Slashdot Mirror


A Walk Through the Hard Drive Recovery Process

Fields writes "It's well known that failed hard drives can be recovered, but few people actually use a recovery service because they're expensive and not always successful. Even fewer people ever get any insights into the process, as recovery companies are secretive about their methods and rarely reveal any more information that is necessary for billing. Geek.com has an article walking through a drive recovery handled by DriveSavers. The recovery team did not give away many secrets, but they did reveal a number of insights into the process. From the article, "'[M]y drive failed in about every way you can imagine. It had electro-mechanical failure resulting in severe media damage. Seagate considered it dead, but I didn't give up. It's actually pretty amazing that they were able to recover nearly all of the data. Of course, they had to do some rebuilding, but that's what you expect when you send it to the ER for hard drives.'" Be sure to visit the Museum of Disk-asters, too.

87 of 238 comments (clear)

  1. Their secret revealed... by Anonymous Coward · · Score: 5, Funny

    A hard drive shaped freezer.

    1. Re:Their secret revealed... by iMaple · · Score: 5, Interesting

      That's actually not to far away from a working solution. You can normally make a failing/failed harddisk work for around 5 minutes by freezing it and then immediately using it. Don't try to boot off it, just connect it as an external drive and you can probably get that code you were working on before the drive failed. Its worked for me all 3 times I've tried.

    2. Re:Their secret revealed... by Anonymous Coward · · Score: 2, Funny

      That only works if you have "engineers wearing specialized, certified cleanroom garments" that place the drive in the freezer. And don't forget to charge $1500.

    3. Re:Their secret revealed... by mikael · · Score: 4, Interesting

      That worked for me - I recovered an entire hard disk drive (Hitachi Travelstar) using the freeze and sudden twist method. Basically you freeze the hard disk drive to get whatever it is that sticks, to become brittle, and then give the drive a sudden twist to free the platters. This will last as long as the drive motor keeps running. Blogosphere theory is that it is the oil from the platter bearings that leaks and hardens.

      --
      Vintage computer adverts: http://www.vintageadbrowser.com/computers-and-software-ads
    4. Re:Their secret revealed... by AgTiger · · Score: 5, Informative

      I had a primary hard drive fail in a linux file server I have at the house. The backup hadn't been taken in a while (yeah, I got lazy), and I really needed the updated files.

      A friend of mine told me this method, so I tried it; it worked. I got more than 30 minutes of operation out of the drive, enough to pull ALL of the files off (30 gigs of data) successfully.

      1. Put masking tape over the data and electrical connectors of the drive.
      2. Immerse the drive in a ziplock bag of minute-rice, with the data/power connectors sticking up. This can't be regular rice, it MUST be minute rice. This acts as a poor man's silica gel later in the process. Close the zip-lock.
      3. Freeze the bag of rice with the hard drive in it in the deep freeze for 24 hours. You want it completely frozen, patience is a virtue.
      4. Remove the bag from the freezer, and take it to a pre-prepared computer where the drive is ready to be received and plugged in (longer data cable, longer power cable, etc...) You should have another big data drive in the system ready to receive the data from the frozen drive.
      5. Leave the drive immersed in the minute rice except for the data/power connector. Remove the tape. Plug in the data and power cables. Try to re-seal the zip-lock bag as much as possible so you don't have rice grains escaping.
      6. Orient the drive so it's laying in as natural of a position as possible with as much frozen rice around it.
      7. Fire up the system, and try to access the frozen drive. This is the moment of truth. If you're lucky, it'll identify and respond, and you'll have access to the file system.
      8. You now about 20 reliable minutes to copy data. You may get more if you're lucky. Copy copy copy. Note: The drive WILL be slow at first, and will speed up as it starts to warm.

      Why the minute rice? It performs two functions: First, it keeps the moisture from condensing on, and in the drive's metal parts. Moisture's the killer when you power up a frozen drive. Second, it provides an additional thermal block of "cool" to help keep the drive at a lower temperature while you perform the copy.

      After I got the data, I scrapped the original drive I froze (literally, out came the platters and they sit in my stack of platter-shame.) No sense courting disaster a second time.

      I've since used this method 2 more times successfully with other people's hard drives. I suspect the recovery specialists use a similar trick, only they'd be smart to use a sub-zero frozen room with no moisture to do their "cold start and copy" process.

    5. Re:Their secret revealed... by Cal+Paterson · · Score: 3, Informative

      You can normally make a failing/failed harddisk work for around 5 minutes by freezing it and then immediately using it.
      It only works for a certain kind of broken hard drive. Fortunately, these kinds of breaks, due to poor workmanship, account for around 40-50% of failures! Hurrah!
    6. Re:Their secret revealed... by Crispy+Critters · · Score: 2, Interesting

      I couldn't get freezing to work on my dead drive. The trick that worked was: Let sit on the desk for two months and then try it again. It still made noise, but it worked long enough to find and retrieve the files that weren't backed up.

    7. Re:Their secret revealed... by turing_m · · Score: 4, Informative

      A better version of the poor man's silica gel is crystalline kitty litter (which is just rebranded silica gel).

      --
      If I have seen further it is by stealing the Intellectual Property of giants.
    8. Re:Their secret revealed... by Snover · · Score: 5, Insightful

      All modern disks ship with some unused spare sectors that are used to remap onto failed sectors. This occurs all inside the drive's firmware, so even though the computer thinks it's addressing the same sector, in actuality the drive is pulling data from the remapped spare. The firmware is smart enough to only remap sectors when you try to write to a bad one, though, because if it decided to remap a bad sector that had data on it that you needed, you'd not be able to get back that data even if the disk was eventually able to read the sector.

      --

      [insert witty comment here]
    9. Re:Their secret revealed... by mortonda · · Score: 5, Insightful

      I had a primary hard drive fail in a linux file server I have at the house. The backup hadn't been taken in a while (yeah, I got lazy), and I really needed the updated files. Which is why backup solutions must be automatic
    10. Re:Their secret revealed... by Ihmhi · · Score: 4, Insightful

      The entire article reads like an advertisement for the company. This is pretty piss poor quality for a Slashdot article.

