±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 36434
New Yesterday: 0 Visitors: 137

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

Iphone consilidated.db information

Discussion of forensic issues related to all types of mobile phones and underlying technologies (GSM, GPRS, UMTS/3G, HSDPA, LTE, Bluetooth etc.)
Subforums: Mobile Telephone Case Law
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
Page Previous  1, 2 
  

kexan
Newbie
 

Re: Iphone consilidated.db information

Post Posted: Nov 30, 10 18:41

thx for the info guys! We´re currently comparing it to celltower info to specify the time.  
 
  

rh78
Newbie
 

Re: Iphone consilidated.db information

Post Posted: Jan 24, 11 12:34

I have also been wondering what the relevance of the timestamp is. I recently found over 60,000 locations made up of both cell and wi-fi locations. I noticed that the timestamps were batched and wondered if they are the time that they are stored.

I don't seem to be able to get a straight answer about this.

Does anyone have a definate answer about them?

Thanks,  
 
  

CaptainF
Senior Member
 

Re: Iphone consilidated.db information

Post Posted: Apr 26, 11 23:38

I would be very, very cautious around trying to use these positions as evidence until further research has been carried out around how the contents of consolidated.db translates into real life usage.

I keep using my experience as an example but I think it is the easiest way of getting my point across about the need for thorough research into the contents of this file.

I restored my iPad to baseline iOS and had not locations in consolidated.db. I turned location services OFF and placed the iPad in Airplane Mode. I connected the iPad to a new wireless access point not indexed by Google/Skyhook etc databases. By Simply joining this access point my iPad downloaded a significant amount of locations into consolidated.db.

Included in the consolidated.db file were wifi access points from all over the city in which I work and cell towers from over 22KM away.

I had never left my office with the device or been within credible range of the access points or cell towers.

Test it for yourself and you will see what I mean, this testing was carried out using iOS 4.3.1 on iPad 1.  
 

Page 2 of 2
Page Previous  1, 2