Re:SSD firmware destroys digital evidence, researchers find
by rbanffy on Saturday March 05, 2011 @06:25PM
(#2292803)
> What will this accomplish if the data has actually been erased?
You can, at least, recover files the owner of the disk just erased before being handcuffed.
It would be trivial to setup a background task that overwrites all free blocks of the (physical) disk when the drive is idle. Or insert that in the filesystem driver, to be done when a file is erased. You could even maintain two write queues, one high-priority for the data you want to keep, one low-priority for the data you want not to keep.
You can, at least, recover files the owner of the disk just erased before being handcuffed.
It would be trivial to setup a background task that overwrites all free blocks of the (physical) disk when the drive is idle. Or insert that in the filesystem driver, to be done when a file is erased. You could even maintain two write queues, one high-priority for the data you want to keep, one low-priority for the data you want not to keep.