Now that I understand it fully, I'll build a forensic analysis tool in Rust to recover prior versions of the database by reversing allocator operations.
Much information is leaked through the slack data in freed blocks, the string copying patterns, and the ordering of the free lists. I hope to be able to construct a tree of possible operations that could have produced a form letter database.
With this, I may be able to refine my estimate of when UNIX was requested by the U.
3/6