[ubuntu-studio-devel] CyberSec For Creative Humans

[lukefromdc at hushmail.com]

How well does this work for recovering a viable still from an H264 video?
Remember we are talking about software recovery after all deletion
of files followed by overwrite of all available space (newly and otherwise)
with random numbers. This takes 4 dd runs on a 16GB chip.

I've still been recommending total destruction if a felony is accidently 
(or not accidently) filmed. If a camera with internal storage is used, 
that mandates CAMERA destruction, thus the need for cameras with
SD card storage.

There is also the converse case of filming police  committing
a felony and wanting the best possible data preservation complete with chain
of custody and backup images in case evidence is "lost" by unsympathetic
prosecutors. I hear of such cases but have no experience with that. Certainly
a whole device DD image should then be kept and the original card
immediately set read-only and taken out of service.

On 10/30/2015 at 2:28 PM, "Ralf Mardorf" <ralf.mardorf at alice-dsl.net> wrote:
>
>> On 30.10.2015, at 18:13, lukefromdc at hushmail.com wrote:
>> I've tested wiping the cards and running file recovery, Foremost 
>, photorec,
>> and other software file recovery won't get anything.  Haredware 
>recovery
>> from bare flash chips off an SD card is much more expensive.
>
>It's possible to recover incomplete pics by data fragments that 
>don't have hidden directory entries anymore. Recovery software 
>usually just recovers directory entries, likely by changing a 
>delete flag and similar. Police likely doesn't do this with a hex 
>editor, they likely have software that helps doing this. Such 
>software also does math to revert some graphic effects that were 
>used to blur faces or text on a photos.
>-- 
>ubuntu-studio-devel mailing list
>ubuntu-studio-devel at lists.ubuntu.com
>Modify settings or unsubscribe at: 
>https://lists.ubuntu.com/mailman/listinfo/ubuntu-studio-devel