Ben Cotton, ... said that he discovered a master file table “that clearly indicated that the database directory was deleted from that server.”
Just a techie chiming in. The windows file system, which no doubt is being used on these tabulator machines, has something called a Master File Table (MFT) that contains an entry for each file created on the disk, and the location where the data for this file is stored on the disk. When a file is deleted, there is an indicator added to the MFT entry to say that the file has been deleted. However, the data of the file itself is not erased. It can subsequently be reused by another file but more often than not (unless the amount of data written to the disk exceeds the total disk size) the file data stays intact.
With forensic tools it is very possible to recreated the deleted files, and recreate most of its attributes such as date and timestamps of when it was originally created etc.
The fact that these people deleted a file without forensically erasing it shows that these are not very smart people.
Unless it's a decoy. I find it a little hard to believe that none of these people know about recovering deleted files. Back in the 80s, tools like Norton Utilities were very common, and it was well known that getting back something you deleted was possible if it hadn't been overwritten. I mean, "wipe a disk" is a common expression (unless you're HRC, that is).
I suppose that Windows widgets like Trashcan could have dumbed people down, but older folks shouldn't have forgotten everything they already knew about computers.
I suppose that Windows widgets like Trashcan could have dumbed people down, but older folks shouldn't have forgotten everything they already knew about computers.
This is partly true, but the real reason is that they were sure that there would never be a forensic audit. Why do you think they are expending all their assets on stopping / derailing forensic audits? They know they will get exposed. They know everything is not properly cleaned up.
This whole thing about deleted file, recovered file etc is just the auditors playing cat and mouse with them. I think they have already collected far more incriminating evidence, and this is probably just something to keep the [DS] focused on.
That’s quite the letter. That reminds me of my wife’s ex-husband who has severe narcissistic personality disorder. Nothing that comes out of their mouth is truth. They get away with ever because they never admit and always blame blame blame. They cover their lies with more lies even when evidence is put right in front of their face. Depending on the judge they usually get away with it and that confides in them that they are correct. They pretend to believe their lies so long they eventually think that their lies are the truth. They repeat repeat repeat to anyone that will listen until they have other ‘witnesses’ that also believe their lies. These people get away with it over and over and over and never are punished. It’s sick - these people are mentally ill.
These guys are dummies. When you delete the database you have to fill up the hard drive with other files so that they over write all the physical space of the bytes that were occupied by the deleted database. Unless the physical bytes are all over written it will always be possible to recover the deleted file because it is still there physically. LOL dumbasses.
Just a techie chiming in. The windows file system, which no doubt is being used on these tabulator machines, has something called a Master File Table (MFT) that contains an entry for each file created on the disk, and the location where the data for this file is stored on the disk. When a file is deleted, there is an indicator added to the MFT entry to say that the file has been deleted. However, the data of the file itself is not erased. It can subsequently be reused by another file but more often than not (unless the amount of data written to the disk exceeds the total disk size) the file data stays intact.
With forensic tools it is very possible to recreated the deleted files, and recreate most of its attributes such as date and timestamps of when it was originally created etc.
The fact that these people deleted a file without forensically erasing it shows that these are not very smart people.
Exactly. Even 14 year old me knew about wiping a hard drive with zeros before selling it.
And you know what else. Why the fuck is something this important running one of the most insecure operating systems.
The system is made to commit election fraud that’s why.
Yep. A real, secure voting machine could be made with $30 worth of parts. The tabulator would be more expensive, but very simple and basic.
These fucking machines shouldn't be running any off the shelf OS ... Especially Windows.
By design. If the system is incredibly insecure, they will be accused of incompetence, but not fraud (at least thats what they think)
Unless it's a decoy. I find it a little hard to believe that none of these people know about recovering deleted files. Back in the 80s, tools like Norton Utilities were very common, and it was well known that getting back something you deleted was possible if it hadn't been overwritten. I mean, "wipe a disk" is a common expression (unless you're HRC, that is).
I suppose that Windows widgets like Trashcan could have dumbed people down, but older folks shouldn't have forgotten everything they already knew about computers.
This is partly true, but the real reason is that they were sure that there would never be a forensic audit. Why do you think they are expending all their assets on stopping / derailing forensic audits? They know they will get exposed. They know everything is not properly cleaned up.
This whole thing about deleted file, recovered file etc is just the auditors playing cat and mouse with them. I think they have already collected far more incriminating evidence, and this is probably just something to keep the [DS] focused on.
You're right on that. Petty tyrants always get cocky.
That’s quite the letter. That reminds me of my wife’s ex-husband who has severe narcissistic personality disorder. Nothing that comes out of their mouth is truth. They get away with ever because they never admit and always blame blame blame. They cover their lies with more lies even when evidence is put right in front of their face. Depending on the judge they usually get away with it and that confides in them that they are correct. They pretend to believe their lies so long they eventually think that their lies are the truth. They repeat repeat repeat to anyone that will listen until they have other ‘witnesses’ that also believe their lies. These people get away with it over and over and over and never are punished. It’s sick - these people are mentally ill.
These guys are dummies. When you delete the database you have to fill up the hard drive with other files so that they over write all the physical space of the bytes that were occupied by the deleted database. Unless the physical bytes are all over written it will always be possible to recover the deleted file because it is still there physically. LOL dumbasses.
Bleachbit (which I have been using long before Hilliary made it famous) even has ‘free disk space’ which secure deletes. These people are stupid.