News for hackers. Stuff that matters.

A comment on Man Who Refused to Decrypt Hard Drives Still in Prison After Two Years. Parent comment

Re:Man Who Refused to Decrypt Hard Drives Still in Prison Af... by ja27 on Saturday September 02, 2017 @09:16AM (#15155816)
My understanding is that they know the file hashes and path they were written to from logs of the tool he used to download them.
[ Parent | on HN ]
Re:Man Who Refused to Decrypt Hard Drives Still in Prison Af... by lafay on Saturday September 02, 2017 @10:49AM (#15156225)
Yes, this. Whatever was used to share or transfer the files generated a cleartext log with MD5 hashes, which was written somewhere other than the encrypted volume.
[ Parent | on HN ]