4 ms·
forensics uses hacking to get at data. I think this is from a book (?) on general iPhone Forensics (which in my experience is a wide and incredibly tedious fie
by ErrantX 17y ago
forensics uses hacking to get at data.
I think this is from a book (?) on general iPhone Forensics (which in my experience is a wide and incredibly tedious field :P) so hence the Forensics title I guess.
- gojomo 17y agoBought the eBook version when a friend's iPhone got wedged during an update, and an Apple Store "Genius" recommended proceeding with a reformat, losing hundreds of baby pictures. Was able to recover 90%+ of the images using the jailbreak/dd/file-carver technique as outlined in the book. So, thanks, "iPhone Forensics"!
- pinko 17y agoWhy only 90%? I would naively expect that you'd either be able to get in and recover them all, or not.
- ErrantX 17y agoWell, if reformatted and updated/reinstalled then it possibly overwrote some of the deleted sectors - rendering some files unrecoverable.
- Agent101 17y agoAs well as the potential overwriting. File carvers have trouble recovering fragmented files. They might produce corrupted files, or nothing depending upon the details of the file format.
- gojomo 17y agoThe update that hung (and was forced-to-completion by allowing a reformat) was a major revision. (It might have been IPhone OS 1->2, even... I don't recall) So not only did the reformat touch sectors all over, but the package of standard stuff grew, and I even think Apple's default partitioning scheme may have been adjusted as part of the update.