Security Incidents mailing list archives

Re: Annoy Those Sub7 Scanners.


From: Frank Knobbe <FKnobbe () KNOBBEITS COM>
Date: Thu, 31 Aug 2000 15:32:56 -0500

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

-----Original Message-----
From: Bill Royds [mailto:Bill_Royds () PCH GC CA]
Sent: Thursday, August 31, 2000 8:54 AM

In a seminar by our local law enforcement officers, it was
explained that logs
are valid evidence if  they follow some rules:

1>/ Kept in the normal course of business
2>/ Attested to veracity by at least two qualified people (2
signatures on
printouts, 2 signatures on CD).
3>/ Have been shown to be free from opportunity for tampering
(burned into CD's
for example).

Speaking of preserving them... On several occasions I had presenting
consultant and even law enforcement if they were aware or any case
where PGP was used to preserve and sign logs. Although everyone I
talked to liked the idea, they could not tell me if that would pass
in court or not. Does anyone here in this list have any info about
using PGP for evidence preservation?

Regards,
Frank


-----BEGIN PGP SIGNATURE-----
Version: PGP Personal Privacy 6.5.1
Comment: PGP or S/MIME (X.509) encrypted email preferred.

iQA/AwUBOa7A+ERKym0LjhFcEQIZagCguzNKwRY7woIADAsvAAY+ezz1WqoAoKko
9MPo8BIBDOPH/7k2An8x1x8f
=2fG6
-----END PGP SIGNATURE-----


Current thread: