524
submitted 1 year ago by [email protected] to c/[email protected]

cross-posted from: https://sopuli.xyz/post/12670977

iPhone owners say the latest iOS update is resurfacing deleted nudes

you are viewing a single comment's thread
view the rest of the comments
[-] [email protected] 202 points 1 year ago

I appreciate this thread's nuanced discussion of how file deletion works from a technical standpoint depending on storage medium. But as a user, when I delete something, it should go away forever. I don't care how.

[-] [email protected] 108 points 1 year ago

I don't care how

grabs your phone, throws it on the ground and blasts it with a shotgun

There you go! =)

[-] [email protected] 85 points 1 year ago

Cloud's deleted folder enters the chat.

[-] [email protected] 46 points 1 year ago

Objective updated: shoot cloud server

[-] [email protected] 45 points 1 year ago

Many years ago, we had a troubled employee leave work very mad. He was quite furious with his computer and went home for his revolver unbeknownst to us. He came back to work with it and unloaded all six rounds into the system. Each round went through the case and each one missed the drive/motherboard/videocard. So, the system was still working despite the abrupt extra cooling holes. This further incensed him and he went away even madder, but this time in cuffs.

[-] [email protected] 20 points 1 year ago

Wow, how do you suck that bad at aiming?

[-] [email protected] 14 points 1 year ago

It’s pretty easy if you don’t know where the computer’s vital organs are

[-] [email protected] 12 points 1 year ago

You never shoot the ~~messenger~~ monitor.

[-] [email protected] 8 points 1 year ago

The computer is good at dodging without moving

It’s like how I can talk while holding my breath but only over a call

[-] [email protected] 10 points 1 year ago

John Connor has entered the chat

[-] [email protected] 9 points 1 year ago

Well… if you really want to delete them…

takes blasted phone, insert remnants into small iron cup, places in inductive furnace

[-] [email protected] 5 points 1 year ago

Hey at least I know it gets the job done

[-] [email protected] 69 points 1 year ago

But as a user, when I delete something, it should go away forever.

Years of working tech support in my past tells me that this is a lie. "OMG restore this!"

[-] [email protected] 24 points 1 year ago

I think tech would be a better place if it did actually go away when you deleted things. If something's not explicitly backed up people really should have no hope of bringing it back.

[-] [email protected] 51 points 1 year ago* (last edited 1 year ago)

If every time an OS had to delete something it had to fill the space with zeros or garbage data multiple times just to make extra sure it's gone, we'd all be trashing our flash chips very fast, and performance would be heavily degraded. There really isn't a way around this.

The solution to keep private files private is to put them into an encrypted container of some sort where you control the keys.

[-] [email protected] 67 points 1 year ago* (last edited 1 year ago)

Step away from hardware constraints for a moment, and consider the OS:

If the OS says a file is deleted, under no circumstances should the OS be able to recover it. Sure, certain tools may exist to pull it back; but it should be unavailable to the OS after that. And yet, apparently a software update was enough to recover these files. Thus, the concerns about data safety in an environment where the OS cannot be trusted to remove data when it says it has been removed.

[-] [email protected] 24 points 1 year ago

So let's stop calling it "deleted" then, and call it what it is. "Forgetting".

I'm not sure what you actually want the OS to do about it other than as I said, fill it with random data.

[-] [email protected] 10 points 1 year ago

Well, iOS could just do it like every other OS that don't restore deleted data by installing an update.

[-] [email protected] 10 points 1 year ago* (last edited 1 year ago)

I think this is just semantics at this point, but to me there is a difference between “deleted” and “erased”. I see deleted as the typical “moved to trash” or rm action, with erased being overwritten bits, or like microwaving a drive.

Edit - If i remember correctly deleting something in most OS’s/File Systems just deletes the pointer to that file on disk. The data just hangs out until new data is written to that sector. The solution, other than the one you mentioned about encrypting stored data and destroying the key when you want the data “deleted”, would be to only ever store data in volatile memory. That would make for a horrendous user experience though.

[-] [email protected] 6 points 1 year ago

You can delete files by overwriting the data. On Linux its shred -zu [file]. Its slow but good to do if you are deleting sensitive data.

Its good its not the standard delete function.

[-] [email protected] 2 points 1 year ago

Question: what fraction of bits do you need to randomly flip to ensure the data is unrecoverable?

