±Your Account
Membership:
New Today: 4
New Yesterday: 10
Overall: 24370
Visitors: 68
±Latest Articles
· Catching the ghost: how to discover ephemeral evidence with Live RAM analysis
· Geo-tagging & Photo Tracking On iOS
· KS – an open source bash script for indexing data
· Mobile Device Geotags & Armed Forces
· Categorization of embedded system forensic collection methodologies
· Interpretation of NTFS Timestamps
· What are ‘gdocs’? Google Drive Data – part 2
· What are ‘gdocs’? Google Drive Data
· Bad Sector Recovery
· Forensic Artifact: Malware Analysis in Windows 8
· Geo-tagging & Photo Tracking On iOS
· KS – an open source bash script for indexing data
· Mobile Device Geotags & Armed Forces
· Categorization of embedded system forensic collection methodologies
· Interpretation of NTFS Timestamps
· What are ‘gdocs’? Google Drive Data – part 2
· What are ‘gdocs’? Google Drive Data
· Bad Sector Recovery
· Forensic Artifact: Malware Analysis in Windows 8
±Follow Us
±Latest Jobs
Back to top
Skip to content
Skip to menu
Back to top
Back to main
Skip to menu
Go to page Previous 1, 2, 3
With flash memory, you are stepping into probabilistic forensics. There is no definite, 100% answer to your question. The answer to your original question would be "yes, that technique works good enough" in a sense that the end user will not be able to recover anything from the device after the wipe procedure you described. There is also a very good probability that even a forensic expert will not be able to recover anything, or at least nothing meaningful. And there is a 0,0...01% chance that some chunks of data may be recovered from the flash chips after the wipe due to redundand storage capacity and the way wear leveling operates.
You can read articles.forensicfocus...-about-it/ to get an idea on what happens with information stored on certain types of solid-state memory (that includes higher-capacity pen drives and certain high-capacity players but not yet SD cards, as far as I know).
_________________
Digital Evidence Extraction Software
belkasoft.com
is this absurd or logic way to erase Flash memory?
Re: is this absurd or logic way to erase Flash memory?
Posted: Sun Feb 17, 2013 7:59 am
Again, you initially talked of being unable to recover "any previous stored data" and to "100% delete".
Just like in the "companion thread":
www.forensicfocus.com/...c/t=10233/
the whole point is that there is a difference between 100% and (say
) 98.37% which is what you are deleting with CCleaner or similar.
jaclaz
_________________
- In theory there is no difference between theory and practice, but in practice there is. -
Just like in the "companion thread":
www.forensicfocus.com/...c/t=10233/
the whole point is that there is a difference between 100% and (say
) 98.37% which is what you are deleting with CCleaner or similar.jaclaz
_________________
- In theory there is no difference between theory and practice, but in practice there is. -
-
jaclaz - Senior Member
Re: is this absurd or logic way to erase Flash memory?
Posted: Mon Feb 18, 2013 9:00 am
- williamsonnThen, I am not speaking of legally compromising anyone. I was asking, first, if a sd card, or an mp3 player, or a pendrive could be totally erased, so anyone could get back anything.
With flash memory, you are stepping into probabilistic forensics. There is no definite, 100% answer to your question. The answer to your original question would be "yes, that technique works good enough" in a sense that the end user will not be able to recover anything from the device after the wipe procedure you described. There is also a very good probability that even a forensic expert will not be able to recover anything, or at least nothing meaningful. And there is a 0,0...01% chance that some chunks of data may be recovered from the flash chips after the wipe due to redundand storage capacity and the way wear leveling operates.
You can read articles.forensicfocus...-about-it/ to get an idea on what happens with information stored on certain types of solid-state memory (that includes higher-capacity pen drives and certain high-capacity players but not yet SD cards, as far as I know).
_________________
Digital Evidence Extraction Software
belkasoft.com
-
Belkasoft - Senior Member
Re: is this absurd or logic way to erase Flash memory?
Posted: Tue Feb 19, 2013 4:10 pm
How much are you willing to take this device apart, and then put it back?
How much is the device worth on the street?
How much is the device worth on the street?
-
jhup - Senior Member