<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Computer Forensics and Privacy</title>
	<atom:link href="http://spinsafe.com/2010/01/16/computer-forensics-and-privacy/feed/" rel="self" type="application/rss+xml" />
	<link>http://spinsafe.com/2010/01/16/computer-forensics-and-privacy/</link>
	<description>Secure Remote Access</description>
	<lastBuildDate>Mon, 12 Dec 2011 20:31:39 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.2</generator>
	<item>
		<title>By: Anonymous</title>
		<link>http://spinsafe.com/2010/01/16/computer-forensics-and-privacy/comment-page-1/#comment-297</link>
		<dc:creator>Anonymous</dc:creator>
		<pubDate>Sat, 16 Jan 2010 17:36:10 +0000</pubDate>
		<guid isPermaLink="false">http://www.spinsafe.com/2010/01/16/computer-forensics-and-privacy/#comment-297</guid>
		<description>This book occupies a unique place in the literature of computer&lt;br&gt;forensics.  Most works in the field, such as Kruse and Heiser&#039;s&lt;br&gt;&quot;Computer Forensics&quot; (cf. BKCMPFRN.RVW), concentrate on documentation&lt;br&gt;of the investigation with a view to presentation in court.  The actual&lt;br&gt;mechanics of data recovery tend to be left to commercial tools.&lt;br&gt;Caloyannides demonstrates how to delve into corners of the computer in&lt;br&gt;order to actually get the data out.&lt;p&gt;At the same time, this work is inconsistent, on at least two levels.&lt;br&gt;The perspective flips back and forth between forensics and privacy,&lt;br&gt;alternately emphasizing how to find evidence, and how to hide&lt;br&gt;evidence.  The technology involved is the same, but the shifts in&lt;br&gt;viewpoint can be jarring to the reader.  At the same time, the depth&lt;br&gt;of technical detail can vary wildly.  At one point the book stops shy&lt;br&gt;of telling you how to undelete files with a sector editor (an activity&lt;br&gt;that could be useful to every computer user), while other sections&lt;br&gt;list lengthy and extraordinary measures to secure personal computers.&lt;p&gt;Part one concentrates on the data recovery aspect of computer&lt;br&gt;forensics.  Chapter one is entitled an introduction, but seems to be&lt;br&gt;more of an editorial on privacy, with the added statement that the&lt;br&gt;book is intended both for law enforcement personnel needing details of&lt;br&gt;computer forensic techniques and those wishing to preserve the privacy&lt;br&gt;of data.  The use of, and factors related to the use of, computer&lt;br&gt;forensics is supported by specific cases (rather than vague&lt;br&gt;suppositions) in chapter two.  One has to agree with the author&#039;s&lt;br&gt;statement, in chapter three, that &quot;computer forensics can be done--&lt;br&gt;and, sadly, is often done--by persons with a minimal amount of either&lt;br&gt;education or experience.&quot;  Therefore it is unfortunate that the&lt;br&gt;forensic tools list and book structure are both difficult at this&lt;br&gt;point, although there is good material and writing, and Caloyannides&lt;br&gt;is not afraid to tackle the social and political aspects of the field.&lt;br&gt;Chapter four outlines various places (primarily in Windows) from which&lt;br&gt;data may be recovered.  It is an odd mix of little known and very&lt;br&gt;valuable information, and extremely poor explanations of basic&lt;br&gt;functions like manual undeletion and file overwriting.  A strange and&lt;br&gt;terse look at steganography, US and UK surveillance systems,&lt;br&gt;cryptography, and anonymity makes up chapter five.  Data acquisition,&lt;br&gt;from sources such as key logging and Van Eck radiation, is reviewed in&lt;br&gt;chapter six.  Chapter seven debunks a short list of measures falsely&lt;br&gt;believed to provide privacy protection.&lt;p&gt;Part two turns to privacy and security.  Chapter eight is a discussion&lt;br&gt;of legal and commercial protections of privacy (mostly in the US) and&lt;br&gt;their failings.  Installing and configuring a privacy protected&lt;br&gt;configuration of Windows is covered in chapter nine, in considerable&lt;br&gt;detail.  Chapter ten&#039;s review of basic online privacy is heavy on&lt;br&gt;additional software packages.  Intermediate online privacy, in chapter&lt;br&gt;eleven, looks at browser and email configurations, more packages, and&lt;br&gt;has a section on tracing email that would be helpful in dealing with&lt;br&gt;spam.  (An unfortunate typesetting error seems to have deleted what&lt;br&gt;might have been valuable information about PGP [Pretty Good Privacy].)&lt;br&gt;Chapter twelve is more advanced, dealing with anonymizing services and&lt;br&gt;personal firewalls, but may be beyond the average user.  A general&lt;br&gt;opinion piece on cryptography, chapter thirteen nevertheless provides&lt;br&gt;a good, basic background, albeit with a social and political emphasis.&lt;br&gt;Chapter fourteen looks at more practical encryption, detailing PGP and&lt;br&gt;specialized cryptographic programs, with a detour into biometrics.&lt;p&gt;Part three is a brief look at legal and other issues.  Chapter fifteen&lt;br&gt;is a brief look at laws, mostly in the US.  Chapter sixteen touches on&lt;br&gt;security aspects of VoIP (Voice over Internet Protocol) and GSM&lt;br&gt;(Global System for Mobility) wireless services.&lt;p&gt;Despite the ragged organization and style, and some glaring gaps in&lt;br&gt;coverage, this book does contain a wealth of information for both the&lt;br&gt;computer forensic examiner, and the user concerned with privacy.  For&lt;br&gt;anyone beyond the most basic user it is well worth a read.
