I just went back to verify, using the same SD card once on Vista, once on XP. Vista standard format takes longer, and seems to zero the data space, XP format is faster and seems to leave the data in place so you can still data carve it. Undocumented feature?
Adrian On Sat, Aug 8, 2009 at 9:56 PM, Adrian Crenshaw <[email protected]>wrote: > Ok, a few years ago I tested out formatting an SD card from XP, and showed > how you could file carve the data back off of it because it did not zero the > bytes. > > http://www.irongeek.com/i.php?page=videos/data-carving-with-photorec-to-retrieve-deleted-files-from-formatted-drives-for-forensics-and-disaster-recovery > > I'm testing right now in Vista, and doing a normal format seems to zero out > the bytes (besides the part that involves the file system format). Did the > change the way things work in Vista? The format seems to go too fast to be > overwriting everything. I'm using WinHex by the way to verify. > > > Thanks, > Adrian >
_______________________________________________ Pauldotcom mailing list [email protected] http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom Main Web Site: http://pauldotcom.com
