By reviewing older electric signals from the physical drive one can recover about the last 10 states of each sector of that drive, meaning one can recover several times the size of the drive in deleted files inaccessible to the user but recoverable physically.
Now, u/USAisgone, since we're being told that gigs have already been leaked to the web, wouldn't that seem to indicate Maxey is accurate but all the LEOs who have the segments they need are good at keeping mum about it? Nobody has published the whole thing, probably because very few have the whole thing besides the HJC.
Add: Seeing that X22 turns against Maxey and Joe Flynn turns against Q and Powell turns against Wood, it's clear that the "white hat" team wants it to look like there is big disorder in the ranks. All these are easily stageable. We can hope for the best and prepare for the worst.
The problem with forensic recovery, like the type you’re speaking about with regards to previous memory states, is I think everyone is working off of copies and copies of copies. Do we know if Maxey has the original drive still?
A copy will only preserve the present bit, as far as I’m aware, not the underlying “previous states”.
Would be interested in some other opinions on this, though. The 450gb raised my eyebrow too.
I'm no expert, but I believe you're correct about copies only taking the surface data. Yes, things can be recovered if they have been deleted on THAT drive, but once you copy it elsewhere that's no longer an option.
According to a recent statement by the computer repair guy about the issue, the data from the laptop was recovered to a 'solid state drive', so unless Maxey has the original hard disk would that not be a problem?
Here's a thought.
Unless data was compressed, it does raise the question of how can you have more data than the volume of the drive?
Trump recently said Putin should release the data he has. Implying there is more data.
I also heard that there was a 3rd laptop that the Russians had.
If true, could they have given that data to Maxey? Could that explain the additional 450GB?
By reviewing older electric signals from the physical drive one can recover about the last 10 states of each sector of that drive, meaning one can recover several times the size of the drive in deleted files inaccessible to the user but recoverable physically.
Now, u/USAisgone, since we're being told that gigs have already been leaked to the web, wouldn't that seem to indicate Maxey is accurate but all the LEOs who have the segments they need are good at keeping mum about it? Nobody has published the whole thing, probably because very few have the whole thing besides the HJC.
Add: Seeing that X22 turns against Maxey and Joe Flynn turns against Q and Powell turns against Wood, it's clear that the "white hat" team wants it to look like there is big disorder in the ranks. All these are easily stageable. We can hope for the best and prepare for the worst.
The problem with forensic recovery, like the type you’re speaking about with regards to previous memory states, is I think everyone is working off of copies and copies of copies. Do we know if Maxey has the original drive still?
A copy will only preserve the present bit, as far as I’m aware, not the underlying “previous states”.
Would be interested in some other opinions on this, though. The 450gb raised my eyebrow too.
I'm no expert, but I believe you're correct about copies only taking the surface data. Yes, things can be recovered if they have been deleted on THAT drive, but once you copy it elsewhere that's no longer an option.
According to a recent statement by the computer repair guy about the issue, the data from the laptop was recovered to a 'solid state drive', so unless Maxey has the original hard disk would that not be a problem?