DickPeake wrote:
Are we seriously saying that my TomTom Go Live 1005, which is packed full of information about where I have been, A to B itineraries that have been planned and sometimes deleted, what phone I have, etc., cannot be imaged or examined, forensically or otherwise?More or less, yes. <img src="images/smiles/icon_sad.gif" alt="Sad" title="Sad" />
The bad news is that Android is going the same way (using another approach, but to the same effect).
Having the "mass storage device" of the thingy accessible as "mass storage device" was evidently too simple and straightforward for the good engineers and programmers that deal with these devices.
Of course these devices can be imaged with chip-off (and possibly also with JTAG), but the chip-off while being a possibility for forensics is not a good replacement for simply connecting and get an image or accessing the files <img src="images/smiles/icon_wink.gif" alt="Wink" title="Wink" /> .
jaclaz
↧