Forensic Analysis Of Geohot’s Hard Drives In Dispute

Discussion in 'User Submitted News' started by GH0ST, Mar 1, 2011.

  1. GH0ST
    OP

    GH0ST Your Hero is a Ghost

    Member
    924
    1
    Dec 17, 2006
    France
    I was here... before...
    Forensic Analysis Of Geohot’s Hard Drives In Dispute


    For SCEA, Mr. Hotz?s proposal is unacceptable. First and foremost, basic forensic evidence protocol dictates that images of the storage devices be made before any search or analysis is performed so that the storage device is preserved in its original form...
    /... Mr. Hotz claims that neither the original impoundment order or his latest proposal require imaging. However, under either scenario, an examination of the storage devices is still necessary to verify the existence of the circumvention devices or information relating to the circumvention and to determine whether any such information has been deleted or transferred to other storage devices. Prior to conducting any of this analysis, imaging of the storage devices is required.


    Source PSX-Scene
    Source Consoledemon
     


  2. Rydian

    Rydian Resident Furvert™

    Member
    27,883
    8,103
    Feb 4, 2010
    United States
    Cave Entrance, Watching Cyan Write Letters
    Okay, so when we buy something from them we don't own it and aren't allowed to research it...

    But when they get hold of our stuff they have the right to dive into it and make copies?
     
  3. KingVamp

    KingVamp Great... AETHER!

    Member
    10,027
    1,791
    Sep 13, 2009
    United States
    If Sony made those hard drives it isn't his. [​IMG] But seriously.



    By Sony yes. "You violated our stuff(Sony Made Stuff).Your rights are lost." :/
     
  4. Jamstruth

    Jamstruth Secondary Feline Anthropomorph

    Member
    3,456
    183
    Apr 23, 2009
    North East Scotland
    Pretty sure they're not allowed to hold onto backups. I understand they're allowed to inspect the data but once the court case is over they shouldn't be allowed access to his HDDs unless they've won. Even then its a bit off.
     
  5. Giga_Gaia

    Giga_Gaia Shinigami

    Member
    1,301
    40
    Sep 12, 2006
    Canada
    Quebec, Canada
    All of this is assuming there is something left on his hardrive for them to find. Any sane person would have made a secure backup somewhere and just deleted everything off his hardrive. They took a while to get TRO granted, so Geohot is pretty stupid if he didn't do that.

    No matter what kind of thing they would try to use to recover files, it's pretty easy to leave no trace behind.
     
  6. shakirmoledina

    shakirmoledina Legend

    Member
    6,611
    218
    Oct 23, 2004
    Tanzania
    Dar es Salaam
    lol its copyright all over again... like the request for acquiring info from twitter and youtube, i think the court will rule against sony
     
  7. Jamstruth

    Jamstruth Secondary Feline Anthropomorph

    Member
    3,456
    183
    Apr 23, 2009
    North East Scotland
    If he hid it he'd be signing his own defeat. He's hidden files he's saying are legal. He's known to have been working on this stuff so it would be surprising to find a wiped HDD. Even then HDDs can have a LOT of data recovered even after being completely formatted etc. Innocent men don't run.
     
  8. Eckin

    Eckin GBAtemp Regular

    Member
    216
    0
    Mar 14, 2009
    Brazil
    That sounds a little bit fcked up.
     
  9. TheDarkSeed

    TheDarkSeed I'm a pretentious sack of shit

    Member
    1,180
    45
    May 11, 2009
    United States
    Carson
    well weather or not they get permission, sony will try and find some loophole to try and get the images.

    besides, sony already has the drives, they probably already have the images but aren't saying anything about it.
     
  10. Giga_Gaia

    Giga_Gaia Shinigami

    Member
    1,301
    40
    Sep 12, 2006
    Canada
    Quebec, Canada
    If their little forensic can't get around a little encryption themselves, then Sony don't deserve what's inside.
     
  11. Law

    Law rip ninjacat that zarcon made me

    Member
    4,132
    217
    Aug 14, 2007
    ‭jerkland
    The reason behind having to make an image before analysing the drive is so Geohot can't turn around and say "They planted that there".

    Standard fucking procedure.


    edit: and note that it's the third party company. Not Sony themselves.
     
  12. Veho

    Veho The man who cried "Ni".

    Former Staff
    8,764
    16,155
    Apr 4, 2006
    Croatia
    Zagreb
    Well yeah. It's not about what they can find there, it's about how much of it is admissible in court.
     
  13. _Chaz_

    _Chaz_ GBAtemp's Official Mook™

    Member
    5,680
    378
    Sep 12, 2009
    United States
    You do know that deleting something doesn't erase it from the drive, right?
    How do you think file restore programs work?
     
  14. twiztidsinz

    twiztidsinz Taiju Yamada Fan

    Member
    4,981
    5
    Dec 23, 2008
    United States
    Sony doesn't have them, a 3rd party named TIG does.
    It would be a HUGE conflict of interest if the party who was accusing someone was also the ones searching for and providing evidence.
     
  15. M[u]ddy

    M[u]ddy GBAtemp Advanced Fan

    Member
    511
    47
    Sep 4, 2009
    Germany
    NRW
    There are enough programs, that can overwrite the empty disk space with random numbers.
     
  16. Oveneise

    Oveneise GBAtemp Advanced Fan

    Member
    517
    5
    Nov 22, 2010
    United States
    Minnesota
    Greedy, greedy, greedy! Just get what info you want and leave it at that.
     
  17. _Chaz_

    _Chaz_ GBAtemp's Official Mook™

    Member
    5,680
    378
    Sep 12, 2009
    United States
    That information can still be retrieved by professionals.
     
  18. twiztidsinz

    twiztidsinz Taiju Yamada Fan

    Member
    4,981
    5
    Dec 23, 2008
    United States
    There are secure removal tools, that either completely remove all the information or make it so corrupted you couldn't recover it even knowing what should be there. While the data would be gone, it would be obvious what happened, so there's that whole "Tampering with Evidence" thing...
     
  19. Giga_Gaia

    Giga_Gaia Shinigami

    Member
    1,301
    40
    Sep 12, 2006
    Canada
    Quebec, Canada
    Of course I know. By deleting something, I mean make it impossible to restore it in any way. It's pretty easy.
     
  20. Laughing Stock

    Laughing Stock GBAtemp Regular

    Member
    107
    0
    Nov 18, 2010
    United States
    Wow. Is Geohot being a chunky monkey again? This is why I don't support him.