On Fri, Apr 23, 2004 at 05:06:44PM +0200, Eugen Leitl wrote: > Pulling the power is the exact wrong thing to do if it's a CFS requiring a > passphrase at startup. > > Does anyone know what the default procedure is when hardware is being seized > (threat model=knuckle-dragger/gumshoe)?
This might have a clue. Been a while since I read it, though. http://www.cybercrime.gov/s&smanual2002.htm -Declan