Rating: 4 / 5</description>
		<content:encoded><![CDATA[<p>This book occupies a unique place in the literature of computer<br />forensics.  Most works in the field, such as Kruse and Heiser&#8217;s<br />&#8220;Computer Forensics&#8221; (cf. BKCMPFRN.RVW), concentrate on documentation<br />of the investigation with a view to presentation in court.  The actual<br />mechanics of data recovery tend to be left to commercial tools.<br />Caloyannides demonstrates how to delve into corners of the computer in<br />order to actually get the data out.
<p>At the same time, this work is inconsistent, on at least two levels.<br />The perspective flips back and forth between forensics and privacy,<br />alternately emphasizing how to find evidence, and how to hide<br />evidence.  The technology involved is the same, but the shifts in<br />viewpoint can be jarring to the reader.  At the same time, the depth<br />of technical detail can vary wildly.  At one point the book stops shy<br />of telling you how to undelete files with a sector editor (an activity<br />that could be useful to every computer user), while other sections<br />list lengthy and extraordinary measures to secure personal computers.</p>
<p>Part one concentrates on the data recovery aspect of computer<br />forensics.  Chapter one is entitled an introduction, but seems to be<br />more of an editorial on privacy, with the added statement that the<br />book is intended both for law enforcement personnel needing details of<br />computer forensic techniques and those wishing to preserve the privacy<br />of data.  The use of, and factors related to the use of, computer<br />forensics is supported by specific cases (rather than vague<br />suppositions) in chapter two.  One has to agree with the author&#8217;s<br />statement, in chapter three, that &#8220;computer forensics can be done&#8211;<br />and, sadly, is often done&#8211;by persons with a minimal amount of either<br />education or experience.&#8221;  Therefore it is unfortunate that the<br />forensic tools list and book structure are both difficult at this<br />point, although there is good material and writing, and Caloyannides<br />is not afraid to tackle the social and political aspects of the field.<br />Chapter four outlines various places (primarily in Windows) from which<br />data may be recovered.  It is an odd mix of little known and very<br />valuable information, and extremely poor explanations of basic<br />functions like manual undeletion and file overwriting.  A strange and<br />terse look at steganography, US and UK surveillance systems,<br />cryptography, and anonymity makes up chapter five.  Data acquisition,<br />from sources such as key logging and Van Eck radiation, is reviewed in<br />chapter six.  Chapter seven debunks a short list of measures falsely<br />believed to provide privacy protection.</p>
<p>Part two turns to privacy and security.  Chapter eight is a discussion<br />of legal and commercial protections of privacy (mostly in the US) and<br />their failings.  Installing and configuring a privacy protected<br />configuration of Windows is covered in chapter nine, in considerable<br />detail.  Chapter ten&#8217;s review of basic online privacy is heavy on<br />additional software packages.  Intermediate online privacy, in chapter<br />eleven, looks at browser and email configurations, more packages, and<br />has a section on tracing email that would be helpful in dealing with<br />spam.  (An unfortunate typesetting error seems to have deleted what<br />might have been valuable information about PGP [Pretty Good Privacy].)<br />Chapter twelve is more advanced, dealing with anonymizing services and<br />personal firewalls, but may be beyond the average user.  A general<br />opinion piece on cryptography, chapter thirteen nevertheless provides<br />a good, basic background, albeit with a social and political emphasis.<br />Chapter fourteen looks at more practical encryption, detailing PGP and<br />specialized cryptographic programs, with a detour into biometrics.</p>
