What if child porn is encountered during research?

[irongeek at irongeek.com (Adrian Crenshaw)]

Thanks. It's pretty relevant to my current research on Darknets. You can
easily stumble on CP without much effort, and if you are tracking usage
which may break wiretapping laws anyway) it's easy to end up with a lot of
CP images by accident (or so Bob tells me). Interestingly, as Bob tells me,
most of the pr0n on Tor seems to be normal straight Asian, he assumes
because of China's strict obscenity laws (which, brings up the question, why
does China care about it's citizen looking at pr0n of consenting adults, it
should not be a religious thing for them).

Adrian




On Thu, Sep 10, 2009 at 12:02 AM, Michael Dickey <lonervamp at gmail.com>wrote:

> Personally, I think I would wipe it clean off. That's not something I'd
> like to ever mess with or run afoul of.
>
> But there may be value in forensically examining the files or the victims,
> so it might be best to report the incident and turn over evidence.
>
> This might make a good opportunity to introduce yourself to your local
> field office. :) Maybe someone in a local Infragard chapter can put you in
> touch with someone cyber-friendly at the local office?
>
> By the way, Adrian, excellent question!
>
>
> On Wed, Sep 9, 2009 at 8:49 PM, Adrian Crenshaw <irongeek at irongeek.com>wrote:
>
> > While doing research on anonymizing networks, what is the best policy to
> > follow concerning inadvertently captured contraband (child porn, copyright
> > infringing files, etc.)? In the case of child porn, the authorities should
> > be notified under normal circumstances, but with anonymizing networks the
> > origin of the files is hard if not impossible to determine. Would it be
> > correct to just wipe the data after research on the network is done?  As I
> > understand it, even having it on your hard drive because of peripherally
> > relevant research would be a crime.
> >
> > Adrian
> >
> > _______________________________________________
> > Pauldotcom mailing list
> > Pauldotcom at mail.pauldotcom.com
> > http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> > Main Web Site: http://pauldotcom.com
>
>
> _______________________________________________
> Pauldotcom mailing list
> Pauldotcom at mail.pauldotcom.com
> http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> Main Web Site: http://pauldotcom.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.pauldotcom.com/pipermail/pauldotcom/attachments/20090910/1a7fc442/attachment.htm