±Forensic Focus Partners

Become an advertising partner

±Your Account


Forgotten password/username?

Site Members:

New Today: 1 Overall: 36750
New Yesterday: 4 Visitors: 206

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

Remote wipe of Mac Airbook

Computer forensics discussion. Please ensure that your post is not better suited to one of the forums below (if it is, please post it there instead!)
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
Page Previous  1, 2 

Senior Member

Re: Remote wipe of Mac Airbook

Post Posted: Mar 14, 13 22:05

An update.

I did examine the customer laptop and found data. The following link is a brief report


What I found is very similar to the report (press release) that posted earlier. The big difference is that I have no clean rooms to help make Linux disk images. If you had to buy a licence for carving software, you might still have $1600 in your pocket.

The big similarity is that both drives (250GB) had the same 64GB erased, and rest was OK.

It looks as if the remote wiping is not very secure and should not be relied on. Does anyone else have experience to confirm my results?
Michael Cotgrove

Senior Member

Re: Remote wipe of Mac Airbook

Post Posted: Mar 14, 13 22:14

Thanks for the update. That is very interesting. It's probable that the first 64GB contained mostly the operating system and pre-installed programs, so this process left most of the user's files exposed.  

Page 2 of 2
Page Previous  1, 2