September 1st, 2013, 09:33 PM
OVERWRITTEN data cannot be recovered, as it has been physically (electronically) replaced with something else.
Dr. Peter Gutmann (University of Aukland, New Zealand) wrote a paper on this around 1996, when HDD technology was very different. His paper only referred to electro-mechanical hard drives, rather than solid state drives that use transistors as opposed to magnetic media.
You can frequently recover "deleted", or "lost" data because it is still physically present; however, once it has been overwritten (replaced) with something else, it is GONE FOREVER.
None of the snake oil products suggested by spammers can do a thing about that!
September 3rd, 2013, 12:28 AM
Recurva work fine, as long as it has not been overwritten.
Memory sticks and SSD because of their size get overwritten fast.
September 6th, 2013, 12:10 AM
I agree with Shay, and put Piriform's "Recuva" on all my customers' machines. It does what it says on the box
I believe you to have far greater technical knowledge than myself, so this is a discussion point rather than an argument.
I have recovered stuff from solid state media that I would not have expected to from their electro-mechanical counterparts?
I put this down to the fact that the SSD stuff has software embedded in it to make all the transistors get used, rather than the next available?
What is your opinion?
Last edited by nihil; September 6th, 2013 at 09:52 PM.
September 17th, 2013, 12:54 AM
I figure between the two of us, we make a great team knowledge wise. We have both pulled stuff out of the wood work that surprised the other.
The SSD programing [ lack of a better word] Seems to delay over writing of items marked for deletion. So yes, you would be able to normally recover more. Remember we do NOT defragment SSD which can be a huge bacon saver.
Remember IDE/SATA writes to the first open/marked to overwrite areas first.
Hope that makes sense.
May 31st, 2016, 09:10 AM
The deleted data was overwritten by new data.
Originally Posted by Haiweisully
May 31st, 2016, 03:34 PM
If so, then as stated above, as soon as the old data is overwritten with new data, the old data is then gone forever and cannot be recovered.
Originally Posted by SerenaWilliams
By Tiger Shark in forum The Security Tutorials Forum
Last Post: January 12th, 2007, 10:44 PM
By 576869746568617 in forum Cryptography, Steganography, etc.
Last Post: July 10th, 2006, 11:38 PM
By coolcamel in forum Spyware / Adware
Last Post: September 29th, 2004, 03:54 PM
By Noble Hamlet in forum AntiOnline's General Chit Chat
Last Post: March 17th, 2002, 09:38 AM
By KapperDog in forum Security Archives
Last Post: September 5th, 2001, 07:34 AM