±Forensic Focus Partners

±Your Account


Nickname
Password


Forgotten password/username?


Membership:
New Today: 0
New Yesterday: 0
Overall: 27614
Visitors: 39

±Follow Forensic Focus

Join our LinkedIn group

Subscribe to news

Subscribe to forums

Subscribe to blog

Subscribe to tweets

is this absurd or logic way to erase Flash memory?

Computer forensics discussion. Please ensure that your post is not better suited to one of the forums below (if it is, please post it there instead!)
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
Go to page Previous  1, 2, 3 
  

Re: is this absurd or logic way to erase Flash memory?

Post Posted: Sun Feb 17, 2013 6:59 am

Again, you initially talked of being unable to recover "any previous stored data" and to "100% delete".

Just like in the "companion thread":
www.forensicfocus.com/...c/t=10233/

the whole point is that there is a difference between 100% and (say Wink ) 98.37% which is what you are deleting with CCleaner or similar.

jaclaz
_________________
- In theory there is no difference between theory and practice, but in practice there is. - 

jaclaz
Senior Member
 
 
  

Re: is this absurd or logic way to erase Flash memory?

Post Posted: Mon Feb 18, 2013 8:00 am

- williamsonn
Then, I am not speaking of legally compromising anyone. I was asking, first, if a sd card, or an mp3 player, or a pendrive could be totally erased, so anyone could get back anything.

With flash memory, you are stepping into probabilistic forensics. There is no definite, 100% answer to your question. The answer to your original question would be "yes, that technique works good enough" in a sense that the end user will not be able to recover anything from the device after the wipe procedure you described. There is also a very good probability that even a forensic expert will not be able to recover anything, or at least nothing meaningful. And there is a 0,0...01% chance that some chunks of data may be recovered from the flash chips after the wipe due to redundand storage capacity and the way wear leveling operates.

You can read articles.forensicfocus...-about-it/ to get an idea on what happens with information stored on certain types of solid-state memory (that includes higher-capacity pen drives and certain high-capacity players but not yet SD cards, as far as I know).
_________________
Digital Evidence Extraction Software
belkasoft.com 

Belkasoft
Senior Member
 
 
  

Re: is this absurd or logic way to erase Flash memory?

Post Posted: Tue Feb 19, 2013 3:10 pm

How much are you willing to take this device apart, and then put it back?

How much is the device worth on the street?  

jhup
Senior Member
 
 
Reply to topicReply to topic

Share this forum topic to encourage more replies



Page 3 of 3
Go to page Previous  1, 2, 3