[brlug-general] forensics question: retrieving deleted data [related question]

[-k.]

I have a hypothetical for you guys. Let say a user has a file with some arbitrary amount of data
in it. The user saves the file, then at some points opens the file deletes all the data out of it
and saves it again (assume these are the only actions performed on this file). At this point is
the file recoverable (if even in part)? For bonus points, would this differ between file systems? 



-k.

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com