    11. Re:Their secret revealed... by nmos · · Score: 2, Insightful

      You're better off plugging directly into a computer rather than using an external USB/Firewire adapter. In my experience anyway those adapters tend to give up the first time you run into a bad sector but if you plug in directly you can use tools such as dd_rescue to keep trying until you've recovered every scrap of data possible.

    12. Re:Their secret revealed... by Dekortage · · Score: 2, Informative

      I tried Drivesavers once in the distant past. $1200 later, they hadn't recovered more than a megabyte of data off of an 40gb server drive -- and it was all OS files, none of the actual data files we wanted. They claimed the files were too fragmented on the drive, and the failure was too extreme, that nothing else could be recovered. I doubted this because the server ran a defragging routine during downtime.

      But it taught me a lesson. I had been on vacation for a couple of weeks, leaving the tape backup system in the hands of someone else. They dutifully swapped tapes on schedule, but never checked the console to determine that the tapes were full and needed to be replaced with new (or newly-erased) tapes. So for six days, no tape backups occurred -- and of course, that department just happened to do a lot of valuable work during that time because it was approaching a deadline. That team valued the work at over $50K. *sigh* After that, I overhauled that server to include RAID, plus a secondary server which cloned all the data from the first server nightly, plus put an autoloader on the tape drive.

      --
      $nice = $webHosting + $domainNames + $sslCerts
    13. Re:Their secret revealed... by Sobrique · · Score: 2, Funny

      Why bother, when /dev/null is so handy and quick?

    14. Re:Their secret revealed... by ajs318 · · Score: 3, Funny

      Because /dev/null can get full, if you put too many ones into it! Then you have to dd /dev/zero into it to balance it out. The zeros and ones end up annihilating one another and the cosmic balance is restored.

      --
      Je fume. Tu fumes. Nous fûmes!
  2. Summary by Anonymous Coward · · Score: 5, Funny

    "It's well known that failed hard drives can be recovered"

    [Citation Needed]

  3. Hmmm. by vancondo · · Score: 5, Insightful

    The cost for recovering data from a drive with severe media damage, like mine, is about $1900. An average single drive data recovery costs about $1500.


    Wouldn't backing your data up be cheaper?

    --
    http://vancouvercondo.info
    --
    -
    1. Re:Hmmm. by Tenebrousedge · · Score: 3, Insightful

      Yeah, if you manage to do it pre-disaster. Afterwards, well, you learn an expensive lesson about doing backups.

      --
      Those who advocate genocide deserve every protection afforded by law, and none afforded by common human decency.
    2. Re:Hmmm. by somersault · · Score: 2, Interesting

      Note: I am now working there full time (while I was part time a couple of engineers were mostly responsible for IT support and I was doing coding, but now I basically take care of everything - one of the general office workers thankfully takes care of a lot of the easier IT support stuff while I *coughwastetimeon/.* code), and as well as the tape backup, I decided to hook up an external SATA HD on the fileserver that works as an extra backup each night, and makes recoveries a bit quicker than using the last tape if someone comes to me the same day that they lost their file, as well as meaning we have something quick and dirty in place to connect to another server if the fileserver server develops any major issues. A properly scheduled and maintained backup system is truly a thing of beauty :)

      --
      which is totally what she said
    3. Re:Hmmm. by Sanat · · Score: 4, Interesting

      That is a good point about not listing everything that requires backing up.

      I was on a customer's site one day in Detroit showing a new engineer about installing a mini-computer from the company we were working for at the time.

      On another mini-computer located about 50 feet away a customer did a sector by sector backup to another disk and in the process copied the wrong way and lost all of their information that represented two years work.

      He immediately panicked and looked around to see who he could blame the error on and decided to blame us... it was really pathetic because the other workers there knew he did it but he could not bring himself to admit it.

      We finished the installation and left so I never did here what happened to him.

      He was a doctor that specialized in bone deterioration and apparently the data could not be reproduced or re-keyed for some reason.

      --
      And in the end, the love you take is equal to the love you make
    4. Re:Hmmm. by Slashdot+Suxxors · · Score: 5, Insightful

      A properly scheduled and maintained backup system is truly a thing of beauty :)
      That's the geekiest thing I've read today. ;)
    5. Re:Hmmm. by Lord+Kano · · Score: 3, Insightful

      Wouldn't backing your data up be cheaper?

      Absolutely, just like wearing a condom is cheaper than having a baby but sometimes don't take all necessary precautions.

      LK

      --
      "Hi. This is my friend, Jack Shit, and you don't know him." - Lord Kano
    6. Re:Hmmm. by asdfghjklqwertyuiop · · Score: 4, Interesting

      Until one day you find the files you're taring are corrupt...

    7. Re:Hmmm. by mortonda · · Score: 4, Funny

      Ah young love. ;)

      Yes, once a geek discovers the beauty of a good backup system, he/she has stepped into a new world.

      My backup/archive server is my most lovingly maintained system. It has saved me several times, and recently had to go through a hard drive replacement. That had me nervous.

    8. Re:Hmmm. by DMUTPeregrine · · Score: 2, Insightful

      Backups aren't always possible. Say, collecting data, if you back up 1/day you still lose data. That can sometimes be worth the $2k.
      Until you remember the existence of mirroring.

      --
      Not a sentence!
    9. Re:Hmmm. by value_added · · Score: 2, Insightful

      Backups aren't always possible. Say, collecting data, if you back up 1/day you still lose data. That can sometimes be worth the $2k. Until you remember the existence of mirroring.

      And mirrored data that is accidently rm -rf, wrongly changed, or on drives that all fail, is worth how much?

      Some sort of RAID is always a good idea, but that's a different subject. Put another way, backups are always possible. Or better yet, mirroring is not a substitute for backups.

    10. Re:Hmmm. by mgblst · · Score: 2, Insightful

      Depends on how many hdd you have, and how often they break. If they only break 1 in a 1000, then you may be better of just using this solution.

      Of course, you aren't because there are other problems that backing up solve, but still..

