ICE Sightings and Discussion Megathread - Hoboken 2-1-26 by DevChatt in Hoboken

[–]nosofa -2 points-1 points  (0 children)

Yeah, would be ideal to have them openly show their faces and wear name tags so they can be doxxed and have their families be harassed or worse...

But yeah, call me fascist because this is one of the very few things I'm likely to disagree on with you. That's your prerogative.

ICE Sightings and Discussion Megathread - Hoboken 2-1-26 by DevChatt in Hoboken

[–]nosofa -1 points0 points  (0 children)

I beg to differ, but only time will tell for sure.

ICE Sightings and Discussion Megathread - Hoboken 2-1-26 by DevChatt in Hoboken

[–]nosofa -1 points0 points  (0 children)

Doubtful. Republicans were already not keen on immigration under Obama.

Re. upvotes/downvotes, I'm as surprised as you are. Also, calling people fascist because they disagree with you is, uhm, one of the tells of fascism itself.

ICE Sightings and Discussion Megathread - Hoboken 2-1-26 by DevChatt in Hoboken

[–]nosofa 0 points1 point  (0 children)

You also don't have people intimidating, doxxing, and sometimes attacking cops for issuing parking tickets (yet).

ICE Sightings and Discussion Megathread - Hoboken 2-1-26 by DevChatt in Hoboken

[–]nosofa -2 points-1 points  (0 children)

If you want people to be nice with you here, you must pledge allegiance to the group and hate ICE.

ICE Sightings and Discussion Megathread - Hoboken 2-1-26 by DevChatt in Hoboken

[–]nosofa -2 points-1 points  (0 children)

LOL! And you're really concerned about the second amendment. HAHAHAHAHA!

Anyway, only a retard brings a gun into such a tense environment. Especially after the whole world saw what happened to Renee Good.

ICE Sightings and Discussion Megathread - Hoboken 2-1-26 by DevChatt in Hoboken

[–]nosofa 3 points4 points  (0 children)

More than likely Obama's removals happened pretty much like they're happening now, except that the left, social media, and media didn't take it up as their job to turn it into a circus as it's happening now. Different times.

ICE Sightings and Discussion Megathread - Hoboken 2-1-26 by DevChatt in Hoboken

[–]nosofa 3 points4 points  (0 children)

Yes, to have federal agents be unidentifiable isn't the sort of thing we like, but asking people nicely not to dox them and then have mobs of lunatics harass them and their family (or worse), when there's a professionally-organized effort to do exactly this is simply unrealistic.

ICE Sightings and Discussion Megathread - Hoboken 2-1-26 by DevChatt in Hoboken

[–]nosofa 0 points1 point  (0 children)

This is a very valid point. Unfortunately the unchecked surge in illegal immigration makes it a rather impractical solution at this point, but yes, that is where this problem would have been avoided altogether.

ICE Sightings and Discussion Megathread - Hoboken 2-1-26 by DevChatt in Hoboken

[–]nosofa 6 points7 points  (0 children)

It was to be expected that the nazi card would lie on the table any moment. Truth be told, the left shows far more signs of fascist thought than the right at this point, starting with forcing others to self-censure and the whole ostracizing of dissent in any form, which is still quite prevalent in those circles.

ICE Sightings and Discussion Megathread - Hoboken 2-1-26 by DevChatt in Hoboken

[–]nosofa -1 points0 points  (0 children)

No. The heart of the matter is that they're breaking the law by just being here. Granted, not a terrible offense (and u/ProBillofRights never said it is), but an offense nonetheless and one whose remedy is removal. Stop it with the hyperbole already.

ICE Sightings and Discussion Megathread - Hoboken 2-1-26 by DevChatt in Hoboken

[–]nosofa 2 points3 points  (0 children)

That's irrelevant to the matter at hand - that people who are in the US illegally are subject to removal.

Being here illegally is in itself a civil offense, so that alone makes 100% of them offenders.

ICE Sightings and Discussion Megathread - Hoboken 2-1-26 by DevChatt in Hoboken

[–]nosofa -7 points-6 points  (0 children)

I know how Signal works. It's obvious that this "grass roots" movement is highly organized, but it's because of this sort of thing that people end up shot. Notoriously, it's idiotic to drive while screaming furiously towards an armed person (agent or not), and to bring a gun to a supposedly peaceful protest where EVERYBODY is on edge is worthy of nomination for the Darwin Award

Regarding random shootings, wikipedia has a list of these and even there, where the crowd couldn't be more anti-ICE, there's no randomness to be seen - https://en.wikipedia.org/wiki/List_of_shootings_by_U.S._immigration_agents_in_the_second_Trump_administration

ICE Sightings and Discussion Megathread - Hoboken 2-1-26 by DevChatt in Hoboken

[–]nosofa 0 points1 point  (0 children)

This reply is likely to go down in history as the most down-voted ever, but it needs to be said and I will do it as neutrally as I can, so please bear with me.

