Comments for Anti-Forensics http://www.anti-forensics.com Rendering computer investigations irrelevant Sat, 05 Nov 2011 19:36:26 +0000 hourly 1 http://wordpress.org/?v=3.3.2 Comment on Get Sloppy and Get Caught by Max http://www.anti-forensics.com/get-sloppy-and-get-caught/comment-page-1#comment-4846 Max Sat, 05 Nov 2011 19:36:26 +0000 http://www.anti-forensics.com/?p=1368#comment-4846 Hey guy, relax. This is just the news section! You won't learn anything here. Hey guy, relax. This is just the news section! You won’t learn anything here.

]]> Comment on Get Sloppy and Get Caught by anon http://www.anti-forensics.com/get-sloppy-and-get-caught/comment-page-1#comment-4808 anon Fri, 04 Nov 2011 17:33:13 +0000 http://www.anti-forensics.com/?p=1368#comment-4808 I'm sorry but no one gives a fuck what you think about the clown. Get to the point. I’m sorry but no one gives a fuck what you think about the clown. Get to the point.

]]> Comment on Disk Wiping – One Pass is Enough by The Witch Doctor http://www.anti-forensics.com/disk-wiping-one-pass-is-enough/comment-page-1#comment-4722 The Witch Doctor Wed, 02 Nov 2011 09:47:36 +0000 http://www.anti-forensics.com/?p=336#comment-4722 One pass is enough. Even with an MFM there is less than a 50% chance of getting it right so you'd be better off just using a coin and calling heads for one and tails for zero. One pass is enough. Even with an MFM there is less than a 50% chance of getting it right so you’d be better off just using a coin and calling heads for one and tails for zero.

]]> Comment on Disk Wiping – One Pass is Enough – Part 2 (this time with screenshots) by wascalwabbit http://www.anti-forensics.com/disk-wiping-one-pass-is-enough-part-2-this-time-with-screenshots/comment-page-1#comment-4711 wascalwabbit Wed, 02 Nov 2011 01:06:37 +0000 http://www.anti-forensics.com/?p=358#comment-4711 This used to be a problem and is the reason for the old wives (geeks) tale of wiping a bazillion times, just to be sure. HDDs have come a long way and where they use to have tracks about 3 inches wide (not really, but you get the point), the tracks are so small that this is a non-issue with "modern" drives. This used to be a problem and is the reason for the old wives (geeks) tale of wiping a bazillion times, just to be sure. HDDs have come a long way and where they use to have tracks about 3 inches wide (not really, but you get the point), the tracks are so small that this is a non-issue with “modern” drives.

]]> Comment on Get Sloppy and Get Caught by RonaldMcDonald http://www.anti-forensics.com/get-sloppy-and-get-caught/comment-page-1#comment-4552 RonaldMcDonald Fri, 28 Oct 2011 17:50:58 +0000 http://www.anti-forensics.com/?p=1368#comment-4552 Hmm, now I'm getting paranoid about my ISP seeing me checking this article. :P Hmm, now I’m getting paranoid about my ISP seeing me checking this article. :P

]]> Comment on Disk Wiping with dcfldd by cldxx http://www.anti-forensics.com/disk-wiping-with-dcfldd/comment-page-1#comment-4448 cldxx Tue, 25 Oct 2011 22:37:05 +0000 http://www.anti-forensics.com/?p=1003#comment-4448 Does dcfldd work on ssd drives? Does dcfldd work on ssd drives?

]]> Comment on Disk Wiping with dcfldd by cldxx http://www.anti-forensics.com/disk-wiping-with-dcfldd/comment-page-1#comment-4447 cldxx Tue, 25 Oct 2011 22:36:29 +0000 http://www.anti-forensics.com/?p=1003#comment-4447 Can't you just have a two hard drive setup? One with backtrack/ubuntu and a second to dcfldd when done? Just copy a copy a vmware player image to the second drive. There could be a problem though.. Are there any special settings you need for vmware player to make sure swap, mem file and log writes happen just on the second drive? I'm not familiar enough with vmware player. Can’t you just have a two hard drive setup? One with backtrack/ubuntu and a second to dcfldd when done?

Just copy a copy a vmware player image to the second drive.

There could be a problem though..

Are there any special settings you need for vmware player to make sure swap, mem file and log writes happen just on the second drive?

I’m not familiar enough with vmware player.

]]> Comment on Disk Wiping with dcfldd by Anonymous http://www.anti-forensics.com/disk-wiping-with-dcfldd/comment-page-1#comment-4180 Anonymous Mon, 17 Oct 2011 05:55:19 +0000 http://www.anti-forensics.com/?p=1003#comment-4180 Actually with some of the newer drives that have hardware-level full-disk encryption (particularly SSD's)--as in nothing gets written plaintext--you can wipe the drive in less than a second by overwriting the encryption keys, which has the same effect. Actually with some of the newer drives that have hardware-level full-disk encryption (particularly SSD’s)–as in nothing gets written plaintext–you can wipe the drive in less than a second by overwriting the encryption keys, which has the same effect.

]]> Comment on Disk Wiping – One Pass is Enough by BamaRebel http://www.anti-forensics.com/disk-wiping-one-pass-is-enough/comment-page-1#comment-4106 BamaRebel Sat, 15 Oct 2011 01:33:35 +0000 http://www.anti-forensics.com/?p=336#comment-4106 In actuality, one pass at the bit level is enough to not allow recovery of any type. Here is something for you to read: http://www.derkeiler.com/Mailing-Lists/securityfocus/security-basics/2008-10/msg00199.html In actuality, one pass at the bit level is enough to not allow recovery of any type. Here is something for you to read:

http://www.derkeiler.com/Mailing-Lists/securityfocus/security-basics/2008-10/msg00199.html

]]> Comment on Hunting Anonymous Pt. 2 by dc http://www.anti-forensics.com/hunting-anonymous-pt-2/comment-page-1#comment-4056 dc Thu, 13 Oct 2011 11:31:16 +0000 http://www.anti-forensics.com/?p=1321#comment-4056 Nice article and very informative website. I love it but you should inform people about disk cryptor which is a FREE disk encryption application for windows and is miles ahead of Truecrypt. The only downside of dc is that it doesn't support file containers at this time. http://www.diskcryptor.net. Nice article and very informative website. I love it but you should inform people about disk cryptor which is a FREE disk encryption application for windows and is miles ahead of Truecrypt. The only downside of dc is that it doesn’t support file containers at this time. http://www.diskcryptor.net.

]]>