[-] [email protected] 5 points 1 year ago* (last edited 1 year ago)

Information theory aside: In practice all because you can't write bit-by-bit and if you leave full bytes untouched there still might be enough information for an attacker to get information, especially if it's of the "did this computer once store this file" kind of information, not the actual file contents.

If I'm not completely mistaken overwriting the file once will be enough to prevent recovering with logical means, that is, reading the bits the way the manufacturer intended you to, physical forensics can go further by being able to discern "this bit, before it got overwritten, was a 1 or 0" by looking very closely at the physical medium, details on how much flipping you need to defeat that will depend on the physical details.

And I wouldn't be too terribly sure about that electro magnet you built into your case to erase your HDD with a panic button: It's in a fixed place, will have a fixed magnetic field, it's going to scramble everything sure but the way it scrambles is highly uniform so the bits can probably be recovered. If you want to be really sure buy a crucible and melt the thing.

Also, may I interest you in this stylish tin-foil hat, special offer.

[-] [email protected] 3 points 1 year ago

If you delete normally, only the index of the files are removed, so the data can be recovered by a recovery program reading the "empty" space on the disk and looking for readable data.

If you do a single pass erase, the bits will overwritten one time. About half the bits will be unchanged, but that makes little difference. Any recovery software trying to read it will read the newly written bits instead of the old ones and will not be able to recover anything.

However, forensic investigation can probably recover data after a single pass erase. The shred command defaults to 3 passes, but you can do many more if you need to be even more sure.

Unless you have data that someone would spend large sums on forensics to recover, 1 to 3 passes is probably enough.

[-] [email protected] 1 points 1 year ago

If it's completely random then 50%, that's how stream ciphers works.

[-] [email protected] 2 points 1 year ago* (last edited 1 year ago)

Well, the storage device should handle that then. And modern NVMEs do. Self-encrypted drives are used to hide deleted information from an attacker that desolders the storage chips.

Edit: there are NVMEs that dont use self encryption, BUT they should still recognize a deleted sector.

[-] [email protected] 6 points 1 year ago

That would apply in my "encrypted container of some sort" solution, yes.

[-] [email protected] 1 points 1 year ago

Deletion commands are unfortunately not very reliable on many SSDs

[-] [email protected] 8 points 1 year ago

The OS should never let that happen. It always should abstract the partition into a filesystem.

[-] [email protected] 7 points 1 year ago

It's to prevent you from accidentally deleting a photo you would never want to delete. If you want to make sure it's deleted, you just go into the Photos app and delete it from the Recently Deleted folder. I prefer this approach, as I have accidentally deleted a photo that I did not mean to, and luckily it was still there. Use cases are different though, so.

[-] [email protected] 5 points 1 year ago

That still doesn't fully erase the data though. It just tells the computer that that space on the drive is available to be overwritten, but the 1s and 0s are still recoverable

[-] [email protected] 3 points 1 year ago

Right, right. I understand that. I was just explaining why the option is good for people like me. I don't take nudes, and I don't receive nudes, so I don't mind if the data is still there or not. I'm just glad the photo of me and my friend was still there when I noticed it was missing from my album after a recent meme deletion spree. lol

[-] [email protected] 6 points 1 year ago

Imo there should be options for standard deletion and total deletion. Standard is faster, puts less wear on the drive, and keeps the files potentially recoverable, whole total would make it totally unrecoverable at the expense of taking slightly longer and putting a bit more wear on the drive

[-] [email protected] 5 points 1 year ago

That is what thermite is for.

[-] [email protected] 3 points 1 year ago

The second drive bay is the right size for a handy block of data erasing c4

No one will ever read my Zuck / Bezos fanfic.

[-] [email protected] 2 points 1 year ago

Lol. I actually used to know a guy that claimed he used to have computer setup with a small thing to thermite on his hard drive and had set it up so if there were too many wrong passwords it would set the igniter off for the thermite. I don't know if you really, did but he definitely had the technical skills to do that. He was one of those extreme early adopters of BSD and Linux who never used GUI. Oh and he was batshit crazy, legitimately I can see him thinking that was a good idea.

this post was submitted on 15 May 2024
524 points (100.0% liked)

Technology

73067 readers
2327 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 2 years ago
MODERATORS