Re: Cops say everything can be pulled off computers,no matter how old,article link

Responding to Guy Macon:

[...]

The article only claims that:

"computer forensic technology has advanced so far that investigators can
typically retrieve any and all information from computers."

As an engineer who has designed disk drives and done data recovery on
many more, I say that the above claim is false. They cannot retrieve
many deleted items, especially things deleted a long time ago. Even on a
standard Windows PC they cannot retrieve anything encrypted with a
modern cipher without having the key. They cannot retrieve anything
destroyed with any of the common "shredder" programs.



When it comes to court cases, the only thing required is enough evidence
to "suggest beyond reasonable doubt" that something did exist on that
media. Actually reconstructing a whole document or image, etc. isn't
always required, just a "footprint" is all thats needed, and that can be
recovered to a useful degree in more cases than some might be comfortable
with.

An arc-welder makes a pretty good one-pass data eleminator though. ;\

--
*===( http://www.400monkeys.com/God/
*===( http://principiadiscordia.com/
*===( http://www.zenwalk.org/
.

Relevant Pages

  • Re: Cops say everything can be pulled off computers,no matter how old,article link
    ... Responding to Guy Macon: ... "computer forensic technology has advanced so far that investigators can ... typically retrieve any and all information from computers." ... many deleted items, especially things deleted a long time ago. ...
    (alt.privacy)
  • Re: Cops say everything can be pulled off computers,no matter how old,article link
    ... Responding to Guy Macon: ... "computer forensic technology has advanced so far that investigators ... can typically retrieve any and all information from computers." ...
    (alt.privacy)
  • Re: How to Retrieve a Deleted e-mail address
    ... > I need an expert Technical Support on this matter. ... > If you can retrieve and find Deleted items in the Recycle Bin from ... > Technical Support is need and would be much appreciated. ...
    (microsoft.public.windowsxp.general)
  • How to Retrieve a Deleted e-mail address
    ... If you can retrieve and find Deleted items in the Recycle Bin from other ... Documents, there must be away to retrieve a deleted e-mail address, it just ... Technical Support is need and would be much appreciated. ... I needed to send a proposal out today VIA e-Mail to this Customer. ...
    (microsoft.public.windowsxp.general)
  • Re: HOW DO I RETRIEVE FILES I HAVE DELETED FROM MY RECYCE BIN?
    ... *I "deleted" items from my Delete Items folder in Outlook. ... *I NEED to retrieve these deleted items. ... *I contacted my Provider and they are unable to retrieve the e-mails for me. ... files in the Recyle Bin and using "Empty Recyle Bin". ...
    (microsoft.public.windowsxp.basics)