Index
2011-02-14 20:17Ajoy Khaund : Retrieve Data after pack & index
2011-02-14 20:19Vincent Teachout : Re: Retrieve Data after pack & index
2011-02-14 20:59Ted Roche : Re: Retrieve Data after pack & index
2011-02-14 23:36Ajoy Khaund : Re: Retrieve Data after pack & index
2011-02-15 04:34Grigore Dolghin : RE: Retrieve Data after pack & index
2011-02-15 04:44Jean Laeremans : Re: Retrieve Data after pack & index
2011-02-15 04:45Grigore Dolghin : RE: Retrieve Data after pack & index
2011-02-15 09:58Ted Roche : Re: Retrieve Data after pack & index
Back to top
Retrieve Data after pack & index

Author: Ajoy Khaund

Posted: 2011-02-14 20:17:45   Link

Hi,

After deleting some records and issuing a PACK and then deleting the indexes for the table and creating the indexes again is it possible by anyone to retrieve the deleted the data. Is there any software by which someone will be able to retrieve the data. Any kind of information will help. Sometimes some people ask these questions and I am at a loss of words. If any software can recover it please let me know.

Currently what I am telling them that's its not possible & that its something like you have an excel sheet of say 100 rows. You then delete 20 rows and save it. After saving whether it possible to recover the deleted rows??

Thanks in advance.

Bobby

--- StripMime Report -- processed MIME parts ---

multipart/alternative

text/plain (text body -- kept)

text/html

---

_______________________________________________

Post Messages to: ProFox@leafe.com

Subscription Maintenance: http://leafe.com/mailman/listinfo/profox

OT-free version of this list: http://leafe.com/mailman/listinfo/profoxtech

Searchable Archive: http://leafe.com/archives/search/profox

This message: http://leafe.com/archives/byMID/profox/BAY151-ds21D90F8E6C26EE15ACD26BB3D30@phx.gbl

** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.

©2011 Ajoy Khaund
Back to top
Re: Retrieve Data after pack & index

Author: Vincent Teachout

Posted: 2011-02-14 20:19:52   Link

Ajoy Khaund wrote:

> Hi,

>

> After deleting some records and issuing a PACK and then deleting the indexes for the table and creating the indexes again is it possible by anyone to retrieve the deleted the data. Is there any software by which someone will be able to retrieve the data. Any kind of information will help. Sometimes some people ask these questions and I am at a loss of words. If any software can recover it please let me know.

>

> Currently what I am telling them that's its not possible & that its something like you have an excel sheet of say 100 rows. You then delete 20 rows and save it. After saving whether it possible to recover the deleted rows??

>

> Thanks in advance.

Once you've issued a PACK, it's impossible to retrieve the deleted data.

_______________________________________________

Post Messages to: ProFox@leafe.com

Subscription Maintenance: http://leafe.com/mailman/listinfo/profox

OT-free version of this list: http://leafe.com/mailman/listinfo/profoxtech

Searchable Archive: http://leafe.com/archives/search/profox

This message: http://leafe.com/archives/byMID/profox/4D59D4B8.8060901@taconic.net

** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.

©2011 Vincent Teachout
Back to top
Re: Retrieve Data after pack & index

Author: Ted Roche

Posted: 2011-02-14 20:59:00   Link

On Mon, Feb 14, 2011 at 8:17 PM, Ajoy Khaund <akhaund@hotmail.com> wrote:

> After deleting some records and issuing a PACK and then deleting the indexes for the table and creating the indexes again is it possible by anyone to retrieve the deleted the data. Is there any software by which someone will be able to retrieve the data. Any kind of information will help. Sometimes some people ask these questions and I am at a loss of words. If any software can recover it please let me know.

Anyone? Like the NSA?

Yes. If you're trying to keep secrets from people, you shouldn't keep

them on computers. There are ways your disk image could be seized and

the temp files used in the PACK and then deleted could be recovered

and read. Browse around in the temp directories. But that's not all

that likely.

If you're keeping your data on a network storage device, it may make

backups. If you're using Windows, it may store your files in a restore

point.

Realize that anything entered into a computer might show up at the

worst possible moment. You regularly hear about scandals where someone

thought the email they deleted was gone forever. That's naive.

Do you make backups? Don't forget to shred them. And burn the bits.

There are ways to prevent, or mitigate all of these risks, but you

need to be careful about your answers there. If it's the company's

price list, which all their customers already know, perhaps a PACK is

sufficient. But if it's information that could cost peoples their

lives or livelihoods

> Currently what I am telling them that's its not possible & that its something like you have an excel sheet of say 100 rows. You then delete 20 rows and save it. After saving whether it possible to recover the deleted rows??

Well, that's pretty unlikely. Sometimes Excel stores stuff in its

spare spaces. I still wouldn't keep my secrets on it.

