4 ms·
There's a huge difference between the chain of custody and the methods used to extract information. If I'm allowed to use a classified system to extract inform
by EdHominem 10y ago
There's a huge difference between the chain of custody and the methods used to extract information.
If I'm allowed to use a classified system to extract information (say from an encrypted drive) I could really just be creating that information instead. The defendant can't or won't decrypt the drive so they can't dispute the claim.
- tptacek 10y agoI guess I don't understand how this isn't trivially true of the simplest log file introduced into evidence.
- EdHominem 10y agoLog files are cleartext. We can both see what it says on day 1 and that won't change. But if there's a classified evidence-gathering program it can be upgraded to "find" whatever they want at any date.