[News] Improbable Database Of A Farc Commander

Anti-Imperialist News news at freedomarchives.org
Wed Jul 9 12:04:37 EDT 2008



Improbable Database Of A Farc Commander




Fiddling with the files?

July 09, 2008 By Le Monde diplomatique -- LMD
http://www.zcommunications.org/znet/viewArticle/18128

Between 1 March and 3 March at 11.45am, an agent of the Colombian 
anti-terrorist unit accessed the eight exhibits, in contravention of 
"internationally recognised principles for handling electronic 
evidence by law enforcement". Here is what Interpol found (1):



Seized exhibit 26, a laptop computer, showed the following effects on 
files on or after 1 March 2008:



* 273 system files were created

* 373 system and user files were accessed

* 786 system files were modified

* 488 system files were deleted





Seized exhibit 27, also a laptop computer, showed:



* 589 system files were created

* 640 system and user files were accessed

* 552 system files were modified

* 259 system files were deleted



Seized exhibit 28, also a laptop computer, showed the following 
effects on files on or after 1 March 2008:



* 1,479 system files were created

* 1,703 system and user files were accessed

* 5,240 system files were modified

* 103 system files were deleted



And so the list goes on. If it is correct, then for three days the 
anti-terrorist agent's top priority, presented with a goldmine of 
information about the Farc, was to create, modify and delete a total 
of 48,055 files which held no interest (conclusion no 3).



Further questions arise when you read that:



Exhibit 28 contains one file that was shown as created on 17 August 
2009 Exhibit 30 contains:



* 668 files with creation dates that range from 7 March 2009   to 26 
August 2009

* 31 files which show as having been last modified between 14   June 
2009 and 26 August 2009

* These files contained either music, video or images



  Exhibit 31 contains:



* 2,110 files with creation dates ranging from 20 April 2009   to 27 
August 2009

* 1,434 files which show as having been last modified between   5 
April 2009 and 16 October 2010



  Interpol concluded that these files "were originally created prior 
to 1 March 2008 on a device or devices with incorrect system time 
settings". Yet this didn't cause it to doubt its conclusion that 
there was no evidence of abnormal creation, modification or deletion of files.



    ________________________________________________________



(1) "Interpol's Forensic Report on Farc computers and hardware seized 
by Colombia", 
<http://www.interpol.int/public/ICPO>http://www.interpol.int/public/ICPO




Freedom Archives
522 Valencia Street
San Francisco, CA 94110

415 863-9977

www.Freedomarchives.org  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://freedomarchives.org/pipermail/news_freedomarchives.org/attachments/20080709/87440f81/attachment.htm>


More information about the News mailing list