Re:Reliability of police mobile phone evidence questioned af...
by ycomnews2021 on Monday April 26, 2021 @08:41PM
(#26950268)
These are great points. Thanks!
Re:Reliability of police mobile phone evidence questioned af...
by WrtCdEvrydy on Monday April 26, 2021 @08:59PM
(#26950417)
Well, I'm a forensics researcher, so thank you.
If you'd like to know about the current issues around mobile device acquisition, you can check this out (https://ieeexplore.ieee.org/document/9116458) which contains the last paper I wrote on the latest issues on iOS and Android acquisitions.
Although I'd love to blame the big bad Cellebrite and the big bad police departments for junk science, computer forensics is quick to dismiss scientifically unsound items so I would expect a response from Cellebrite soon.
For mobile forensics, it's actually done through the built-in backup systems included in each of the major OS providers (Android/iOS).
This is a back and forth that has been ongoing since we began moving away from Hard Disks, as SSDs tend to manage their own internal state so an image of "an SSD" can change even if the underlying media hasn't changed as the SSD cell balancing can actually shift around deleted data or delay to clear certain cells.