±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 36105
New Yesterday: 7 Visitors: 82

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

Screen Resolution Forensics

Computer forensics discussion. Please ensure that your post is not better suited to one of the forums below (if it is, please post it there instead!)
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
Page 1, 2  Next 
  

zikmik
Member
 

Screen Resolution Forensics

Post Posted: Aug 26, 11 15:25

Hi,
I made php IP Logger for locating forum members IP (I'am not admin of the forum), with capability to capture screen resolution.
Can screen resolution information (sample 1440x900) be used to determinate is felon using standard pc or laptop?!  
 
  

thall
Senior Member
 

Re: Screen Resolution Forensics

Post Posted: Aug 26, 11 16:42

What if there was a user with a 17" Laptop with a high end graphics card running 1920x1080 and a user with a 15" monitor connected to an older machine running 800x600.

Vice versa.

You can't associate the type of machine on screen resolution realistically its too much of a gamble imo.  
 
  

Passmark
Senior Member
 

Re: Screen Resolution Forensics

Post Posted: Aug 29, 11 03:49

Strange for a web site forum to record screen resolution of the members. This is not something that is normally passed from a browser to a web server. Are you sure you are not just looking at the size of the browser window.

It is technically possible via Javascript however to get the screen size. I just tried it on my machine here, but Javascript got the wrong answer. It failed to take in account dual monitors. So I wouldn't trust it values too much.  
 
  

Beetle
Senior Member
 

Re: Screen Resolution Forensics

Post Posted: Aug 29, 11 05:18

Right now I am using an iPad to view your post. What screen resolution does your software give you?

I am not sure of the utility of this. What if someone was using a VM? Also some laptops have screen resolutions similar to smaller monitors. I don't think such information as screen resolution can reliably tell you anything probative.  
 
  

zikmik
Member
 

Re: Screen Resolution Forensics

Post Posted: Aug 29, 11 10:44

This project is taken very seriously, so on technical side speaking it's credible.
Capturing screen resolution is added beside User Agent String and some other features
for easier locating and pointing on felons participating on various forums.

Since our script if confidential, I can only answer to your question about screen
resolution by giving you this sample code:

<script language="javascript">
alert('Your resolution is '+screen.width+'x'+screen.height);
</script>

To give you general idea what our script is capable to do visit:

browserspy.dk

only as a guideline!  
 
  

twjolson
Senior Member
 

Re: Screen Resolution Forensics

Post Posted: Aug 29, 11 11:14

- zikmik
Can screen resolution information (sample 1440x900) be used to determinate is felon using standard pc or laptop?!


You can make guesses, about screen size, but that won't tell you if the screen is connected to a laptop or a desktop. If I have a laptop with a 15 inch LCD, would you really be able to know that it isn't a desktop with a 15 Inch LCD for a monitor?

You could, possibly, make a better guess as to the age of a computer. Is it 1900x1200, or 800x600? No, it wouldn't be iron clad, but in extreme cases, you might be able to hazard a guess.

I wouldn't even introduce it in court, it is so easily changed by even the most casual users. On top of that, I can't, for the life of me, think of a situation where a case would possibly matter. If you are going to introduce computer forensics into the courtroom, you should have far more information than their screen resolution.  
 
  

Jonathan
Senior Member
 

Re: Screen Resolution Forensics

Post Posted: Aug 29, 11 13:27

- zikmik
Hi,
I made php IP Logger for locating forum members IP (I'am not admin of the forum), with capability to capture screen resolution.
Can screen resolution information (sample 1440x900) be used to determinate is felon using standard pc or laptop?!


It will give you an indication but on its own it wont stand up in court. You could capture much more data; the browser (including version), the operating system (including version, e.g., Android 2.2.1), version of Flash and Java the visitor is using and their screen resolution. All this information taken together may indicate the type of device the person accessed the web site from. Any single item taken on its own is not of good evidential value. My advice: rewrite your logger to capture the other readily available information.
_________________
Forensic Control
twitter.com/ForensicControl
St Bride Foundation, 14 Bride Lane, London, EC4Y 8EQ 
 

Page 1 of 2
Page 1, 2  Next