Forensics: USB fobs

[Dave Aitel <dave () immunityinc com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Someone yesterday at a conference talk I went to told the crowd that
you can overwrite a file (aka srm it) on a USB Key fob and it will
still be there
for Autopsy to see. That makes no sense to me. Can anyone verify this?

- -dave

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.4 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iD8DBQFFSHgpB8JNm+PA+iURAv4FAJwIoazjywY1peHQ4CkVTEYJgJw12wCg6sqX
OyA1m6tU5az94Wp03tVD3+Q=
=DY3U
-----END PGP SIGNATURE-----

_______________________________________________
Dailydave mailing list
Dailydave () lists immunitysec com
http://lists.immunitysec.com/mailman/listinfo/dailydave