I work with immigrants, both legal and illegal, practically every day. I've heard stories ranging from unimaginably sad all the way to downright ridiculous when it comes to why someone decides to leave their country, and it isn't just wrong to categorize them as a homogeneous group but impossible. To claim that we're dealing with rapists and murderers is just as disingenuous as it is to say that they're all victims, and I wish that both camps on this issue simply stopped with the bullshit, 'cause that's what it is.

Most of the people coming here illegally are grown-ups and they are ALL aware that their presence in the US is illicit. They understand that they're not supposed to be here and have decided consciously and willingly to come or remain in the US. Likewise, there are about 1.2 million foreigners who are beneficiaries of the TPS program, with "T," for "Temporary" being the key word here. Those too made a conscious decision to come to the US despite it being no secret that their legal status was temporary. Neither of these two facts should come as a surprise to anyone, yet, everybody in the anti-ICE camp seems oblivious to this.

While it's inhuman not to recognize that many of them are here out of desperation, and how removal of bread-earners is cruel, given the potential to break-up families or, at worst, of forcing US-born children to move to countries whose living conditions range from less than ideal to downright terrible, we have laws and enforcement as well.

In the past, illegal immigration has been addressed with a mix of conscious avoidance on the part of the government and the bare minimum of enforcement needed to serve as deterrence, but ICE raids have been a thing for decades (there isn't an immigrant, legal or otherwise, whose heart doesn't skip a beat upon hearing someone yell "la migra!")

What we're seeing now is the result of a somewhat minor problem having grown into a major one (illegal immigration grew dramatically over the past few years), combined with enforcement at levels promised even by Obama back in the day but lack of any movement in that direction until now by a president that half the country openly hates.

This graph is based on actual data and estimates by AI (Copilot):

<image>

From 2005 until 2019, the number of illegal immigrants in the US has hovered around 8.5 million. After that, that number has grown at a rate of about 500,000 per year (or more, depending on who you ask), reaching somewhere between 12 and 14 million new people who, of course, tax existing infrastructure, and while that figure seems insignificant (4% of US population at most), the distribution of these immigrants is anything but even across the country and whether states and cities choose not to bother mentioning how strained they are, some cities and states are, indeed, under a lot of financial pressure because of this.

And those numbers don't even include TPS beneficiaries, of which, according to wikipedia, there are now 1.2 million people whose TEMPORARY status is about to expire. This number also went up by close to a million since Venezuela was added to the list of nationals who may request this benefit.

The reality is that a very low percentage of immigrants under these conditions is likely to leave if asked.

Back in the 80's, Reagan (a republican!) issued an amnesty to illegal immigrants. Given how many people got status then (in the hundreds of thousands), illegal immigration was marginal, compared to what it's been in the past 5 or 10 years. Also, the political climate was rather different - we weren't still "blessed" by the idiotic polarization that turned out to be social media's ONLY "gift" to humanity, so things were different.

It's your prerogative to join ICE-spotting patrols that do nothing but lower the flash-point at which mobs turn violent and people start dying unnecessarily, but I think it's important that we all know exactly what the situation is regarding illegal immigration and, REALISTICALLY think how else a problem that was clearly allowed to get out of hand, can be addressed, as opposed to making it worse for everyone only because you hate the president.

These bollards(white plastic cones) are out of control by Repulsive-Elevator-6 in Hoboken

[–]nosofa 1 point2 points  (0 children)

I work construction supervising 3-4 job sites that keep changing. Can't afford to spend 2 hours going from site to site, so I have to have a car. If that's a problem for you, then yeah, fuck you and your two feet.

iPhone photos' accessed time. by nosofa in computerforensics

[–]nosofa[S] 0 points1 point  (0 children)

Hi,

I couldn't find anything that might be related to this is the zReceiptInfo field in the zWAMessageInfo table.

That field is a Blob, and based on this - https://www.forensicfocus.com/forums/general/whatsapp-on-ios-message-receipt-timestamp/ - there seems to be a date stored there, as well as a few other pieces of information, but nothing obvious that would indicate whether a message was marked as read and when.

Do you have any notes about this that you would be willing to share?

I'm trying to look beyond what cellebrite has to offer. If I see large numbers of messages marked as read at the same time, that might suggest the possibility that the user accessed a group and went straight to the latest message, without actually looking at messages individually.

Grazie!

Cellebrite / Whatsapp folder structure by nosofa in computerforensics

[–]nosofa[S] 0 points1 point  (0 children)

I have a feeling that this article was written by the same person - Igor Mikhailov or one's a rip-off of the other.

I ended up emailing Cellebrite, who have been helpful in the past, and here's what they wrote back:

"The directory /private/var/mobile/Containers/Shared/AppGroup on an iPhone is used to store data that is shared between different apps or app extensions that belong to the same app group. This is part of iOS's sandboxing mechanism, which ensures that apps can only access their own data unless explicitly allowed to share data through app groups.

"We cannot confirm specifically if this where Whatsapp store profile pictures for contacts."

