On Sat, Aug 04, 2001 at 06:45:35PM +0100, Craig Earnshaw wrote:
> Does anyone know if it possible to make a complete copy of all of the
> data resident on a Psion Revo?
[SNIP use PsiWin to synchronise and look at the files]
> The problem with this is that a) there are potentially holes in the
> methodology, and b) (most importantly) this method only captures active
> data.
And the PsiWin (or conduits in the Palm case) can and do convert data
from the PDAs native form to a form usable on the hostcomputer, almost
certainly losing information ("deleted" records for example) and
potentially introducing information.
For Palm, a plain sync with pilot-link (Unix) will create a full copy of
everything the PDA deems "active" data (including records marked
"deleted but save on PC"). It will not copy unallocated memory. For
that, one would have to either use the built-in debugger if the Palm by
accident has a debug ROM (see @Stake advisory for this) which is best as
it does not disturb the data on the device (and bypasses the sync
password). If not, you will have to install a memory dumping program to
do this for you, thereby disturbing the state on the PDA and erasing at
least the amount of memory needed for the dumping program. Such programs
are available for development.
> I suppose that an "interpreter" for the
> image would also be important, so that you know what data relates to
> active files, and whether the any deleted material could be "recovered".
My best bet for Palm is the POSE emulator with debugger, for EPOC
similar tools are available.
With kind regards,
Wouter Slegers
Your Creative Solutions
-----------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
and tracking system please see: http://aris.securityfocus.com
This archive was generated by hypermail 2b30 : Tue Aug 07 2001 - 15:01:40 PDT