Odd formatting results

[irongeek at irongeek.com (Adrian Crenshaw)]

I just went back to verify, using the same SD card once on Vista, once on
XP. Vista standard format takes longer, and seems to zero the data space, XP
format is faster and seems to leave the data in place so you can still data
carve it. Undocumented feature?

Adrian

On Sat, Aug 8, 2009 at 9:56 PM, Adrian Crenshaw <irongeek at irongeek.com>wrote:

> Ok, a few years ago I tested out formatting an SD card from XP, and showed
> how you could file carve the data back off of it because it did not zero the
> bytes.
>
> http://www.irongeek.com/i.php?page=videos/data-carving-with-photorec-to-retrieve-deleted-files-from-formatted-drives-for-forensics-and-disaster-recovery
>
> I'm testing right now in Vista, and doing a normal format seems to zero out
> the bytes (besides the part that involves the file system format). Did the
> change the way things work in Vista? The format seems to go too fast to be
> overwriting everything. I'm using WinHex by the way to verify.
>
>
> Thanks,
> Adrian
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.pauldotcom.com/pipermail/pauldotcom/attachments/20090808/f6b240fe/attachment.htm