Re: [Full-disclosure] Disk wiping -- An alternate approach?

[Kurt Buff <kurt.buff@xxxxxxxxx>]

On Tue, Jan 26, 2010 at 00:11, Charles Skoglund
<charles.skoglund@xxxxxxxxx> wrote:
> This discussion is getting weirder and weirder. If an examiner finds
> evidence on YOUR computer / cell phone / usb disks / whatever, please do
> tell me how it's not necessarily yours? By claiming your computer has been
> hacked? You do know an examiner usually knows how to double-check your story
> for malicious code right? Or what are you guys talking about?
>
> My experience is that when I find the evidence, the person/s being
> investigated confesses quite rapidly.
>
> Cheers!

I must suggest your experience is quite limited - the case below is not unique:

http://en.wikipedia.org/wiki/State_of_Connecticut_v._Julie_Amero

Kurt

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/