Data Recovered From Space Shuttle Columbia HDD

WmHBlair writes "Data recovered from a 400MB Seagate hard drive carried on the Space Shuttle Columbia has been used to complete a physics experiment performed on the mission in space. The Johnson Space Center sent the recovered drive to Kroll Ontrack in Minneapolis, Minnesota. Considering the shape the drive was in (see picture in the linked article), it could indeed qualify for the 'most amazing disk data recovery ever.'" Update: 05/08 12:51 GMT by T : Reader lucas123 points out a piece at Computerworld with a series of photos of the recovered drive.

Yup...

Data recovery has come a long way, keep this in mind when not using proper deletion techniques! Would have been nice to see a picture of the HDD though, to get a full understanding of the recovery.

Re:Yup...

Here is a picture for you:

http://www.sciam.com/article.cfm?id=hard-drive-recovered-from-columbia&sc=rss [sciam.com]

I'm pretty sure it's the one from the shuttle..

Re:Yup...

Here is a picture for you: http://www.sciam.com/article.cfm?id=hard-drive-recovered-from-columbia&sc=rss [sciam.com] I'm pretty sure it's the one from the shuttle..

Thanks! And from that image it does not appear anything happened to the platters.

Re:Yup...

nothing happened to the platters...with the exception of the violent crash (head-to-platter damage) and, more importantly, the extreme heat.

Short of that though, yeah - platters were just peachy.

What about the temperature of re-entry?

I'd say that's the part that makes this impressive. Re-entry is known to be pretty darn warm. And heat will scatter magnetic domains. Heat up a magnet - it's not a magnet anymore.

Either this HD was in the center of a ball of stuff and didn't get very hot, or Seagate has some seriously awesome engineering going on.

Re:Yup...

I've used OnTrack numerous times and they really know their stuff. I know there are other recovery services out there but these folks have earned my business.

Basically, you pay a bench fee to get the drive examined, and then they send you the costs for recovery - for a desktop HD $500-$1500 depending on the problem. The cool part is that they send you a manifest of the recoverable files/directories so you can make an informed decision.

And they _can_ perform miracles. Including dealing with bent platters. Just depends on what you want to pay.

I must say it's been a great instructional tool for people who've neglected backups. They become wild operational militants after these episodes.

Just remember that the ONLY way to ensure data cannot be recovered on a HD is to raise the drive temp past the Curie Point for the magnetics. (A charcoal BBQ works really well for this. Just pull the electronics and wrap the drive in heavy foil unless you like the smell of roasted phenolic.)

Even if you "format" a drive it means that the waveforms coming off the heads can be interpreted as a certain, predictable value - but also remember that at root, it's an analog system and so artifacts from the prior contents are around, it's just a question of finding and interpreting them... That's why the DoD and other "erase" things are so comprehensive. Trying to obliterate all artifacts.

Re:Yup...

There are a number of standards for secure deletion of magnetic media, but basically writing over it a few times with a random pattern should be sufficient. A lot of people claim that the Gutmann method is superior but that was based on an older encoding scheme that presupposed you knew about the physical layout of the data -- modern drives are permitted to shuffle your data however they want (e.g. sectors can be mapped arbitrarily to the physical platters). Gutmann himself no longer recommend his eponymous method:

In the time since this paper was published, some people have treated the 35-pass overwrite technique described in it more as a kind of voodoo incantation to banish evil spirits than the result of a technical analysis of drive encoding techniques. As a result, they advocate applying the voodoo to PRML and EPRML drives even though it will have no more effect than a simple scrubbing with random data. In fact performing the full 35-pass overwrite is pointless for any drive since it targets a blend of scenarios involving all types of (normally-used) encoding technology, which covers everything back to 30+-year-old MFM methods (if you don't understand that statement, re-read the paper). If you're using a drive which uses encoding technology X, you only need to perform the passes specific to X, and you never need to perform all 35 passes. For any modern PRML/EPRML drive, a few passes of random scrubbing is the best you can do. As the paper says, "A good scrubbing with random data will do about as well as can be expected". This was true in 1996, and is still true now.

Source: http://www.cs.auckland.ac.nz/~pgut001/pubs/secure_del.html [auckland.ac.nz], emphasis added.

A good general explanation is given by the RCMP (what the hell mounties have to do with computers, like most of Canadian society, is entirely beyond me) http://www.rcmp-grc.gc.ca/tsb/pubs/it_sec/g2-003_e.pdf [rcmp-grc.gc.ca]

If you have the practical need to nuke a drive, used DBAN: http://dban.sourceforge.net/ [sourceforge.net]

Re:Yup...

You must be new here.

Re:Yup...

I saw them do it on CSI, and TV never lies.

I've had some drives crash on me, but..

I will probably never use the term "crash" to describe a hard drive failure again.

I'll bet Ontrack made a fortune off of this recovery, too.

Re:I've had some drives crash on me, but..

Actually, they probably did it for next to nothing, anticipating all the free press coverage they would get. This very "press hit" on slashdot is a good example of what they were aiming at. (Although in this specific case, they deserve the good press they're getting.)

Re:I've had some drives crash on me, but..

Ontrack has been doing this type of recovery for years. A couple of times I have asked for quotes, just to even look at the drive was like $1,000US. Can't remember how much it was per MB to retrieve the data. I know they have recovered data for machines lost in hurricane andrew, servers sitting in water for months. They were in Kuwait after the 91 gulf war recovering systems there. I think the only way to not have Ontrack recover a drive is to literally melt the platters.

