Write Blockers need...
 
Notifications
Clear all

Write Blockers needed for floppy and cdrom?

9 Posts
8 Users
0 Reactions
1,569 Views
(@fayte)
Active Member
Joined: 17 years ago
Posts: 6
Topic starter  

Hey all,

Are write blockers for floppy and cdrom drives really needed? I know that floppy disks can write block themselves and cdroms are read only memory. Is any other software or hardware write blockers needed to have the evidence passable in a court of law and if so does anyone know of any good write blockers for floppy and cdrom?

thanks


   
Quote
hogfly
(@hogfly)
Reputable Member
Joined: 21 years ago
Posts: 287
 

The answer is no, you don't need a write blocker.


   
ReplyQuote
(@mobileforensicswales)
Reputable Member
Joined: 17 years ago
Posts: 274
 

Not needed but if you are super paranoid

CD drive - IDE write blocker

USB Floppy driver - USB Write blocker

But as said before, not needed D


   
ReplyQuote
(@larrydaniel)
Reputable Member
Joined: 17 years ago
Posts: 229
 

Since the write blocking mechanism on a floppy drive can fail, just attempt to do a write to a read only floppy to verify it, note that in your bench notes, then you can use the floppy drive without worries.


   
ReplyQuote
(@fayte)
Active Member
Joined: 17 years ago
Posts: 6
Topic starter  

thanks guys )


   
ReplyQuote
(@gtorgersen)
Trusted Member
Joined: 17 years ago
Posts: 70
 

Write block of usb floppy drives using a hardware write blocker is suspect. I have not been able to get it to work with the Tableau.


   
ReplyQuote
keydet89
(@keydet89)
Famed Member
Joined: 21 years ago
Posts: 3568
 

Are write blockers for floppy and cdrom drives really needed? I know that floppy disks can write block themselves and cdroms are read only memory. Is any other software or hardware write blockers needed to have the evidence passable in a court of law and if so does anyone know of any good write blockers for floppy and cdrom?

It looks to me as if you've answered your own question…


   
ReplyQuote
(@Anonymous 6593)
Guest
Joined: 17 years ago
Posts: 1158
 

Are write blockers for floppy and cdrom drives really needed? I know that floppy disks can write block themselves and cdroms are read only memory.

CD-ROMs may be read-only memory, but CD-ROM drives aren't. You can do quite a lot of reconfiguration of a CD-ROM drive, sometimes even mess it up irretrievably to someone who can't 'reset' it. For example, updating CD-ROM firmware is a possibility, though rather unlikely.

Thus, in the very unlikely event (?) that you image CD/DVDs with a CD/DVD device also associated with the case, you should probably be extra careful.


   
ReplyQuote
(@seanmcl)
Honorable Member
Joined: 19 years ago
Posts: 700
 

Be careful of the terminology, here. If the CD/DVD drive is incapable of writing, then you are likely OK. If not, then the disk, itself, could be closed or open (rewritable).

Most people use the term CDROM to refer to any or all of CD-R, CD-RW, DVD-R, DVD-RW, etc. If you are unsure, a write blocker or a drive without write capability might be essential.

For example, many of the digital photo disk kiosks use rewritable media and don't close them so that you can add photos, later. These would be risky.

Also (and I don't mean to preach, here), be sure that you don't have the Windows default autorun turned for CD/DVDs and USB devices. I had a case, once, where the suspect was also an expert on disk drives and when we seized his laptop it had a DVD on it. Examination of the DVD revealed that if it had been inserted into a Windows XP/2000/2003 system with the autorun enabled, it would have not only overwritten itself, but corrupted the host system as well.

As for floppies, while it is possible to mechanically write protect them using the write protect tab, I try to avoid any suggestion that I might have screwed up by using a USB-attached floppy and write protector. It might be overkill but it saves me having to go into details of how to write protect floppies in deposition.


   
ReplyQuote
Share: