I went back to read Beth's notes to clarify some of this, b/c some of the tweets were confusing. BN said he made a compressed & encrypted copy on his first visit and made a working copy of that, which he turned over to Juan. Was vague on what he used to do it, or who the person was that encrypted it. On his 2nd visit, he made a raw clone, which he used as his work copy so what he has is what remained after all the viruses were removed. Juan wants the actual image copy that was made on the first visit without encryption and not these work copies. BN says the 2nd copy w/o the viruses still has what Juan needs to see, but can't seem to understand why Juan won't settle for that. Says if Dworkin's file had the viruses removed it would equal this work copy. He also said that he and Dworkin went over Dworkin's file together last weekend and they did find the




websites on it.
I read those tweets where he supposedly said all the files were created in 2009 too, but per Beth, what he said was if the image copy Dworkin examined was made in July 2008, then why are there 2009 files on it?
Also, this is to one of AZlawyer's questions. Juan did say he was not challenging content today, he would do that in court. Today he was trying to bring the subject back around to the allegations made of tampering, etc. and wants the evidence the defense used to bring those charges.