All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic  [ 6 posts ] 
Author Message
 Post subject: Drive is mostly zeros
PostPosted: June 21st, 2023, 16:07 
Offline

Joined: August 27th, 2022, 19:28
Posts: 20
Location: Boston, MA, USA
Is it common or even possible for a SSD controller to fail in a way that it just reports zeros when reading some parts of the drive?

That is a possibility I am considering given a customer who presented the following issue:

A large Samsung 4TB USB external SSD drive which had approximately 50% usage comprised of jpg files.
I imaged the drive with no errors.
R-Studio found less than a dozen jpg files.
I scanned the disk image byte-by-byte and found that > 99% of all bytes were '\0'.

I told the customer that something had to have written over their data.
They insisted that it was not possible and additionally when I asked them further questions they said that all of their files were there one moment and then gone the next.
They claim that there was not enough time to overwrite data.

Puzzling.


Top
 Profile  
 
 Post subject: Re: Drive is mostly zeros
PostPosted: June 21st, 2023, 16:13 
Offline

Joined: November 7th, 2020, 5:31
Posts: 1092
Location: The_UK
Trim, garbage collection, duff translator. Just about anything is a WAG without knowing what the client actually did.

_________________
Data Recovery Services in the UK.
https://www.usbrecovery.co.uk/


Top
 Profile  
 
 Post subject: Re: Drive is mostly zeros
PostPosted: June 21st, 2023, 16:17 
Offline

Joined: August 27th, 2022, 19:28
Posts: 20
Location: Boston, MA, USA
I have no idea what you mean? :)
NO clue what a duff translator or a WAG is???

But, it seems that you say the drive actually has zeros and the client did something to put them there??


Top
 Profile  
 
 Post subject: Re: Drive is mostly zeros
PostPosted: June 21st, 2023, 16:18 
Offline

Joined: August 27th, 2022, 19:28
Posts: 20
Location: Boston, MA, USA
Lardman wrote:
Trim, garbage collection, duff translator. Just about anything is a WAG without knowing what the client actually did.



I have no idea what you mean? :)
NO clue what a duff translator or a WAG is???

But, it seems that you say the drive actually has zeros and the client did something to put them there??

Thank you.


Top
 Profile  
 
 Post subject: Re: Drive is mostly zeros
PostPosted: June 21st, 2023, 16:31 
Offline
User avatar

Joined: September 8th, 2009, 18:21
Posts: 15538
Location: Australia
WAG = Wild Arsed Guess (arse = the sum of two half-asses)

"Duff translator" means that the internal firmware component which maps (translates) logical blocks to physical blocks has become corrupt.

TRIM was most likely invoked by the OS after the customer deleted their files or formatted their drive. The drive then returns zeros for the TRIM-ed LBAs.

https://duckduckgo.com/?q=SSD+trim

TRIM and file deletion - Why undelete / recovery is (often) impossible from SSD drives:
https://www.youtube.com/watch?v=NyLQbxnPurc

_________________
A backup a day keeps DR away.


Top
 Profile  
 
 Post subject: Re: Drive is mostly zeros
PostPosted: June 21st, 2023, 22:33 
Offline

Joined: August 27th, 2022, 19:28
Posts: 20
Location: Boston, MA, USA
fzabkar, Lardman,
Thank you very much for taking the time to respond to my post.
I learned alot from the links you sent!


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 6 posts ] 

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: No registered users and 98 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group