Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Forensics
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
Re: Forensic disk duplication modifies the evidence hard disk May 27 2005 06:18PM
Thierry Zoller (Thierry sniff-em com)
Dear Nick Willey,

Quoting the Paper :
"The value 64 was permanently recorded as the hard disks lifetime
maximum temperature, which is a sure sign that the hard disj has been
forensically duplicated."

I have 65C as max value, the HD was surely not "forensically
duplicated". A normal Scandisk or eve...

[ more ]  




 

Privacy Statement
Copyright 2009, SecurityFocus