The Great Zero Challenge

James Firth ukcrypto at chiark.greenend.org.uk
Mon, 8 Sep 2008 15:28:44 +0100


> FYI - there's a Microsoft command-line utility which can be used to
> overwrite deleted data
> http://support.microsoft.com/kb/315672/en-us

Given this section from the Microsoft help text: "If you create files in
plain text and then encrypt them, Encrypting File System (EFS) makes a
backup copy of the file so that, if an error occurs during the encryption
process, the data is not lost. After the encryption is complete, the backup
copy is deleted. As with other deleted files, the data is not completely
removed until it has been overwritten."

If this is the default behaviour for their encryption software I personally
would not trust the tool to secure anything beyond a copy of my public
website.

Does anyone have any opinions on degaussing? I use a combination of
degausser and 4lb hammer.

James Firth