http://lwn.net/Articles/273276/ This is a special feed containing comments posted to the individual LWN article titled "Recovering deleted files from ext3". hourly 2 http://lwn.net/Articles/274264/rss 2008-03-20T10:21:02+00:00 Cato <div class="FormattedComment"><pre> Actually shred works fine on ext3 in default configurations, i.e. as long as you are only doing 'writeback' of data, meaning that filesystem metadata is journalled but file contents metadata is not. See <a href="http://en.wikipedia.org/wiki/Ext3">http://en.wikipedia.org/wiki/Ext3</a> and in particular <a href="http://wiki.linuxquestions.org/wiki/Talk:Shred">http://wiki.linuxquestions.org/wiki/Talk:Shred</a> </pre></div> http://lwn.net/Articles/274236/rss 2008-03-20T04:51:51+00:00 gdt <p>Why would shred work on a <i>journaling</i> filesystem like ext3? A point noted in shred's man page.</p> http://lwn.net/Articles/274229/rss 2008-03-20T03:13:44+00:00 quotemstr Try <p> <code>$ man shred</code> :-) </p> Or better yet, <p> <code>$ alias shred='shred -u -n1'</code> </p> And use that alias like rm. It'd be nice if the ext* 's' attribute were implemented too. http://lwn.net/Articles/273929/rss 2008-03-18T23:45:49+00:00 jquirk <div class="FormattedComment"><pre> Ext2 is not really that hard to recover files from provided you stop and unmount the disk as soon as you realize you have a problem. Its all there have a look at my stuff I contributed to LDE you can see all deleted entries on ext2 volume, ext2 just unlinks the directory entry for a linked list, marks the inode as deleted and frees the blocks in the bit map. It is as you stated ext2 zeros nothing of value. Most forensics tools know this so if you are security concerned standard files system are not for you. Ever wonder why if purchase you ex military computers they have no hard drives. </pre></div> http://lwn.net/Articles/273571/rss 2008-03-16T13:00:56+00:00 nix <div class="FormattedComment"><pre> Also, if you can read the journal directly you have access to the block device and thus have lost the game regarding security of data on that device anyway. </pre></div> http://lwn.net/Articles/273570/rss 2008-03-16T12:39:00+00:00 dlang <div class="FormattedComment"><pre> please explain. if you were ever under the impression that any linux filesystem completely overwrote the file with zeros (let alone did a secure delete by overwriting the file multiple times with different patterns), you are sadly mistaken. it's still significantly harder to recover files from ext2 than it is from windows file systems, but that's not a security measure, and it never was. </pre></div> http://lwn.net/Articles/273562/rss 2008-03-16T04:27:32+00:00 elgordo123 <div class="FormattedComment"><pre> Well it's nice to see that Linux is now officially no more secure than windows. </pre></div> http://lwn.net/Articles/273535/rss 2008-03-15T14:07:31+00:00 jquirk <div class="FormattedComment"><pre> Nice to see someone actually looking at the disk structures and seeing what is really going on. When I was helping out with LDE I too just accepted the statement you can't recover files from and ext3 system. The true brilliance of this is to use the journal entries to fill in the missing pieces from the inodes. </pre></div> http://lwn.net/Articles/273440/rss 2008-03-14T18:26:59+00:00 vmole <p>It appears that Carlo's page has been LWNed...