February 4, 2013 Afternoon testimony
Witness Lonnie Dworkin still on the stand
REDIRECT--re: #419, records of the internet history from Travis' computer. These entries were from between 0400 and 0435 in the morning of June 4, 2008. Other than that particular time frame there was approximately 100,000 total entries...99,000+ entries. Dworkin was never asked to look at any of the UTube videos.
--re: broken hard drive of Jodi's. Dworkin saw the broken hard drive and saw the mirror image of it. The forensic copy is in a forensic format and you need a viewer to look at it. You need the forensic tool to view it. Dworkin had to use the software to look at it. Dworkin doesn't know how many pictures were on the hard drive. He checks his records. He is unable to do that at this time.
--When Dworkin used Endcase on the mirror image there was thousands of images and files that were recovered. He had to run recovery scripts for "quite some time", for days.
JURY QUESTIONS
1) are date and time stamps on photos taken by digital cameras, can they be manually manipulated?
Answer: the photo of the file would have to exist first and then go and change the time/date.
It applies to "exsif" information as well.
Dworkin did not attempt to turn on the camera as it had been stored for a long time and there was no reason to do it at the time. Dworkin did not see any evidence of time stamp manipulation.
Martinez asks about #413, is it possible that the photo of Jodi and her sister, could it have been taken in 2007 and then uploaded or downloaded in 2008? Witness answer : "anything is possible".
Martinez asks that Dworkin is subject to recall.