Overwrote by installing new distro and formatting partitions. I
didn't go about recreating all my settings and getting things
going once I realized my backup wasn't completed.
None of the data is actually sensitive. It's mainly notes from
church for the last 6 months.
Either looking for a bootable CD solution or something to run
from another system with the drive attached. I'm not using the
drive until I exhaust the free solutions first.
Thanks,
Mr O.
--- Hal Pomeranz <[EMAIL PROTECTED]> wrote:
> First define "overwrote" please. If you've actually written
> new data
> into the file system, then you obviously can't recover
> anything from
> the blocks that have been re-used. You may be able to recover
> some
> data from the blocks that have not been re-used-- it's similar
> to what
> digital forensic analysts do when recovering "deleted"
> evidence from a
> hard drive.
>
> Then you'll need some specialized Open Source tools to grovel
> around
> in the dd image-- like the Sleuth Kit tools and Lazarus from
> the
> Coronor's Toolkit. Since this is an ext3 file system we're
> talking
> about, it's likely that the inodes have been zeroed out (I
> know that
> ext3 does this when you delete a file, but I'm not sure if it
> happens
> when the file system is newfs-ed, but it's likely I'm afraid).
> This
> means you're going to be counting on the fact that data blocks
> in
> files tend to be allocated contiguously-- you get to manually
> reassemble your files block-by-block! This is why Lazarus can
> be a
> help, because it heuristically tries to find complete files in
> the
> image and presents them to you via a web browser for easier
> viewing.
>
> This is a painful process, but if this sounds like something
> you want
> to do, I can provide further technical advice. If others are
> interested, we could possibly turn this into a group project
> for one
> of the Thursday meetings (depending on the sensitivity of the
> data
> we'd be recovering).
>
> Cheers!
>
>
____________________________________________________________________________________
Be a better friend, newshound, and
know-it-all with Yahoo! Mobile. Try it now.
http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ
_______________________________________________
EUGLUG mailing list
[email protected]
http://www.euglug.org/mailman/listinfo/euglug