--

Ted Roche

Ted Roche & Associates, LLC

http://www.tedroche.com

_______________________________________________

Post Messages to: ProFox@leafe.com

Subscription Maintenance: http://leafe.com/mailman/listinfo/profox

OT-free version of this list: http://leafe.com/mailman/listinfo/profoxtech

Searchable Archive: http://leafe.com/archives/search/profox

This message: http://leafe.com/archives/byMID/profox/AANLkTim6ozfKtWbTuW2a0Bm2-VYcgw3U1JjMpxLGkMBH@mail.gmail.com

** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.

©2011 Ted Roche
Back to top
Re: Retrieve Data after pack & index

Author: Ajoy Khaund

Posted: 2011-02-14 23:36:13   Link

Hey Ted thanks I have noted your points.

--------------------------------------------------

From: "Ted Roche" <tedroche@gmail.com>

Sent: Tuesday, February 15, 2011 7:29 AM

To: <profoxtech@leafe.com>

Subject: Re: Retrieve Data after pack & index

> On Mon, Feb 14, 2011 at 8:17 PM, Ajoy Khaund <akhaund@hotmail.com> wrote:

>

>> After deleting some records and issuing a PACK and then deleting the

>> indexes for the table and creating the indexes again is it possible by

>> anyone to retrieve the deleted the data. Is there any software by which

>> someone will be able to retrieve the data. Any kind of information will

>> help. Sometimes some people ask these questions and I am at a loss of

>> words. If any software can recover it please let me know.

>

> Anyone? Like the NSA?

>

> Yes. If you're trying to keep secrets from people, you shouldn't keep

> them on computers. There are ways your disk image could be seized and

> the temp files used in the PACK and then deleted could be recovered

> and read. Browse around in the temp directories. But that's not all

> that likely.

>

> If you're keeping your data on a network storage device, it may make

> backups. If you're using Windows, it may store your files in a restore

> point.

>

> Realize that anything entered into a computer might show up at the

> worst possible moment. You regularly hear about scandals where someone

> thought the email they deleted was gone forever. That's naive.

>

> Do you make backups? Don't forget to shred them. And burn the bits.

>

> There are ways to prevent, or mitigate all of these risks, but you

> need to be careful about your answers there. If it's the company's

> price list, which all their customers already know, perhaps a PACK is

> sufficient. But if it's information that could cost peoples their

> lives or livelihoods

>

>> Currently what I am telling them that's its not possible & that its

>> something like you have an excel sheet of say 100 rows. You then delete

>> 20 rows and save it. After saving whether it possible to recover the

>> deleted rows??

>

> Well, that's pretty unlikely. Sometimes Excel stores stuff in its

> spare spaces. I still wouldn't keep my secrets on it.

>

> --

> Ted Roche

> Ted Roche & Associates, LLC

> http://www.tedroche.com

>

[excessive quoting removed by server]

_______________________________________________

Post Messages to: ProFox@leafe.com

Subscription Maintenance: http://leafe.com/mailman/listinfo/profox

OT-free version of this list: http://leafe.com/mailman/listinfo/profoxtech

Searchable Archive: http://leafe.com/archives/search/profox

This message: http://leafe.com/archives/byMID/profox/5CA48AAB93D546F283F16AC414BA3959@ajoykcompaq

** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.

©2011 Ajoy Khaund
Back to top
RE: Retrieve Data after pack & index

Author: Grigore Dolghin

Posted: 2011-02-15 04:34:57   Link

Sometimes it is. PACK copies the non-deleted records in a new file, then

delete the original file and renames the new one. So technically it's a file

deletion operation, which can be recovered from disk using specialized

tools, such as the ones produced by http://www.ontrackdatarecovery.com/.

The degree of success may vary, though; the sooner the recovery process is

started, the greater chances of success. The reason is HDD reports the

sectors where the original file was stored as free and they are overwritten

sooner or later. Once overwritten, the recovery will fail. As far as I know,

there are tools which can recover data from overwritten sectors (this is why

utilities that wipe the content of a harddisk do multiple overwrites on same

sectors), but I have never seen such a thing. And I believe they're not as

successful as they say though.

> -----Original Message-----

> From: profoxtech-bounces@leafe.com [mailto:profoxtech-

> bounces@leafe.com] On Behalf Of Ajoy Khaund

> Sent: Tuesday, February 15, 2011 3:18 AM

> To: profoxtech@leafe.com

> Subject: Retrieve Data after pack & index

>

> Hi,

>

> After deleting some records and issuing a PACK and then deleting the

> indexes for the table and creating the indexes again is it possible by

anyone

> to retrieve the deleted the data. Is there any software by which someone

> will be able to retrieve the data. Any kind of information will help.

Sometimes

> some people ask these questions and I am at a loss of words. If any

software

> can recover it please let me know.

>

> Currently what I am telling them that's its not possible & that its

something

> like you have an excel sheet of say 100 rows. You then delete 20 rows and

> save it. After saving whether it possible to recover the deleted rows??

