Colapse all |
Post message
how to simulate/insert a hard drive (physical) bad block error? 2005-04-02 Gary Funck (gary intrepid com) (3 replies) Re: how to simulate/insert a hard drive (physical) bad block error? 2005-04-04 Alvin Oga (alvin sec Virtual Linux-Sec net) Re: how to simulate/insert a hard drive (physical) bad block error? 2005-04-04 Jeffrey Denton (dentonj gmail com) Re: how to simulate/insert a hard drive (physical) bad block error? 2005-04-04 Valdis Kletnieks vt edu RE: New Steganography Hash Sets Available! 2005-04-01 Chad W. Davis (chad davis backbonesecurity com) Mr. Seward, Because our work was funded by the US Department of Justice for the benefit of US Federal, State, and local law enforcement agencies, we cannot make the database available at no charge to US private sector companies. However, non law enforcement entities may purchase a license to the d [ more ] [ reply ] Re: Macintosh wiping (but why) 2005-04-01 Valdis Kletnieks vt edu On Fri, 01 Apr 2005 14:22:29 +0100, "Paul Sanderson (Business Fax)"@sandersonforensics.co.uk said: (cleaning up the top-posting) > > Even worse, if the next track over is *also* out-of-spec, you can end > > up accidentally aquiring the servo signal for the *wrong* track. > > Whoops. ;) > Not so [ more ] [ reply ] New Steganography Hash Sets Available! 2005-03-30 Chad W. Davis (chad davis backbonesecurity com) (2 replies) The fundamental goal of the Steganography Analysis and Research Center (SARC) is to collect steganography, watermarking, and other data-hiding applications from various sources and incorporate file profiles computed from them into the Steganography Application Fingerprint Database (SAFDB). To date, [ more ] [ reply ] Re: New Steganography Hash Sets Available! 2005-04-01 Raymond C. Parks (rcparks comcast net) (1 replies) RE: New Steganography Hash Sets Available! 2005-04-01 Chad W. Davis (chad davis backbonesecurity com) RE: New Steganography Hash Sets Available! 2005-03-30 Evidence Technology (le evidencetechnology net) RE: Reality and 2.5" laptop drives, Re: Macintosh wiping (but why ) 2005-03-29 Altheide, Cory B. (IARC) (AltheideC nv doe gov) > -----Original Message----- > From: Valdis.Kletnieks (at) vt (dot) edu [email concealed] [mailto:Valdis.Kletnieks (at) vt (dot) edu [email concealed]] > Sent: Tuesday, March 29, 2005 8:18 AM > To: Altheide, Cory B. (IARC) > Cc: 'Lim Ming Wei'; forensics (at) securityfocus (dot) com [email concealed] > Subject: Re: Reality and 2.5" laptop drives, Re: Macintosh > wiping (but why ) > [ more ] [ reply ] RE: Reality and 2.5" laptop drives, Re: Macintosh wiping (but why ) 2005-03-28 Altheide, Cory B. (IARC) (AltheideC nv doe gov) (1 replies) > -----Original Message----- > From: Lim Ming Wei [mailto:mwlim (at) pacific.net (dot) sg [email concealed]] > Sent: Sunday, March 27, 2005 5:19 PM > To: dave kleiman; forensics (at) securityfocus (dot) com [email concealed] > Cc: 'gwen hastings' > Subject: Re: Reality and 2.5" laptop drives, Re: Macintosh > wiping (but why) > > Hi All, > > I believe t [ more ] [ reply ] Re: Reality and 2.5" laptop drives, Re: Macintosh wiping (but why ) 2005-03-29 Valdis Kletnieks vt edu RE: Drive hashing-when is it *really* necessary? 2005-03-24 Trevor Odonnal (trevoro byu edu) (1 replies) On a side note..... Does anybody have specific data concerning the statistical reliability of hashes compared to DNA and fingerprinting? With references please. Trevor O'Donnal Network Security Analyst Computer Forensics Investigator Brigham Young University ________________________________ Fr [ more ] [ reply ] Re: Drive hashing-when is it *really* necessary? 2005-03-27 Anders Thulin (Anders Thulin tietoenator com) RE: Drive hashing-when is it *really* necessary? 2005-03-24 Trevor Odonnal (trevoro byu edu) (1 replies) For me, it all comes down to a few simple concepts: 1 - There is ALWAYS a chance the case could end up in court. 2 - If the case does end up in court, I will be testifying as an "expert" 3 - As an expert, I am expected to know what I am doing 4 - If the opposing attorney can make me look like I do [ more ] [ reply ] Re: Drive hashing-when is it *really* necessary? 2005-03-26 Alvin Oga (alvin sec Virtual Linux-Consulting com) RE: Drive hashing-when is it *really* necessary? 2005-03-24 Reava, Jeffrey (jeffrey reava pfizer com) From FBI testimony regarding the Moussaui investigation in 2001: "Because SafeBack and the Logicube SFK-000A hand-held disk duplicator have been validated by CART as computer forensic imaging tools reliably capable of producing verifiable results, and because SafeBack and the Logicube SFK-000A inco [ more ] [ reply ] RE: Drive hashing-when is it *really* necessary? 2005-03-24 Greg Kelley (gkelley vestigeltd com) How do you say that hashing is not a unique ID for the content? Yes, there are a finite number of possibilities for hash values. However, are fingerprints and DNA patterns considered unique for the courts? You bet. The probabilities involved in hashing are even stronger than DNA and fingerprints [ more ] [ reply ] RE: Reality and 2.5" laptop drives, Re: Macintosh wiping (but why ) 2005-03-24 Altheide, Cory B. (IARC) (AltheideC nv doe gov) > -----Original Message----- > From: Daniel James [mailto:dajames (at) wfubmc (dot) edu [email concealed]] > Sent: Tuesday, March 22, 2005 5:34 AM > To: gwen hastings; Christopher Blume > Cc: Ivan Krstic; forensics (at) securityfocus (dot) com [email concealed] > Subject: RE: Reality and 2.5" laptop drives, Re: Macintosh > wiping (but why) > > In a case [ more ] [ reply ] |
Privacy Statement |
We'd like to test a disk imaging/copy device/procedure to see how it
fares if the source drive has one/more bad block errors. Is there a way,
by communicating with the hard drive, presumably at a very low level,
to convince the drive that it should mark a sector as having a
permannent error, and t
[ more ] [ reply ]