Doug
Member
Registered: 8th Oct 03
User status: Offline
|
Guys,
My old man has phoned me to say that his computer won't boot and the HDD is making a clicking noise.
I have got all the kit from work to clone to drive and have no issues with getting the data off.
My question is...
Will the freezer trick work on a clicking drive?
Any other tips?
Cheers!
|
John
Member
Registered: 30th Jun 03
User status: Offline
|
May or may not, worth a try.
Can you only get data off completely intact drives in work then, I always wondered how far I'd have to go to destroy one.
|
Doug
Member
Registered: 8th Oct 03
User status: Offline
|
It's possible to get data off damaged media. Its a pretty common occurrence.
There are specialist HDD repair/recovery companies that can get the data off at a magnetic level. No real amount of erasing can get rid of it.
|
John
Member
Registered: 30th Jun 03
User status: Offline
|
Off topic but I'm genuinely interested in that bit of it.
I done a bit of research before for an argument and as far as I could see if it's been properly wiped there is basically no way to get it off without a scanning electron microscope and even then you won't really be able to piece anything back together even if you could see what bit it was 10 writes ago.
|
Doug
Member
Registered: 8th Oct 03
User status: Offline
|
As far as my understanding goes, you are correct there.
As for using it as evidence then that is in the world of theoretical forensics. It's possible but no-one has really spent the time needed to work out how the data was pieced together in a case before (as far as I am aware).
I will personally never sell a hard drive or memory card.
When I bought my HTC Magic it came with a 16GB card. I imaged it and was able to carve out OS files from his android that contained SQLite database files. I got some of his account user names and passwords from those files 
Once you know what you are doing its almost too easy
|
John
Member
Registered: 30th Jun 03
User status: Offline
|
Yip really easy to get stuff off it.
IMO, for most stuff a 3 pass wipe will do, if you've got loads of time a Gutmann wipe will be irretrievable.
|
Doug
Member
Registered: 8th Oct 03
User status: Offline
|
So back on topic....
Overnight in the freezer enough to possibly spin it up and copy come files off?
|
John
Member
Registered: 30th Jun 03
User status: Offline
|
Yes, never tried it but everything I read says it works.
|
