Session Start: Sat Jun 24 19:06:06 2000 * Logging #bsrf to '#bsrf.log' raven, do u know how they find out info after ur hd has been formatted? im logging right now <|BaRoN1|> NM... |BaRoN1|, GMT is Greenwich Mean Time (Greenwich is where the diagonal uhm line thingi, whatever they call it in english, goes through) GoLdDeMoN, that's easy the degree? hey i'll lecture on that ok is everyone ready? yes |BaRoN1| ok im logging <|BaRoN1|> what r u doing here in such late houre? |BaRoN1| it's the summer vacation dammit meridian, is what its called ohh and just for the sake of it... *** Raven sets mode: +vvvv jobber-d Blade dvx RedShadow *** Raven sets mode: +vvvv GoLdDeMoN snider Hatch seek3r *** Raven sets mode: +v EBULA :-) lol <|BaRoN1|> ohhh ... i`m allways forget ... alright let's make it quick you don't want to incite a riot like last time RedShadow that's why i didn't use /mop so anyway... suppose you have some sensitive data on your hd something reeeally sensitive something that the fbi would like to lay it's hands on well actually fbi would like to lay it's hands on many things like my nads especially at the time when Jay Edgar Hoover was in charge... uhm nevermind forget it, sick little joke which involves crossdressers and handcuffs, forget it so anyway :) suppose you want to get rid of ANY traces at all so the feds won't find anything <|BaRoN1|> ...i`m blushing ... and won't play the jailhouse rock, as elvis would have said ok first i'll tell u how the fbi recovers files encrypt the the disk !! so anyway your hard drive has some sectors on it called FATs - File Allocation Tables and these sectors contain the locations of all the files when u delete a file, it is removed from the FAT raven: does this apply to linux disks? but not from the disk... jobber-d yes even to diskettes and tape drives too, i think same concept anyways so anyway the fbi can use a tool that reads the raw data that's on the hd and browse through it eventually they'll find the data like debug.exe because it wasn't deleted from the disk it was just removed from the FAT so wouldn't u be losing space over time even if u delete things? what u can do is either use file shredding utilities or encrypt the file GoLdDeMoN no, eventually things get overwritten after they are deleted gold, you can legally write to sectors that have no FAT entry snider that's right :) *** Ghost_Rider has joined #bsrf hi guys hi raven eh ghost! mini-lecture snider jobber what's the address of the fat in the disk raven? now file shredding utilities scramble the file, toss it, garble it, pee on it and stomp on it a little and then reset it to zero and only then delete it yeah a spontaneous one, ghost 0000:0000? ill send you the log once its done encryption, on the other hand, will overwrite the file with an encrypted one where can u get file shredding utilities? hey ghost and then u can delete it GoLdDeMoN there's one for windows which i know, it's called file shredder hatch, right after the master boot record is the first partitions FAT talking about how to really delete files right? dunno any for linux, i never used these things, and i only came across the windows one by accident correct hey u think the others would be interested to hear this? maybe u could send me the logs do u know where to get the raw data viewing utility? barakirs@netvision.net.il, later ill snd the logs Raven: if you now the offsets where to write you can use an asm program to write 0 on them just don't flood me :-) GoLdDeMoN i think Partition Magic does that :) raven thanx did you check the tut? or Norton Rescue, uhm... something, i don't remember how it's called ok that's it, if u want to send me your logs, cut them here -- cut -- everyone, you can use the -l funcion from debug.exe to wiev data, its almost too easy Ghost_Rider yes, u can continue your work hehe Session Close: Sat Jun 24 19:15:01 2000