>

> Thanks in advance.

>

> Bobby

>

> --- StripMime Report -- processed MIME parts --- multipart/alternative

> text/plain (text body -- kept)

> text/html

> ---

>

[excessive quoting removed by server]

_______________________________________________

Post Messages to: ProFox@leafe.com

Subscription Maintenance: http://leafe.com/mailman/listinfo/profox

OT-free version of this list: http://leafe.com/mailman/listinfo/profoxtech

Searchable Archive: http://leafe.com/archives/search/profox

This message: http://leafe.com/archives/byMID/profox/000c01cbccf3$9ee83b50$dcb8b1f0$@gmail.com

** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.

©2011 Grigore Dolghin
Back to top
Re: Retrieve Data after pack & index

Author: Jean Laeremans

Posted: 2011-02-15 04:44:01   Link

Ah memory lane ..do you remember you once needed such a tool Griggie ?

A+

jml

--- StripMime Report -- processed MIME parts ---

multipart/alternative

text/plain (text body -- kept)

text/html

---

_______________________________________________

Post Messages to: ProFox@leafe.com

Subscription Maintenance: http://leafe.com/mailman/listinfo/profox

OT-free version of this list: http://leafe.com/mailman/listinfo/profoxtech

Searchable Archive: http://leafe.com/archives/search/profox

This message: http://leafe.com/archives/byMID/profox/AANLkTinZH1RPAEiKY3prumJGcFBEaR+s7EAiOyheVH1b@mail.gmail.com

** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.

©2011 Jean Laeremans
Back to top
RE: Retrieve Data after pack & index

Author: Grigore Dolghin

Posted: 2011-02-15 04:45:49   Link

That's right - I was pretty f*cked up at that time, lol ;)

> -----Original Message-----

> From: profoxtech-bounces@leafe.com [mailto:profoxtech-

> bounces@leafe.com] On Behalf Of Jean Laeremans

> Sent: Tuesday, February 15, 2011 11:44 AM

> To: profoxtech@leafe.com

> Subject: Re: Retrieve Data after pack & index

>

> Ah memory lane ..do you remember you once needed such a tool Griggie ?

>

> A+

> jml

>

>

> --- StripMime Report -- processed MIME parts --- multipart/alternative

> text/plain (text body -- kept)

> text/html

> ---

>

[excessive quoting removed by server]

_______________________________________________

Post Messages to: ProFox@leafe.com

Subscription Maintenance: http://leafe.com/mailman/listinfo/profox

OT-free version of this list: http://leafe.com/mailman/listinfo/profoxtech

Searchable Archive: http://leafe.com/archives/search/profox

This message: http://leafe.com/archives/byMID/profox/000301cbccf5$2176f8d0$6464ea70$@gmail.com

** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.

©2011 Grigore Dolghin
Back to top
Re: Retrieve Data after pack & index

Author: Ted Roche

Posted: 2011-02-15 09:58:29   Link

On Tue, Feb 15, 2011 at 4:34 AM, Grigore Dolghin <gdolghin@gmail.com> wrote:

> Sometimes it is. PACK copies the non-deleted records in a new file, then

> delete the original file and renames the new one. So technically it's a file

> deletion operation, which can be recovered from disk using specialized

> tools, such as the ones produced by http://www.ontrackdatarecovery.com/.

The local LUG had a great presentation a few years ago by a white hat

who was involved in forensics and had entered one of the white hat

competitions. They were given a 50 Mb "chunk" in a file, a portion of

hard disk image, and used tools to analyze the bit patterns and string

together the erased files and partial files that were once there. They

had a lot of success.

http://blog.tedroche.com/2007/03/19/centralug-notes-from-andy-bairs-digital-forensic-file-carving-presentation/

or http://blog.tedroche.com/?p=2698

Recently, I did something similar with a Linux application designed to

aid in recovering photos from a memory card that's become corrupt. I

used it on an old hard disk drive pulled from a machine I was

trashing. The recovery program works on most devices and file systems

and was successful at retrieving a number of files.

I now take advantage of encrypted home partitions, to avoid

unintentional disclosure of client or personal data. While not

perfect, it ups the ante a little bit and eliminates the simplest

"scan and recover" techniques.

--

Ted Roche

Ted Roche & Associates, LLC

http://www.tedroche.com

_______________________________________________

Post Messages to: ProFox@leafe.com

Subscription Maintenance: http://leafe.com/mailman/listinfo/profox

OT-free version of this list: http://leafe.com/mailman/listinfo/profoxtech

Searchable Archive: http://leafe.com/archives/search/profox

This message: http://leafe.com/archives/byMID/profox/AANLkTikwm_rfFdEcSHOqUx943DqgKLb1w+Mxghw=yRZV@mail.gmail.com

** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.

©2011 Ted Roche