    11. Re:Hmmm. by donaldm · · Score: 2, Interesting

      Wouldn't backing your data up be cheaper? Your stating the logical thing to do but unfortunately most people have no idea how to backup their data and many that do could not be bothered living in denial as to the reliability of cheap disks. People like this only complain when the disk fails especially when it costs $1500 for a partial recovery which could have brought an acceptable backup solution in the first place and still have change to buy a nice stereo system for your PC and possibly a 20"+ LCD monitor (my son did this for well under $1000).

      Actually the cheapest solution for the home requires backup disks that are equal or greater in size to the data they backup (my current solution). This is a viable solution but you are definately subject to physical disasters such as fire and theft, still that is the chance you sometimes take for convience. Tapes are actually better but they start to get expensive however they are easy to put off-site (gets around the fire and theft issue). The same is true with DVD or Bluray disks but when you are trying to backup terra-bytes this can also get expensive and inconvenient.

      What is even worse are companies who have little if any backup strategies and there are quite a few of them. Some companies pay considerable amounts of money to do backups but many don't do any disaster recovery planing so when a disaster happens (and it will) the losses to the company due to downtime can be quite high, sometimes millions of dollars in lost revenue due to a recovery outage.

      Personally a backup solution which also includes disaster recovery should reflect what you perceive your data is worth.
      --
      There ain't no such thing as proprietary standards only proprietary formats. Standards are by definition open.
  4. This may be a dumb question... by TomRK1089 · · Score: 2, Interesting

    ...but are flash drives prone to the same sort of catastrophic failures disc drives are? And are the same recovery techniques workable with both? My gut tells me it's not nearly that simple.

    1. Re:This may be a dumb question... by Shadow-isoHunt · · Score: 4, Insightful

      IME flash drives don't fail catastrophically, they go bad one part at a time, and generally only writes fail, you can still read without problem. I've seen a few drives fail all together, but they stopped registering as USB devices all together. The same recovery techniques can be used, and they need not be expensive. There's MagicRescue, and foremost that kick absolute ass. Free recovery software rawks.

      --
      www.isoHunt.com
    2. Re:This may be a dumb question... by Constantine+XVI · · Score: 3, Interesting

      And likewise, if you have data you need to get rid of, how easy/hard (compared to magnetic HDDs) is it to permanently blast data off a flash drive if you don't want the data found?

      --
      "I think an etch-a-sketch with an ethernet port would beat IE7 in web standards compliance."
    3. Re:This may be a dumb question... by bonhomme_de_neige · · Score: 3, Funny

      how easy/hard (compared to magnetic HDDs) is it to permanently blast data off a flash drive if you don't want the data found? Much easier - 10 minutes with a mortar and pestle pretty much guarantees recovery will be impossible. That method would take a lot longer (and require more equipment) for hard drives.

      Assuming, of course, that if hiding the data is that important, the cost of a flash drive is a sacrifice you're willing to make. ;)

      --
      "Why are you watching the washing machine?"
      "I love entertainment, as long as it's clean"
    4. Re:This may be a dumb question... by ozmanjusri · · Score: 3, Informative
      HINT - if the controller circuity fails the data is in most cases gone.

      Have a look at this photograph.

      The chip on the left is memory. That's where your data hides. The chip on the right is the memory controller. If that chip fails, but the memory chip is intact, your data may be recoverable.

      Surface mount chips are hard, but not impossible to swap out.

      --
      "I've got more toys than Teruhisa Kitahara."
    5. Re:This may be a dumb question... by zippthorne · · Score: 2, Insightful

      I have two otherwise nearly identical Lexar Jumpdrives from between 6 and 8 years ago, one of which was purchased following the other one having spent some time in a pants pocket during which said pants were both washed and dried, and one of which is now pretty finnicky. But strangely, the good one is the one that went through the wash. If only I'd checked it before driving to Best Buy...

      --
      Can you be Even More Awesome?!
    6. Re:This may be a dumb question... by piojo · · Score: 2, Interesting

      I accidentally dropped a flash drive in some espresso, and held it under the sink to rinse it out. After I dried it, it continued to work without loss of data. (I believe the drive did have water inside it.) Another time, my dad lost a flash drive. We discovered it that spring when the snow it was under melted. It worked fine after it dried (though I don't remember whether the data was still there).

      --
      A cat can't teach a dog to bark.
    7. Re:This may be a dumb question... by ajlitt · · Score: 3, Interesting

      Apparently not. The flash array is in the middle of a silicon die and protected with a layer of oxide and epoxy. The pins that come out of the chip packages go directly to some control circuitry and not the flash cells themselves. The flash cells are isolated unless the control circuitry actively tries to read them. So if you were to short all of the pins on the flash chip with the power off the data will still be intact.

      If you do put your flash drive through the washer / pool / toilet you should try to soak it in distilled (not deionized or spring) water for a while and then let it dry on a windowsill for a few days. As long as you don't plug it in until it dries it should work just like new. This is the same process used during manufacture of most PC boards with water soluble flux, so it's likely that your drive has already been dunked anyway.

    8. Re:This may be a dumb question... by camperslo · · Score: 4, Interesting

      The same recovery techniques can be used, and they need not be expensive.

      Not really. Software tools such as the one you mentioned, Magic Rescue, are for dealing with deleted files or corrupt file systems. That applies to both flash and magnetic drives.
      But for it to work on a magnetic drive, the drive pretty much has to be functional electrically and mechanically. Most drives like that would work after reformatting.
      For that software to work, the interface to the computer has to work, the spindle servo has to work, the head positioning system has to work, the heads have to be okay and have a working connection, and at least the read electronics has to work. A drive isn't really very dead if software can control it and read from it.

      A failure of some part of the drive hardware is likely to require repair or substitution of what's broken. I was disappointed that the article provided almost NO useful details on that.

      If the electronics has failed, substituting the circuit board from another drive of the same type seems like one thing that would be relatively easy.
      Those in the know should easily be able to tell if a head or connecting cable has become open-circuited. I suspect that cracked copper in the head flex cable is a fairly common problem. It is likely the as it first fails, a connection is lost more towards one end or the other of head travel. If one can run the electronics in a sort of diagnostic mode (to avoid aborting on errors), I suspect that a bit for bit copy can be attempted by physical location. That's likely what they're talking about when they mention making an image to recover from.

