Recovering files from beyond the grave using PhotoRec

· systems · Source ↗

TLDR

  • A hands-on walkthrough of using PhotoRec on decade-old hardware recovered 16k+ files from a 1TB laptop but loses all filenames and folder structure.

Key Takeaways

  • PhotoRec scans raw disk data by file signature; it does not rely on filesystem metadata, so deleted files survive even after emptying the trash.
  • Filter by specific file extensions before scanning. Enabling all 480+ supported extensions increases scan time significantly.
  • Never write recovered files back to the source device; overwriting sectors can permanently destroy what PhotoRec is trying to read.
  • Recovery from a 1TB laptop took over 5 hours and filled a 5.5GB USB; a 7GB GoPro SD card completed in under a minute with 12 files.
  • The privacy risk is real: anyone with physical access to a secondhand device and PhotoRec can resurrect files the previous owner believed were gone.

Hacker News Comment Review

  • No substantive HN discussion yet.

Original | Discuss on HN