Saturday
Nov062010
TWiL 85 Video — Node Your Privacy
Saturday, November 6, 2010 at 11:41AM Episode 85 Discussion Points. Video archives for this WEEK in LAW are available at TWiT.tv, on YouTube, and ODTV. TWiL is on Twitter and Facebook, if you're so inclined. Please also rate the show in iTunes.
Reader Comments (1)
Interesting listening to the justification used for discovery of computer evidence in this episode. As a computer forensic analyst of many years I can honestly say that, in the modern world of 2TB hard disks, no analyst personally views every file in a file system any more. To do so would take many months per examination. Examinations must be focussed, have a scope and get to the evidence as fast as possible.
It is of course possible to find evidence of other crimes during an examination, but I suspect that analysts are getting a sniff of something extra and following it up by changing the scope of their examinations to look for evidence in support of new leeds. It certainly does not hold water that every file is being examined by default. Every file may be searhed, but only for what is relevant ie. files containing keywords relating to a fraud for a fraud matter.
Paul