<br /> The Quarterly Magazine for Digital Forensics Practitioners<br /> INSIDE<br /> / Fuzzing Risks for Rich<br /> HTML Applications<br /> / The Criminal Connection<br /> / BlackBerry File Deletion<br /> / Remote Data Collection<br /> CUDA & GPU<br /> FOR SECURITY & FORENSICS<br /> Mark Osborne takes an in-depth look at the number<br /> crunching capabilities of the Graphics Processing Unit<br /> A COPY OF BELKASOFT<br /> WIN!<br /> EVIDENCE CENTRE<br /> ISSUE 14<br /> FEBRUARY 2013<br /> 01<br /> 9 772042 061134<br /> Issue 14 / £14.99 TR Media<br /> / REGULARS / FROM THE LAB / INTRODUCING / Book Reviews<br /> robservations, 360, Tarantula Uncovered Remote Data Collection Penetration Testers<br /> news, irq & more… – The Latest Release for Forensic Analysis Open Source Toolkit<br /> <br /> EDITORIAL<br /> O<br /> <a title="DFM14 - Online page 1" href="http://viewer.zmags.com/publication/cd62c46b?page=1"> The Quarterly Magazine for Digital Forensics Prac</a> <a title="DFM14 - Online page 2" href="http://viewer.zmags.com/publication/cd62c46b?page=2"> </a> <a title="DFM14 - Online page 3" href="http://viewer.zmags.com/publication/cd62c46b?page=3"> EDITORIAL O </a> <a title="DFM14 - Online page 4" href="http://viewer.zmags.com/publication/cd62c46b?page=4"> </a> <a title="DFM14 - Online page 5" href="http://viewer.zmags.com/publication/cd62c46b?page=5"> CONTENTS / DIGITAL FORENSICS MAGAZINE </a> <a title="DFM14 - Online page 6" href="http://viewer.zmags.com/publication/cd62c46b?page=6"> / NEWS NEWS European Cybercrime Centre o</a> <a title="DFM14 - Online page 7" href="http://viewer.zmags.com/publication/cd62c46b?page=7"> Cyber attacks of business bank accounts on the de</a> <a title="DFM14 - Online page 8" href="http://viewer.zmags.com/publication/cd62c46b?page=8"> </a> <a title="DFM14 - Online page 9" href="http://viewer.zmags.com/publication/cd62c46b?page=9"> / FEATURE THE CRIMINAL CONNECTION Using mobile</a> <a title="DFM14 - Online page 10" href="http://viewer.zmags.com/publication/cd62c46b?page=10"> / FEATURE Last month the Centre for Soc</a> <a title="DFM14 - Online page 11" href="http://viewer.zmags.com/publication/cd62c46b?page=11"> / Ethical hacking The Leveson inquiry aside there</a> <a title="DFM14 - Online page 12" href="http://viewer.zmags.com/publication/cd62c46b?page=12"> / FEATURE extract and analyse. In a murder in</a> <a title="DFM14 - Online page 13" href="http://viewer.zmags.com/publication/cd62c46b?page=13"> </a> <a title="DFM14 - Online page 14" href="http://viewer.zmags.com/publication/cd62c46b?page=14"> / LETTERS 360° HYour chance to have your say… </a> <a title="DFM14 - Online page 15" href="http://viewer.zmags.com/publication/cd62c46b?page=15"> available at present to new subscribers. We are l</a> <a title="DFM14 - Online page 16" href="http://viewer.zmags.com/publication/cd62c46b?page=16"> </a> <a title="DFM14 - Online page 17" href="http://viewer.zmags.com/publication/cd62c46b?page=17"> / LEAD FEATURE CUDA & GPU FOR SECURITY & FOREN</a> <a title="DFM14 - Online page 18" href="http://viewer.zmags.com/publication/cd62c46b?page=18"> / LEAD FEATURE Figure 1. Basic </a> <a title="DFM14 - Online page 19" href="http://viewer.zmags.com/publication/cd62c46b?page=19"> Byte0 Byte1 Byte2 Byte3 ……….. </a> <a title="DFM14 - Online page 20" href="http://viewer.zmags.com/publication/cd62c46b?page=20"> / LEAD FEATURE The GPU/CUDA version is le</a> <a title="DFM14 - Online page 21" href="http://viewer.zmags.com/publication/cd62c46b?page=21"> </a> <a title="DFM14 - Online page 22" href="http://viewer.zmags.com/publication/cd62c46b?page=22"> / LEAD FEATURE Lesson 4: This shows the </a> <a title="DFM14 - Online page 23" href="http://viewer.zmags.com/publication/cd62c46b?page=23"> tens = ( hash_idx - (huns *100) ) /10 ; cuda_salt</a> <a title="DFM14 - Online