Overwriter said:
Unfortunately I was meaning better as in a more thorough clean.
As I don’t know the technical details I wonder if you could perhaps explain what this is going to mean for V6 users running Vista ? Are they going to be less secure after a pass with Eraser than an XP user is now ?
Not if they let their erasure pass run to completion. If they run their erasures to completion the algorithm will be the same as that in v5. FAT32 users however will lose their FAT old entries erase.
Even so, in v5 these erasures were not directly writing to the MFT or FAT for NTFS and FAT32 respectively. They'd simply make files to try to expand the MFT in NTFS and thus hoping the new files will overwrite old entries. There's no guarantee this will work - and there never has been. Windows is not documented internally and such things do not come with a guarantee of success.
I haven't really understood the FAT32 code though.
Overwriter said:
Is there really nothing that can be done to improve the MFT cleaning process ?
No, Windows is Windows. Use Linux if you're really THAT paranoid. Either that or someone could send me research on how to do it. Preferably through documented (read: Microsoft-sanctioned) methods. I do not like using undocumented functions (like in v5) because when service packs and new versions are released these undocumented methods break, just like how v5 now is not as usable in terms of functionality under Vista as it was with NT4.
Overwriter said:
Also if V6 is used on XP will V6 be able to employ a lower access than it does with Vista ? I guess this question is can V6 differentiate between XP and Vista and change how it cleans the MFT or will it just be the same for both ?
Same for both - read my undocumented bit above.
Sorry if this is disappointing, but pragmatism has to persist (on my part). I can't just port all the code now from v5 to v6 without caring if it may break in the future. Also with the introduction of 64 bit computers these undocumented methods becomes all the more risky.
Joel