{"id":560,"date":"2008-02-25T00:21:27","date_gmt":"2008-02-25T05:21:27","guid":{"rendered":"http:\/\/blogs.n1zyy.com\/n1zyy\/2008\/02\/25\/digital-photo-recovery\/"},"modified":"2008-02-25T00:21:27","modified_gmt":"2008-02-25T05:21:27","slug":"digital-photo-recovery","status":"publish","type":"post","link":"https:\/\/blogs.n1zyy.com\/n1zyy\/2008\/02\/25\/digital-photo-recovery\/","title":{"rendered":"Digital Photo Recovery"},"content":{"rendered":"<p>I just discovered <a href=\"http:\/\/www.cgsecurity.org\/wiki\/PhotoRec\">PhotoRec<\/a>, a tool for recovering digital camera images.<\/p>\n<p>For the non-geeks, a quick basic background&#8230;. When you save a file, it writes it to various blocks on the disk. Then it makes an entry in the File Allocation Table, pointing to where on the disk the file is. When you <em>delete<\/em> a file, the entry is removed from the File Allocation Table. That&#8217;s really all that happens. The data is still <em>there<\/em>, but there&#8217;s nothing pointing to where on the disk it is. This has two implications. The first is that, with appropriate tools and a little luck, you can still retrieve a file that you&#8217;ve deleted. (Whether this is comforting or distressing depends on your perspective&#8230;) The second is that, with no entry in the File Allocation Table, it&#8217;s seen as &#8220;free space,&#8221; so new files saved to the disk may well end up getting that block. It&#8217;s <em>technically<\/em> possible to recover stuff even after it&#8217;s been overwritten, but at that point it&#8217;s much more complex and much more luck is involved.<\/p>\n<p>Last night we went out to dinner&#8230; We took lots of photos, but some were deleted. So I figured PhotoRec might recover them. So I gave it a try.<\/p>\n<p>The filesystem shows 163 photos. After running PhotoRec, I have 246 photos. What&#8217;s odd is <em>what<\/em> photos I have. It&#8217;s not the ones from last night. They&#8217;re scattered from various events, and several are from almost two months ago.<\/p>\n<p>This does leave us with an important tip, though: if you delete an essential photo, <em>stop<\/em>. Each subsequent thing you do to the disk increases the odds of something overwriting it. In a camera, just turn it off. Taking more photos seriously jeopardizes your ability to recover anything.<\/p>\n<p>In my case, I didn&#8217;t have anything really important&#8230; I just wondered how it would work. And I got strange results for recovered files. (Which has me wondering a lot about how its files get written out to disk, actually.) But it&#8217;s good knowledge for the future. (By the way, PhotoRec runs under not just Linux, but also, apparently, Windows, and most any other OS you can imagine.)<\/p>","protected":false},"excerpt":{"rendered":"<p>I just discovered PhotoRec, a tool for recovering digital camera images. For the non-geeks, a quick basic background&#8230;. When you save a file, it writes it to various blocks on the disk. Then it makes an entry in the File &hellip; <a href=\"https:\/\/blogs.n1zyy.com\/n1zyy\/2008\/02\/25\/digital-photo-recovery\/\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4,5,8,10,12,13,15,20,22,24,27],"tags":[],"class_list":["post-560","post","type-post","status-publish","format-standard","hentry","category-computers","category-cool-links","category-hero-of-the-day","category-ideas","category-interesting","category-linux-tips","category-living","category-photography","category-programming","category-rants-raves","category-security"],"_links":{"self":[{"href":"https:\/\/blogs.n1zyy.com\/n1zyy\/wp-json\/wp\/v2\/posts\/560","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogs.n1zyy.com\/n1zyy\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogs.n1zyy.com\/n1zyy\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogs.n1zyy.com\/n1zyy\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs.n1zyy.com\/n1zyy\/wp-json\/wp\/v2\/comments?post=560"}],"version-history":[{"count":0,"href":"https:\/\/blogs.n1zyy.com\/n1zyy\/wp-json\/wp\/v2\/posts\/560\/revisions"}],"wp:attachment":[{"href":"https:\/\/blogs.n1zyy.com\/n1zyy\/wp-json\/wp\/v2\/media?parent=560"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogs.n1zyy.com\/n1zyy\/wp-json\/wp\/v2\/categories?post=560"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogs.n1zyy.com\/n1zyy\/wp-json\/wp\/v2\/tags?post=560"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}