Top all-time · #16785
Belkasoft site
Company blog · forensic.belkasoft.com/ensecurityhardware
Belkasoft site is the company blog at forensic.belkasoft.com, writing about security and hardware. Since 2014, 4 different Hacker News readers have linked it 4 times, most often “Why SSD Drives Destroy Court Evidence, and What Can Be Done About It (2012)”. It is still writing: the last post was on 2026-10-16, and you can follow it by feed.
Too few sampled comments (2) to say how often HN recommends it.?
Why HN links it
HN commenters refer to this forensics blog's article on SSD forensics, where TRIM can clear blocks so deleted data is no longer recoverable. It is cited in discussions of deleted-file recovery.
Summarised by Claude from a sample of 2 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Accelerate your digital forensics and incident response investigations with Belkasoft's comprehensive toolset! Our powerful digital forensics software provides easy-to-use solutions for acquiring and analyzing data from computers and mobile devices.
Most-linked posts?
- Why SSD Drives Destroy Court Evidence, and What Can Be Done About It (2012)4 people · 4 mentions · first linked 2014-03-25
What Hacker News says?
Untrue, even on flash-based storage full deletion is possible. Here's an answer I pulled from reddit: If you are appropriately using TRIM the data will be obliterated when 'garbage collection' occurs -- forensics will not be able to recover deleted data. This is going to be largely dependent on your OS and Hardware, but if you confirm TRIM is working correctly in your setup, shortly after you permanently delete some…
Comment linking /en/why-ssd-destroy-court-evidence
on “Instagram kept deleted photos and messages on its servers for more than a year”Submitted Why SSD Drives Destroy Court Evidence, and What Can Be Done About It (2012) as a story · 127 points
HN discussionNot sure why you are getting down-voted. I assume you are referencing the SSD forensics article that was on here a while back that brought up the fact that TRIM on an SSD can cause forensic recovery issues. Basically blocks can be cleared even if the drive is unmounted but powered on. SSD designers developed an interface allowing the operating system (e.g. Windows, Linux, Mac OS X etc.) to inform the controller that…
Comment linking /en/why-ssd-destroy-court-evidence
on “Recovering deleted files using only grep”Submitted Why SSD Drives Destroy Court Evidence, The State of the art in SSD forensics as a story · 2 points
HN discussion