How well does this work for recovering a viable still from an H264 video? Remember we are talking about software recovery after all deletion of files followed by overwrite of all available space (newly and otherwise) with random numbers. This takes 4 dd runs on a 16GB chip.
I've still been recommending total destruction if a felony is accidently (or not accidently) filmed. If a camera with internal storage is used, that mandates CAMERA destruction, thus the need for cameras with SD card storage. There is also the converse case of filming police committing a felony and wanting the best possible data preservation complete with chain of custody and backup images in case evidence is "lost" by unsympathetic prosecutors. I hear of such cases but have no experience with that. Certainly a whole device DD image should then be kept and the original card immediately set read-only and taken out of service. On 10/30/2015 at 2:28 PM, "Ralf Mardorf" <[email protected]> wrote: > >> On 30.10.2015, at 18:13, [email protected] wrote: >> I've tested wiping the cards and running file recovery, Foremost >, photorec, >> and other software file recovery won't get anything. Haredware >recovery >> from bare flash chips off an SD card is much more expensive. > >It's possible to recover incomplete pics by data fragments that >don't have hidden directory entries anymore. Recovery software >usually just recovers directory entries, likely by changing a >delete flag and similar. Police likely doesn't do this with a hex >editor, they likely have software that helps doing this. Such >software also does math to revert some graphic effects that were >used to blur faces or text on a photos. >-- >ubuntu-studio-devel mailing list >[email protected] >Modify settings or unsubscribe at: >https://lists.ubuntu.com/mailman/listinfo/ubuntu-studio-devel -- ubuntu-studio-devel mailing list [email protected] Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-studio-devel
