Re: [inbox] Re: Reacting to a server compromise

[Valdis.Kletnieks () vt edu]

On Tue, 05 Aug 2003 09:45:59 +0200, Michal Zalewski said:
> On Mon, 4 Aug 2003, Curt Purdy wrote:
>
> > Actually the traditionally accepted court evidence is real-time printouts o
f
> > data received by the syslog server.
>
> So what would stop anyone from replacing some of the printouts after the
> fact?

It's kind of hard to replace sheet 1,487 from a box of fanfold paper. :)

Attachment: _bin
Description: