Spinal
MB Enthusiast
- Joined
- Sep 14, 2004
- Messages
- 4,806
- Location
- between Uxbridge and the Alps
- Car
- x254, G350, Duster, S320, Mach1, 900ss and a few more
I need a quick little debate...
There are many online services that offer to host data and access it real-time (e.g. UbuntuOne, DropBox, MobileMe, Live Workspaces, etc)...
From a forensics point of view; i.e. gathering evidence after something has gone wrong, what is the impact of these?
Traditionally, one would need to be able to seize a suspects laptop; then recover deleted files, and sift through the data to recover anything relevant...
In the cloud, this is more interesting... I'm guessing there may be data recovereable from temp files on the laptop, potentially the ISP and the backups of the cloud provider... but this would be in another country...
Any other ideas? Really, anything would be good as I can't think and need a small brainstorming session... but don't have anyone to drag into this
M.
There are many online services that offer to host data and access it real-time (e.g. UbuntuOne, DropBox, MobileMe, Live Workspaces, etc)...
From a forensics point of view; i.e. gathering evidence after something has gone wrong, what is the impact of these?
Traditionally, one would need to be able to seize a suspects laptop; then recover deleted files, and sift through the data to recover anything relevant...
In the cloud, this is more interesting... I'm guessing there may be data recovereable from temp files on the laptop, potentially the ISP and the backups of the cloud provider... but this would be in another country...
Any other ideas? Really, anything would be good as I can't think and need a small brainstorming session... but don't have anyone to drag into this
M.
