To report a botnet PRIVATELY please email: [EMAIL PROTECTED]
----------
On Fri, 8 Dec 2006 02:43:02 -0600 (CST)
Gadi Evron <[EMAIL PROTECTED]> wrote:

> Either they have a very interesting case, or they are newbies
> investigating these frauds for the first time, turning up with
> warrants at infected people's houses.

Or they are reasonably sure that there is evidence on that box that
they want to preserve.  Remember that such evidence would include the
ABSENCE of data related to the fraud - i.e. establishing for the court
that the IP shown in records elsewhere was not that of the guilty party.

Remember also that home-users whose computers are compromised are mostly
unaware of that, and may therefore be highly sceptical when a police
officer calls and tells them so; it's also quite likely, as a result,
that they would not voluntarily give access to the computer ... and if
police then went away to get a search warrant, they would immediately
wipe some part of the disk that they view as sensitive (but unconnected
with _this_ crime) and so destroy the evidence that is needed.

Based on our experience, the Police did the right thing here.

On Fri, 8 Dec 2006 09:01:25 +0000
"Paul Herring" <[EMAIL PROTECTED]> wrote:

> I'm sorry, but can they not get computer literate reporters these days?
> There is so many things wrong with that paragraph...

I'm sorry, but can we not get literate contributors here these days?
There is one glaring thing wrong with that paragraph... ;-)

-- 
Richard Cox <[EMAIL PROTECTED]>

_______________________________________________
To report a botnet PRIVATELY please email: [EMAIL PROTECTED]
All list and server information are public and available to law enforcement 
upon request.
http://www.whitestar.linuxbox.org/mailman/listinfo/botnets

Reply via email to