      If the heads/cables are trashed and not easily repaired in place, swapping the platters into another drive (after removing any debris) is one of the more extreme measures.

      There are probably alternate test-jig type fixtures available to substitute for normal drive electronics. I wouldn't be surprised if the most extreme tools allowed varying read-head preamp parameters and finely adjusting head positioning parameters.

      It's kind of sad that so much information is unavailable to most of us. With full schematics, details of drive firmware etc a skilled technician can do component level repairs. People used to laugh at tv repairmen when sets came along where they'd just swap individual circuit boards instead of finding the bad component. But that's the sort of thing we now see most of the time with our computers and consumer electronics, if they get "fixed" at all. Most of the so called repair people know very little about electronics. It's understandable that the low replacement cost of much electronics has made labor-intensive repairs cost prohibitive, but I'd still like to see schematics available for everything.

      It's sad that we've not only lost the majority of manufacturing jobs, but much of the service side too as a result of the "if it breaks buy a new one" way of doing things.

    9. Re:This may be a dumb question... by ajs318 · · Score: 2, Informative

      Not necessarily true. You just need to locate another identical flash drive, and swap over the memory chip (the one with two rows of pins spaced stupidly wide apart). Be careful with the unsoldering and soldering, for fear of ripping the tracks off the board -- these devices tend to be built on FR4, which is not renowned for its copper-to-substrate adhesion. Use plenty of flux (if you can breathe, then you aren't using enough).

      It still might not work if the controller failure took out the flash memory with it, but in practice this is rare.

      --
      Je fume. Tu fumes. Nous fûmes!
  5. How do you backup by Anonymous Coward · · Score: 2, Insightful

    a slashdot advertorial?

    1. Re:How do you backup by mrbluze · · Score: 2, Funny

      Google cache?

      --
      Do it yourself, because no one else will do it yourself. [beta blockade 10-17 Feb]
  6. Never had any luck with recovery by a_nonamiss · · Score: 2, Informative

    In my professional career, I've sent around 10 drives out for recovery, (various companies) and none of them were able to be successfully recovered. I think that most of these companies use some variation of R-Tools so that they can quote amazing statistics on their websites. (Over 99% of all data is recoverable!)

    Sure, I suppose if the drive has bad electronics AND the head hasn't crashed, you might have some luck, but I never seem to get any of those cases. As far as people accidentally formatting their drives or deleting files, I can recover that stuff myself.

    --
    -Arthur
    Cave ne ante ullas catapultas ambules
    1. Re:Never had any luck with recovery by sfbiker · · Score: 2, Insightful
      What's so hard to beleive? That it's possible to recover data from drives that have a physical or electrical problem?

      So you think that the original article was a fabrication? Or maybe that Drivesavers took the guys $1500 and just ran r-tools to recover his data (and scrapped 20% of it just to make it look like it was hard)? What about Kroll Ontrack? Did they fleece NASA too with the Columbia disk recovery? Or maybe NASA made up the whole thing?

      In spite of the article sounding like an advertisement (they probably offered the author a discount on his fee if he published his experience), I don't see anything extraordinary in the article that makes the data recovery hard to believe.

      I've had one personal experience with data recover services -- it wasn't my drive, but I saw the dead drive, it would not even spin up though the green light on the circuit board was blinking.

      They sent the drive to a recovery firm and $750 and 2 weeks later they got a DVD in the mail with the missing data and an explanation that the drive guts were fine, but the circuit board had some fault, so they just replaced the board (or maybe just some component) and were able to do a full recovery.

    2. Re:Never had any luck with recovery by syousef · · Score: 3, Funny

      I had a drive with a mechanical problem that wouldn't spin up. It didn't have anything critical but it did have my last x weeks worth of software downloads which would have been a pain to re-download. I tried banging it, freezing it, you name it. What worked in the end was making sure it was upside down when it was powered up and giving it a little tap to get it spinning. Got it running for 24 hours - long enough to get all my data off. About 200Gb. Obviously a mechanical failure and obviously pure luck that I got it working again.

      --
      These posts express my own personal views, not those of my employer
    3. Re:Never had any luck with recovery by mkiwi · · Score: 5, Informative
      My father had a failed hard drive many years ago and we sent it to Drivesavers. To say the least, I was not impressed. Not only did they manage only to recover 1/100 of his important powerpoint presentations and research, but they used Norton Utilities to do it. I know this because a few months later I bought Norton Utilities (Mac) and only the types of files recoverable from Norton were present. Also, the icons in the resource fork of each file had the exact same (some non-standard) icons for things like .doc, .pdf, etc. It was against the Norton Utilities EULA to use it for commercial purposes like these guys did. He was using a PowerBook and Mac OS X so maybe they didn't know what to do at the time.


      Needless to say, I was disappointed with the experience and in hindsight we should have never spent several thousand dollars to get almost nothing back.

      Now I have my dad's computer hooked up to an external hard drive using Time Machine. Unless our house burns down, which would be far more catastrophic than a hard disk failure, I don't anticipate having ever to do that again.

      Sorry if this comes off as overly negative, but as this article essentially an advertisement and people need to know customer experiences.

    4. Re:Never had any luck with recovery by JoshRosenbaum · · Score: 2
      While I haven't sent in 10 drives, I have sent in one to Ontrack and it could not be recovered.

      Here is my previous post on the subject in the Ontrack Columbia Article.

      I'll add it here so you don't have to go and read it:

      I think this is false. I sent a hard drive to them and they sent it back (and made me $100 poorer) and told me they couldn't recover anything.

