Script writers need a clue
Feb. 6th, 2013 12:36 am![[personal profile]](https://www.dreamwidth.org/img/silk/identity/user.png){kind=small}
kengrOn tonight's NCIS there are a host of stupid errors
First, they are trying to access info on a laptop belonging to a hacker. They spout all sorts of stuff about bypassing things inside the computer so it won't know they are accessing the drive. And it goes up in smoke anyway.
What's wrong? The fact that the *standard* way you handle that is to pull the hard drive and use a specially set up system to clone the drive. Then access that on a system running special software (easily available software, btw). If you do this, there's no way to lose the data. Unless the guy managed to get a hard drive custom built with custom circuitry that *includes* a self destruct they *will* be able to retreive the data. Then it's just a matter of breaking encryption to read the files.
Later, they are threatening the suspect with sending him to Gitmo. And he's protesting that they can't do that. That he's entitled to due process.
Sorry, but since it's established that he's *already* been classified as a terrorist under the USA PATRIOT act, they don't need *any* process to dump him in Gitmo forever.
Ok, they just got an IP address from him. This I can forgive, they used a 192.168.y.x address. Obviously to prevent folks from mressingg with some public IP address. Me, I'd not have used a class C subnet, but a class B address 172.16.x.x or a class A address 10.x.x.x.
Another possibility would be 169.254.0.x
First, they are trying to access info on a laptop belonging to a hacker. They spout all sorts of stuff about bypassing things inside the computer so it won't know they are accessing the drive. And it goes up in smoke anyway.
What's wrong? The fact that the *standard* way you handle that is to pull the hard drive and use a specially set up system to clone the drive. Then access that on a system running special software (easily available software, btw). If you do this, there's no way to lose the data. Unless the guy managed to get a hard drive custom built with custom circuitry that *includes* a self destruct they *will* be able to retreive the data. Then it's just a matter of breaking encryption to read the files.
Later, they are threatening the suspect with sending him to Gitmo. And he's protesting that they can't do that. That he's entitled to due process.
Sorry, but since it's established that he's *already* been classified as a terrorist under the USA PATRIOT act, they don't need *any* process to dump him in Gitmo forever.
Ok, they just got an IP address from him. This I can forgive, they used a 192.168.y.x address. Obviously to prevent folks from mressingg with some public IP address. Me, I'd not have used a class C subnet, but a class B address 172.16.x.x or a class A address 10.x.x.x.
Another possibility would be 169.254.0.x
![[identity profile]](https://www.dreamwidth.org/img/silk/identity/openid.png){kind=small}
no subject
Date: 2013-02-06 10:31 am (UTC)On the drive going up in smoke, and custom circuitry (I think custom firmware would be enough but I'm not sure how easy it would be to make), I recently saw this video about a talk about making USB drives proof against cloning: https://www.youtube.com/watch?v=D8Im0_KUEf8
Interesting stuff, I'm thinking of getting one of those Facedancer devices myself for testing.