Re:I've had some drives crash on me, but..

"Actually, they probably did it for next to nothing, anticipating all the free press coverage they would get. "

Don't count on it. First off, they probably didn't even know if they could recover the data. Second, they would have no way of knowing for sure that NASA would release the information about them providing the data recovery services. Third, they very likely wouldn't have known whether or not the data (if recovered) would be used for anything in the future. Fourth, there are very strict rules about government agencies doing business where they don't pay for services, especially with potentially classified data on the drives.

I would bet very strongly that they got well paid for this recovery.

Good thing, too!

Their server is shooting flames as I type this, but they have the technology to recover their site!

Amazing data recovery!

Wow! They recovered 400MB of data when all they had to work with was "500 Internal Server Error"?! Unbelievable!!!

Preparing for slashdot effect

So someone put together a story on spectacular hard disk failure, space shuttle, physic experiments and heroic success, and decided to host this on anything less than an industrial-strength web server? The only thing that could have made for a quicker or larger slashdotting would be if somehow it also involved big guns and Natalie Portman (with hot grits, petrified).

Seriously people. Show some foresight here. At least the editors should have shown some mercy.

Soooo.... anyone got a coral cache of it?

another link

Article on softpeida about it with pictures. http://news.softpedia.com/news/400-MB-Seagate-Drive-Survives-the-Columbia-Space-Shuttle-Disaster-84826.shtml [softpedia.com]

workaround to get into this website to view it

Almost looks like the site is denying visits when the referer is slashdot.org. With the below method, I was able to read the full article with no problems.

To get in, simply copy the link in the story into a new browser window and hit enter to come into the site with no referers.

Hope this helps

Way to go guys (and gals)

Now look what you've done [earthlink.net]. Wasn't it bad enough the shuttle burned up? Now you've gone and burned up the server trying to show us pictures of the mangled hard drive from the burned up shuttle.

Wrong Shuttle or wrong image name?

If this experiment was on Columbia, why is the image called "Challenger_drive.jpg"?

Challenger was many years earlier...

Link to xenon experiment's extract

For anyone curious about the actual experiment whose data was recovered:

The abstract for the science experiment is at http://link.aps.org/abstract/PRE/v77/e041116 [aps.org] (or in the table of contents issue is http://scitation.aip.org/dbt/dbt.jsp?KEY=PLEEE8&Volume=77&Issue=4 [aip.org] ).

"We measured shear thinning, a viscosity decrease ordinarily associated with complex liquids, near the critical point of xenon. The data span a wide range of reduced shear rate ... The measurements had a temperature resolution of 0.01 mK and were conducted in microgravity aboard the Space Shuttle Columbia to avoid the density stratification caused by Earth's gravity."

Re:Mounting Brackets

I think when you're intending to launch something into space using a couple of giant rockets, you might be concerned about vibration shaking normal bolts loose.

As for the condition of the drive, it's hard to say. The exterior was obviously fried, but it was still basically drive-shaped, and from the picture it's impossible to say how damaged the platters were. If the outside was messed up but the platters were still intact, I would think recovery would be fairly simple. Would have been nice to include a picture of the interior of the drive, or maybe even multiple pictures as they took it apart.

Re:Mounting Brackets

http://www.sciam.com/media/inline/BAA76AE9-F23C-1819-08D80B3BC4D83163_2.jpg [sciam.com]

There we go
=Smidge=

Re:First post

You call THIS "recovered"??? More like "Houston,we have a problem ..."

Error Executing Database Query.
Data source rejected establishment of connection, message from server: "Too many connections"

The error occurred in /home/httpd/customtags/parameters.cfm: line 22
20 :
21 :
22 :
23 : SELECT tag, value FROM parameters
24 :

SQL SELECT tag, value FROM parameters
DATASOURCE blocksandfiles
VENDORERRORCODE 1040
SQLSTATE 08004

Resources:
Check the ColdFusion documentation to verify that you are using the correct syntax.
Search the Knowledge Base to find a solution to your problem.

Browser Opera/9.23 (X11; Linux i686; U; en)
Remote Address 70.49.63.152
Referrer http://blocksandfiles.com/article/5056 [blocksandfiles.com]
Date/Time 07-May-08 07:30 PM

Stack Trace
at cfparameters2ecfm1715857017.runPage(/home/httpd/customtags/parameters.cfm:22) at cfApplication2ecfm1592932022.runPage(/home/httpd/vhosts/blocksandfiles.co.uk/sitedocs/Application.cfm:17)

com.mysql.jdbc.exceptions.MySQLNonTransientConnectionException: Data source rejected establishment of connection, message from server: "Too many connections"
        at com.mysql.jdbc.SQLError.createSQLException(SQLError.java:921)
        at com.mysql.jdbc.MysqlIO.doHandshake(MysqlIO.java:1055)
        at com.mysql.jdbc.Connection.createNewIO(Connection.java:2749)
        at com.mysql.jdbc.Connection.(Connection.java:1553)
        at com.mysql.jdbc.NonRegisteringDriver.connect(NonRegisteringDriver.java:285)
        at coldfusion.server.j2ee.sql.pool.JDBCPool.createPhysicalConnection(JDBCPool.java:562)
        at coldfusion.server.j2ee.sql.pool.ConnectionRunner$RunnableConnection.run(ConnectionRunner.java:67)
        at java.lang.Thread.run(Thread.java:619)

Mirror

http://www.networkmirror.com/N132udsTg07EUt3b/blocksandfiles.com/article/5056.html [networkmirror.com]