      The story of the drive: I had my computer (tower) at a party in college and one of the sides was off. I also had one of my storage (not boot) hard drives (which contained various art, pictures, and other valuable stuff to me) laying on the bottom of the 'puter. A buddy came flying out of a door, hit my hand which contained my beer and the beer went flying into the case and all over my hard drive. Needless to say I was pretty well "gone" at that point and toweled the inside/drive off, but left it running. At that point my computer was the party machine pumping loud music and it couldn't be stopped. :P Anyhow, let's skip to the next morning where I go and power down the computer and check out the drive. Well the chips on the controller card were fried. (Physically melted.) :(

      So the moral of the story is that if you want to make your data unrecoverable, have a party. Space shuttle explosions will not do the trick. Oh, and backups are good. :) And probably about 20 other morals too. :P

      Needless to say, I sort of hope that one day I will find a company that can recover the data, because if they can recover a hard drive from a space shuttle explosion, you'd think a little beer would be nothing. :P
    5. Re:Never had any luck with recovery by mpaulsen · · Score: 2, Funny

      "You might try reading the article linked in the parent posting for a case where the drive had both bad electronics *and* the head crashed yet they still recovered 80% of the data."

      80%? People get paid for this?
      Guessing 1 or 0 for every bit will successfully recover 50% of the data, assuming the ones and zeros are equally represented.

      Once you've got it 50% recovered it's a simple matter to flip the bits in the remaining 50%. 100% recovery.

    6. Re:Never had any luck with recovery by mpaulsen · · Score: 3, Funny

      I think you're math is off... 1s and 0s aren't data in any way, shape, or form. There is no useful "data" at the user level stored in 1s and 0s. Data is chunks of 1s and 0s that make up stored files that are actually useful to the user" You're mostly correct. Individual ones and zeros are called anecdotes. It's only when you put together two or three anecdotes that you have data.

      so having 50% of the file uncorrupted is not a possibility. Corruption is all or none, one bit is wrong and there is no data You're missing the beauty of the algorithm. You simply take a guess at each bit. If you're right, you've recovered that anecdote. The anecdotes are binary, so if you guess wrong all you need to do is flip the bit.

      the idea of partial corruption is illegitimate for all intents of purposes Missed it by -| |- that much. So close....so close.

      because any amount of corruption is the same, save for the fact "less" corruption may make recovery easier. I could try to explain the theory, but it would be easier if you just tried it yourself. Start with 10101 as your data and corrupt it any way you want. Now flip a coin for each bit and record a 1 if you flip heads and 0 if you flip tails. Keep the bits which are correct and flip the ones which are incorrect. You just recovered 100% of the data.
    7. Re:Never had any luck with recovery by mpaulsen · · Score: 4, Funny

      Hmm.. okay I think I understand now, but then how to you know what bits are correct? Isn't that what you are looking for? Just diff against your backups.
  7. DriveSavers by DanWS6 · · Score: 5, Insightful
    DriveSavers can save your dead drives so check out DriveSavers today and see their other link about DriveSavers and did I mention DriveSavers.

    The recovery team did not give away many secrets, but they did reveal a number of insights into the process. Cool article, just wish it didn't read like an advertisement.
    1. Re:DriveSavers by Anonymous Coward · · Score: 2, Funny

      Whoosh!!!

  8. That's not an article, it's a long ad :( by Fluffeh · · Score: 5, Informative

    Having read the article, I can't help but think that it doesn't really read like an article of "Oh, this happened, and then this happened" especially considering that it is about hard driver recovery.

    Short of "sending in a zip lock satchel" and "using methodology" what exactly did this article cover in regards to recovering hard drive information? Not a lot. Sorry to be a bit of a drag here, but considering that the company was mentioned more than once, with links and so forth, it just made the whole thing read like a glorified infomercial with the added bonus of being surrounded by advertising. :(

    --
    Moved to http://soylentnews.org/. You are invited to join us too!
    1. Re:That's not an article, it's a long ad :( by Anonymous Coward · · Score: 4, Interesting

      Also the change of narration from "my brother in-law's drive" to "my drive" is a give away. The lazy author of the ad couldn't even bother to keep the details/made-up-story straight.

    2. Re:That's not an article, it's a long ad :( by momerath2003 · · Score: 3, Informative

      On top of that, I'm pretty sure those were stock images in the "article." I've seen the first one on their advertisements before.

      Good call.

      --
      I had but a simple dream, to destroy all humans.
    3. Re:That's not an article, it's a long ad :( by shawn(at)fsu · · Score: 2, Insightful

      I feel bad now for clicking on the "be sure to check out the museum link" at the bottom. Somewhere some jackoff is smiling at all the hits they are getting...
      I hope I remember never to again read a story submitted by fields and most likely never read a story posted by kdawson

      --
      500 dollar reward for tip(s) leading to the arrest of the person(s) who stole my sig.
  9. Just a Slash-Ad by daniel23 · · Score: 5, Insightful

    The summary says Be sure to visit the Museum of Disk-asters too. and I did. It is pure advertising. Zero facts, instead boring emotional angle with mom and pop hugging as all their iMac data got recovered.

    That stuff on the front page? Bahh! Instead of 15 modpoints twice a week give me 5 article mod points to vote this one down to -1 overrated.

    --
    605413? Yes, it's a prime.
  10. Nice freaking advertisement by meeotch · · Score: 5, Funny

    "Although there was severe media corruption on this drive, DriveSavers engineers were able to successfully recover the majority of the critical data by utilizing our proprietary software and methodology."

    I'm sorry, but that was the most content-free load I've read on /. in a while. And no, I'm not new here - I just usually don't RTFA. ;-P

  11. Defcon 14 had a talk about this by thule · · Score: 5, Informative

    Video of the talk:

    Defcon 14 - Hard Drive Recovery

    Basically it talks about making a clean box and how to change out the read heads or the PCB from a drive that is the exact same model. Really cool stuff!

    1. Re:Defcon 14 had a talk about this by v1 · · Score: 4, Informative

      While we don't swap heads/platters, we have had from time to time needed to swap the onboard controller card. We keep ALL removed hard drives that the customers don't request back, in case we can use the card to recover another drive someone else brings in. The quantums were really nice that way, they had a habit of setting a part on the board ON FIRE and not working anymore. Swap cards, poof, working hard drive. Needed to be the same capacity though and same attachment to the hard drive body.

      Last week we recovered 26gb of a customer's data, full recovery, in about 10 sessions of using rsync. We'd let rsync run until the drive "hung up" on us, then cancel it and into the freezer to cool back down for 10 min, repeat.

