Yahoo Answers For Data Forensics
Question Computer forensics, data recovery??
ok, so here's the deal...I was working on a report for quite some time, and turned it into my teacher december 06 before winter break. Than, I got a computer virus and lost a lot of my files, including my essay. THAN, our teacher LOST many of the students' essays, including mine, and told us that we need to turn in another copy...I tried using data recovery software, but I can't seem to find the file...What should I do? I am even willing to go to a computer forensic, but is it worth it?
Best Answer It would probably be easier to just write another essay.. If the essay was your own work and you read the required reading materials etc., it shouldn't be too hard to come up with another essay
ok, so here's the deal...I was working on a report for quite some time, and turned it into my teacher december 06 before winter break. Than, I got a computer virus and lost a lot of my files, including my essay. THAN, our teacher LOST many of the students' essays, including mine, and told us that we need to turn in another copy...I tried using data recovery software, but I can't seem to find the file...What should I do? I am even willing to go to a computer forensic, but is it worth it?
Best Answer It would probably be easier to just write another essay.. If the essay was your own work and you read the required reading materials etc., it shouldn't be too hard to come up with another essay
Question Why can data still be read when a disk is completely erased?
I understand that normal delete operations only delete the file identification information, but not the file contents itself. I'm talking, though, of writing all zero's or all ones on a disk on an extreme low level format. Some disk forensics can still read data. How can that happen?
Best Answer If you use software to scrub your drive (writes over everything), the data is not recoverable. People CLAIM that you can recover stuff based on the idea that the write head will not be perfectly aligned with the tracks each time - over yonder on the other edge of the track are some residual patterns you can read with special hardware. This was partly true in the early 1990's and earlier when drive mechanics and electronics were big and sloppy (relatively speaking). The legend lives on. But it just isn't going to happen with new stuff. The track-track spacing and precision required is too tight. If you write over the bits, the data is gone, never to be recovered by any tool. If a 'forensics tool' recovers any data, it is because it was not erased. Period. The usual recovery process is about scanning unused sectors, temp files, and residue in file slack space. To ensure your plans for world domination are secure, you need to do a low level format and a high level format afterwards.
I understand that normal delete operations only delete the file identification information, but not the file contents itself. I'm talking, though, of writing all zero's or all ones on a disk on an extreme low level format. Some disk forensics can still read data. How can that happen?
Best Answer If you use software to scrub your drive (writes over everything), the data is not recoverable. People CLAIM that you can recover stuff based on the idea that the write head will not be perfectly aligned with the tracks each time - over yonder on the other edge of the track are some residual patterns you can read with special hardware. This was partly true in the early 1990's and earlier when drive mechanics and electronics were big and sloppy (relatively speaking). The legend lives on. But it just isn't going to happen with new stuff. The track-track spacing and precision required is too tight. If you write over the bits, the data is gone, never to be recovered by any tool. If a 'forensics tool' recovers any data, it is because it was not erased. Period. The usual recovery process is about scanning unused sectors, temp files, and residue in file slack space. To ensure your plans for world domination are secure, you need to do a low level format and a high level format afterwards.