hacking contest

hacking exploits security forum
hacking
compliance articles
upgrade backup exec
information security consultant

agamemnon
QUOTE

New Security Tool for Encrypting File System

Microsoft has developed an improved version of the cipher.exe tool, offering an important new option - the ability to permanently overwrite all of the deleted data on a hard drive. This improves security by ensuring that even an attacker who gained complete physical control of a Windows 2000 machine would be unable to recover previously deleted data.

The rationale for the tool is discussed in detail in a FAQ, and detailed operating instructions are provided in a Knowledge Base article. However, several important caveats should be noted:

It is essential that the tool be installed using the installer package, rather than simply copying the new version of cipher.exe to the system. The tool relies on additional NTFS functionality that is added as part of the installation process. If you simply copy cipher.exe to a machine and run it, you could destroy data on the drive.
All applications should be closed before running the tool.
The tool is not a cure-all that makes it safe to store sensitive data in plaintext. The tool enables sensitive data to be removed from the drive; however, if best practices are followed, such data will not be created on the drive to begin with.
Microsoft thanks Clem Colman of Colman Communications Consulting Pty Ltd (http://www.colmancomm.com) for suggesting the development of this tool.



Download here

usefull for cleaning up smile.gif

-ed.
liquidSilver
Intresting.... Indeed!

setthesun
In fact I coudn't try this tool (because of my OS) bıt there a lot of commecials program on the market.

And most pf them include really good features like (panic mode wipe), wipe freespace with several standarts, overwrite for 28 times etc.

But it could be good for practice and free use.
phase
There are computer forensic tools like Encase that can still retrieve data after its deleted and written over by these tools. I didn't believe it myself until I saw Encase pull back data from a drive that had been formatted at least 5 types. And data retrieved was from the original partion of the drive.

Aside from an NSA erase (which takes hours) its really hard to get rid of the data on a drive.

phase ph34r.gif
boshcash
haven't tried it yet , is it command line , and is there any other command line eraser , because also some people wanna have max security after getting cmd shell and erasing logs for example .. logs can be undeleted , so what i really really need , is two small command line programs to erase and undelete the deleted files
niko
The best way to know you've removed all the data from a drive is to have a handy mini-incenerator next to your desk. Panic, pull the drive, drop it in the incinerator. Job done. smile.gif

-niko
blazeking
Incenerator would do nicely, but it's not as much fun as a shotgun.
setthesun
PGP Enterprise have some great wpe tools.

Wipe Freespace : upto 28 times.

Also Steganos has a good tool to delete files permanently, but you know there is no exact and abolıute way to delete all data. Big guys can read it everytime huh.gif
MysteryMan
QUOTE
New Security Tool for Encrypting File System

Microsoft has developed an improved version of the cipher.exe tool, offering an important new option - the ability to permanently overwrite all of the deleted data on a hard drive. This improves security by ensuring that even an attacker who gained complete physical control of a Windows 2000 machine would be unable to recover previously deleted data.


nice i look this ...

thanx for info :]
happydud
... Uh.. I'm almost positive that if I was programming something like this, I'd program in a backdoor of some sorts. If I was microsoft, I'd refuse to release a program that would allow hackers/potential enemies to destroy all of their data and get off the hook with a single keyboard shortcut command.
MadMaddy
QUOTE (happydud @ Feb 29 2004, 08:57 PM)
If I was microsoft, I'd refuse to release a program that would allow hackers/potential enemies to destroy all of their data and get off the hook with a single keyboard shortcut command.

that's exactly what I was thinking while reading this article. Great tool but seems like it could easily be used for as much bad as good.

Time to get out the 'ol trusty electron microscope happy.gif
Black Flag
agreed, microsoft would not release a program such that when anybody needed to get rid of incriminating evidence all they had to do is press a button.

im not that quite paranoid but windows washer 5 by webroot can delete files, same with boostXP.
Loxy
AnalogX makes a great a file delete application, where you chose the # of passes, and it's very basic, but it does exactly what it's meant to, tried to restore data with popular recovery software, failed! (good news for the shredding app, eh?) www.analogx.com to get it. (free)
trdiablo
Also a good program is Evidence Eliminator. It overwrites the sectors of your hard disk with junk. So a file recovery program would retrieve junk.

Also, i dont think that the "big guys" can always retrieve the data on your hard drive after you used like 3 or 4 programs that destroy the data.
Maybe , they can retrieve the file names but the file will be corrupted and not readable.
dissolutions
I personally wouldn't trust evidence eliminator period. Simply because of their marketing scheme. I've never used it, but if a company has to spam it's worth... chances are it's bogus.
digitalk2003
Any company that spams me in order to get me to buy their product is probably going to get the "thumbs down". There are a few exceptions and times where others outside of the company *cough Norton cough* have tried to pull this off. But for erasing data, the steganos suites are good.

Just a note, as always, if somebody wants to find out what you've been doing, they probably will. On a lighter note, I'm a big fan of the shotgun approach. biggrin.gif

Ciau...

digitalk2003
PrarieDog
hehe yeah the shotgun approach does have a certain success rate!!!
Black Flag
heh yeah blow away whoever comes through that door...
metrox
oh microsoft but a usefull tool, i love 0 bytes rythmen
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.

 
Invision Power Board © 2001-2005 Invision Power Services, Inc.