Recovering a deleted image

B

balanga

Is there any way to recover a deleted image that was displayed in something like Google chat?

Would that image still remain in the computer's cache somewhere?
 
balanga said:
Is there any way to recover a deleted image that was displayed in something like Google chat?

Would that image still remain in the computer's cache somewhere?
Click to expand...
possibly...but without details and timeline I can't make a concrete assertion about it. Think about it...mozilla browsers save a huge cache on the system disk so most webpage graphics are saved until they time out. Why would google chat be any different? You need to put on your computer forensics hat and go dumpster diving.
 
it depends on where the image is originally coming from and how it is hosted, it would be easier to ask the person to provide the original image.
 
There is a concept of 'local storage' now for websites which they control, so the stuff is deletable from their side, and not merely pictures cached by the browser somewhere on the disk.

Whatsapp web for instance does decryption on the fly because of their e2e and whatever data firefox downloaded is unusable unless you can peek into the local storage and extract the key from there. A browser will happily purge a lot of this cache as you might notice if you scroll back into history a lot.

Google isn't end to end encrypted so the data transmitted should be plain after it has been SSL decrypted by the browser and there is realistic probability to dig it out.

Are you using Firefox? about:cache , and explore further. You can also fire devtools view over the google chat session and see whats in the local storage.
 
Bash: 
find . -type f \( \
    -iname "*.jpg" -o \
    -iname "*.jpeg" -o \
    -iname "*.png" -o \
    -iname "*.gif" -o \
    -iname "*.bmp" -o \
    -iname "*.tif" -o \
    -iname "*.tiff" -o \
    -iname "*.webp" -o \
    -iname "*.heic" \
\)
 
You must log in or register to reply here.
Back
Top