TomTom forensics

The guys at GPSForensics.org are posting more and more info on their webpage regarding this very new and challenging field within IT forensics. Their latest is a very practical document on TomTom forensics.

WORM and hashing

Two interesting and IMO partly related postings were made in the previous days: Sandisk made a press-release about their new write-once-read-many (WORM) storage card, and Jesse Kornblum wrote a blog posting about updates and new features for his hashing tools.

Read more

Gmail account protection

How many cases have you done that involved possible unauthorized access to a webmail account? Probably quite a bit, if your client base and caseload is a bit similar to ours. Remember, this isn’t just about the average home user whose Hotmail account got hacked by guessing the secret question; there are numerous examples of people who (for a variety of reasons) use their personal webmail occassionaly or on a regular basis for receiving and sending workrelated e-mail.

These cases are often hard to solve: there are of course some tricks with using ‘digital traps’ to catch the person who is viewing the inbox, but such mechanisms don’t always work in the current world of spam-protection. And if you are doing bad things, you might be looking out for traps :) The webmail providers are often very reluctant to provide any information on when and from where an account was accessed, even when the requester is the owner of the account.

Read more