Go Back   Hardware Canucks > NEWS & REVIEWS > Reviews & Articles from the Web

    
Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old March 1, 2011, 02:44 PM
LaughingCrow's Avatar
MVP
F@H
 
Join Date: Feb 2010
Location: Southern Ontario
Posts: 392
Default SSD firmware destroys digital evidence

SSD firmware destroys digital evidence, researchers find - Techworld.com
Reply With Quote
  #2 (permalink)  
Old March 1, 2011, 03:02 PM
MacJunky's Avatar
Hall Of Fame
F@H
 
Join Date: May 2007
Location: Creston, BC
Posts: 1,732

My System Specs

Default

Good.
Reply With Quote
  #3 (permalink)  
Old March 1, 2011, 03:13 PM
FiXT's Avatar
Hall of Fame
 
Join Date: Apr 2008
Location: GVRD
Posts: 3,343

My System Specs

Default

Quote:
Originally Posted by MacJunky View Post
Good.
No, not good.
Sort of depends on how manufacturer's choose to approach this. For business, this may be a factor that delays their transition to enterprise SSD solutions. The ability to forensically analyse their data drives for evidence of an intrusion has been a critical part of network and system security for a long time. If SSD's are unable to offer that, business may just choose to stick with high speed mechanical devices instead.

From a consumer perspective, imagine if Mr.KiddiePorn gets away because his SSD erases critical evidence of the crime
Reply With Quote
  #4 (permalink)  
Old March 1, 2011, 03:23 PM
LaughingCrow's Avatar
MVP
F@H
 
Join Date: Feb 2010
Location: Southern Ontario
Posts: 392
Default

No doubt some people will exploit this to the hilt, particularly if the same technology starts being used on the larger USB memory sticks.
Reply With Quote
  #5 (permalink)  
Old March 1, 2011, 03:39 PM
Banned
F@H
 
Join Date: Aug 2007
Location: mtl
Posts: 12,694
Default

interesting. so basically it wipes itself?

rejoyce if youre a crook in fear of the cops banging on ya door any day!!! bastards
Reply With Quote
  #6 (permalink)  
Old March 1, 2011, 04:03 PM
Nodscene's Avatar
Allstar
 
Join Date: Dec 2007
Location: Toronto
Posts: 971
Default

Thanks for the post. Ironically, I'm taking the Encase training right now so the timing couldn't have been better. And I have to agree with FiXT about this not being all that good.
__________________

Create something idiot proof and they will make a better idiot.
_____________________________________

Intel Q6600 - Gigabyte EP35-DS4 - OCZ Reaper 4gig PC2-6400 - XFX 8800GT 512Mb Alpha Dog - AuzenTech X-Fi Prelude - Alesis M1Active MK2 - Corsair HX-620 - Silverstone Temjin TJ05B-X - Scythe Katana 2 - WD Raptor 150Gb - Seagate 7200.11 750Gb x2 - Samsung SH-S203N
Reply With Quote
  #7 (permalink)  
Old March 1, 2011, 04:17 PM
MacJunky's Avatar
Hall Of Fame
F@H
 
Join Date: May 2007
Location: Creston, BC
Posts: 1,732

My System Specs

Default

Everything is exploited by someone.

This is not the only way to track pedos. Actually, the only reason that they would delete the data is if they got wind of someone about to raid their house. Otherwise, the data is all still there and the garbage collection of the drive does not affect much, cept for automatically cycled out&removed logs.. but those generally hang around for a while.
Reply With Quote
  #8 (permalink)  
Old March 1, 2011, 04:41 PM
SugarJ's Avatar
Moderator
F@H
 
Join Date: Jan 2008
Location: Langley, BC
Posts: 6,122

My System Specs

Default

Did you read the article? That's the problem, is that the ITGC and Trim functions automagically wipe the deleted cells in a relatively short period, even when powered on but not connected to a motherboard, so that the SSD will maintain it's optimal write speed. On your standard HDD, the deleted stuff stays until it is written over. Makes it tougher for forensics, certainly.
Reply With Quote
  #9 (permalink)  
Old March 1, 2011, 05:01 PM
thenewguy001's Avatar
Allstar
 
Join Date: Feb 2008
Location: Vancouver
Posts: 844
Default

I agree this is bad. I've accidentally deleted stuff before (entire partitions) that needed recovery after the fact. I was able to do so with open source programs. Having this deleted data wiped without me specifically asking for perma wipe is not good, but that's the trade off you take for fast ssd performance I guess.
__________________
i5 2500K @ 4.0 GHz
2 x 4GB G.Skill Ripjaws X
Patriot Pyro 240GB
Gigabyte HD 6970 OC
Gigabyte Z68X-UDH3-B3
Seasonic 760W
Coolermaster Hyper 212+
CM690 w/ 1-80mm, 6-120mm fans.
Reply With Quote
  #10 (permalink)  
Old March 1, 2011, 06:11 PM
MacJunky's Avatar
Hall Of Fame
F@H
 
Join Date: May 2007
Location: Creston, BC
Posts: 1,732

My System Specs

Default

Thenewguy, that is what frequent backups are for. ;)
Reply With Quote
Reply


Thread Tools
Display Modes

Similar Threads
Thread Thread Starter Forum Replies Last Post
Firmware question for ssd gingerbee Storage 4 October 23, 2012 10:39 AM
Updating SSD firmware ToXic Storage 8 November 29, 2010 12:52 AM
little help with ssd firmware BrianHanna Storage 3 November 7, 2010 05:53 AM
A-Data SSD Firmware Update mjbdc07 Troubleshooting 16 June 20, 2010 06:32 AM
A-data SSD firmware is out gingerbee O/S's, Drivers & General Software 0 December 9, 2009 10:43 AM