Home · Maps · About
Home > SubChat
 

[ Read Responses | Post a New Response | Return to the Index ]
[ First in Thread | Next in Thread ]

 

view flat

Re: Technical Details Required... (Cop Incident Update)

Posted by JohnL on Mon May 21 18:08:29 2007, in response to Technical Details Required... (Cop Incident Update), posted by Nilet on Mon May 21 17:45:48 2007.

edf40wrjww2msgDetail:detailStr
fiogf49gjkf0d
Memory cards use the FAT file system. Deleting a file involves changing the the first character of the file’s directory entry to xE5 and then moving the first cluster of the data to the free clusters chain. (So if no other files are written, an undelete utility merely has to replace the character and retrieve the data clusters).

There is no field to timestamp the deletion event.

Responses

Post a New Response

Your Handle:

Your Password:

E-Mail Address:

Subject:

Message:



Before posting.. think twice!


[ Return to the Message Index ]