±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 1 Overall: 35514
New Yesterday: 4 Visitors: 155

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Webinars

Physical Extraction Samsung Galaxy S8/S7 Active

Discussion of forensic issues related to all types of mobile phones and underlying technologies (GSM, GPRS, UMTS/3G, HSDPA, LTE, Bluetooth etc.)
Subforums: Mobile Telephone Case Law
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
Page Previous  1, 2 
  

jamie
Site Admin
 

Re: Physical Extraction Samsung Galaxy S8/S7 Active

Post Posted: Dec 15, 18 23:37

- TinyBrain
This forum is for professionals, not freeware surfers.


It is perfectly acceptable to use these forums to research whether or not low cost solutions to a particular problem exist. Please refrain from making comments such as this in future, thank you.  
 
  

TinyBrain
Senior Member
 

Re: Physical Extraction Samsung Galaxy S8/S7 Active

Post Posted: Dec 16, 18 00:01

In my understanding freeware surfers are not professionals. This forum is named in the subtitle

FOR DIGITAL FORENSICS AND EDISCOVERY PROFESSIONALS

Why are you so negative against me?  
 
  

passcodeunlock
Senior Member
 

Re: Physical Extraction Samsung Galaxy S8/S7 Active

Post Posted: Dec 16, 18 00:20

Many times cheap or free solutions can be excellent, I got nothing against those solutions! On the other hand, many things can't be done without money and time investment, a lot of knowledge, real work and sometimes pretty high technological laboratory costs. Who can't understand this, take a life!

- jamie
It is perfectly acceptable to use these forums to research whether or not low cost solutions to a particular problem exist.


@jamie: you are right, I fully support this way of sharing the knowledge, but lately there are too many unprofessional users around, without minimal forensic knowledge, but playing the "tough guy". Unfortunately this has only negative impact on FF Sad

@TinyBrain: all the (living or dead) professionals were newbies once, everybody needs the chance to learn. Thanks for supporting me, but please don't argue with jamie, he is not against you or anybody else, he just tries to keep a good balance here Smile
_________________
Apple passcode unlock + decrypted filesystem dump, Android user locks unlock + physical dump with decrypted userdata partition. We provide our services world-wide, but we reserve the right for choosing which tasks we take and which we deny! 
 
  

the_Grinch
Senior Member
 

Re: Physical Extraction Samsung Galaxy S8/S7 Active

Post Posted: Dec 17, 18 20:07

I think part of the issue is no matter the importance of the case sometimes the money will not be spent. Also, the higher ups want to see that all possible avenues have been exhausted before approving the expenditure. Final thing is you might still be able to make a case without the data on the device so once it is known that there is no other way than paying for the unlock/extraction they might say move on.

The other issue is whether or not those who unlock the device will testify in court. That's another added cost that has to be weighed in as well.

Not attacking anyone just laying out the issues that revolve around a case and what investigators tend to deal with.  
 
  

jaclaz
Senior Member
 

Re: Physical Extraction Samsung Galaxy S8/S7 Active

Post Posted: Dec 17, 18 21:24

- the_Grinch

The other issue is whether or not those who unlock the device will testify in court. That's another added cost that has to be weighed in as well.

And there is even a further one IMHO.
As passcodeunlock said, when dealing with this kind of "experimental" and "high technology" approaches, there is a certain level of risk on the integrity of the device/evidence:
- passcodeunlock
The processing is manual, not some click-forensics based stuff. A single mistake is enough to brick the phone and your data is gone forever.


Which poses two kinds of questions:
1) the reliability, "good name", etc. of the laboratory
2) the authorizations needed, once a laboratory has been chosen, to risk the procedure



In more traditional "wet forensics" the tests on evidence are usually categorized in two sets:
a. repeatable
b. non-repeatable <- usually - at least here in Italy - these are performed only at the presence of both prosecution and defense lawyers and experts[1] with a specific authorization by the Court.

In the case of an experimental method that has concrete possibilities to brick the phone and make data lost forever, extracting the data (which should be in theory a repeatable test/method) soon becomes a "possibly non-repeatable" method, and should be treated, to be on the safe side, definitely as a "non-repeatable" one.

jaclaz

[1] a typical example is tests (chemical, DNA, etc.) in cases where the amount of biological matter to be analyzed is enough to allow only one test
_________________
- In theory there is no difference between theory and practice, but in practice there is. - 
 

Page 2 of 2
Page Previous  1, 2