±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 34601
New Yesterday: 4 Visitors: 182

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Webinars

Wrong timestamp on Yahoo Mail email

If you require the services of a computer forensics or data recovery firm please post details of your requirements here. Other members will then be able to contact you with a quote for their services [NOTE: Forensic Focus assumes no liability whatsoever for the results of services provided].
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
Go to page 1, 2, 3, 4, 5  Next 
  

Incorrect timestamp on Yahoo Mail email

Post Posted: Mon Feb 05, 2018 12:24 pm

In 2015 I was convicted of a serious criminal offence and sentenced to years in prison. I am now out on bail pending appeal. In evidence was an email that I sent from Toronto in the ealry morning hours of Sept. 19, 2011 but bore a timestamp of 12:06 PM, which very much appeared to the court that the email was intended to create an alibi for me: it's a long story.

Is there any way to track down the true time that email was sent? I have the original headers from the email, which DOES bear a timestamp of 12:06. I have spoken to computer specialists who have insisted that the email must have been sent at the time of the timestamp.
It wasn't.

I am rapidly running out of time on this.  

freebird
Member
 
 
  

Re: Wrong timestamp on Yahoo Mail email

Post Posted: Mon Feb 05, 2018 12:43 pm

Are you sure it wasn't in UTC ?  

jasonlee
Member
 
 
  

Re: Wrong timestamp on Yahoo Mail email

Post Posted: Mon Feb 05, 2018 12:46 pm

That was taken into account: the timestamp is 12:06 PM. One proposed possibility is that it was sent via a very weak wireless signal which in fact it was! Whether this is what happened or some other thing, I need to know how to dig out the info in a manner that a court would consider proof.  

freebird
Member
 
 
  

Re: Incorrect timestamp on Yahoo Mail email

Post Posted: Mon Feb 05, 2018 12:52 pm

- freebird

Is there any way to track down the true time that email was sent?


Unless the email header was forged/fiddled with, the send date/time in the header is correct.

There may be an issue with timezone (and possibly also with DST - Daylight Saving Time or whatever it is called in the US, but this will only at the most offset one hour), check against:
www.lifewire.com/how-t...rs-1170524

Without the actual data in the header it is impossible to know if any of the above issues may be relevant.

Besides the specific e-mail, a complete report/examination of the device mass storage involved may provide a timeline of the usage, and either support the accuracy of that date/timestamp (and the way the data has been interpreted) or put it in doubt.

jaclaz
_________________
- In theory there is no difference between theory and practice, but in practice there is. - 

jaclaz
Senior Member
 
 
  

Re: Wrong timestamp on Yahoo Mail email

Post Posted: Mon Feb 05, 2018 12:58 pm

- freebird
That was taken into account: the timestamp is 12:06 PM.

We need the actual FULL DATA as is.
12:06 PM means NOTHING.
12:06 PM (+0000) means something, 12:06 PM (-0500) means something else.

See also reply on your duplicate thread:
www.forensicfocus.com/...c/t=16293/

jaclaz
_________________
- In theory there is no difference between theory and practice, but in practice there is. - 

jaclaz
Senior Member
 
 
  

Re: Incorrect timestamp on Yahoo Mail email

Post Posted: Mon Feb 05, 2018 1:00 pm

I would not be surprised to learn that the timestamp had been altered by police experts, if such a thing is possible: I suffer from no psychoses and why I consider such a thing possible is yet another long story.

I have the email headers, they take up 2 pages but there was no way to attach it to my posts.

I owned 2 computers at the time the email was sent, a PC and laptop. Over the years I was in prison (since Sept. 2011 until Feb 2016) the PC has disappeared but I have laptop and the drive has not been formatted.  

freebird
Member
 
 
  

Re: Incorrect timestamp on Yahoo Mail email

Post Posted: Mon Feb 05, 2018 1:13 pm

- freebird

I have the email headers, they take up 2 pages but there was no way to attach it to my posts.

Make SURE (and I mean REALLY SURE, DOUBLE and TRIPLE check this) that you "anonymize" them ACCURATELY, removing ALL occurrences of the Sender address (replacing it with - say - "[email protected]) and ALL occurrences of the Recipient(s) (replacing it/them with - still say - "[email protected]) .

Then copy and paste to - say - pastebin :
pastebin.com/
and post a link to the page.

jaclaz
_________________
- In theory there is no difference between theory and practice, but in practice there is. - 

jaclaz
Senior Member
 
 

Page 1 of 5
Go to page 1, 2, 3, 4, 5  Next