Previously Aidan Karley said:
Says more about you than it does about Arno.
But yes, the spooks do like to keep quiet what they actually can
do. Which is why I take the total silence over breachability of PGP'd
messages as absolutely no evidence of anything.
Indeed.
There's a similar near
total silence over people being convicted on evidence form "encrypted"
zip files, and I regularly break those open myself.
But it is well known in the crypto and computer security comminuty
that those can be broken. For that reason they can be used by the
"spooks", since they do not admit to a new capability. That the general
public is clueless does not mean the information is unavailable.
If they can breach PGP, they cannot use the information they
get, except in very important cases. Otherwise people could deduct
that they can beak PGP and this information source would dry up.
The other thing is cost: If it takes 1 million EUR/USD to recover a
overwritten once HDD, you are pretty safe, since nobody will invest
that for the slim chance of finding anything useful. On the other
hand, people with real secrets will more likely stay away from
computers or do physical destruction. This will drive the recovery
cost and success way up. Or if they know anything, they will blowtorch
the platters. No way in this universe to recover anything.
So to reiterate, overwriting once with zeros is enough, unless
you protect extremely valuable secrets and a resourceful attacker
knows they might be on that specific disk....
Arno