RE: Full-disclosure Digest, Vol 8, Issue 3

["Cooper, Christopher" <Christopher.Cooper () ed gov>]

* Jason Coombs:  /* There is simply no way for law enforcement to know the difference between innocent and guilty 
persons based on hard drive data
circumstantial evidence. */
Jason,

Are you stumping for work as a defense expert?  I hope so, because I know several Law Enforcement Officers who would 
love to challenge your positions in court.

You are over gerneralization an issue and group of people. It IS possible for law enforcement or anyone examining data 
to know the difference between innocent and guilty persons based on hard drive data.  One simply needs to look beyond 
the general information provided to them from the software tools. Can you give me an example of a trojan, worm, or 
another program which has added the last USB device installed in the Windows Registry, or how about a program, worm, 
trojan - which caused something to be added to the last typed URL?

Off of Subject: Do you plan to fix the links from your site at: http://www.science.org/jasonc/writing.html - most of 
the links no longer exist or don't have your name on the published line. Thanks and cheers.

-C...

<<winmail.dat>>

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/