HeadlinesBriefing favicon HeadlinesBriefing.com

PhotoRec rescues 16k files from a decade-old laptop

Hacker News •
×

Hacker News contributor revisited classic forensics tools to prove that deleted data can still be salvaged. Using TestDisk and its companion PhotoRec, the author scanned a decade‑old 1 TB Toshiba laptop and a 7 GB GoPro SD card. PhotoRec operates by reading raw disk sectors, ignoring file system metadata, which lets it pull out files even after the OS trash has been emptied.

On the laptop run, PhotoRec spent over five hours digging through the drive and surfaced more than 16 000 files, filling the 6 GB USB until space ran out. The set includes JPEGs, PNGs and MP4s, but original names and folders vanished, leaving thousands of duplicate‑looking images to sort manually. The SD card scan finished in under a minute, returning one folder with twelve media files.

The experiment underscores why PhotoRec remains a staple in digital forensics and data‑recovery workflows: it can resurrect decades‑old content without needing intact file system structures. However, users must heed the warning not to write results back to the source disk, lest they overwrite what they aim to recover. Proper planning and selective file‑type filters keep the process manageable.