Forensic Focus - Computer Forensics, Computer Forensic Training, Digital Forensics
LoginRegisterForumsColumnistsPapersEducationGraduatesReviewsInterviewsNewsletterJobsEventsBlogAdvertise
Search Forensic Focus
Custom Search

Find us on Facebook
Follow Forensic Focus on Twitter
Columnists
"I erred." "I was mistaken."
Craig Ball
Single Sign On
Simon Biles
Copyright and games console modification
Dan Gaskell
To GUI or not to GUI?
Chris Hargreaves
'Web 2.0' as evidence
Sean McLinden
Sometimes it’s all about timing
Sam Raincock
Avoiding common job application errors
David Sullivan
Scalability: A Big Headache
Dominik Weber
Graduate Recruitment

computer forensics graduate jobs

Main Menu
MY ACCOUNT
COMMUNITY
EMPLOYMENT
EDUCATION
RESOURCES
MISC
Follow Forensic Focus

Join newsletter

Join LinkedIn group

Follow on Twitter

Subscribe to news

Subscribe to forums

Subscribe to blog

Subscribe to tweets

Members' blogs

External feeds

Bookmark & share: Bookmark and Share

Computer Forensics Newsletter
Newsletter

You must be a
registered user
to receive our newsletter

Register Now!

Faraday Bags - Your thoughts please
Go to page Previous  1, 2, 3, 4  Next
Post new topic   Reply to topic   Printer Friendly Page     Forum Index -> Hardware
View previous topic :: View next topic  
Author Message
xx0033
Member


Joined: Jun 29, 2005
Posts: 95
Location: UK

PostPosted: Thu Oct 11, 2007 12:25 pm    Post subject: Re: Faraday Bags - Your thoughts please Reply with quote

mitch wrote:
I have Guidance's Bag.

Very Very good and imho worth the money. but only one problem with it its too small not wide enough.

mitch

What do you thin would be the perfect size? I can get them manufactured to any size or shape, so let me know as i believe it will benefit the community.

Regards,

Simon

_________________
Simon Steggles
www.disklabs.com
Back to top
View user's profile Visit poster's website AIM Address Yahoo Messenger MSN Messenger
mitch
Member


Joined: May 11, 2006
Posts: 93
Location: UK

PostPosted: Thu Oct 11, 2007 2:35 pm    Post subject: Re: Faraday Bags - Your thoughts please Reply with quote

Hi Simon

Hope you are well, have you seen the faraday bag from guidance

Mitch
Back to top
View user's profile
trewmte
Senior Member


Joined: Jan 25, 2007
Posts: 749
Location: UK

PostPosted: Fri Oct 12, 2007 12:36 am    Post subject: Re: Faraday Bags - Your thoughts please Reply with quote

Prior to faraday bags, what were we using? Well, actually, nothing at all. Because we didn't need anything.

The interpreted requirement of isolation from network only came in when some interpreted, following RIPA, that unlawful interception would occur if an SMS was received during examination. The interpretation requiring isolation was rolled out and extended to the seizure procedure.

The above interpretation was flawed because SMS text messages were not in the course of transmission once received at the handset. There are some who still try to suggest the interpretation for the need for isolation is required because of SMS text messages but the SMS argument about interception really holds no weight.

On another point, perhaps technically and legally, using a faraday bag, may amount to "interference with goods". Some examples:

1.0) because there is an implicit/explicit admission suggesting it's OK to push keys to examine the hanset whilst the handset is in faraday bag. Err NO it is not OK. The matter of avoiding interfering with goods has gone on long before the mooted idea of having faraday bags was raised. One characteristic of a polythene exhibit bag is its flexibility and the ability to manipulate the content/s of what is inside the bag.

For mobile phones: the handset should be switched OFF on seizure and left to the examiner in the lab to deal with gaining access for examination purposes:

1.1) having one or both party consent?
1.2) collateral intrusion?
1.3) examination within the specified time of seizure?
.
.
.
.
.
1.20) if others have pushed keys whilst handset is switched ON in faraday bag, which data does the examiner attribute to the seizing or investigating officer and which data originally resided there prior to seizure?

2.0) Placing a switched ON mobile into a faraday bag and blocking its signals, it has been said may amounts to interference where data alters in the memory devices (due to failed updates, personalisation etc) because of using the faraday bag.

3.0) Apparently, the new Wireless Telegraphy Act, it has been said, makes it unlawful to deliberately block signals other than in a specified manner at a fixed geographical location. Faraday bags and their contents are not fixed location, not specified and as pointed out to me the meaning of fixed location was not intended to imply the inside world of a faraday bag.

4.0) There are some who argue that putting switched ON handsets into faraday bags was to stop PIN/Password locks being activated because of power down, no longer holds weight since RIPA-III.

There is much more that can be said on this topic, but would make this thread too long.

Simon started out this thread seeking thoughts about the use of faraday bags. I raise the negative arguments about using faraday bags, because no one else did so. Also, no one mentioned anything forensic standards or about the integrity of data.
Back to top
View user's profile Visit poster's website
xx0033
Member


Joined: Jun 29, 2005
Posts: 95
Location: UK

PostPosted: Fri Oct 12, 2007 2:21 am    Post subject: Re: Faraday Bags - Your thoughts please Reply with quote

trewmte wrote:

Simon started out this thread seeking thoughts about the use of faraday bags. I raise the negative arguments about using faraday bags, because no one else did so. Also, no one mentioned anything forensic standards or about the integrity of data.

Trewmte,

You raise some good points and knowing your standing in the industry, they must be taken as such.
There are several key benefits in my belief, such as not losing time and dates. There is also the speed issue, (PUK codes can be difficult to get hold of. By bot turning the phone off, this is no longer an issue).

