Quote:
And sorry about my double post earlier in this thread. I accidentally hit the post button twice :P |
Blimey, don't move them to /dev/null. You write to it, a mv will replace /dev/null
|
Quote:
|
Code:
root@jcmain:~# apt-cache search undelete |
Are we all using ext2 these days? I'm certainly not.
|
Wow, I don't know how to answer that...
Ext3 and Ext4 are just the journalling versions of ext2; they're both ext2. |
And reiserfs, etc.? You cannot count on having an easy time of undeleting files on any filesystem. That's my point.
|
Well, you can always go into Data Carving, which is a bit of a tarpit, though useful. There are many forensics tools out there that does this. That being said, I think a reiser partition is an extremely rare thing to find nowadays; lets face it, it was never that good.
And its hardly going to be improved, what with the designer's *ahem* legal problems. |
Also, its unlikely the op is using ext2. He's using Mac OS X.
|
Well quite, but wasn't the matter being discussed whether or not rm sends a file into oblivion or not?
|
In the context of Mac OS X's file system. Yes. And of course, even there files can be undeleted. But without advanced preparation, it is still not guaranteed to be a simple operation.
|
Well in which case the shorter version of all of this is that it in fact sends it nowhere, and certainly not oblivion. Data carving, high end magnetic force microscopes, image analysis or a lot of high end equipment will bring, if not all, a fair chunk of the data back.
And as drives get larger and filesizes stay the same, similar or, thanks to better compression, smaller it'll get less and less likely that you'll sufficiently overwrite your files. Which is great news for Forensics people, and also a good money spinner. |
Yeah, that's simple and easy.
|
Quote:
|
reiserfs probably wont be picked up, it took a lot of flack when it was in active development, xfs and jfs I don't know about; I'm pretty sure there is no undelete to recover paths/inode data but once again forensic techniques abound. Foremost has excellent results on xfs; jfs I've never looked at, though it seems stupid to assume that foremost wont have similar results.
@penguiniator: There is an old phrase I remember reading in a Dawkins book, I can't remember who he attributes it too, and I dare say it doesn't matter; "Just because you don't understand doesn't mean I can't". I'm not saying these things are easy, though they're not as hard as I think you think they are (count the recursion..), and this was never a case of ease or difficulty. You said the files get sent to oblivion. They don't. They get set as free/blank space, and as such can be recovered. Nothing more or less. I'm sorry if you've taken this as a personal insult or challenge, it certainly wasn't supposed to be, merely clearing up a misconception that, even if you yourself don't have, comments such as that lead other people to. |
All times are GMT -5. The time now is 03:35 AM. |