3 ms·
Yeh. You've touched on the inherent trade off of my job. If you have critical stuff on your computer then we will do our best to get a copy back to you asap (of
by ErrantX 17y ago
Yeh. You've touched on the inherent trade off of my job. If you have critical stuff on your computer then we will do our best to get a copy back to you asap (of course I can only talk for us).
The problem is not retaining the data. We work from images anyway. The issue is that if the drive contains evidence returning the original would probably kill the case in court. If a defence analyst questions the data - say accuses us of faking it - how do you prove that if it goes back to the suspect.
- sophacles 17y agoI totally understand that last part, about evidence custody stuff. I find it vaguely totemic, in that the "one true datathingy" must be preserved. (not on your part necessarily, on the whole court system in general). Good on you guys for getting data back to the suspect. I presume that if it all comes from Images anyway, it would be trivial for me to bring in a couple TB of NAS and say, "data please" and just get raw image dumps. I think to clarify my above stuff: Rules of evidence should state that images of the computer files in custody should be made available to suspects in some short amount of time after they are processed, due to the easy copy aspect of digital media, and the critical nature some data on the drives.
- ErrantX 17y agoYes I wish that happened more to be honest. Currently the issue is that it is a logistical nghtmare die to how large police forces work. Unfortunately we are on the outside so our suggestions mostly fall on deaf ears at management level :(