PaulDotCom mailing list archives

Odd formatting results


From: irongeek at irongeek.com (Adrian Crenshaw)
Date: Sat, 8 Aug 2009 21:56:54 -0400

Ok, a few years ago I tested out formatting an SD card from XP, and showed
how you could file carve the data back off of it because it did not zero the
bytes.
http://www.irongeek.com/i.php?page=videos/data-carving-with-photorec-to-retrieve-deleted-files-from-formatted-drives-for-forensics-and-disaster-recovery

I'm testing right now in Vista, and doing a normal format seems to zero out
the bytes (besides the part that involves the file system format). Did the
change the way things work in Vista? The format seems to go too fast to be
overwriting everything. I'm using WinHex by the way to verify.


Thanks,
Adrian
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.pauldotcom.com/pipermail/pauldotcom/attachments/20090808/dc7ceb1b/attachment.htm 


Current thread: