- Joined
- Jul 17, 2003
I'm gonna be the next in line to say: Formatting a drive does NOT erase it.
How do I know? This is part of what I do. I recover data for the local Sheriff and cities. A simple 'hex editor' is all that I need. You then asked about writing data to the formatted disk. Most of the time I can still recover enough for a case. There is something called drive slack so that even if you write to a sector, there may still be something left over from the old file that was there on that same sector.
You can use some of the ideas used above to write zero's, etc. Those do work. However, you have to run them. Many police Dpts can easily get a 'No knock' warrent if 1) they think they can get electronic evidence 2) if they think you might do one of the above methods to remove evidence. In other words, if you are doing something wrong, the only knock you might hear is your door hitting the floor. Computers are then unplugged from the back of the case and a boot floppy that prevents writes to any HDD is put in place with evidence tape.
Some people think that you can use the /u switch when formatting. That too does not work. The /u switch will clear a floppy (FAT12) but no other type of media. <-- NO other media.
How do I know? This is part of what I do. I recover data for the local Sheriff and cities. A simple 'hex editor' is all that I need. You then asked about writing data to the formatted disk. Most of the time I can still recover enough for a case. There is something called drive slack so that even if you write to a sector, there may still be something left over from the old file that was there on that same sector.
You can use some of the ideas used above to write zero's, etc. Those do work. However, you have to run them. Many police Dpts can easily get a 'No knock' warrent if 1) they think they can get electronic evidence 2) if they think you might do one of the above methods to remove evidence. In other words, if you are doing something wrong, the only knock you might hear is your door hitting the floor. Computers are then unplugged from the back of the case and a boot floppy that prevents writes to any HDD is put in place with evidence tape.
Some people think that you can use the /u switch when formatting. That too does not work. The /u switch will clear a floppy (FAT12) but no other type of media. <-- NO other media.