"I read Luna’s book in two days because it was so interesting and informative."
John Laing, Sterile Processing Department Supervisor, Chesapeake, Virginia
 
 
Home
Books
Consulting
Author Bio
NM LLCs
Ghost Addresses
Questions & Comments
Order & Download
Contact Us

Question #5025

5008: Solid State Drives and Evidence Eliminator
Date: Nov 19, 2008 From: Michael
Location: Columbus, OH Age: 37
Question: JJ, I wanted to add a few comments about Solid State Drives (SSD) and Evidence Eliminator.

First, SSD's are very secure just by design. Privacy was not the intended purpose, it was to make them more reliable to use. Unfortunately, the design of the SSD make privacy, at least from a forensics perspective, easily achievable. The data does not sit long in a portion of the drive - basically - the data moves. This makes forensics, specifically from a legal perspective, an absolute nightmare.

So from a legal perspective the data itself cannot be used against you - however - I do agree with other readers that considering whole disk encryption is a good idea. As JJ has always said, keep the data at home, don't walk around with it.

As far as EE goes, it is not perfect ... but it is very annoying to attempt to work with, assuming that someone has properly maintained EE and is operating the software as they advise. I do perform forensics and have done test cases showing how anti-forensics software, in all cases demo'ing EE. With platter drives, data can always be recovered - the real question always is how much money does an individual, local police, state, or federal agent want to spend to attempt to find the 'silver bullet'. In most cases, if the data is not easily recovered, the forensics portion is scrapped and another avenue of the investigation is launched; usually back-tracking through people.

EE is not perfect, but it certainly can drive an investigator mad when they are trying to move quickly to justify a case.

<< Go Back

  Search our site: >> 
© 2005 - Canary Islands Press   All Rights Reserved.
Site Design & Hosting: JDF Unlimited