Interestingly a similar point was raised in an unsuccessful Daubert challenge to my testimony in a Federal court proceeding. Opposing counsel tried to use comments and questions posted on this and other forums to challenge my admissibility as an expert, in particular, the "Has anybody ever see this…?" kind of question.
Ah, the joys of the U.S.' "adversarial legal system!" Had you not been posting to this or other fora, opposing counsel would have used that to impugn your "expert" status, ie, "So you are telling this Court that you don't participate in professional discussions in the online community??? Why not?"
All part of The Game. Throw everything at the Opposition and see if anything sticks. roll
"All part of The Game. Throw everything at the Opposition and see if anything sticks. roll"
If your life was on the line, would you not ask for and expect nothing but the same? If your attorney and examiner didn't give everything they had to a case then why even try it?
I agree no one has seen it all.
Along those lines I also say that too many people try to be Computer Forensic experts, Pen testing experts, Network Forensic experts, Software Coding experts, Mobile Forensic experts, etc. RATHER than just picking an area and getting all the information they can get in that area. By taking what someone says online and using it in a trial they are merely going after what we see a lot on forums. (this is NOT a statement against seanMCL or posters to this thread) is people who don't know the answers to a question or more to the point the answers to several questions in a case, maybe not even the fundamental things like acquisition, internet time and date differentials, and other things.
People that ask how to acquire a drive, then where do I find such and such, how to I answer the questions in court (we've all seen these questions) are the reason that question is asked in court.
IMHO it is very valuable to come to these forums, but only if you participate. Jamie has worked hard to get this going from nothing to the top 2 forums in the business. Experienced people will continue to offer help to inexperienced people and in turn the inexperienced people will become experienced and pass on their knowledge.
Interestingly a similar point was raised in an unsuccessful Daubert challenge to my testimony in a Federal court proceeding. Opposing counsel tried to use comments and questions posted on this and other forums to challenge my admissibility as an expert, in particular, the "Has anybody ever see this…?" kind of question.
My response was to the effect that there is no one out there who has seen it all and that advancing knowledge requires sharing of experiences and observations. I noted that asking questions on a forum such as this is no different than a curbside consult.
In supporting my position the judge ruled that participation in fora such as these, even when the identities of all of the participants are not known, is a legitimate form of professional development as long as the expert's opinion is based upon the evidence and not the result of a posting on a forum.
Greetings,
I wrote the original blog post and put up a reply today, which can be found here
http//
Take home point - push button forensics tools and inexperienced examiners can both be valuable resources *when managed properly*. Any tool, wielded inappropriately, can create havoc but when managed appropriately can add significant value.
-David
I have nothing against 'push button' , other than by whom & how they might be used.
Specifically I can show that forensic tools are quite capable of destroying evidence, even when used 100% 'correctly' , infact such behavior is slap bang in the centre of my research.
C.
>>snip
Specifically I can show that forensic tools are quite capable of destroying evidence, even when used 100% 'correctly' , infact such behavior is slap bang in the centre of my research.C.
Perhaps you would care to elaborate on this for the gathered assembly?
😯 LOL,
And feed the lawyers , absolutly NO WAY…, not unless I am 100% sure of to whom I am releasing the information.
Thats is an improvement to the FF website
two forums , one absolutly private, and the other public. (or 1 forum with a security rating option, to block information)
The other thing that this site needs is a 'secure' place to uploaded material, such as reports. Then maybe just maybe I can upload a couple of 'interesting' PDF research reports, for 'peer review' and feed back, (i really would like some peer review) but I really do not want the material publically circulated.
C.
Don't come onto a forum and spout that you can do something and then invoke the separate forums issue. There are plenty of black hats, cops, feds, and private people who post everything on here and don't make such claims.
I'm sorry but I find your tone completely unacceptable and some what childish.
C.
And…relax everyone -)
As most regulars will know, this issue comes up now and again. For the sake of clarity, and as discussed previously, there are no plans to create a separate/secure forum or other area.
Jamie