How appropriate to find the laptop in an "untouched" condition. Save's taxpayers money, lawsuits and unnecessary pandemonium.

Case closed. -End of story. Everyone is happy and safe thanks to the quick response of Big Brother.

...

[ more ]  [ reply ]

http://www.digitalintelligence.com/products/firefly/...

[ more ]  [ reply ]

I'm not familiar with computer forensics. Does anyone know whether the forensics can determine whether the hard drive has been cloned? If yes, what should i look for?...

[ more ]  [ reply ]

"the data has not been accessed"

hahahaha.... yeah right :D

if they cloned the disk, the forensics-foo would know about it :P...

[ more ]  [ reply ]

I think it can not 100% asured that the data haven't been accessed as the harddisk could have been accessed while mounted readonly. Then there would be no evidence in the filesystem that the data was read....

[ more ]  [ reply ]

Who stole it ? and why ?

shouldn;t these questions be answered ?...

[ more ]  [ reply ]

using a write blocker and basic copy software, the data could have been copied to another disc and not show evidence of accessing the original data.

i find it unimaginable that an FBI forensic tech would go along with the statement quoted in the article....

[ more ]  [ reply ]

Sure. Data is safe and sound. And there's no suspect in custody. And the guy who turned it in on his good will _may not be eligible_ for the reward, so there's no money trail. And this has been announced publicly so the suspects they might have had have now scurried away like cockroaches when th...

[ more ]  [ reply ]

As a security instructor that teaches hacking and forensics, I have to say the FBI carefully worded their response. A professional would never directly access the data from the hard drive. They would clone the hard drive several times before returning the original.

I still feel the data was comp...

[ more ]  [ reply ]

Sounds just like a way to make the non-technical people feel safe and save the $$ they would have been forced to spend on monitoring that many people's identities. Everyone familiar with hard disk forensic cloning knows that the drive could have been copied with no evidence of access. There could ...

[ more ]  [ reply ]

Possibly there are 'other' protections in place such as a physical device that makes it obvious whether or not the hard drive has been tampered with or BIOS logging that details whether any harddrive protection such as native HDD encryption has been bypassed.

I'm not saying this notebook had any of...

[ more ]  [ reply ]

How do I know if the hard drive has been replaced in my computer. I have found my husband producing porn websites and he is a technical supervisor. I think he already replaced the hard drive, but need proof. ...

[ more ]  [ reply ]