<p>Part three is a brief look at legal and other issues.  Chapter fifteen<br />is a brief look at laws, mostly in the US.  Chapter sixteen touches on<br />security aspects of VoIP (Voice over Internet Protocol) and GSM<br />(Global System for Mobility) wireless services.</p>
<p>Despite the ragged organization and style, and some glaring gaps in<br />coverage, this book does contain a wealth of information for both the<br />computer forensic examiner, and the user concerned with privacy.  For<br />anyone beyond the most basic user it is well worth a read.<br />
Rating: 4 / 5</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Stephen Moretti</title>
		<link>http://spinsafe.com/2010/01/16/computer-forensics-and-privacy/comment-page-1/#comment-296</link>
		<dc:creator>Stephen Moretti</dc:creator>
		<pubDate>Sat, 16 Jan 2010 17:20:44 +0000</pubDate>
		<guid isPermaLink="false">http://www.spinsafe.com/2010/01/16/computer-forensics-and-privacy/#comment-296</guid>
		<description>Very well written. Showed a different side to Computer Forensics that I had not considered. All my research has been on the side of the Computer Forensic Investigator and not on the issues of citizens rights to keep data private from Computer Forensic Hackers. Of the 25 books on Securtiy/Encryption/Forenscis purchased by myself this is the most unbiased and informative.
Rating: 5 / 5</description>
		<content:encoded><![CDATA[<p>Very well written. Showed a different side to Computer Forensics that I had not considered. All my research has been on the side of the Computer Forensic Investigator and not on the issues of citizens rights to keep data private from Computer Forensic Hackers. Of the 25 books on Securtiy/Encryption/Forenscis purchased by myself this is the most unbiased and informative.<br />
Rating: 5 / 5</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Anonymous</title>
		<link>http://spinsafe.com/2010/01/16/computer-forensics-and-privacy/comment-page-1/#comment-295</link>
		<dc:creator>Anonymous</dc:creator>
		<pubDate>Sat, 16 Jan 2010 16:31:05 +0000</pubDate>
		<guid isPermaLink="false">http://www.spinsafe.com/2010/01/16/computer-forensics-and-privacy/#comment-295</guid>
		<description>This is a long overdue book. It is readable, gives specific practical advice on online and offline computer privacy, and does not mince words.&lt;br&gt;With book in hand, I found numerous holes in my own setup which I promptly closed. This book is a bible in its field.
Rating: 5 / 5</description>
		<content:encoded><![CDATA[<p>This is a long overdue book. It is readable, gives specific practical advice on online and offline computer privacy, and does not mince words.<br />With book in hand, I found numerous holes in my own setup which I promptly closed. This book is a bible in its field.<br />
Rating: 5 / 5</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Anonymous</title>
		<link>http://spinsafe.com/2010/01/16/computer-forensics-and-privacy/comment-page-1/#comment-294</link>
		<dc:creator>Anonymous</dc:creator>
		<pubDate>Sat, 16 Jan 2010 15:48:18 +0000</pubDate>
		<guid isPermaLink="false">http://www.spinsafe.com/2010/01/16/computer-forensics-and-privacy/#comment-294</guid>
		<description>This book is a great reference.  I think that it is geared more towards the counter-forensics rather than forensic.  That did not change my mind on how great a reference it is.  This book shows me where to look and how to obtain the information I want.  &lt;p&gt;The links are another story.  I understand that some links change but there are a lot of grammatical mistakes and link mispell errors.  I think an errata needs to accompany this book - just a suggestion.
Rating: 3 / 5</description>
		<content:encoded><![CDATA[<p>This book is a great reference.  I think that it is geared more towards the counter-forensics rather than forensic.  That did not change my mind on how great a reference it is.  This book shows me where to look and how to obtain the information I want.
<p>The links are another story.  I understand that some links change but there are a lot of grammatical mistakes and link mispell errors.  I think an errata needs to accompany this book &#8211; just a suggestion.<br />
Rating: 3 / 5</p>
]]></content:encoded>
	</item>
</channel>
</rss>

