a kind of voodoo incantation to banish evil spirits than the result of a technical analysis of drive encoding techniques. As a result, they advocate applying the voodoo to PRML and EPRML drives even though it will have no more effect than a simple scrubbing with random data. In fact performing the full 35-pass overwrite is pointless for any drive since it targets a blend of scenarios involving all types of (normally-used) encoding technology, which covers everything back to 30+-year-old MFM methods (if you don't understand that statement, re-read the paper). If you're using a drive which uses encoding technology X, you only need to perform the passes specific to X, and you never need to perform all 35 passes. For any modern PRML/EPRML drive, a few passes of random scrubbing is the best you can do. As the paper says, &amp;quot;A good scrubbing with random data will do about as well as can be expected&amp;quot;. This was true in 1996, and is still true now.''&lt;br /&gt;
&lt;br /&gt;
''Looking at this from the other point of view, with the ever-increasing data density on disk platters and a corresponding reduction in feature size and use of exotic techniques to record data on the medium, it's unlikely that anything can be recovered from any recent drive except perhaps one or two levels via basic error-cancelling techniques. In particular the the drives in use at the time that this paper was originally written have mostly fallen out of use, so the methods that applied specifically to the older, lower-density technology don't apply any more. Conversely, with modern high-density drives, even if you've got 10KB of sensitive data on a drive and can't erase it with 100% certainty, the chances of an adversary being able to find the erased traces of that 10KB in 80GB of other erased traces are close to zero.''''&lt;br /&gt;
&lt;br /&gt;
http://www.cs.auckland.ac.nz/~pgut001/pubs/secure_del.html&lt;/div&gt;</summary>
		<author><name>Simsong</name></author>	</entry>

	</feed>