News for hackers. Stuff that matters.

A comment on San Bernardino County tweets it reset attacker iCloud password at FBI's request. Parent comment

Re:San Bernardino County tweets it reset attacker iCloud pas... by munin on Saturday February 20, 2016 @03:38PM (#11141836)
the forensics programs (EnCase, FTK) have a lot of problems but they don't assume that the drive is "windows partitions" though it's possible that they don't deal with ZFS.

you would think that national level stuff would have people take more care, but if you're dealing with state or local police, they will have someone who has taken an 8 hours Encase or FTK class driving a GUI to gather evidence and if the tool doesn't support it, there's effectively no evidence to gather.

[ Parent | on HN ]
Re:San Bernardino County tweets it reset attacker iCloud pas... by ryanlol on Saturday February 20, 2016 @05:38PM (#11142306)
Yeah, I once had to explain to an officer what a known_hosts file is so they could send MLAT requests and release me from jail without risking that I would wipe (the already automatically wiped) servers myself when I got out.
[ Parent | on HN ]