<html>
<body>
<h1><b>Improbable Database Of A Farc Commander<br><br>
<br>
</b></h1><h3><b>Fiddling with the files?</b></h3><font size=3>July 09,
2008 By <b>Le Monde diplomatique -- LMD</b> <br>
<a href="http://www.zcommunications.org/znet/viewArticle/18128" eudora="autourl">
http://www.zcommunications.org/znet/viewArticle/18128<br><br>
</a>Between 1 March and 3 March at 11.45am, an agent of the Colombian
anti-terrorist unit accessed the eight exhibits, in contravention of
"internationally recognised principles for handling electronic
evidence by law enforcement". Here is what Interpol found
(1):<br><br>
<br><br>
Seized exhibit 26, a laptop computer, showed the following effects on
files on or after 1 March 2008:<br><br>
<br><br>
* 273 system files were created<br><br>
* 373 system and user files were accessed<br><br>
* 786 system files were modified<br><br>
* 488 system files were deleted<br><br>
<br><br>
<br><br>
Seized exhibit 27, also a laptop computer, showed:<br><br>
<br><br>
* 589 system files were created<br><br>
* 640 system and user files were accessed<br><br>
* 552 system files were modified<br><br>
* 259 system files were deleted<br><br>
<br><br>
Seized exhibit 28, also a laptop computer, showed the following effects
on files on or after 1 March 2008:<br><br>
<br><br>
* 1,479 system files were created<br><br>
* 1,703 system and user files were accessed<br><br>
* 5,240 system files were modified<br><br>
* 103 system files were deleted<br><br>
<br><br>
And so the list goes on. If it is correct, then for three days the
anti-terrorist agent's top priority, presented with a goldmine of
information about the Farc, was to create, modify and delete a total of
48,055 files which held no interest (conclusion no 3).<br><br>
<br><br>
Further questions arise when you read that:<br><br>
<br><br>
Exhibit 28 contains one file that was shown as created on 17 August 2009
Exhibit 30 contains:<br><br>
<br><br>
* 668 files with creation dates that range from 7 March 2009
to 26 August 2009<br><br>
* 31 files which show as having been last modified between 14
June 2009 and 26 August 2009<br><br>
* These files contained either music, video or images<br><br>
<br><br>
Exhibit 31 contains:<br><br>
<br><br>
* 2,110 files with creation dates ranging from 20 April 2009
to 27 August 2009<br><br>
* 1,434 files which show as having been last modified between
5 April 2009 and 16 October 2010<br><br>
<br><br>
Interpol concluded that these files "were originally created
prior to 1 March 2008 on a device or devices with incorrect system time
settings". Yet this didn't cause it to doubt its conclusion that
there was no evidence of abnormal creation, modification or deletion of
files.<br><br>
<br><br>
________________________________________________________<br><br>
<br><br>
(1) "Interpol's Forensic Report on Farc computers and hardware
seized by Colombia",
<a href="http://www.interpol.int/public/ICPO">
http://www.interpol.int/public/ICPO</a><br><br>
<br><br>
</font><x-sigsep><p></x-sigsep>
<font size=3 color="#FF0000">Freedom Archives<br>
522 Valencia Street<br>
San Francisco, CA 94110<br><br>
</font><font size=3 color="#008000">415 863-9977<br><br>
</font><font size=3 color="#0000FF">
<a href="http://www.freedomarchives.org/" eudora="autourl">
www.Freedomarchives.org</a></font><font size=3> </font></body>
</html>