-
September 1st, 2013, 08:33 PM
#11
OVERWRITTEN data cannot be recovered, as it has been physically (electronically) replaced with something else.
Dr. Peter Gutmann (University of Aukland, New Zealand) wrote a paper on this around 1996, when HDD technology was very different. His paper only referred to electro-mechanical hard drives, rather than solid state drives that use transistors as opposed to magnetic media.
You can frequently recover "deleted", or "lost" data because it is still physically present; however, once it has been overwritten (replaced) with something else, it is GONE FOREVER.
None of the snake oil products suggested by spammers can do a thing about that!
-
September 2nd, 2013, 11:28 PM
#12
Recurva work fine, as long as it has not been overwritten.
http://www.piriform.com/recuva
Memory sticks and SSD because of their size get overwritten fast.
-
September 5th, 2013, 11:10 PM
#13
I agree with Shay, and put Piriform's "Recuva" on all my customers' machines. It does what it says on the box
EDIT:
@Shay,
I believe you to have far greater technical knowledge than myself, so this is a discussion point rather than an argument.
I have recovered stuff from solid state media that I would not have expected to from their electro-mechanical counterparts?
I put this down to the fact that the SSD stuff has software embedded in it to make all the transistors get used, rather than the next available?
What is your opinion?
Last edited by nihil; September 6th, 2013 at 08:52 PM.
-
September 16th, 2013, 11:54 PM
#14
I figure between the two of us, we make a great team knowledge wise. We have both pulled stuff out of the wood work that surprised the other.
The SSD programing [ lack of a better word] Seems to delay over writing of items marked for deletion. So yes, you would be able to normally recover more. Remember we do NOT defragment SSD which can be a huge bacon saver.
Remember IDE/SATA writes to the first open/marked to overwrite areas first.
Hope that makes sense.
-
May 31st, 2016, 08:10 AM
#15
Junior Member
Originally Posted by Haiweisully
There are various reasons behind deletion of memory card files. One of the major reason is accidental deletion. While previewing some important files on the card you may hit the delete all button by mistake and thus in that way it is possible to recover lost data or files from sd card for android or camera
Once you realize you've deleted a file, DON'T TOUCH ANY other file on that drive. That's because, when you delete a file, it's not really erased from the drive, instead, what the operating system does is to erase the "index" entry for that file (the location on the "drive map" where the actual file is located),
The deleted data was overwritten by new data.
-
May 31st, 2016, 02:34 PM
#16
Originally Posted by SerenaWilliams
The deleted data was overwritten by new data.
If so, then as stated above, as soon as the old data is overwritten with new data, the old data is then gone forever and cannot be recovered.
Similar Threads
-
By Tiger Shark in forum The Security Tutorials Forum
Replies: 3
Last Post: January 12th, 2007, 10:44 PM
-
By 576869746568617 in forum Cryptography, Steganography, etc.
Replies: 1
Last Post: July 10th, 2006, 10:38 PM
-
By coolcamel in forum Spyware / Adware
Replies: 8
Last Post: September 29th, 2004, 02:54 PM
-
By Noble Hamlet in forum AntiOnline's General Chit Chat
Replies: 1100
Last Post: March 17th, 2002, 09:38 AM
-
By KapperDog in forum Security Archives
Replies: 0
Last Post: September 5th, 2001, 06:34 AM
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
|