Quote:
Originally Posted by sharphead
Actually.... if the original file resides physically on the drive where there is no other data overwritten, then the file will be completely intact. The File Allocation Table are updated and flagged to "release" that sector on the drive to be written over when you mark a file for deletion. Visibly windows just doesn't display the file, but physically it's still there until you copy something over that sector.
Your right.. just elaborating a bit more.  |
Does NTFS even have a FAT?
A webhost gave me a pair of used drives on a new server I'd ordered, neither of them were actually wiped, just the first had FreeBSD installed onto it (and the second was mounted by the tech, with another customer's data on it. WTF???)
Because of the way I'd set up mirroring, and the fact that I didn't want to reinstall everything, even though the drives have been replaced with new ones that server still contains fragments of SOMEONE ELSE'S data hidden on the drives. Scary stuff.