3 ms·
Just to make sure I understand correctly... the most compelling piece of evidence for you is the timestamps on the files? Something that's not only trivial to
by jonas21 5y ago
Just to make sure I understand correctly... the most compelling piece of evidence for you is the timestamps on the files? Something that's not only trivial to fake, but also would have been overwritten if the files were copied between systems between being stolen and being leaked.
- cronix 5y agomore compelling != most compelling
- jasonlotito 5y agoContext matters. If there are two cases, and one is more compelling than the other, then that one is also most compelling.
- emodendroket 5y agoI would say that attribution is just extremely difficult to do at all, but there's not much money in giving that answer to your clients.
- fumer 5y ago> Just to make sure I understand correctly... the most compelling piece of evidence for you is the timestamps on the files? If I understood it correctly, the most compelling evidence was the real data transfer rate of those emails, deduced from the file timestamps, which ruled out their provenance from the server. > Something that's not only trivial to fake (...) Well, in this case that would go against the original accusation, therefore it would either be pointless or the explanation would require a conspiracy with double agents planting fake compromising evidence.