      That chirp he heard is a failure of one of the windings (or the driver IC) on the spindle motor. It's a stepper, and so if a winding goes out, it can't step, and it just resonates at the stepping frequency, and makes a very noticeable "chiiirp". (it's trying to move the head, stepping at an audible frequency, which is why you can hear it) This is followed by a loud click as the drive determines it can't read anything and resets itself, one step of which is to move the read head all the way to the parking track. It does this regardless of where it's at currently because it can't read track information to tell, so it moves it the full distance, and slams into the hard stop and makes the loud noise like a free ball in a pinball machine. Most drives will make 3-6 hard reset attempts before shutting down, but some will go forever.

      I've dealt with several dozen Seagate 2.5" HDDs lately, and they just give a loud TAK-TAK-TAK...TAK-TAK-TAK and that's it, you can't hear the chirp. Most of the 3.5" drives do the cyclic chiiirpTAK...chiiirpTAK...chiiirpTAK and then power off. Either way, as far as WE are concerned, dead drive. We refer customers to drivesavers, and due to cost, very few send it in, but a few do. (maybe 5%) So far they have had success with all the people we have referred.

      TotalRecall is another company that does this sort of work, but I don't have any experience with them. One nice thing with drivesavers is if they can't recover ANYTHING from the drive, you don't get billed. (but shipping I think)

      The OP's article was mighty light on details. I think I just provided more info than they did... :P

      --
      I work for the Department of Redundancy Department.
  12. Summary of Article by WK2 · · Score: 5, Informative

    Recovering hard drives is a 3 step process:

    1) Mumbo Jumbo
    2) Put drive platter into otherwise identical drive
    3) proprietary secret stuff (sound like they used Windows to get the data off and then burn to DVDs.

    Now you don't have to read the article.

    --
    Write your own Choose Your Own Adventure. http://www.freegameengines.org/gamebook-engine/
    1. Re:Summary of Article by cojsl · · Score: 3, Funny
      you forgot:

      4. profit!

  13. Any *REAL* information out there? by ziah · · Score: 2, Interesting

    Are there any *REAL* guides out there that will show you how it's done through purchasing hardware from a store? It'd be nice to be able to do this all yourself if you have the right tools...

    1. Re:Any *REAL* information out there? by postbigbang · · Score: 4, Informative

      There's tons of information out there. We'll omit details about how your data should have been backed up. The rest of it's pretty simple, and it depends on your filing system, but marginally.

      1) find out what's wrong with the drive (logic board or drive motor board)
      2) get an identical drive; put the old platter assy into the new drive's guts, or just move the good drive's electronics over
      3) use a sector editor to find the FAT, journal, or whatever, or restore the MBR and use your fav OS (Kunbuntu, here)
      4) painfully gather files (actually, go out back while they're retrieved for you)
      5) collect fat (as in BIG) check with lots of kudos, thank yous, and appreciation
      6) repeat

      You don't have to backup, as long as you have a fat wallet.

      p.s. TFA really does sound like a commercial.

      --
      ---- Teach Peace. It's Cheaper Than War.
    2. Re:Any *REAL* information out there? by number11 · · Score: 2, Informative

      get an identical drive; put the old platter assy into the new drive's guts, or just move the good drive's electronics over

      That's the hard part. "Identical" means not only model, but often revision as well. Once I did get lucky and find another drive from the same batch, and successfully trade circuit boards. But a couple of other times I failed to find the same rev. number, and the transplant didn't work.

      I've been successful a few times freezing the drive (sometimes extending runtime with a can of freeze spray, an aerosol like canned air but gets a lot colder, intended to help techs find thermal problems). And mechanically abusing it (twisting it to start the platter spinning, or just whacking it.

      Always have everything ready to go, if you do get it started it may work for ten minutes and quit. Maybe you'll get it started a second time, maybe not.

      When the problem has (apparently) been data corruption rather than a hardware problem, I've been successful with software a few times. Once with OnTrack EasyRecovery, several times with File Scavenger. Including once where the problem was obviously a head crash, the drive made a horrid screeching sound. Couldn't get all of the data, but got some of it.

      There's a pdf at http://www.hddrecovery.com.au/ that's got some other suggestions. (I have never tried that company's recovery software so have no opinion on it.)

      I've never had anybody who was willing to pay to have the data recovery pros do it. But often they'd be willing to go a few hundred bucks for me to have a shot at it. Sometimes we get lucky. Sometimes we don't.

    3. Re:Any *REAL* information out there? by postbigbang · · Score: 2, Interesting

      We recovered numerous ones, especially in the easy old days.

      A few of our techniques:

      -Slam an ST-225 onto a table to get the heads off the drive, a condition known as 'striction'
      -Recovered a Novell-formatted drive by using an identical one's logic board, and a few well-placed jumps to its table
      -Used a sector editor to hand copy one copy of a FAT to the primary table
      -Figured out, then wrote a master boot record from one drive to another (in SVR4) doing the recalc on the drive geometry
      -Found a MBR virus, including epithet, on an early laptop drive; we x-d it out and the machine finally booted to the point where we got to the place where we could write a new partition table.

      These days, we just backup things furiously. Bad hard drive? Take out back to the trash. Restore. Repeat.

      --
      ---- Teach Peace. It's Cheaper Than War.
    4. Re:Any *REAL* information out there? by FlyingGuy · · Score: 2, Interesting

      Unless there is physical damage to the platters, which is pretty much obvious, then you do not have to do much if it is either the spindle motor / control logic / bearing assembly or the Head Actuator / or heads themselves.

      The days of having a platter dedicated to a servo track are gone, but the drive will orient itself and figure out where things are located. If you can get the platters from an old drive, into the new drive, in the correct stacking order, then on spin up, the heads should un-park, and the drive should be just as it was, and run for however long the chassis will last.

      If The heads crashed into the platter(s), its another bowl of rice. At that point things get a little sticky. The new chassis will attempt to orient itself on the platter(s) but if it cannot find its synch point, then all bets are off, and you need a very special bench setup, where you can give direct commands to the drive logic, and then view the results, because you will have to re-establish synch, and that is not easy.

