Linux and Forensic Discovery

Max Pyziur writes "Found this on cryptome.org where Linux is cited in a DOJ document against Moussaoui (sometimes referred to as the "20th man"). FBI: Moussaoui E-mail Not Recoverable - January 1, 2003." An interesting read which gives some insight into how computer evidence is handled in court.

At least...

[Ironica]

...someone in the government seems to realize that Microsoft can't be trusted ;-)

Breaking News!

[chunkwhite86]

Linux is used by humans outside of the Slashdot community! Stay Tuned!

email from his pc

[grub]

Sept. 10, 2001

Zach,
We're going off flying tommorrow, hope to see you on the other side. Last one there gets the 70 ugliest virgins!

M. Atta

Re:email from his pc

[Anonymous Coward]

Last one there gets the 70 ugliest virgins!

So who did wind up getting the Slashdot editors?

You may assume anything you wish. . .

[kfg]

but according to NIST, and my own experince, such is not the case. Not only is dd cheaper by thousands of dollars than the "professional" apps made to do such things, but it's often *more* effective, and almost always easier to use.

At its heart it's just a simple copy command.

In fact, the dd tool is so simple, and simple minded, that it would be easier to write a simple graphical front end for it than to learn the GUI of exiting Windows apps designed to do the same thing.

I don't know quite how to break this to you, but *sometimes* language is the simpler, more powerful and more *intuitive* means of getting something across than pointing at a picture and grunting.

Unless, of course, your intellect hasn't yet advanced to that level of sophistication.

KFG

Re:CRC/SHA-1/MD5

[Henry V .009]

Oops...If they were prime, they would be easy to factor. You need to factor the products of some very large primes.

(The last post wasn't a mistake--it was my intentional FUD to keep the terrorist from figuring out RSA. Shhhh!)

". . . lawyers will argue over anything. "

[kfg]

Well duh. That's their *job.*

KFG

IP = Internet Provider, according to F B I

[Anonymous Coward]

R O T F L!

[Start Quote]--

The Internet Provider Address for University of Oklahoma PC 11 Computer

Next, standby counsel ask the Court to "[o]rder the Government to (A) explain the reason for the discrepancy in IP addresses for the UO PC 11 computer, (B) confirm that the UO hard drive produced to the defense in discovery (129.15.110.31) comes from the computer used by Mr. Moussaoui at the University of Oklahoma, and (C) confirm that Mr. Moussaoui did not use any other UO computer." Reply at 11. Simply put, a typographical error exists in the Lawler Affidavit submitted by the Government. The correct internet provider address for University of Oklahoma PC 11 computer is 129.15.157.31.

--[End Quote]

I don't know whether to laugh or cry that the security of our nation is in the hands of these FBI "experts". :(

Re:Secure File Deletion aka DeathStar

[Anonymous Coward]

I have a deathstar:- it ensures that you can't get your files back even if you wanted to after a random amount of time!! :P

Re:NIST Computer Forensics Tool Testing

[Crus7y]

Hee! Now you know why programmers hate to write documentation!