mountainguy777
Former Member
- Joined
- Jan 27, 2011
- Messages
- 1,202
- Reaction score
- 6,247
I bet if we saw a second "target list" we would be going in a totally different direction.
I bet if we saw a second "target list" we would be going in a totally different direction.
As to why the LinkedIN communications were only partially recovered.
Many Apps on the IPhone platform use SQLite databases to hold information. Can't say for sure that LinkedIN is one of them. I will simplify here. This file will grow by asking the operating system for pages of space. As records (e.g. messages in this example) are created they are written to a page. As time goes on the pages fill up and more pages are then added. As deletion of records (e.g. messages) happen the record is only marked or flagged as deleted and not necessarily removed permanently from the file. Periodically, or due to specific rules created by the developer, the space used by this file will be consolidated by moving non-deleted records (e..g. messages) into space that had been marked deleted. This will effectively purge deleted records (e.g. messages) from the file. These purge rules can be aggressive, that is purge all or almost all records marked for deletion, or more relaxed (or lazy) and ignore pages that only have fewer than N number of records marked for deletion. All depends on what the developers did and how they configured SQLite.
If you were to view such a file through something like SQLite Manager you would only see the non-deleted records. However, if you were to open the file in binary mode with a hexidecimal viewer you would be able to see everything in the file whether it was deleted or not.
And one more thing. When the database does these purges and there are no more records on a page they release those pages back to the operating system. Those pages might still have information on them that is recoverable. So long as some other App on the phone didn't ask for pages from the operating system and were given those pages, whatever was on those pages would be recoverable.
It is for this reason that when forensically dealing with a IPhone (or any smart phone) they make a binary image of the entire device and only work from copies of that as information that would have been available could be deleted.
Tried to simplify here. There are detailed documents on SQLite out there on the intertubes and on IPhone (and other Smartphone) forensics out there. Much more complicated and technical subject to get into here.
I bet if we saw a second "target list" we would be going in a totally different direction.
I would drink a beer if I could see a "second target list." :happydance:
As to why the LinkedIN communications were only partially recovered.
Many Apps on the IPhone platform use SQLite databases to hold information. Can't say for sure that LinkedIN is one of them. I will simplify here. This file will grow by asking the operating system for pages of space. As records (e.g. messages in this example) are created they are written to a page. As time goes on the pages fill up and more pages are then added. As deletion of records (e.g. messages) happen the record is only marked or flagged as deleted and not necessarily removed permanently from the file. Periodically, or due to specific rules created by the developer, the space used by this file will be consolidated by moving non-deleted records (e..g. messages) into space that had been marked deleted. This will effectively purge deleted records (e.g. messages) from the file. These purge rules can be aggressive, that is purge all or almost all records marked for deletion, or more relaxed (or lazy) and ignore pages that only have fewer than N number of records marked for deletion. All depends on what the developers did and how they configured SQLite.
If you were to view such a file through something like SQLite Manager you would only see the non-deleted records. However, if you were to open the file in binary mode with a hexidecimal viewer you would be able to see everything in the file whether it was deleted or not.
And one more thing. When the database does these purges and there are no more records on a page they release those pages back to the operating system. Those pages might still have information on them that is recoverable. So long as some other App on the phone didn't ask for pages from the operating system and were given those pages, whatever was on those pages would be recoverable.
It is for this reason that when forensically dealing with a IPhone (or any smart phone) they make a binary image of the entire device and only work from copies of that as information that would have been available could be deleted.
Tried to simplify here. There are detailed documents on SQLite out there on the intertubes and on IPhone (and other Smartphone) forensics out there. Much more complicated and technical subject to get into here.
:goodpost::tyou:
Thank you! This is an excellent explaination and it's even better that you are able to explain it in a way that a person without knowledge in this area can understand!!! For me knowing how it works is one thing....writing it out and explaining it is another. (My brain doesn't work like a writer's brain does).
IMO this is another reason why the investigation is ongoing with no arrests. Capturing the forensic data and cellular data is extremely detailed and it takes an enormous amount of time and a high level skill to analyze the captured information.
![]()
Car in front of me today, is this a sign?
Too funny!!! The Dallas cop killer has scrawled "RB" on the wall in his own blood (think a poster mentioned it here earlier). Everyone is trying to implicate RB........course I guess he is still vacaying up in the Northwest.
You are amazing, thank you from the bottom of my heart. A little bit of information can go a long way. Missy, has been on my mind since this horrible tragedy happened.
I just want to help if I could, she looks SO MUCH like my sister that was taken way too early with cancer. 
Personally, I pray that the Perpetrator/s will be caught, I'm keeping the faith.
Take care and again thank you for your time. Godspeed 
JMO
lThis happened about a couple, three weeks into it. It was discussed here.
There was quite a bit of yapping and posting by POI's (several of us commented that it was a bit unusual); esp in light of this being a capital murder case. And how dumb it would be/was to not have an attorney present or at least coaching you under the circumstances. And then it all went suddenly quiet. The FB accounts were either shut down or clamped down. We didn't hear a word anymore. All the telltale signs. Many (if not the majority on the list has the means -and savvy) to afford good representation and from all indications did.
What do you think where s/he did change her/his "outfit" and combed her/his sweaty hair? Inside church? In a private car? :thinking: myself ....
After initial consultation, an attorney would require a retainer fee.
I agree. Everything I've seen could be easily attributed to advice from friends and/or police simply telling the family to lock down their SM and watch out what you say because it could come back to bite you in the butt..That's one way a client may obtain and use an attorney. But it's certainly not the only one. And from what I've seen here, I strongly doubt anyone has an attorney on retainer, and wouldn't be surprised if no one has hired one in any way. The actions we're seeing so far just look to me like ordinary people doing ordinary things in the wake of a tragedy, and while an attorney can certainly be helpful in all kinds of ways, I see nothing being done that might have required legal guidance to do.
Does this mean firefighter?It seems as though there must have been another person involved as drop off, keep watch, look out, communicate when MB arrived, and get away. I think this is the reason for the relaxed nature of SP. If s/he were alone, I'd think SP would be fixated on looking out door or window. Came in with the get up on and left with it on. Communicated via walkie talkie or something like that...prob had microphone and ear piece inside the face and head cover.�� To keep the deadly secret as secure as possible...would mean as few peeps involved. Then again, a hit guy can be hired from an anonymous person I suspect ( haven't hired one lately) and maybe hit team is 2 - which would then scream to me a B. Anyone know why senior B went to CA?"All JMO of couse.
ps...I'll look at the LI profile. I have one of the top paid accts for biz and actually teach LI to college students and adult ed so very familiar. Can't see private messages of course but like FB there are alot of things you can figure out that most peeps don't know by poking around.
pss. Anyone know where or who posted the photo of the M FF dept lined up outside - think it was a photo from a local/town magazine or newsletter - bur someone on WS posted it on one of these threads and drew bright red circles around certain ��������☹️. Can't find. Just curious.
That's one way a client may obtain and use an attorney. But it's certainly not the only one. And from what I've seen here, I strongly doubt anyone has an attorney on retainer, and wouldn't be surprised if no one has hired one in any way. The actions we're seeing so far just look to me like ordinary people doing ordinary things in the wake of a tragedy, and while an attorney can certainly
be helpful in all kinds of ways, I see nothing being done that might have required legal guidance to do.
We use essential cookies to make this site work, and optional cookies to enhance your experience.