Forensic Analysis Of Geohot’s Hard Drives In Dispute

Discussion in 'User Submitted News' started by GH0ST, Mar 1, 2011.

  1. GH0ST
    OP

    Member GH0ST Your Hero is a Ghost

    Joined:
    Dec 17, 2006
    Messages:
    924
    Location:
    I was here... before...
    Country:
    France
    Forensic Analysis Of Geohot’s Hard Drives In Dispute


    For SCEA, Mr. Hotz?s proposal is unacceptable. First and foremost, basic forensic evidence protocol dictates that images of the storage devices be made before any search or analysis is performed so that the storage device is preserved in its original form...
    /... Mr. Hotz claims that neither the original impoundment order or his latest proposal require imaging. However, under either scenario, an examination of the storage devices is still necessary to verify the existence of the circumvention devices or information relating to the circumvention and to determine whether any such information has been deleted or transferred to other storage devices. Prior to conducting any of this analysis, imaging of the storage devices is required.


    Source PSX-Scene
    Source Consoledemon
     


  2. Rydian

    Member Rydian Resident Furvert™

    Joined:
    Feb 4, 2010
    Messages:
    27,883
    Location:
    Cave Entrance, Watching Cyan Write Letters
    Country:
    United States
    Okay, so when we buy something from them we don't own it and aren't allowed to research it...

    But when they get hold of our stuff they have the right to dive into it and make copies?
     
  3. KingVamp

    Member KingVamp Great... AETHER!

    Joined:
    Sep 13, 2009
    Messages:
    9,590
    Country:
    United States
    If Sony made those hard drives it isn't his. [​IMG] But seriously.



    By Sony yes. "You violated our stuff(Sony Made Stuff).Your rights are lost." :/
     
  4. Jamstruth

    Member Jamstruth Secondary Feline Anthropomorph

    Joined:
    Apr 23, 2009
    Messages:
    3,456
    Location:
    North East Scotland
    Country:
    United Kingdom
    Pretty sure they're not allowed to hold onto backups. I understand they're allowed to inspect the data but once the court case is over they shouldn't be allowed access to his HDDs unless they've won. Even then its a bit off.
     
  5. Giga_Gaia

    Member Giga_Gaia Shinigami

    Joined:
    Sep 12, 2006
    Messages:
    1,281
    Location:
    Quebec, Canada
    Country:
    Canada
    All of this is assuming there is something left on his hardrive for them to find. Any sane person would have made a secure backup somewhere and just deleted everything off his hardrive. They took a while to get TRO granted, so Geohot is pretty stupid if he didn't do that.

    No matter what kind of thing they would try to use to recover files, it's pretty easy to leave no trace behind.
     
  6. shakirmoledina

    Member shakirmoledina Legend

    Joined:
    Oct 23, 2004
    Messages:
    6,611
    Location:
    Dar es Salaam
    Country:
    Tanzania
    lol its copyright all over again... like the request for acquiring info from twitter and youtube, i think the court will rule against sony
     
  7. Jamstruth

    Member Jamstruth Secondary Feline Anthropomorph

    Joined:
    Apr 23, 2009
    Messages:
    3,456
    Location:
    North East Scotland
    Country:
    United Kingdom
    If he hid it he'd be signing his own defeat. He's hidden files he's saying are legal. He's known to have been working on this stuff so it would be surprising to find a wiped HDD. Even then HDDs can have a LOT of data recovered even after being completely formatted etc. Innocent men don't run.
     
  8. Eckin

    Member Eckin GBAtemp Regular

    Joined:
    Mar 14, 2009
    Messages:
    216
    Country:
    Brazil
    That sounds a little bit fcked up.
     
  9. TheDarkSeed

    Member TheDarkSeed I'm a pretentious sack of shit

    Joined:
    May 11, 2009
    Messages:
    1,180
    Location:
    Carson
    Country:
    United States
    well weather or not they get permission, sony will try and find some loophole to try and get the images.

    besides, sony already has the drives, they probably already have the images but aren't saying anything about it.
     
  10. Giga_Gaia

    Member Giga_Gaia Shinigami

    Joined:
    Sep 12, 2006
    Messages:
    1,281
    Location:
    Quebec, Canada
    Country:
    Canada
    If their little forensic can't get around a little encryption themselves, then Sony don't deserve what's inside.
     
  11. Law

    Member Law rip ninjacat that zarcon made me

    Joined:
    Aug 14, 2007
    Messages:
    4,132
    Location:
    ‭jerkland
    Country:
    United Kingdom
    The reason behind having to make an image before analysing the drive is so Geohot can't turn around and say "They planted that there".

    Standard fucking procedure.


    edit: and note that it's the third party company. Not Sony themselves.
     
  12. Veho

    Global Moderator Veho The man who cried "Ni".

    Joined:
    Apr 4, 2006
    Messages:
    8,442
    Location:
    Zagreb
    Country:
    Croatia
    Well yeah. It's not about what they can find there, it's about how much of it is admissible in court.
     
  13. _Chaz_

    Member _Chaz_ GBAtemp's Official Mook™

    Joined:
    Sep 12, 2009
    Messages:
    5,623
    Country:
    United States
    You do know that deleting something doesn't erase it from the drive, right?
    How do you think file restore programs work?
     
  14. twiztidsinz

    Member twiztidsinz Taiju Yamada Fan

    Joined:
    Dec 23, 2008
    Messages:
    4,981
    Country:
    United States
    Sony doesn't have them, a 3rd party named TIG does.
    It would be a HUGE conflict of interest if the party who was accusing someone was also the ones searching for and providing evidence.
     
  15. M[u]ddy

    Member M[u]ddy GBAtemp Fan

    Joined:
    Sep 4, 2009
    Messages:
    495
    Location:
    NRW
    Country:
    Germany
    There are enough programs, that can overwrite the empty disk space with random numbers.
     
  16. Oveneise

    Member Oveneise GBAtemp Advanced Fan

    Joined:
    Nov 22, 2010
    Messages:
    517
    Location:
    Minnesota
    Country:
    United States
    Greedy, greedy, greedy! Just get what info you want and leave it at that.
     
  17. _Chaz_

    Member _Chaz_ GBAtemp's Official Mook™

    Joined:
    Sep 12, 2009
    Messages:
    5,623
    Country:
    United States
    That information can still be retrieved by professionals.
     
  18. twiztidsinz

    Member twiztidsinz Taiju Yamada Fan

    Joined:
    Dec 23, 2008
    Messages:
    4,981
    Country:
    United States
    There are secure removal tools, that either completely remove all the information or make it so corrupted you couldn't recover it even knowing what should be there. While the data would be gone, it would be obvious what happened, so there's that whole "Tampering with Evidence" thing...
     
  19. Giga_Gaia

    Member Giga_Gaia Shinigami

    Joined:
    Sep 12, 2006
    Messages:
    1,281
    Location:
    Quebec, Canada
    Country:
    Canada
    Of course I know. By deleting something, I mean make it impossible to restore it in any way. It's pretty easy.
     
  20. Laughing Stock

    Member Laughing Stock GBAtemp Regular

    Joined:
    Nov 18, 2010
    Messages:
    107
    Country:
    United States
    Wow. Is Geohot being a chunky monkey again? This is why I don't support him.
     

Share This Page