PGP Desktop includes a Wipe Free Space utility that claims to eliminate data in all the free space on your hard drive including the the little areas after the end of existing files which may still have old data left behind. In short, the utility claims to wipe file slack space, the unused space in a disk cluster. The software does not work as advertised. It does not clean slack space.
News & Events
Windows file time stamps can be set to extremely low values via the NtSetInformationFile() system call. The Windows API does not properly translate the low 64-bit time values stored on disk into human readable format, and displays no information instead. Although this is not a security vulnerability in itself, it adversely affects third-party applications that rely upon the Windows API to perform the translation.
Vincent Liu will be presenting “The Metasploit Anti-Forensics Project” at Microsoft BlueHat v2, October 13 at Microsoft in Redmond, WA.
Vincent Liu will be presenting “The Metasploit Anti-Forensics Project” at Toorcon 7, September 16 at the San Diego Convention Center in San Diego, CA.
Vincent Liu will be presenting Catch Me If You Can: Exploiting Encase, Microsoft, Computer Associates, and the rest of the bunch at Black Hat USA 2005, July 27 at Caesar’s Palace in Las Vegas, NV.