      --
      Hey KID! Yeah you, get the fuck off my lawn!
  14. Advertisments by doomy · · Score: 2, Insightful

    Well I for one now know what Driver Savers is (since I RTFA), but the whole thing lacks details. A story in /. should have more details than a glorified advertisement for a hard disk recovery job. There is a company down the street from me that does similar work for NASA and thus I don't think this is a unique field that no one on /. has ever heard of.

    Here is what I'd like to see (to submitter), maybe you should have gone to the corp with your drive (since you did spend 2k on recovery.. why not fly over?). Then you should have taken pictures of the whole process and even a video (instead of using stock images), and most of all you could have avoided all this by using backups.

    But this story would have been truly /. worthy if you (submitter) bought an identical harddisk and tried to swap platters etc and tried the recovery on your own. I've seen people do this and it's not hard to recover data even if you have physical damage on the drive.

    --
    ...free your source and the rest would follow...
  15. What is a good DIY success rate? by thogard · · Score: 5, Interesting

    I've done a few platter swaps and have had good luck if I can find the right donor drive. So far I've gotten data off most of the disks I've tried but sometimes the recovery rate can be as low as 25%.

    I recommend that people buy drives in pairs. That way you have a good drive to use as parts once the data has been moved off to a newer drive.
    I do repairs in my house so there isn't a clean room in sight.
    If the board is fried, a board swap tends to do the trick but the bad sectors are stored on the board so the mapping will result in some bad data.
    I start with the hard drive in the freezer (using a external firewire case) trick first. That tends to get noisy bearings about 3 hours which is enough to copy data over.
    If that doesn't work, I do a platter swap. I disassemble the drive and I've found that normal printer paper works great for lifting out the platters with out scratching them. Just make sure you put them in the donor drive in the same order and don't flip them. Once the platters are in, it appears that the drives have a few days to live before they stop working. With head crashes, you might want to consider only putting the good platters in. I have yet to find a good cleaning solution so with crashes you have a very limited amount of time but head crashes seem to be rare these days.

    Once you can read the disk, use DD to copy the data to a new disk. Don't try to mount it to look for a specific file unless you only need one file and mount it read only. For data file recovery, I use a mac program Data Rescue by Prosoft which is good except it sometimes is too good and pulls out the internals like pictures out of flash and office docs.

    If your going to do this at home, take apart a few older disks first. Keep in mind they designed these things to be assembled quickly so there is a way to retract the heads completely off the platter so hunt around for it. There are some people who use vacuum cleaners to try to remove dust and others will use a shower to steam up a bathroom and wait until the steam clears with the hope of taking the dust away. I just open the drives on my computer desk.

    1. Re:What is a good DIY success rate? by arminw · · Score: 2, Informative

      ....Or, better yet, set up those two drives as a RAID mirror ...

      For Macs with 10.5 that has become easier because of Time Machine. A 2x1000G RAID box connected to an Apple Extreme wireless router does backups for 6 Macs over the network.

      If one of the drives fails, the RAID device makes an audible alarm and indicates which of the two drives has died. A new drive can be installed without shutting down the RAID system. Once the new drive is plugged in, the controller in that box automatically copies all the data from the still working drive.

      So far, there have been no glitches or hiccups. Our lone PC user has to copy important files manually to the RAID box.

      --
      All theory is gray
  16. Where's the beef? by hurfy · · Score: 3, Interesting

    A little light on content as others mentioned :(

    Nothing as interesting as the crash on our old mini-computer ages ago either. One of those 12" drives with 4-5 platters had a head crash and repurposed itself into a metal lathe quick nicely one weekend. At least it didnt burn down the building but it left several pounds of aluminum confetti all over the computer room after it blew out the filters on the drive. It seems you just can't filter air by the pound :( One head crashes and causes a chain reaction after the aluminum shavings clog the filters or interfer with the others. Luckily the software forced you to backup on the removeable platter each day. Only loss was a couple software mods (that the writer had a copy of) cause the system platter backup was kinda old, had to added back in.

    Needless to say, that had a zero chance of recovery. Only time a insanely overpriced maintainence agreement ever paid off...Drive was almost $20k to replace plus cleanup and setup on 200lb drive.

    Only other one that might have required a recovery service turned out to be electronic issue only and i sacificed a matching computer for the HD circuit board to repair the 'server' from a remote warehouse. Only some memos and spreadsheets and stuff and not worth the huge quote for recovery so i got to try it and fixed it the next day :)

    PS. always found it interesting the the edge speed was the same as current drives at around 105mph. The head hit a platter going between 50 and 105 mph.

  17. What the hell are the moderators doing ? by ymenager · · Score: 5, Insightful

    This article is such a blatant fake / advertisement, how could the moderators let that be published on the front page ?

    As noted by many, no real technical information. Whoever wrote it might have tried to sound 'grassroot', but the whole thing still reads very much like a marketing material... 'Be sure to visit the Museum of Disk-asters too' ? Especially when such page contains nothing but marketing stuff ? Give me a break !

    And how many people would go pay 2000$ just to get back some music and photos of the family ???

    Slashdot needs a system so that people can RATE THE MODERATORS, because anyone who lets something such blatant fake-grassroot marketing material on the front-page should not be in that position.

    The whole thing is just an insult to our intelligence

  18. Let's review. by dmarcov · · Score: 3, Interesting

    It's well known that failed hard drives can be recovered, but few people actually use a recovery service because they're expensive and not always successful

    Yep. The article helpfully points out the $1500 charge for a medium sized hard drive. It might have been more interesting if the article demonstrated a time when it wasn't successful.

    Even fewer people ever get any insights into the process, as recovery companies are secretive about their methods and rarely reveal any more information that is necessary for billing.

    So, just like this article? Got it. Something involving putting old platters into new drives by people wearing bio-hazard suits.

    The recovery team did not give away many secrets, but they did reveal a number of insights into the process.

    Wowsers. You can say that again, but insights? I defy anyone to name any insight that wasn't in their last press release ... much like this article.

    [M]y drive failed in about every way you can imagine. It had electro-mechanical failure resulting in severe media damage.