There are many more benefits of using a faraday bag, but I suggest I will be overstepping the advertising bounds of the forum!

Regards,

Simon

_________________
Simon Steggles
www.disklabs.com
Back to top
View user's profile Visit poster's website AIM Address Yahoo Messenger MSN Messenger
xx0033
Member


Joined: Jun 29, 2005
Posts: 95
Location: UK

PostPosted: Thu Oct 18, 2007 7:25 am    Post subject: Re: Faraday Bags - Your thoughts please Reply with quote

_nik_ wrote:
Guidance Software's Neutrino product also comes with a bag with window!
Anybody tried that out yet?

I have seen it. It looks impressive, but you have to use Guidance's kit to use it. It gets very expensive then.

My kit is cheap, totally flexible, (will fit into a pocket or utility belt), and is reusable.

Simon

_________________
Simon Steggles
www.disklabs.com
Back to top
View user's profile Visit poster's website AIM Address Yahoo Messenger MSN Messenger
xx0033
Member


Joined: Jun 29, 2005
Posts: 95
Location: UK

PostPosted: Thu Oct 18, 2007 7:28 am    Post subject: Re: Faraday Bags - Your thoughts please Reply with quote

trewmte wrote:

Simon started out this thread seeking thoughts about the use of faraday bags. I raise the negative arguments about using faraday bags, because no one else did so. Also, no one mentioned anything forensic standards or about the integrity of data.

Trewmte,

Your points are of course valid, I would however like to you move forward on the final point, that of integrity of data and forensic standards?

Simon

_________________
Simon Steggles
www.disklabs.com
Back to top
View user's profile Visit poster's website AIM Address Yahoo Messenger MSN Messenger
Rich2005
Senior Member


Joined: Dec 12, 2006
Posts: 191
Location: UK

PostPosted: Thu Oct 18, 2007 8:47 am    Post subject: Re: Faraday Bags - Your thoughts please Reply with quote

I'm not sure the PUK thing is such a problem - but your point would definately be valid for the handset codes which arent stored by the network, so would be totally reliant on nice mr badguy giving you it (ripa pt3?).
Although isn't that risking losing the date and time on the phone by being powered on until examination, ie totally flat battery from trying to acquire a signal at full power.
Swings and roundabouts i guess Wink
Back to top
View user's profile
xx0033
Member


Joined: Jun 29, 2005
Posts: 95
Location: UK

PostPosted: Thu Oct 18, 2007 8:56 am    Post subject: Re: Faraday Bags - Your thoughts please Reply with quote

Rich2005,

I agree, there are good and bad points. The only genuine downside that I can see is that the battery will probably loose its power quicker. However, the positive side is very simple to see.
Extra information on the phones
Immediate, network free access to the phones
A unique 'Traige system' for phones
The ability to re-use the faraday bags.
...
...
...

Simon

_________________
Simon Steggles
www.disklabs.com
Back to top
View user's profile Visit poster's website AIM Address Yahoo Messenger MSN Messenger
xx0033
Member


Joined: Jun 29, 2005
Posts: 95
Location: UK

PostPosted: Fri Dec 07, 2007 9:34 am    Post subject: Re: Faraday Bags - Your thoughts please Reply with quote

mitch wrote:
Hi Simon

Hope you are well, have you seen the faraday bag from guidance

Mitch

Mitch, I have seen the bag.

I have also been told that it only works as a faraday bag when it is powered up! If it is not powered up, then the bag doesnt inhibit the signal, therefore calls can get through. I know of this from a friend who told me about it happening to him!

Regards,

Simon

_________________
Simon Steggles
www.disklabs.com
Back to top
View user's profile Visit poster's website AIM Address Yahoo Messenger MSN Messenger
trewmte
Senior Member


Joined: Jan 25, 2007
Posts: 749
Location: UK

PostPosted: Fri Dec 07, 2007 2:06 pm    Post subject: Re: Faraday Bags - Your thoughts please Reply with quote

xx0033 wrote:
I never thought to mention, but the bag we have worked on has a window, enabling the investigating officer to have a look at the evidence too.

For those who are interested, please pm me and I will send them the technical specs over.




Regards,

Simon


Looking at reasonable observations, would the faraday bags come with a clear printed "Warning" on the front of the bag not to attempt to interrogate the switched ON handset whilst it is in the faraday bag and given the flexible nature of the bag that if the bag is not handled carefully anything placed on the bag could potentially cause:

- switching off the mobile phone
- pushing number keys
- activating key lock
- causing LND/LNR/LMN dialling attempts
and so on

?

As a suggestion, will you have a non-flexible sleeve to be placed over the switched ON handset before placing in the faraday bag to stop interrogation or accidental keys being pushed whilst the handset is in the bag?

I am at this stage thinking through how at first instance the person seizing the device and the person who puts the device into an exhibits bag (not always one and the same person) having to, at court, account for any changed data.
Back to top
View user's profile Visit poster's website
Display posts from previous:   
Post new topic   Reply to topic   Printer Friendly Page     Forum Index -> Hardware All times are GMT - 6 Hours
Go to page Previous  1, 2, 3, 4  Next
Page 3 of 4


Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Use of this website signifies your agreement to the Terms of Use/Privacy Policy available here.

All logos and trademarks in this site are property of their respective owner. The comments are property of their posters, all the rest © 2010 Forensic Focus


Interactive software released under GNU GPL, Code Credits, Privacy Policy
.: fisubsilver shadow phpbb2 style by Daz :: CPG-Nuke port by norseman :: ported to CPG-Dragonfly by jamin :.