August 8th, 2009 by ahoogI think most forensic examiners are watching solid state storage closely to see how it will change our techniques. The Apple iPhone and Android devices to date have brought in new file systems, wear-leveling that requires piecing larges files back together and more. But a bit more disconcerting is the developed of SSD firmware that actively cleans up “dirty” blocks on a drive to increase performance. If this firmware merely marks the page as unused, that would likely be OK. But if the firmware, during free cycles, actively clears that data in unused pages/blocks, it could have a huge impact on the forensic recovery of data. Original article below:
virtually all SSD manufacturers have incorporated, or soon will incorporate, garbage collection schemes into their drives’ firmware that actively seek out and remove the garbage data.
via OCZ and Indilinx Collaborate On New SSD Garbage Collection Scheme – HotHardware.