    Doesn't "elctro-mechanical failure" describe anything that could be wrong with a device that is .. err .. mechanical and electrical? You mean the reciprocator was caught in the optical refraction? Now that's worth $1500.

    It's a good thing space on the interwebs is free. Someone should run this past the kids that edit airline magazines.

  19. Wow, thanks for the ad by rAiNsT0rm · · Score: 2, Insightful

    I actually use a number of drive recovery companies, and thanks to this slashvertisement I will never use this company nor will I read Geeks.com

    The sad part is that I rarely even read Slashdot anymore since it is a sad shell of what it was... Pitiful.

    --
    http://teasphere.wordpress.com - A little spot of tea
  20. Nice Theory But... by Gates82 · · Score: 5, Interesting

    Blogosphere theory is that it is the oil from the platter bearings that leaks and hardens.

    That is a nice theory but there is no oil in the bearings of a Hitachi (formerly IBM) drive. They ride on an air bearing. I have heard of faulty temperature sensors being reset through the freezing method, but whatever the reason I have seen the freezing method suggested by several sources. For me I believe that it has to do with moving the drive. Shorts or binds will often be resolved by moving the drive around.

    When I worked for IBM I did a fair share of data recovery. My favorite drive that I saved was a laptop drive with a stiction problem. It would get caught during spin-up. I put my ear to the drive and would listen to it and kept rebooting and shaking the drive until it finally got past the rough spot. Recovered all the engineers data who was extremely happy he didn't have to waste $500 bucks with Ontrack.

    --
    So who is hotter? Ali or Ali's Sister?

    1. Re:Nice Theory But... by ajlitt · · Score: 2, Interesting

      My favorite disk to recover was a Quantum SCSI drive from an old Performa. That model frequently developed congealed oil in the armature bearings. The disk would run for a bit then stop since the heads wouldn't be able to move to a position to receive the servo pulse.

      The best way to get the drive going again was to power it up and about 1/2 second later give the edge opposite the connectors a light whack with a mallet. That would unstick the heads long enough to leave park and warm up.

    2. Re:Nice Theory But... by milsoRgen · · Score: 2, Interesting

      there is no oil in the bearings of a Hitachi (formerly IBM) drive. They ride on an air bearing. As do all other hard drives.
      --
      I'm sick of following my dreams. I'm just going to ask where they're goin' and hook up with 'em later.
    3. Re:Nice Theory But... by iocat · · Score: 3, Interesting

      I had a Mac IIcx with the same issues. When the drive (a Sony) first died, with no spinning (and no backups in the days of $500, 100MB drives), I was so frustrated I slammed down my fist on the top of the computer... and spun the drive up! After that I tried to avoid turning it off, or ever having the disc stop spinning, but if it did, I could always get it to start back up that way. I felt like Fonzi the IT guy...

      --

      Dude, I think I can see my house from here.

    4. Re:Nice Theory But... by MadnessASAP · · Score: 2, Insightful

      Reminds me of how people are always amazed at the things you find in a nerds toolkit.

      --
      I may agree with what you say, but I will defend to the death your right to face the consequences of saying it.
    5. Re:Nice Theory But... by KlaymenDK · · Score: 2, Funny

      Fine, so it's the air leaking out and ... hardening ... yeah.

    6. Re:Nice Theory But... by mikael · · Score: 2, Informative
      --
      Vintage computer adverts: http://www.vintageadbrowser.com/computers-and-software-ads
    7. Re:Nice Theory But... by chihowa · · Score: 2, Funny

      Air is a fluid.

      --
      If you want a vision of the future, imagine a youtube comments section scrolling - forever.
    8. Re:Nice Theory But... by Jurily · · Score: 2, Funny

      Back in the days when I did a lot of Win98 installs, I always carried a nice big hammer around. Put it on the computer before booting it up, and it installed perfectly *every time*.

      It started as a joke, but it actually worked... guess those casings had built-in hammer detectors, and the installer checked for it.

    9. Re:Nice Theory But... by Reziac · · Score: 2, Funny

      Kinda like my workbench HD, an ancient (800 mb) W.D. I got it as a failed HD from a customer, and it was then about 5 years old. I gave it the "beat it ever-harder, until it either gives in or dies" treatment, and....

      Powered on... just a whir, no bootup:

      rrrrrr... [tap tap]

      RRRRRR... [TAP TAP]

      *R*R*R*R*R*R*R... [*!!*WHAP*!!*]

      And after that it was unstictioned for good, and has worked fine ever since. It's now 13 years old!!

      --
      ~REZ~ #43301. Who'd fake being me anyway?
  21. Article is useless, comments are good by NormalVisual · · Score: 5, Interesting

    I found an unusually large proportion of the follow up comments here to be (+1, Informative) and (+1, Interesting). TFA itself was total infomercial-tastic tripe, however.

    --
    Please stand clear of the doors, por favor mantenganse alejado de las puertas
  22. Re:Advertisement warning... by NormalVisual · · Score: 2, Funny

    I don't think Class 100 really qualifies as "ultra-cool" in the clean-room world, but it *does* however have a certain cachet of inconvenience as far as having to take a non-trivial amount of time to get into the bunny suit, walk across the 50 feet of sticky mats, through the air showers and into the actual clean-room area only to discover *then* that you have to take a leak. I've had it happen more than once.

    --
    Please stand clear of the doors, por favor mantenganse alejado de las puertas
  23. That is not a clean room by Anonymous Coward · · Score: 2, Interesting

    Look at the normal ceiling tiles and door that aren't air tight. Even the small (3 employee) company I work for has a better clean room than that. Their outfits were just for show.

  24. That's what I was thinking... by msimm · · Score: 2, Interesting

    I've disassembled crashed drives (ceased) to temporarily free the platters. Aside from removing the platter (so they could get to more then 25% of the data, WTF?) it didn't really read like they actually did much. Maybe part of the reason that they are all smoke-and-mirrors about the work (some proprietary software, you mean like something they paid for?) is that when you get right down to it the work *most* of these shops do simply isn't rocket science.

    --
    Quack, quack.
  25. Re:Important factor! by mortonda · · Score: 2, Insightful

    I forgot the other important factor:

    Backups must be tested