maddin wrote:
Hello,
I have a Samsung phone which get resetted to factory defaults.
I was using KingRoot + BusyBox to be able to image the whole internal memory with dd. Then I tryed to recover lost files from the image but there where no files. When I inspect that image with an hexeditor i see that over 85% are filled with 0x00 or 0xFF.
I had in the past luck with that method on an Android 2.x phone....
Does phones whipe the internal memory newadays when they get resetted? Or do the controller only deliver 0x00 / 0xFF because that space is not in use?
Would a Chip-Off make sence in that case? It's a eMMC Memory in that phone and I would have an eMMC to SD Adapter here but I am not sure if that make any sence...
new phones are By Default Encrypted, Factory Reset means Generating new Encryption key which means again Data Gone
I got to know from some people that chip-off & trying to restore the "Old Key" (in some cases) >> Did work..... Maybe but not as a rule for the rest
to cut it short : When you hear Factory Reset (IOS/Android) then just don`t bother