Not only that, they let him dick around on his computer in front of them. A quick "rm -rf" would have made evidence retrieval a fair bit harder, wouldn't it?
Not really, at least for most filesystems. Now "cat /dev/urandom > /dev/sda &" or equivalent while stalling the cops by looking at emails on the other computer, that might be something of a problem.
That's how I decommission drives and other media assuming I can't physically destroy (which I usually can and do, but sometimes it happens). Overwrite with random data. Sometimes multiple times if I'm in no hurry. Much easier if the device is in an external reader rather than being your boot disk of course. Sometimes it takes awhile.
I still have scar on my hand from snapping my first glass platter. Hmm platters from this era, were always metal, yeah that's what I thought before it shattered.
That's not the point. The point is that they let him touch the computer while the police were present. He could have his computer set up where if he unlocks it with a "special" password, it behaves normally while zeroing all the sensitive data in the background, for example.
The point is, there's no limit to what he could do once he's allowed to touch the computer.
That's not the point. The point is that they let him touch the computer while the police were present. He could have his computer set up where if he unlocks it with a "special" password, it behaves normally while zeroing all the sensitive data in the background, for example.
The point is, there's no limit to what he could do once he's allowed to touch the computer.
