Thursday, April 12, 2007

Are deleted emails really deleted?


The big question of the day. Since there is so much discussion concerning the missing emails that haven't been turned over by the White House, I found this 2006 article about deleted emails:
It is said that "deleted files" are never completely erased unless you actually do so with the proper software. Does this also refer to emails? Once I erase an email (incoming or outgoing copy), does that stick around somewhere also?
In order to make the operation fast, when you delete a file, the operating system typically just sets a flag or removes an entry from a directory - the actual data within the file is left on disk to be reused later. Does the same apply to email messages?

In short: maybe.
First, let's be clear: when you delete a file in many email programs they're actually moved to a recycle bin, so you can often find them there until the recycle bin is emptied. When you empty the recycle bin, then the messages are actually deleted.
The problem is that different email programs all use different approaches to storing their email. As a result, there's no one answer as to what happens when they delete a message.
One clue is if the email program provides a "compact" function for its email storage. That implies that the file will grow as email arrives, but when files are deleted the file doesn't get smaller until you compact. That implies that like a file system, messages that are deleted are simply marked without freeing up the space immediately. Like file systems, as long as new messages haven't overwritten where the deleted messages used to be, then it might be possible to actually retrieve deleted messages. It might need special tools, but it could be possible.
One caution is that some email programs automatically rewrite or compact their files on exit, so this might only work if you make a copy of the email files before exiting the program.
And finally, all of this applies to email that's downloaded to your system. Web based email, server based email systems like Microsoft Exchange or IMAP servers add another level of complexity that makes deleted email that much less likely to be retrievable.

http://ask-leo.com/are_deleted_emails_really_deleted.html
The question of the day is can deleted emails from the usage of cell phones, Blackberries, Palm Pilots, and so on are really deleted?

5 comments:

Anonymous said...

All communication in and out of White House is monitored in a digital state, all telephone calls, emails. Wireless or not. With in 5 seconds, after the Clark was telephoned to support the that Iraq involved in 9/11. The White House knew who call and how long the call was. Your digital information is not protected by US Constitution except with the blessing of Turd Blossom!

airJackie said...

Ask a Hacker. If you don't know one there are millions of kids who can get information in outer space. These idiots are so stupid. notice how the young people around the world know computers better then anything. A kid living in a country that has nothing used a computer in a shack and brought down the US government computer. Hackers rule cyberspace.

SP Biloxi said...

Anon,

I appreciate your comment about the communication in and out the White House. Most folks are not aware the line of communication and the technology. You are right that all forms of communications are being monitored whether a person is wireless or not. And information can be recovered. But, the White House is simply pulling the wool over the public eyes on the "dog ate my homework" theory. And yes, everyone's digital imformation and personal information is not protected. That is why there are so many class action lawsuits in this country and personal information in the hands of a third party or being outsourced.

Yes, Jackie, with a lot of intelligent hackers out there, I am sure many of them are trying to figure out how to retrieve those WH "missing" emails.

jan said...

http://www.theregister.co.uk/2000/07/18/missing_white_house_emails/

SP Biloxi said...

Jan,

Thanks for sharing that 2000 article.

Two former White House computer consultants testified Friday that the lost messages could have been recovered months ago if the White House had simply tried, with a modicum of sincerity, to get them.

Earlier this year the White House claimed that thousands of email messages, including some from Presidential hopeful Al Gore's office, had been lost to a 'computer glitch'. The messages were therefore not reviewed by White House lawyers to determine whether or not they should be turned over to investigators. Suspicions that the emails are in some way damning have been irrepressible ever since.


History repests itself in this csse again...