page 24" href="http://viewer.zmags.com/publication/cd62c46b?page=24"> / LEAD FEATURE </a> <a title="DFM14 - Online page 25" href="http://viewer.zmags.com/publication/cd62c46b?page=25"> </a> <a title="DFM14 - Online page 26" href="http://viewer.zmags.com/publication/cd62c46b?page=26"> </a> <a title="DFM14 - Online page 27" href="http://viewer.zmags.com/publication/cd62c46b?page=27"> / LEGAL EDITORIAL LEGAL EDITORIAL Child Abuse</a> <a title="DFM14 - Online page 28" href="http://viewer.zmags.com/publication/cd62c46b?page=28"> / LEGAL FEATURE FRAUD AND RELATED MATTERS Exa</a> <a title="DFM14 - Online page 29" href="http://viewer.zmags.com/publication/cd62c46b?page=29"> 1. A knowing misrepresentation of the truth o</a> <a title="DFM14 - Online page 30" href="http://viewer.zmags.com/publication/cd62c46b?page=30"> / LEGAL FEATURE We won't examine the enti</a> <a title="DFM14 - Online page 31" href="http://viewer.zmags.com/publication/cd62c46b?page=31"> 2006 is no exception. Section 1 of the Act is an </a> <a title="DFM14 - Online page 32" href="http://viewer.zmags.com/publication/cd62c46b?page=32"> / LEGAL NEWS ALERT LEGAL NEWS ALERT John McAfee </a> <a title="DFM14 - Online page 33" href="http://viewer.zmags.com/publication/cd62c46b?page=33"> </a> <a title="DFM14 - Online page 34" href="http://viewer.zmags.com/publication/cd62c46b?page=34"> / MEET THE PROFESSIONALS MEET THE DF PROFESSI</a> <a title="DFM14 - Online page 35" href="http://viewer.zmags.com/publication/cd62c46b?page=35"> I also believe in the development of learning</a> <a title="DFM14 - Online page 36" href="http://viewer.zmags.com/publication/cd62c46b?page=36"> / COMPETITION COMPETITION / WIN A Belkasoft Ev</a> <a title="DFM14 - Online page 37" href="http://viewer.zmags.com/publication/cd62c46b?page=37"> </a> <a title="DFM14 - Online page 38" href="http://viewer.zmags.com/publication/cd62c46b?page=38"> / FEATURE FUZZING RISKS FOR RICH HTML APPLICAT</a> <a title="DFM14 - Online page 39" href="http://viewer.zmags.com/publication/cd62c46b?page=39"> / Identifying Insecure Code The biggest challenge</a> <a title="DFM14 - Online page 40" href="http://viewer.zmags.com/publication/cd62c46b?page=40"> / FEATURE </a> <a title="DFM14 - Online page 41" href="http://viewer.zmags.com/publication/cd62c46b?page=41"> / Identifying the problem XSS is not the only iss</a> <a title="DFM14 - Online page 42" href="http://viewer.zmags.com/publication/cd62c46b?page=42"> </a> <a title="DFM14 - Online page 43" href="http://viewer.zmags.com/publication/cd62c46b?page=43"> </a> <a title="DFM14 - Online page 44" href="http://viewer.zmags.com/publication/cd62c46b?page=44"> / FEATURE BLACKBERRY FILE DELETION AND THUMBNAIL</a> <a title="DFM14 - Online page 45" href="http://viewer.zmags.com/publication/cd62c46b?page=45"> Figure 2 data from a FAT volume, those different</a> <a title="DFM14 - Online page 46" href="http://viewer.zmags.com/publication/cd62c46b?page=46"> / FEATURE Figure 5 Of </a> <a title="DFM14 - Online page 47" href="http://viewer.zmags.com/publication/cd62c46b?page=47"> Figure 7 Figure 8 By study</a> <a title="DFM14 - Online page 48" href="http://viewer.zmags.com/publication/cd62c46b?page=48"> / FEATURE Figure 10 (hig</a> <a title="DFM14 - Online page 49" href="http://viewer.zmags.com/publication/cd62c46b?page=49"> Figure 14 Figure 12 Cellebrite's UFED</a> <a title="DFM14 - Online page 50" href="http://viewer.zmags.com/publication/cd62c46b?page=50"> </a> <a title="DFM14 - Online page 51" href="http://viewer.zmags.com/publication/cd62c46b?page=51"> / APPLE AUTOPSY APPLE AUTOPSY One year of Tim Co</a> <a title="DFM14 - Online page 52" href="http://viewer.zmags.com/publication/cd62c46b?page=52"> / FEATURE APPLE ONE YEAR ON A year later, we s</a> <a title="DFM14 - Online page 53" href="http://viewer.zmags.com/publication/cd62c46b?page=53"> Stickies