SI
SI
discoversearch

We've detected that you're using an ad content blocking browser plug-in or feature. Ads provide a critical source of revenue to the continued operation of Silicon Investor.  We ask that you disable ad blocking while on Silicon Investor in the best interests of our community.  If you are not using an ad blocker but are still receiving this message, make sure your browser's tracking protection is set to the 'standard' level.
Politics : Formerly About Advanced Micro Devices -- Ignore unavailable to you. Want to Upgrade?


To: Road Walker who wrote (333181)4/14/2007 10:10:21 AM
From: bentway  Read Replies (3) | Respond to of 1570837
 
I've been a system administrator in a multiple hat job, and I kept cheap tape backups so that I could restore the state of the server at every backup point (once a week) in time since I was given the job. But I'm no expert.

I had a catastrophic server hard drive failure, and was able to restore everything except a few documents that had been put on the server since my last backup, copies of which were on users local machines anyway. I was sweating whether it would work, since it represented the labor of thirty people over two years! This was over 15 years ago.

I can't imagine that the RNC doesn't have AT LEAST a similar setup.

In addition to that, when you "erase" an email, it's still THERE unless you "scrub" the drive and write random data over it multiple times, which typically only happens if you reformat the drive or run special programs designed to do this. When "erased", the email's physical drive location is freed to be overwritten with new data is all that happens when you "erase" an email, which can be STILL be read sometimes by forensic snooper programs, even though it's been overwritten. Also, these emails were SENT to someone or someone's, so, they could exist on THEIR servers or machines, and perhaps forwarded and resent to many other servers and people, some of whom may have saved them specifically to CYA.

It's best to assume ANYTHING you submit to the internet is still there, somewhere.



To: Road Walker who wrote (333181)4/14/2007 11:51:16 AM
From: SilentZ  Respond to of 1570837
 
>I know nothing about the "forensics" of finding deleted email. It would seem that there there must be traces somewhere as they must go through multiple servers on the journey from point A to point B. Any experts on the thread?

Yeah... I deal with several web and e-mail hosts. Suffice it to say that if you want to find any pretty much any e-mail badly enough, you can.

-Z



To: Road Walker who wrote (333181)4/14/2007 6:56:58 PM
From: Tenchusatsu  Respond to of 1570837
 
JF, > It would seem that there there must be traces somewhere as they must go through multiple servers on the journey from point A to point B.

Yep, there would have to be.

Which makes any cover-up job very, very difficult. Simply hitting the Delete button and emptying the Trash folder is rather sloppy, to say the least. Not very "Rovian," if you know what I mean.

Tenchusatsu