3 ms·
Most people forget overwriting on the directory file name holding structures (of the different file systems.) The names of the deleted files stay there for long
by alecco 18y ago
Most people forget overwriting on the directory file name holding structures (of the different file systems.) The names of the deleted files stay there for long time. This is more so on FAT and FFS-type directories (guesstimate ~99% of file systems.)
If a prosecutor (or government torturer) can prove the suspect had a file and wiped it out (e.g. /documents/superillegalfile.txt), I wouldn't like to be in his place.
- ErrantX 18y ago> If a prosecutor (or government torturer) can prove the suspect had a file and wiped it out (e.g. /documents/superillegalfile.txt), I wouldn't like to be in his place. In the UK that would be only sideline evidence, you'd have a hard time getting the CPS (crown prosecution service) to actually prosecute based on that evidence. Recovering the file is 9/10ths of the law :P (this is our main revenue stream btw - forensics for law enforcement).
- alecco 18y agoIf [the proof of file name deleted] is backed by other evidence, like ISP logs, CPS will likely hold [the case] valid. In this example, the suspect cant deny it was him instead a housemate or neighbour. It always adds.