Illegal computer files

[1ce]

testdisk/helix are the 2 handiest tools to have around, always.

 

[Mr.Peabody]

I read somewhere that it only takes the tiniest flake of metal to come off inside the hard drive to cause serious malfunction. I've also read that at these data-recovery places, they take the drive apart in a vacuum environment as the tiniest speck of dust, even a particle of smoke, is enough to compromise the recovery - although this could be marketing/propaganda. What do you think?

It is certainly true that the data peeps use 'clean rooms' to work in although I think this is only necessary to ensure their business is not compromised by 'accidental' contamination.
Dust can be an issue but the whole process can be performed with your hands in a plastic bag to keep out particles if necessary. (I've seen it done just on a desk with no precautions and been fine)
From what you describe it sounds as if the fall may have bounced the read heads off the platters...if they were in the 'start' position on the platters...then the magnetic data would have been damaged and the startup routine would not run.
Your data is safe on the platters...the problem is how to read/retrieve it.
(been there many times...horrid feeling) Good luck.
Just remember though...you got this info once...you can get it again...just takes a bit of time.

My computer's HD died this last Christmas (great present, fate :x ). I was unfortunately not smart enough to realize how much of my life was contained in the countless bits stored on that hard drive. I had never back it up! I just kept putting it off.

So you saw this done, personally? This is my plan, actually. I can't afford the high cost of the pro data recovery. I am actually planning on building what will later become a mushroom growing glove bag type thing, which should make for a great clean area to do the work. It will be my own little clean room! I'll try to give some results, whenever I find the time to do this. I want to take my time, and do it up right so I have the best chance of getting my data back.

 

[Lichen]

I am actually planning on building what will later become a mushroom growing glove bag type thing, which should make for a great clean area to do the work. It will be my own little clean room!

I also considered going down this route at one point, thinking that it might be a matter of simply transferring platters from enclosure to another (in my case, it would never have worked anyhow).

This person attempted a similar thing:

[YOUTUBE]

However, you will see at 4:17 that he drops the 'spindle cover' on top of the good platter, which probably resulted in his failure.

I suggest you find the cause of the failure before you even consider anything like this - it may simply be a matter of changing the PCB with another of the exact same model. But really, there is a multitude of different things that could be the problem - hopefully in your case it is something straight forward.

I think if you consider your data to be precious enough, you should start saving and leave it for the experts and not attempt any hard drive surgery until you've done a few practice runs on hard drives without critical data.

 

[Mr.Peabody]

Well it's not really precious enough data to spend the kind of money to get a pro to recover it. I have survived well enough without it for almost 6 months, though it has been annoying!

Thanks for the advice! I do have an exact copy of the hard drive, and I think I will try swapping the PCBs first. From what the local computer shop guy told me, I think it might be a power failure of some sort, so it may be fixed without opening the case.

 

[cyb]

I think I will try swapping the PCBs first. From what the local computer shop guy told me, I think it might be a power failure of some sort, so it may be fixed without opening the case.

Good plan Mr.P ... Always try that first but make sure that you get the Exact same board...check for serial numbers and model number etc....if its a different model board, the chips may be slightly different and won't run.
You can maybe hunt down a drive or board on ebay that is the same ... power failures can blow a tiny component on the board...it could be a simple fix.

If you do go down the route of changing the read heads or platters...check out all the vids on youtube ... there are lots of little tips on dismsmanteling.

Good luck mate

 

[Macre]

Good work man. If you can get hold of some decent imaging software (Paragon, Ghost etc) then you can take periodic full images of your system, as well as file-level backups to an external media. This should give you a decent belt and braces backup.

Peace

Macre

Heh, Needless and expensive. I've always used dd and mdconfig.

Yeah that's fair enough. I get my stuff from work so I don't really think of it. Let's not underestimate setting up a robocopy script (if you're running Windows) or SyncToy.

dd and mdconfig are a good shout, can't argue there. I use Arch as my OS, so if I didn't use Paragon I'd prbably use some tools like that.

I'm personally a fan or Paragon. I guess I'd think differently if I didn't have easy access to software.

Peace

Macre

 

[Curb]

just as a sidenote - it does pay to have incriminating files in seperate folders (like inside a few layers of c:/windows folders somewhere)

 

[Lichen]

I would suggest that anything you seriously do not want to found by anyone else other than yourself, should be kept in a different physical location - ideally hidden not even on your own property.

If you really must have regular access to these files, invest in a large SD card - at least 64GB or even 128GB - and create an encrypted folder within another encrypted folder on the card; and then keep this very well and truly hidden physically.

You should probably read about good hiding places other people use as much as you can, and then hide the object anywhere other than places you have already read about, using your own ingenuity. Don't keep this card physically hidden in arms reach, or even in the same room, of a computer.

This card, ideally, should never be found - it is your ultimate line of defense.

However if this card is found, the card should contain files which you could plausibly argue justify the hiding of the card. If there is just regular files on the card, this does nothing but arouse suspicions even further - why would one go to the effort of hiding a card with regular files on it?

If you put circumspect, but not incriminating files, on the card, you can justify hiding it. However, you must also assume that any would-be investigator will assume there is encrypted files on it.

If you are asked at anytime, to reveal any encryption keys to the files, you may be breaking local laws simply but not revealing them. It's in your best interest to announce that you have encrypted files and to reveal the encryption key to your decoy folder - show them that you have nothing to hide, nor have you committed any crime.

At every step of the way, be as compliant as possible, don't give them any reason to think you have anything incriminating to hide. If you act coy and unhelpful, they are going to search very thoroughly indeed, and they will crack your encryption. Remain calm, show you want to help - do their job for them.

The first encrypted folder should contain decoy files, this could be anything you would plausibly want to keep secret and encrypted. Again, use your own ingenuity - and do not use pornography as your decoy.

The second encrypted folder should contain the information that you are truly hiding.

Do not use the same encryption key for both encrypted files. These keys should be very long and use a mix of lowercase letters, uppercase letters, numbers and symbols. Do not use "randomly generated password makers" online - come up with your own and create a mnemonic for yourself to remember them.

For example:
OuattwaymnG.HbadcfAf$9. = Once upon a time there was a young man named George. He bought a domestic cat from Africa for $9.

That's 23 characters. Come up with three sentences like this. They are easy to remember, and only use capitals on the pro-nouns and it will be easy to remember which letters are capitals.

-----------------

I'm afraid with the sort of technology that exists these days, hiding files within a few layers of windows folders on the computer doesn't cut it anymore.