Re:John Carmack on expert witnesses and 'non literal' copying
by Ygg2 on Thursday February 02, 2017 @02:00PM
(#13553395)
Every dev knows how to wipe a drive. Buy an identical drive. Throw old drive into the incinerator.
Re:John Carmack on expert witnesses and 'non literal' copying
by rasz_pl on Friday February 03, 2017 @02:33AM
(#13558376)
Lack of history is a clue system was wiped or reinstalled from scratch.
Its very difficult to make windows appear to be an old actively used install. Encase (or new software, I havent done forensic for >6 years now) will tell you everything about timestamps and what that means.
Re:John Carmack on expert witnesses and 'non literal' copying
by Ygg2 on Friday February 03, 2017 @09:46AM
(#13560091)
I was joking. But honestly, if you don't your secrets to be found, you do have to go for extreme measures.
Re:John Carmack on expert witnesses and 'non literal' copying
by rockdoe on Thursday February 02, 2017 @03:18PM
(#13554230)
I didn't know this but I do now.
Re:John Carmack on expert witnesses and 'non literal' copying
by r3xpi on Thursday February 02, 2017 @02:07PM
(#13553463)
This is not a valid assumption. Shredding a drive to the extent that data recovery is not possible requires knowledge that, often times, revolves around the architecture of the drive in question (see: wear leveling).
An unrelated, yet illustrative, counter example is the seemingly reasonable, yet false, assumption that RMS performs his own installs of GNU/Linux.
Somehow I think John knows how to wipe a drive...