from both witnesses, Dworkin & Melendez. There was nothing there. No
.
So, to be as BN testified, both experts had to be incompetent. And BN doesn't find it from the mirror copy. No, he gets the actual hard drive and finds all this
. But the hard drive also gets damaged so no one else can replicate whatever he did. And he still hasn't provided the copy of the drive that he used.
I don't believe it. I believe he could be viewing a copy of a drive with
. But that drive will not be the mirror image of the original drive. IMO, if there's anything there, it was planted. Hopefully that will be easy to demonstrate if he ever turns the copy over. Maybe he figures he can play this tune-the other experts weren't as good as me-I found it and they couldn't. If something is found not on the mirror images used by the experts I suppose he has some story about how it was "hidden" from those inferior experts. Sounds unbelievable but if the drive is truly damaged there could be no irrefutable proof for the jury I guess.
BN surely sounds kooky enough to believe he could get away with it-he has no problem making up out of whole cloth, the "science" of reading photographic eyeballs for critical evidence. And he seems quite smitten with the damsel in DP distress.
I just don't believe that
wasn't found if it was there. And no way did the police or Juan care if there was
. They take their victims as they find them. Why would they even care if
was on the computer. If TA had been into
Juan could have easily dealt with it as it's hardly that unusual and it isn't a defense to murder if the victim likes to watch
.
In the first trial the DT didn't even care about
. They did try to say something about women naked from the waist up and tried to intimate the music video "Harder faster stronger" was dirty and that was ALL they had.
It also makes sense that TA wouldn't have
on that computer. It was in an essentially public area of a house he shared with other LDS and where his door was always open to his many friends. No way would have have
on that. Maybe he would have liked to have watched
-who the heck cares.
My notes from Dworkin testimony:
Ensure copies match-his copy read only. Standard protocol-we all including LE follow same protocol. Verify evidence is intact. Recover lost folders. If Parent file deleted-child can still be recovered-next step run file signature verification. Sometimes people try to hide info by changing file extension-jpeg-doc etc. check to see files actually match header.
Then examined looking at areas of interest. Internet history-two types of recovery used for this-Encase (internet history-when you surf a log file is maintained thats not visible to user-it's hidden and Encase recovers these log files and creates a Master Log File. Recovers previously deleted browser records. He generated report-standard Encase report. Report tells us internet history-tells time, date etc. Each thing you do on internet is a log event. Typing in url, redirect, etc.
My notes from Melendez testimony:
Worked for Mesa Police inJune of 2008 in the computer forensics unit. Looked at laptop. He forensically examined hard drive. No indication he couldnt access anything in hard drive. Everything was available/viewed.
No photos of women from waist up-no photos of womens breasts.
Initially searched for all types of file images. Looked for files embedded in other files, i.e. photo in doc. No naked women. All interenet history. No access to adult sites.
Looked at what software was added. Just basic software added. Windows office. Looked for file sharing software. No images of children.
Media, cds etc seized. Computer registered to Deanna. He looked at it for recent activity.
What do you do to forensic exam. Seized and made mirror image. Hard drive is where data is. Powered it down to preserve data. Wrote report. Exhibit 347-has him read second paragraph. Last activity 4:54.
Cookies-leave a trail-but all history is available in internet history. Exhibit 419-harder faster stronger video-thats what defense spent their time on. June 4, 2008 at 4:54 last time it was accessed.
Neumeister and defense counsel have made some very bold accusations. We have to wait for more testimony to understand whether these allegations are true or a twisting of facts.
Dworkin generated a report which was more than 1,000 pages long. He testified that he examined recovered files.
Some explanations which would refute Neumeisters claims carrying a sinister pall:
- Travis may have scheduled a task for his laptop to come out of sleep mode on the morning of 6/10/08 to check his flight status with Southwest Airlines. This would explain why the computer booted out of sleep mode before the search warrant was signed, and that it automatically pinged Southwest Airlines.
- We know from Neumeister's testimony that TA's computer had at least 19 software programs to handle malware and other issues. Some of these AV programs can be bogus; for example, people who are concerned about malware may load an antivirus program onto their computer thinking it is a solution, when in fact it is malware masquerading as AV software. Based on the sheer number that BN cited, I tend to think this is what happened with TA'scomputer.
- Proper AV software will encrypt and quarantine suspect files. My guess is that all of these files BN is claiming were
, but not noticed by Dworkin or Melendez had been encrypted and quarantined by software.
- BN implied that TA had to search for some of these
sites and that he accessed them. If he searched for them, the search would show up in his browser history. In the event that his full browser history was not available from his hard drive, the defense could always subpeona the ISP for this information. They did not because they know the results would not support their claim.
We'll have to wait for more testimony, but my gut tells me that BN put his balls on the table with this one, making some wild claims that will be shot down.
To me, it's unconscionable that making these kinds of allegations is even allowed. I really want to see sanctions if there is no substance to claims made in motions and subsequent testimony.
