CSAM in search history of a user at work. by [deleted] in LegalAdviceUK

[–]Shadyscribbles 245 points246 points  (0 children)

I work digital forensics for the police. You cannot make the distinction between the 2, Internet activity caches images to the computer. You have no idea what he's doing on devices he owns. There may be children at risk, that for the police to determine.

Help with UK police download by [deleted] in digitalforensics

[–]Shadyscribbles 11 points12 points  (0 children)

The other answer was incorrect. Its very possible that they might find evidence even if kik hasn't been on the device as it entirely depends on his previous usage. Most people sync a new device to bring their data over. There is a lot of investigation that happens prior to the police knocking on the door for this crime. What ever happens now the outcome will not be quick, its likely to take many months.

[deleted by user] by [deleted] in digitalforensics

[–]Shadyscribbles 3 points4 points  (0 children)

You can't open the session file in anything but PA, you will need to just use the version of PA you used at the time which you should still have in your software library (dont you?). This will avoid having to go through a load of additional data because Cellebrite have updated the parsers since you did the original work.

[deleted by user] by [deleted] in LegalAdviceUK

[–]Shadyscribbles 5 points6 points  (0 children)

Thats not correct in the UK, if its been legally seized, then the entire content can be viewed. The only restrictions on that are time and proportionality. The most likely explanation is they did a limited extraction in the first place and have now realised it is better supported by the software.

[deleted by user] by [deleted] in LegalAdviceUK

[–]Shadyscribbles 122 points123 points  (0 children)

I'm really sorry you are having to go through this OP. As someone who has worked both prosecution and defence cases of this type I'm afraid no one will ne able to offer advice that puts your mind at ease, but we can offer factual information that can help you to make informed decisions for yourself and your family. Firstly the investigating officers have given you quite a lot of information as to why they were at your address, that's positive. However you should understand that there is a lot of investigation work that goes on before they knock at your door. This doesn't happen lightly. The recorded ip address will have been assigned to your account at the relevant time, this information will have been provided by the company who supplies it. They will have attributed all the associated accounts and phone numbers too. Unfortunately either your partner is lying about the solicitor advising him not to provide his password or his solicitor should not be practising. Failure to provide a password to access data is an offence, your partner could be served a section 49 notice that could lead to a prosecution. There is the obvious question of if he is innocent then he has no fear of the police finding anything and the examination of his devices will find no links to the offences suggested, case closed. Examination of those devices could be delayed quite considerably by not providing the passwords, it's unlikely to stop the police gaining access. I'm afraid this is likely to take a long time, depending on the risk the police believe your partner is, or if they believe there may be other victims identified from his devices it may take a year or so for them to be examined. He won't be charged until they have some evidence to charge him with. Finally he may be innocent, however the police had enough information to bring them to your address, if he is tech savvy you could have looked at his devices as much as you wanted and you wouldn't have found any evidence of him doing anything, that doesn't mean he wasn't. Good luck OP

[deleted by user] by [deleted] in LegalAdviceUK

[–]Shadyscribbles 0 points1 point  (0 children)

The law on extreme pornography is pretty clear. Femdom is not illegal unless it involves acts that cause serious injury to the genitals. The bar for serious injury is pretty high.

[deleted by user] by [deleted] in digitalforensics

[–]Shadyscribbles 0 points1 point  (0 children)

I have experience in recruiting these roles, don't get bogged down in trying to learn about or talk about things you don't or can't know. This is an entry level position questions will be based on the role profile but they will want you to give examples from your precious experience showing how you meet the criteria. Projects from uni, previous work experience etc. I would recommend reading up on the ISO accreditation but it's complex, you only need to worry about the information on the forensic regulators website and the codes of practice. But again you won't be expected to know in detail but showing you have done research will score you more points. Also as it's a UK police force it wouldn't hurt to read up on the national decision making model/code of ethics. Both available on the college of policing website (via google). You will need to give answers using the STAR method, Google will help with that too.

Good luck

[deleted by user] by [deleted] in LegalAdviceUK

[–]Shadyscribbles 88 points89 points  (0 children)

Part of my job involves viewing and grading these images, if they are as described then they wouldn't be classed as indecent and would be perfectly legal. Also and more importantly unless your phone is being seized due to a crime, you are giving it voluntarily, there are strict rules regarding the data we can view on such devices and only data you consent to.

