Deletion confirmation tool

Deletion confirmation tool
Secure Home | Search | About
Login Password
Register Now! Lost Password?
 General Computer Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Deletion confirmation tool mehul.dave 07-30-2007
Posted by on July 30, 2007, 12:13 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Hi All,

We are writing one Shredder which will shredd all unwanted info on
users request.

I am in search of tool which tests that the shredder has done the
intended job sucessfully.

Basicall, i am in search of a tool which confirms that "if a user has
shredded all files and folders" then all files and folders are really
deleted from system.

Can someone recommend me any such tool or technique?

Thanks in Advance.

Mehul D


Posted by Colin B. on July 30, 2007, 12:44 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
mehul.dave@gmail.com wrote:
> Hi All,
>
> We are writing one Shredder which will shredd all unwanted info on
> users request.
>
> I am in search of tool which tests that the shredder has done the
> intended job sucessfully.
>
> Basicall, i am in search of a tool which confirms that "if a user has
> shredded all files and folders" then all files and folders are really
> deleted from system.
>
> Can someone recommend me any such tool or technique?

Forgive me if I misunderstand, but you're writing this shredder, and you
don't know how to tell if a file has been completely deleted?

Scary.


Posted by Ari on July 31, 2007, 1:07 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
On Mon, 30 Jul 2007 16:44:55 GMT, Colin B. wrote:

> mehul.dave@gmail.com wrote:
>> Hi All,
>>
>> We are writing one Shredder which will shredd all unwanted info on
>> users request.
>>
>> I am in search of tool which tests that the shredder has done the
>> intended job sucessfully.
>>
>> Basicall, i am in search of a tool which confirms that "if a user has
>> shredded all files and folders" then all files and folders are really
>> deleted from system.
>>
>> Can someone recommend me any such tool or technique?
>
> Forgive me if I misunderstand, but you're writing this shredder, and you
> don't know how to tell if a file has been completely deleted?
>
> Scary.

Relevant point.

Poster: You have to define your potential adversary.
--
"You can't trust code that you did not totally create yourself"
Ken Thompson "Reflections on Trusting Trust"
http://www.acm.org/classics/sep95/

Posted by Moe Trin on July 31, 2007, 3:43 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
On Mon, 30 Jul 2007, in the Usenet newsgroup comp.security.misc, in article
wrote:

>We are writing one Shredder which will shredd all unwanted info on
>users request.

And the reason you feel the Eleventy-Zillion existing tools need
another competitor is...

>I am in search of tool which tests that the shredder has done the
>intended job sucessfully.

Any standard disk editor should allow you to inspect the sectors
where the files/directory-listing/etc. had resided. Of course, this
assumes you have a clue as to how such data is placed so that you
know _where_ to look. But this won't check on the reserved and/or
bad-blocks that the operating system (never mind your application)
has no access to. It probably also won't look at temporary files
or swap-space on the drive that _could_ have said unwanted info.

>Basicall, i am in search of a tool which confirms that "if a user has
>shredded all files and folders" then all files and folders are really
>deleted from system.

You _REALLY_ need to learn exactly how those bits are put onto the disk,
AND how the operating system can access those bits. You also want to
learn how the disk-controller operates - specifically with respect to
bad-block re-mapping. You may also want to learn about disk caching, as
this often catches the ones who aren't aware that it exists.

>Can someone recommend me any such tool or technique?

If you are just building a tool so that Mommy won't see that you've
been surfing the pr0n sites, a raw disk editor should suffice. If Mommy
works for a Three Letter Agency, or is more technically competent than
you are, then it's probably not adequate - but then, neither is any
application you can create. That's why people in the security business
know about physical means of destroying the media that held the data.

Old guy

Similar ThreadsPosted
Vulnerability assessment tool for web services and XML ? September 27, 2005, 11:53 am
ARP spoofing detection tool XArp 2 July 26, 2006, 2:37 pm
The most powerful computer security tool August 17, 2006, 5:51 am
wireless tool / apps archives September 19, 2006, 2:49 am
DoS modelling tool (research papers) September 25, 2006, 3:23 pm
enterprise tool for password management ? October 24, 2006, 3:47 am
A tool for mirroring HTTP stream October 23, 2007, 5:15 am
New free tool for monitoring and decrypting SSL traffic April 19, 2005, 5:15 pm
Recommendations for hard disk encryption tool? July 26, 2006, 9:08 am
Nasty propaganda by "security tool" providers August 5, 2006, 1:01 pm

The site map in XML format XML site map

Contact Us | Privacy Policy