I have seen this happen at home. My son was browsing the internet and misspelled the URL for cartoon netowrk as www.cartonnetwork.com and wound up in the spiral of porn site pop-ups. It took me a couple of hours of visiting these sites from a safe computer to determine what had happened (at which I had to appologize to my son for fussing at him), and to get the various java scripts and such. I do not understand how an "expert" would not know how to do this, and it leads me to question how well the defense tried to fight this. Given some time and access to the machine, it should have been posible to reconstruct most of the events of that time period, assuming the computer was retrieved soon enough after the event occured.

meh

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/434/34320#34320