By reviewing older electric signals from the physical drive one can recover about the last 10 states of each sector of that drive, meaning one can recover several times the size of the drive in deleted files inaccessible to the user but recoverable physically.
Now, u/USAisgone, since we're being told that gigs have already been leaked to the web, wouldn't that seem to indicate Maxey is accurate but all the LEOs who have the segments they need are good at keeping mum about it? Nobody has published the whole thing, probably because very few have the whole thing besides the HJC.
Add: Seeing that X22 turns against Maxey and Joe Flynn turns against Q and Powell turns against Wood, it's clear that the "white hat" team wants it to look like there is big disorder in the ranks. All these are easily stageable. We can hope for the best and prepare for the worst.
The problem with forensic recovery, like the type you’re speaking about with regards to previous memory states, is I think everyone is working off of copies and copies of copies. Do we know if Maxey has the original drive still?
A copy will only preserve the present bit, as far as I’m aware, not the underlying “previous states”.
Would be interested in some other opinions on this, though. The 450gb raised my eyebrow too.
I'm no expert, but I believe you're correct about copies only taking the surface data. Yes, things can be recovered if they have been deleted on THAT drive, but once you copy it elsewhere that's no longer an option.
According to a recent statement by the computer repair guy about the issue, the data from the laptop was recovered to a 'solid state drive', so unless Maxey has the original hard disk would that not be a problem?
By reviewing older electric signals from the physical drive one can recover about the last 10 states of each sector of that drive, meaning one can recover several times the size of the drive in deleted files inaccessible to the user but recoverable physically.
Now, u/USAisgone, since we're being told that gigs have already been leaked to the web, wouldn't that seem to indicate Maxey is accurate but all the LEOs who have the segments they need are good at keeping mum about it? Nobody has published the whole thing, probably because very few have the whole thing besides the HJC.
Add: Seeing that X22 turns against Maxey and Joe Flynn turns against Q and Powell turns against Wood, it's clear that the "white hat" team wants it to look like there is big disorder in the ranks. All these are easily stageable. We can hope for the best and prepare for the worst.
The problem with forensic recovery, like the type you’re speaking about with regards to previous memory states, is I think everyone is working off of copies and copies of copies. Do we know if Maxey has the original drive still?
A copy will only preserve the present bit, as far as I’m aware, not the underlying “previous states”.
Would be interested in some other opinions on this, though. The 450gb raised my eyebrow too.
I'm no expert, but I believe you're correct about copies only taking the surface data. Yes, things can be recovered if they have been deleted on THAT drive, but once you copy it elsewhere that's no longer an option.
According to a recent statement by the computer repair guy about the issue, the data from the laptop was recovered to a 'solid state drive', so unless Maxey has the original hard disk would that not be a problem?