Slashdot Mirror
Inside Al-Qaeda's Hard Drive
prostoalex writes "Alan Cullison covered the events in Afghanistan for Wall Street Journal in late 2001. On the day that Kabul fell Cullison was offered to buy a bunch of computers from a local al-Qaeda office. For $1100 Cullison purchased an IBM desktop and a Compaq laptop. Before giving the hard drives to CIA agents in Afghanistan, Cullison copied the contents and shares some of the electronic messages in September's Atlantic Monthly. Interesting insight on al-Qaeda's financial operations and their merger with Taliban movement. The letters include e-mail messages from Osama bin Laden himself."
I think this will answer your questions effectively.
I'll give the short version:
There is only one way to 100% remove all information from a hard drive. Immolate it in fires exceeding 750 degrees Celcius for more than 30 minutes. This causes the magnetic iron in the platters to lose their magnetic properties and "forget" what was written on them.
Otherwise there is a way to recover the information after destruction by any other method that is easily within reach of authorities.
Although previously it was considered "safe" to overwrite the drive with 10, 20, or 30 passes of pseudo-random numbers, the fact is that the ability to recover data from more and more deeply overwritten data improves constantly and the only limiting factor is money. Even this does not truly erase all information, either, as after so many rewrites a sector will become "bad" and the drive will automatically remap that sector to a fresh one and discontinue writing over the one flagged bad. The problem is bad sector is completely readable and may have been written over by significantly fewer passes or even none at all if it failed before the drive wipe. The equipment needed to do this costs in the thousands and is at the disposal of any local police station in the developed world.
Obviously shattering a drive would make it difficult to recover from, they are more than capable of putting it back together or analyzing individual fragments. Very few would want to recover a drive that was shredded, but there are people that have perfected the technique and are able to do it.
Finally, some seem to think that you can degauss a hard drive but this is simply not practical. The magnetic fields required to do this would require medical or military grade equipement and a very large amount of power. Information destroyed in this way is also recoverable regardless, simply at an increasing cost for the power of the magnetic field used.
To answer your original question, authorities will go as far as they need to go within the limits of their funding. The CIA/NSA certainly posesses the ability to look back as far as they want to go back short of the drive being demagnetized by flames. The question is whether the taxpayer thinks the need is important enough to warrant that expense.
Would they use an electron microscope to see investigate Joe Sixpack's computer when he's under investigation for tax fraud on $100,000? Maybe not, but they will probably take a stab at it. Would they use it to unearth files from a serial killer's computer? Possibly. The equipment is a fixed cost and the experts are paid on salary anyway. Just send it to the FBI crime lab and have at it. Would they use it to investigate the personal computer of Osama bin Laden? Oh you better bet they would. They'll go all the way back to the original hard drive manufacturing quality assurance test writes. They spent a couple hundred billion so far, a few hundred million on this computer would probably be money well spent.
It's really very simple: dehumanizing the enemy. If you make your enemies out to be less than human, then there will be few objections to slaughtering them.
LOAD "SIG",8,1
The quote is rather amusing.
However, it looses it's school-yard amusement when placed in it full context
"They never stop thinking about new ways to harm our country and our people, and neither do we.We must never stop thinking about how best to defend our country. We must always be forward-thinking"
Basically.. Bush is saying that in order to prepare for an attack against a vulnerability we must fist identify that very vulnerability ourselves.
I do this all the time when securing my networks and computer - I ask my self "how would I attack my own system."
Moneyed corporations, non-working 'poor' and criminal prisoners are turning productive citizens into tax-slaves.