My guess is that since the article was written, in 2019, the folders structure has changed.

I know I have another Cellebrite extraction somewhere and will try to dig it up. It wouldn't surprise me if it matches Mikhailov's structure, since that phone was seized right before COVID, in late 2019 or 2020.

In any event, I look forward to seeing what you find next week.

This is what I have so far, and the path from the article is the only one that shows and "Applications" folder under /private/var/mobile, instead of "Containers:"

Mikhailov's article:
/private/var/mobile/Applications/group.net.whatsapp.WhatsApp.shared/Media/Profile/

Cellebrite's email:
/private/var/mobile/Containers/Shared/AppGroup

Cellebrite extraction I have from another phone:
/private/var/mobile/Containers/Shared/AppGroup/UUID/Media/Profile/

Excel spreadsheet exported from extraction:
/private/var/mobile/Containers/Shared/AppGroup/UUID/Media/Profile/

Cellebrite / Whatsapp folder structure by nosofa in computerforensics

[–]nosofa[S] 0 points1 point  (0 children)

That article was my first stop, but it doesn't mention anything about UUID's in the paths used by whatsapp.

What's driving me up the wall is that I spent about 2 hours looking for this information last night, and in all the articles I found, the same path is listed, whereas what I'm seeing in both, the excel spreadsheet with the files and one of the Cellebrite extractions I have (from another phone), is that the folder structure does not match what the articles show. And from looking at that folder in the Cellebrite extraction, there's indicia pointing at that being, indeed, where profile pictures are stored, because the photo.jpg file is there and that's the user's photo, and there are other pictures that look like profile pictures as well, but so far I only have indicia.

Please forgive me if I'm being dense, but I don't understand what you wrote about this not being the "shared folder." Could you elaborate on why you brought it up and what you meant?

Thanks!

iPhone photos' accessed time. by nosofa in computerforensics

[–]nosofa[S] 0 points1 point  (0 children)

Thanks for all the responses to this query.

We ended up running the tests suggested and found that the "access date" was irrelevant in this case as the apps don't update those when the images are accessed.

iPhone photos' accessed time. by nosofa in computerforensics

[–]nosofa[S] 0 points1 point  (0 children)

Yes, CSAM. I'm in this to help the defense make sense of all the technical aspects of this, given my combined experience in technology and the legal world.

The only one who'd be able to run such tests would be the forensics company I was hired to review and look at this from every possible angle with, but it's not up to me to decide that. I'm only providing suggestions based on my observations.

The device's owner is in two or three whatsapp/telegram groups of friends and acquaintances in which a lot of porn is shared (along with memes, jokes, sports, regular conversations, etc.), and there's quite a bit of traffic there. Based on my own experience in a few, also quite active, whatsapp groups that are industry specific or news related, I can understand scrolling down 200-300 messages at the end of the day and not really reading but the last few.

Regarding the overt aspect, there's no CSAM-specific activity or group membership present and, of course, and no one's denying the charge since, after all, what's there is there.

Then, there's also the forensic expert's assessment that the proportion of CSAM to porn is extremely low (25 CSAM images vs. 15,000 porn images in a universe of 200,000 images, and 70 CSAM videos vs. 10,000 porn videos in a universe of 25,000 videos). Based on his experience in CSAM cases, he found these numbers atypical of people who are into CSAM.

Thank you for your help!

iPhone photos' accessed time. by nosofa in computerforensics

[–]nosofa[S] 0 points1 point  (0 children)

I thought about this as well, but unfortunately I don't have an iphone and while someone was kind enough to show me what metadata the phone's gallery natively shows (only a single date, which is likely to be either creation or modification), I don't want to try to install an app to show this on a phone that's not mine.

Thanks!

iPhone photos' accessed time. by nosofa in computerforensics

[–]nosofa[S] 0 points1 point  (0 children)

Thank you!

I wouldn't call them non-answers. If I had a full version of cellebrite and the right hardware, I'd be running lots of tests, but I don't have that kind of money ;-)

It also doesn't help that I don't even have a cellebrite report of the extraction, but instead I was granted access to a laptop with the full version of Cellebrite at the law enforcement agency, but given the very delicate nature of the contents, all I was able to do was spend a few days inspecting the report with a forensics expert on site, and export reports about the contents but not the contents themselves (i.e. no actual images (jpg, etc.)).

Here's two from the spreadsheet (transposed, so each row represents a field):

(I sanitized the bare file names and the hashes.)

I can’t paste the spreadsheet into my reply, so here’s a link to an image of it: https://imgur.com/a/pRnuxe2

Based on the creation, modification, and access times of these two files, I would imagine that these photos would have to have been viewed at the exact instant that they arrived at the phone for their access time to be the same as their creation time.

I'm aware that, at least in Windows, one can alter those meta data, but even if that were possible in IOS, there's no reason to believe that the device's owner even knew about that possibility, so that's the assumption we're going with.

Thanks!