[Am-info] Deleted E-mail Can Still Reside on Hard Drive

[Eric M. Hopper]

On Wed, Jan 30, 2002 at 11:09:27PM +0000, John Poltorak wrote:
> The idea that people working in a large organisation keep emails on
> their hard drive is plain silly.

	Often there are copies on their hard-drives for various reasons.
Some because of automatic copies made in the process of working with
mail on the server, and some because of purposeful copying into local
mail folders.

> Most corporates have a mail system such as Lotus Notes or Microsoft
> Exchange.  Any mails sent will be on a remote mail database somewhere
> far away from your hard drive.  A 'computer forensics expert' who
> comes up with something like the quote above has no credibility in my
> eyes.

	Sorry, that's how it usually works whether you think so or not.
Besides, he didn't specify client-side hard-drives.  So your argument
falls down for that reason too.  email left around on hard-drives is a
big part of how the Iran-Contra affair was broken open.

Have fun (if at all possible),
-- 
"It does me no injury for my neighbor to say there are twenty gods or no God.
It neither picks my pocket nor breaks my leg."  --- Thomas Jefferson
"Go to Heaven for the climate, Hell for the company."  -- Mark Twain
-- Eric Hopper (hopper@omnifarious.org  http://www.omnifarious.org/~hopper) --