Thread (10 messages) 10 messages, 5 authors, 2022-01-29

Re: hardware recovery and RAID5 services

From: anthony <hidden>
Date: 2022-01-23 00:20:51

Looks like one of the first things I need to do when my raid testbed is 
up and running, is to set up a disk drive with dm-integrity --no-format, 
and see if I can dd successfully to it.

IFF that works, you'll then be able to just add it straight back in to 
the array, and running an integrity check will trigger a read error on 
anything that couldn't be recovered.

But there's no way I could recommend that at the moment, seeing as I 
have no idea whether or not it will actually work, even though I think 
it should.

Cheers,
Wol

On 22/01/2022 22:23, Phil Turmel wrote:
Hi David, et al,

The principle of "My Hard Drive Died" is Scott Moulton, a highly 
respected member of the forensics and white-hat scene here in the 
Atlanta Metro Area.

https://myharddrivedied.com/

That said, I highly recommend copying the disk showing read errors onto 
another disk, keeping the log of sectors replaced by zeros. Then 
performing a file by file backup from the degraded array, using the copy 
instead of the troubled drive.

*After* you recover what you can, examine the replaced sector list and 
back-calculate what files, if any, were affected.  This will give you a 
limited and less expensive task to pay experts to solve.  Or carry on 
with whatever you ended up with.  I think your odds are good.

And yes, the pros are not cheap.

On 1/22/22 9:23 AM, Roger Heflin wrote:
quoted
 From the recovery I know about in the last 3 years, it was several
thousand US$ per TB for the recovery.

On Sat, Jan 22, 2022 at 1:33 AM Wols Lists [off-list ref] 
wrote:
quoted
On 21/01/2022 19:34, Wols Lists wrote:
quoted
On 21/01/2022 19:31, Wols Lists wrote:
quoted
Secondly, I'm sure I've dealt with these people in the past, although
I can't vouch for them ...

https://www.vogon-computer-evidence.com/our-story/
OUCH! Having found that page (which is pretty much as I remember the
company), the rest of the web site looks like a cobweb site. So I don;t
know what's happened, but it doesn't look promising ...
Following up further yes it certainly looks like a cobweb site. The
company was taken over by Ontrack - I've seen a couple of
recommendations for them. But I have to re-iterate I can't vouch for
them, just they are a big professional company that does that sort of 
thing.
Phil
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help