[QUOTE=bordelond]
(Honestly … this whole topic has thrown me for a loop. I knew a simple DELETE wasn’t sufficient, but always “knew” that a disk reformat was the total answer to this problem)
[/QUOTE]
The problem is that there is no standard definition of “formatting a disk”. It can mean anything from initializing the directory on a disk to doing a low-level format. In many cases, formatting the disk does not overwrite all of the old data, it just writes a new directory onto the disk.
[QUOTE=bordelond]
Hey … wait a minute – do hard drives have infinite ability to record data (or close to infinite)? What I mean by that is: are there ways to take advantage of HD material’s “permanence of information” … so that a 100 G HD could store what is actually a terabyte of data.
And if the above is NOT true … how is everything and anything recoverable? Is cbarnes overstating his case? Is there, in fact, considerable difficulty with recovering files off of disks wiped in a very careful, deliberate manner?
[/QUOTE]
Magnetic disks are fundamentally analog devices, like magnetic tape. If you measured the voltage on the reproduce head, you would see that overwriting or erasing a block is imperfect, like erasing pencil marks on paper with a cheap eraser. The old signal is still there, just substantially attenuated. The same thing happens with analog audio magnetic tape. If you record over your Backstreet Boys tapes with the Screaming Penguins, you can often hear faint traces of the Backstreet Boys during quiet passages in the Screaming Penguins album. With digital signals, like on a hard disk, it is often possible to separate the latest recording from the previous recording. Let’s say that we record the bits 10101010 on a blank disk. Reading the disk, we see +10 mV, -10 mV, +10 mV, -10 mV, +10 mV, -10 mV, +10 mV, -10 mV. Next, we overwrite those bits with 00000000. Reading the disk, we see -8 mV, -10mV, -8 mV, -10mV, -8 mV, -10mV, -8 mV, -10mV, -8 mV, -10mV. The disk drive considers anything greater than 0 mV to be a 1 and anything less than 0 mV to be a 0, so it reads that as 00000000. If we replaced the disk drive’s electronics with our own, we could see the raw analog signal. We could see that 10101010 had been overwritten with 00000000. Another trick is to look at the edges of the magnetic tracks on the disk. Traces of old data can often be found at the outside margins of the track, due to imperfect positioning of the recording head and incomplete erasure of old data.
For a better explanation, read Secure Deletion of Data from Magnetic and Solid-State Memory, Peter Gutmann.