Can computers survive cross-examination?

TalkBack 11 of 12:

Next »

« Previous

• Thread View
• Flat View

Computer files can be modified!

Information on a computer cannot serve as an evidence because the information about an event can be modified after the event has ocurred. That means that information on the computer about an event can never be guaranteed to be actually an actual reflection of what the event was. The cause-and-effect relationships are not valid here. If a knife is found which was use to attack, which additionally has finger-prints, then it is evidence only because those finger-prints came when the event happened. If the prints were either removed after the event by the criminal, or if those finger-prints got created well after the event itself was over, then that knife is not an evidence.

For the computer memory, modifications are trivial. That is for example, the basis of DMCA (digital copies of songs are protected by the law, analog copies are not). On the very same line of reasoning, computer memory cannot serve as an evidence.

Regards - Alok

** My views do not necessarily reflect that of my employer **

Posted by: alokgovil   Posted on: 03/25/05 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• Reducing Server Total Cost of Ownership with VMware Virtualization Software VMware VMware virtualization enables customers to reduce their server TCO and ... Download Now
• The Impact of Virtualization Software on Operating Environments VMware Today's use of virtualization technology allows IT professionals to ... Download Now
• Five Steps to Determine When to Virtualize YourServers VMware Server virtualization isn't just for big companies. Entry-level ... Download Now