I might pop it over to the beast and give it a go on that (if were getting into PC wars… ) - Win 7 Ultimate 64bit, Intel Xeon 3.00GHz, 12GB RAM! Should work on that! lol
Oh god I hope not, with what I posted I feel like that poor b****r in Crocodile Dundee
"That's not a PC, THIS is a PC !"
-P
haha, tis a fine PC… unfortunately a work PC and not my own for surfing and gaming!
I just installed iTunes and it opened up perfect. So it does work and thats on my XP laptop. So far the only gripe I have its the way it falls over without warning just because iTunes is not preinstalled.
I have my iPad here at work… but am a little afraid to use my new toy as a guinea pig for this software )
Write block the USB port that you plug the iPhone into and Bob's your uncle. 'Forensically sound' in the traditional sense.
Would you mind sharing how you go about write-blocking a usb port for iphone? I've attempted to do this using the registry hack, a tableau and the wiebetech in-line usb write blocker - none of them work. The registry hack doesn't prevent writing (i.e. I enabled it and was able to delete from and add data to the phone). The Tableau says "USB Device Not Supported" and the Wiebetech just freaks out, unable to keep a steady connection with the machine it's plugged into.
Would you mind sharing how you go about write-blocking a usb port for iphone? I've attempted to do this using the registry hack, a tableau and the wiebetech in-line usb write blocker - none of them work. The registry hack doesn't prevent writing (i.e. I enabled it and was able to delete from and add data to the phone). The Tableau says "USB Device Not Supported" and the Wiebetech just freaks out, unable to keep a steady connection with the machine it's plugged into.
Hold the (i)phone! I didn't know you could not write block an ipone… this is interesting now! (Sorry, I don't do many phones… going to Wyboston in Feb for my core skills in mobile phones… so yet to get hands on dirty with them) Plus we don't get many iphones in, usually crappy Nokia chinese knockoffs! lol
Its interesting info though, something to look out for… shows you can't assume anything!
Oh and I bit the bullet and plugged my iPad in to the software, not bad, nice folder view of everything!
Write block the USB port that you plug the iPhone into and Bob's your uncle. 'Forensically sound' in the traditional sense.
Would you mind sharing how you go about write-blocking a usb port for iphone? I've attempted to do this using the registry hack, a tableau and the wiebetech in-line usb write blocker - none of them work. The registry hack doesn't prevent writing (i.e. I enabled it and was able to delete from and add data to the phone). The Tableau says "USB Device Not Supported" and the Wiebetech just freaks out, unable to keep a steady connection with the machine it's plugged into.
Ah, in that case perhaps my post was a bit too glib; I would have thought that registry change method would have worked and that Windows wouldn't differentiate between USB devices for the purposes of write-blocking and enabling. If that's not the case, then apologies.
Ah, in that case perhaps my post was a bit too glib; I would have thought that registry change method would have worked and that Windows wouldn't differentiate between USB devices for the purposes of write-blocking and enabling. If that's not the case, then apologies.
Yeah, I thought it would have worked the same as well. To elaborate a bit, the phone I used to test it on is a jailbroken 3GS. I'm not certain but I wouldn't think the phone being jailbroken would affect whether or not the USB port is successfully write-blocked.
I would be interested to hear from others who have done work with iPhones. Is this just one of those things where there is no real way to write-block the phone; it's just an acceptable casualty of the analysis?
Hmmm… I understand how write-block the USB port of the examiner's PC. That will prevent writing from the PC to the iPhone.
But, how do you prevent the iPhone from making changes to herself when she notices she is connected to a PC through USB? After all, an iPhone is an other computer and monitors USB ports just as a PC does . . .
I have yet to be able to interact with a live 'intelligent device' without modifying it (albeit known ways).
I could be wrong on this, as I have yet to work on an iPhone. I am still thankfully stuck with Verizon "dummies".
write-block the USB port of the examiner's PC. That will prevent writing from the PC to the iPhone.
Well, no, that may not be the full picture. Think -> status unread SMS -> GSM0707/GSM0705 -> fetch SMS -> status unread SMS now status read SMS (I have used general statements regarding identifying and retrieving unread SMS text messages).
We are told, apparently that this is unpreventable.
how do you prevent the iPhone from making changes to herself when she notices she is connected to a PC through USB? After all, an iPhone is an other computer and monitors USB ports just as a PC does . . .
Perhaps the examination procedure needs to be changed to capture a 'before' and 'after'
I have yet to be able to interact with a live 'intelligent device' without modifying it (albeit known ways).
I think there is a general view that this is so.
I am sure though the die-hard write-blocker users and writer-blocker manufactuers would disagree with you.
This is a Schrödinger's cat.
To take a 'before' capture, we have to touch the device, but by touching the device it is now in the 'after' state.