Find out more about this
Gesmer Updegrove has represented more than 184 standards consortia and open source foundations, including:
View Full Client List
Useful Links

Press Center Sitemap


Text Size:
Default  Large

RSS Feeds

Bookmark and Share

Standards <Meta>Library

Standards & Society


(Select a New Topic or Category)

Title: "The Linux Kernel and the Forensic Acquisition of Hard Disks with an Odd Number of Sectors"
Author: Jesse Kornblum Computer Crime and Intellectual Property Section of the United States Department of Justice
Source: International Journal of Digital Evidence, Fall 2004, Vol. 3 Issue 2
Publication Date: September 22 2004
Free/Fee: Free Access
Reads: 4158
Abstract: No official version of the Linux kernel, up through and including version 2.4, allowed a user land process to access the last sector of a hard disk or hard disk partition with an odd number of sectors. Although the inability to access this last sector did not affect normal operation of the system, it did prevent the complete forensic acquisition of such a disk. The author repeats an earlier experiment to verify the issue in version 2.4 of the kernel and then shows that the issue has been resolved in version 2.6. Systems using version 2.6 of the Linux kernel can completely forensically acquire disks or partitions with an odd number of sectors.
Link: Full Text