The Audit of Dominion Voting Machines in Michigan: 14 Key Conclusions

https://genzconservative.com/audit-of-dominion-voting-machines/ ^

[Sergio]

bkmk

[zeugma]

I will be honest, however, in that I am unsure if a hardware copy still captures ghost images of files where the magnetic statis is ambiguous. One wouldn’t think that this affects this particular effort (the images on the disk should still be fresh), but I am not in this narrow part of the field, so I do not know.

Using an image like that, you couldn't get at any data that had been overwritten. There are programs to securely delete files that basically write a series of all 0s across the entire file, then all 1s multiple times. If that had been done to the files, you'd get nothing without using a microscope to examine the original hardware platters. Not really worth the effort most times. However, Windows, which is what it looks like the Dominion software is using doesn't typically do that.

You will also lose data if another file is overwrites the physical sectors of the disk where the logs were. Chances are though, that the space was just marked as 'free'. Unless you have a lot of disk writes after the files were deleted, there is an extremely good chance you'll be able to recover most of the data if not all of it. Way back in the dark ages, I did some analysis of the FAT filesystem, and was able to do a lot of interesting stuff with disk utilities, including looking at data in the slack space of files, which would include data from the end of file marker to the end of the actual data sector. Since files are allocated on sector boundries, you can sometimes find evidence of previous files in unallocated space after the end of the file proper. Yeah, I was pretty nerdy.

[MortMan]

In my work, I look more at the theoretical end as opposed to the physical end. Thank you for the information.

[alexandria]

Try a different browser. I had to use Chrome to open...