Destruction of evidence

On Tue, Dec 05, 2000 at 06:06:41PM -0800, mmotyka@lsil.com wrote:

To prove destruction of evidence you must prove that it existed in a form that was retrievable ( good luck ) and then that its destruction was done by a person who was aware of the crime ( not always so in the networking world ) for the purpose of concealing the crime( burden of proof on you ). I clean disk space randomly and not according to any schedule.

Readers interested in this somewhat nuanced topic might find the text "Destruction of Evidence" by Jamie Gorelick (yes, THAT Jamie Gorelick) of interest; it's out of print but still findable through used book sources; publisher is Wiley & Sons, ISBN 0471611387. -- Greg Broiles gbroiles@netbox.com PO Box 897 Oakland CA 94604