Originally posted by: aniruddha23
Any ideas at a high level exactly how they go about recovering data? I mean each and every bit on that HD has been randomized. How is an audit trail maintained of what changes the data went through?
e.g We ran a HDD through DBAN and a tonne of other multi pass formats etc etc. How do the recovery guys even get to what happenned in the last cycle.
Normally what is done in that case is that the drive is disassembled in a clean room, and the platters are scanned with very high resolution magnetic readers (like the heads in your hard drive, but much more sensitive).
If you "only" zero-filled the drive, they can look for variations in the magnetic field strength. If a data pattern is written to the drive and left for a long time, the bits that were "on" before the zero-fill will have a slightly higher magnetic field strength than the ones that were "off" before the zero-fill, and usually you can reconstruct most of the drive. Wiping the drive multiple times (especially writing random patterns over it) make this type of recovery a lot harder.
Also, because drive calibration can change over time, and also due to thermal cycling (the disk is slightly larger when it is warm, and slightly smaller when it is cold), the edges of tracks are often not completely erased when the drive is formatted or zero-filled. Looking for these unerased areas is another way to try to get at data that has been 'wiped' by various software means.
Basically:
Writing over the whole drive with zeroes makes software-only recovery impossible. Unless someone has reason to believe there is VERY valuable data on the drive, they're just not going to bother.
Writing over the drive multiple times with random data makes any recovery a lot harder.
To be REALLY REALLY sure that nobody can *ever* read that data, you have to make the drive unusable (either by degaussing it to the point where the real low-level formatting is gone, or physically destroying the platters). If you don't have industrial-strength tools to do this, you can take the drive apart and use a sander on the platter surfaces (and/or smash them into little pieces if they're glass substrate platters). Applying VERY strong magnets to the disk surface could work, but this is somewhat unreliable if you're doing it by hand.