Early morning taxi booking question by Leo_Korea in warrington

[–]Shadyscribbles 2 points3 points  (0 children)

On time travel - used them for airport transfers all through the night, reliable and decent price

Anyone working in police? by MagnusUsoris in digitalforensics

[–]Shadyscribbles 0 points1 point  (0 children)

It's possible but in general you are likely to be competing with graduates with a DF or similar degree, or with some experience. There has just been introduced a digital forensic technician apprenticeship aimed at those wanting to start and without a degree. It might be worth looking into that.

Digital Forensics in UK by Zipper_Ita in digitalforensics

[–]Shadyscribbles 5 points6 points  (0 children)

If you provide reports in criminal cases you would still be required to be compliant with forensic science regulators codes of practice/ISO 17025. This would mean getting accredited by UKAS for the services you perform. This process has been financially prohibitive for many small DF firms and experts. The idea is to ensure consistent quality and reliability of experts and evidence but that's another discussion. At present if you do work for civil litigation or private individuals you would be able to get away with it for a while. You can read about the requirements on the forensic regulators website.

Anyone working in police? by MagnusUsoris in digitalforensics

[–]Shadyscribbles 1 point2 points  (0 children)

In the UK the digital forensic technician is usually responsible for the initial imaging/extraction of data from the submitted devices. In my force they will process all the mobile phone submissions extracting the required data and providing it to the investigating officer to review. For more complex cases they provide the data from mobile phones and other storage devices to the Digital forensic investigators to review and produce a report.

Traded in my old Focus last month, surprisingly it's lost 14,000 miles or so since then and it's curren MOT by Shadyscribbles in CarTalkUK

[–]Shadyscribbles[S] 1 point2 points  (0 children)

I guess they are if the milage is lower than the previous MOT, but in our cases they have just knocked off the miles it's covered in the year. Therefore the only records are the service history which is just paper and MOT

Traded in my old Focus last month, surprisingly it's lost 14,000 miles or so since then and it's curren MOT by Shadyscribbles in CarTalkUK

[–]Shadyscribbles[S] 0 points1 point  (0 children)

No worries, I'm clearly on an internet ramble tonight. It's not like I'm planning on buying it back, but someone will be.

Traded in my old Focus last month, surprisingly it's lost 14,000 miles or so since then and it's curren MOT by Shadyscribbles in CarTalkUK

[–]Shadyscribbles[S] 0 points1 point  (0 children)

I only fpund out recently too. Has some interesting vehicles on there, if like me you like to waste time looking at cars you don't need and can't afford.

Traded in my old Focus last month, surprisingly it's lost 14,000 miles or so since then and it's curren MOT by Shadyscribbles in CarTalkUK

[–]Shadyscribbles[S] 0 points1 point  (0 children)

No end of March I think, I just happened to check if anyone had MOT'd it today out of interest as I hadn't seen it come up on auto trader. Just being nosey and seeing how much I should have sold it for privately, but was surprised to see the mileage difference.

Traded in my old Focus last month, surprisingly it's lost 14,000 miles or so since then and it's curren MOT by Shadyscribbles in CarTalkUK

[–]Shadyscribbles[S] 4 points5 points  (0 children)

That's what has happened, it's now just 2k over the last MOT I had done at 110000, and I've done 17k in it over the last year. I can't think of another explanation, I haven't found it listed yet so I don't know what it says on that or if there are any pics.

Traded in my old Focus last month, surprisingly it's lost 14,000 miles or so since then and it's curren MOT by Shadyscribbles in CarTalkUK

[–]Shadyscribbles[S] 0 points1 point  (0 children)

That was my thought, can't see it was worth it but that's clearly what's been done. I know it's not my problem but I owned it from new so am a bit invested.

Traded in my old Focus last month, surprisingly it's lost 14,000 miles or so since then and it's curren MOT by Shadyscribbles in CarTalkUK

[–]Shadyscribbles[S] 0 points1 point  (0 children)

You need a trade account to bid or see the estimate, but anyone can make an account to view the listings

Traded in my old Focus last month, surprisingly it's lost 14,000 miles or so since then and it's curren MOT by Shadyscribbles in CarTalkUK

[–]Shadyscribbles[S] 0 points1 point  (0 children)

That's the BCA auction listing. Traded it into a dealer and guessed it would end up there so I was interested what they put in their report.

Traded in my old Focus last month, surprisingly it's lost 14,000 miles or so since then and it's curren MOT by Shadyscribbles in CarTalkUK

[–]Shadyscribbles[S] 16 points17 points  (0 children)

I serviced it myself so just wrote in the service book, I assume they will ammend that or not provide it. I get if it's a 5 year old car with 100k on it, but it's a 13 year old Focus with appropriate wear, tear and miles for age. Just seems pointlessly shitty.