Re: Retrieve deleted data from a mobile phone

From: Gary L. Palmer (palmergat_private)
Date: Tue Jul 08 2003 - 11:56:06 PDT

  • Next message: Mark G. Spencer: "More on possible remnants of wiping .."

    Like many others the AFRL is researching forensic analysis of cellular
    technology as well.  If anyone is interested I will post a link to the Microchip
    Technology Inc. 24LC16B serial EEPROM that is used in many cellular phones. Just
    let me know. Or I will send the PDF to anyone that contacts me off-line.
    
    Gary
    
    Suresh Ponnusami wrote:
    
    > Hi,
    >
    > To a certain extent the numbers from dialed, received and missed calls
    > from Siemens (till 35 series) can be retrieved even after clearing. The
    > data is stored in the phone's memory and when the power (battery) is
    > removed abruptly, it retains the previous batch of the data which might
    > be useful. haven't tried with other mobiles. (will be trying with other
    > handsets soon). but if the number is stored in the sim card, i don't
    > think it'll be possible to erase because the user's action gets reflected
    > immediately as well as due to the limited amount of memory available.
    > It frees the space as soon as it gets deleted.
    > regards,
    > P.Suresh,
    > Co-founder,
    > Information Security Consultant,
    > nSecure Software (P) Ltd.,
    > Bangalore, KT,
    > India - 560071
    > http://www.nsecure.net/
    >
    > ----- Original Message -----
    > From: "Martin Meier" <martin.meat_private>
    >
    > > I'm writting a preliminary stude with the topic: forensic analysis about
    > > PDAs and mobils.I try once again to pose the question.
    > >
    > > Here's my question: is there the possibility to retrieve deleted data
    > > (for example a deleted telephone number from the phone book)on a mobile
    > > phone (Nokia 7110)?
    > >
    > > If it is not possible and you can tell me this for sure, I would be happy
    > > with it because I only need a good reason for or against this question.
    > >
    > > Are there any tools which can retrieve the information I mentionded above?
    > >
    > > If yes, please tell me the name of this tool(s).
    > >
    > > I hope sombody can answer this question.
    > >
    > >
    > > tx Martin Meier
    >
    > -----------------------------------------------------------------
    > This list is provided by the SecurityFocus ARIS analyzer service.
    > For more information on this free incident handling, management
    > and tracking system please see: http://aris.securityfocus.com
    
    --
    Gary Palmer                            Cellular - 407-687-3102
    The MITRE Corporation         Work - 407-208-1320 x229
    3504 Lake Lynda Drive          dpalmer30at_private
    Orlando, FL. 32817                 palmergat_private
    ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
    "The riddle does not exist. If a question can be put at all, then it can also be
    answered."
    Ludwig Wittgenstein, Tractatus Logico Philosophicus, New York, 1922.
    ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
    "If you don't know where you're going, any road will take you there."
    George Harrison, 2002 (LP/CD: "Brainwashed")
    
    
    
    
    -----------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management 
    and tracking system please see: http://aris.securityfocus.com
    



    This archive was generated by hypermail 2b30 : Tue Jul 08 2003 - 15:19:25 PDT