[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Oops - copied iso image to wrong device



On Sun, Oct 13, 2013 at 11:00:50AM +0100, Brian wrote:
> The data on the drive are gone. Do
> 
>    dd if=/dev/zero of=/dev/sdb count=10000
> 
> to remove all traces of the iso you put on it and start from scratch.

…why? As things currently stand, the user could possibly reconstruct
the partition table and recover most of their data, or, use forensic
recovery tools that don't rely on the FS being intact to identify and
recover bits past the ISO-length offset into the drive.

If they do as you suggest, they rule out any of the above recovery
options. What do they gain?

If they are to write off the drive, they could plop a new partition
table on top of things as they stand, mkfs on the partitions, and start
over, without  having to wait for the dd to complete.


Reply to: