when the file gets overwritten, how different file systems handle that?
do they mark the old file as erased and create a new file or rather try to write the information to the same inodes? then what if there’s no space and the new file has bigger size? I guess it’s better to try to create a new file, in case of filesystems which avoid fragmentation.
in other words, is the probability to recover overwritten file smaller, than probability to recover erased file?
#filesystem #forensics #question #operating_systems #design