Main Archive Page > Month Archives  > full-disclosure-uk archives

Re: [Full-disclosure] Disk wiping -- An alternate approach?

From: Kurt Buff <kurt.buff_at_nospam>
Date: Tue Jan 26 2010 - 19:07:10 GMT
To: full-disclosure <full-disclosure@lists.grok.org.uk>

On Tue, Jan 26, 2010 at 00:11, Charles Skoglund <charles.skoglund@bitsec.se> wrote:
> This discussion is getting weirder and weirder. If an examiner finds
> evidence on YOUR computer / cell phone / usb disks / whatever, please do
> tell me how it's not necessarily yours? By claiming your computer has been
> hacked? You do know an examiner usually knows how to double-check your story
> for malicious code right? Or what are you guys talking about?
>
> My experience is that when I find the evidence, the person/s being
> investigated confesses quite rapidly.
>
> Cheers!

I must suggest your experience is quite limited - the case below is not unique:

http://en.wikipedia.org/wiki/State_of_Connecticut_v._Julie_Amero

Kurt

---

Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/