Destruction of evidence

[Greg Broiles]

On Tue, Dec 05, 2000 at 06:06:41PM -0800, mmotyka at lsil.com wrote:
> To prove destruction of evidence you must prove that it existed in a
> form that was retrievable ( good luck ) and then that its destruction
> was done by a person who was aware of the crime ( not always so in the
> networking world ) for the purpose of concealing the crime( burden of
> proof on you ). I clean disk space randomly and not according to any
> schedule.
> 

Readers interested in this somewhat nuanced topic might find the text
"Destruction of Evidence" by Jamie Gorelick (yes, THAT Jamie Gorelick)
of interest; it's out of print but still findable through used book
sources; publisher is Wiley & Sons, ISBN 0471611387.

--
Greg Broiles gbroiles at netbox.com
PO Box 897
Oakland CA 94604