Full Disclosure mailing list archives
RE: [inbox] Re: Reacting to a server compromise
From: "Bojan Zdrnja" <Bojan.Zdrnja () LSS hr>
Date: Wed, 6 Aug 2003 21:07:46 +1200
-----Original Message----- From: full-disclosure-admin () lists netsys com [mailto:full-disclosure-admin () lists netsys com] On Behalf Of Curt Purdy Sent: Wednesday, 6 August 2003 1:28 p.m. To: 'Michal Zalewski' Cc: 'Jennifer Bradley'; full-disclosure () lists netsys com Subject: RE: [inbox] Re: [Full-disclosure] Reacting to a server compromise The key here is to have the paper handled by only one person and witnessed by another and the access to that paper by only that person. Therefore
the
validity of the printouts are as sound as that person. As long as that person can not be repudiated, neither can the printouts. That is also applicable to the optical media we now use, with one person responsible for handling and storage with a reliable witness.
Yep, (warning: IANAL), logs are usually categorized as hearsay evidence (3rd party) - meaning they are not generally admissible in court, because you can't prove they are accurate and reliable. But, if you take additional steps, there are exceptions for hearsay evidence: if logs are made during the regular conduct of business and authenticated by witness familiar with their use, they can be admissible. Regards, Bojan Zdrnja _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- Re: Reacting to a server compromise, (continued)
- Re: Reacting to a server compromise Aron Nimzovitch (Aug 03)
- RE: [inbox] Re: Reacting to a server compromise Curt Purdy (Aug 04)
- RE: [inbox] Re: Reacting to a server compromise Ron DuFresne (Aug 04)
- RE: [inbox] Re: Reacting to a server compromise Curt Purdy (Aug 03)
- RE: [inbox] Re: Reacting to a server compromise Michal Zalewski (Aug 03)
- RE: [inbox] Re: Reacting to a server compromise Curt Purdy (Aug 04)
- RE: [inbox] Re: Reacting to a server compromise Michal Zalewski (Aug 05)
- RE: [inbox] Re: Reacting to a server compromise Curt Purdy (Aug 05)
- RE: [inbox] Re: Reacting to a server compromise Bojan Zdrnja (Aug 06)
- RE: [inbox] Re: Reacting to a server compromise Michal Zalewski (Aug 06)
- Re: [inbox] Re: Reacting to a server compromise Valdis . Kletnieks (Aug 05)
- Re: Reacting to a server compromise SecuresDotComs (Aug 02)
- Re: Reacting to a server compromise madsaxon (Aug 02)
- RE: [inbox] Re: Reacting to a server compromise Curt Purdy (Aug 03)
- Re: [inbox] Re: Reacting to a server compromise Gaurav Kumar (Aug 03)
- Re: Reacting to a server compromise Alexandre Dulaunoy (Aug 03)