counterpart used on Macs. In addition i</a> <a title="DFM14 - Online page 54" href="http://viewer.zmags.com/publication/cd62c46b?page=54"> / FEATURE Notifi</a> <a title="DFM14 - Online page 55" href="http://viewer.zmags.com/publication/cd62c46b?page=55"> has emboldened Google to make inroads in controll</a> <a title="DFM14 - Online page 56" href="http://viewer.zmags.com/publication/cd62c46b?page=56"> / NEXT ISSUE COMING SOON… A round-up of feat</a> <a title="DFM14 - Online page 57" href="http://viewer.zmags.com/publication/cd62c46b?page=57"> / FROM THE LAB TARANTULA UNCOVERED In the Ma</a> <a title="DFM14 - Online page 58" href="http://viewer.zmags.com/publication/cd62c46b?page=58"> / FROM THE LAB </a> <a title="DFM14 - Online page 59" href="http://viewer.zmags.com/publication/cd62c46b?page=59"> Tarantula Software Homepage lighter, and more co</a> <a title="DFM14 - Online page 60" href="http://viewer.zmags.com/publication/cd62c46b?page=60"> / FROM THE LAB · MediaTek (MTK): MT6217 MT621</a> <a title="DFM14 - Online page 61" href="http://viewer.zmags.com/publication/cd62c46b?page=61"> Tarantula Software Report phone in these cases, </a> <a title="DFM14 - Online page 62" href="http://viewer.zmags.com/publication/cd62c46b?page=62"> </a> <a title="DFM14 - Online page 63" href="http://viewer.zmags.com/publication/cd62c46b?page=63"> / FEATURE FRAUD PREVENTION IN UNIFIED COMMUNICAT</a> <a title="DFM14 - Online page 64" href="http://viewer.zmags.com/publication/cd62c46b?page=64"> / FEATURE Figure 1.</a> <a title="DFM14 - Online page 65" href="http://viewer.zmags.com/publication/cd62c46b?page=65"> compromised and continues to provide it with a fu</a> <a title="DFM14 - Online page 66" href="http://viewer.zmags.com/publication/cd62c46b?page=66"> / FEATURE existed with `legacy' telephony net</a> <a title="DFM14 - Online page 67" href="http://viewer.zmags.com/publication/cd62c46b?page=67"> Figure 4. Rogue PBX/Trunk Hijacking Attack Result</a> <a title="DFM14 - Online page 68" href="http://viewer.zmags.com/publication/cd62c46b?page=68"> </a> <a title="DFM14 - Online page 69" href="http://viewer.zmags.com/publication/cd62c46b?page=69"> / FEATURE REMOTE DATA COLLECTION In this article</a> <a title="DFM14 - Online page 70" href="http://viewer.zmags.com/publication/cd62c46b?page=70"> / FEATURE NATIVE (LOCAL MACHINE) </a> <a title="DFM14 - Online page 71" href="http://viewer.zmags.com/publication/cd62c46b?page=71"> Platform File Hash Data Hash File Has</a> <a title="DFM14 - Online page 72" href="http://viewer.zmags.com/publication/cd62c46b?page=72"> / FEATURE Does RGC accurately prevent wr</a> <a title="DFM14 - Online page 73" href="http://viewer.zmags.com/publication/cd62c46b?page=73"> Digital ForensicS / magazine BACK ISSUES The Quar</a> <a title="DFM14 - Online page 74" href="http://viewer.zmags.com/publication/cd62c46b?page=74"> / FEATURE MOBILE MALWARE An Ethical Hackers vi</a> <a title="DFM14 - Online page 75" href="http://viewer.zmags.com/publication/cd62c46b?page=75"> / Malware Infections Rising To prevent malware sp</a> <a title="DFM14 - Online page 76" href="http://viewer.zmags.com/publication/cd62c46b?page=76"> / FEATURE DIGITAL FORENSICS IN INDIA Technolo</a> <a title="DFM14 - Online page 77" href="http://viewer.zmags.com/publication/cd62c46b?page=77"> Figure 2 is showing an alarming situation reg</a> <a title="DFM14 - Online page 78" href="http://viewer.zmags.com/publication/cd62c46b?page=78"> / FEATURE Let us hope that India will soo</a> <a title="DFM14 - Online page 79" href="http://viewer.zmags.com/publication/cd62c46b?page=79"> </a> <a title="DFM14 - Online page 80" href="http://viewer.zmags.com/publication/cd62c46b?page=80"> / BOOK REVIEWS BOOK REVIEWS Penetration Tester</a> <a title="DFM14 - Online page 81" href="http://viewer.zmags.com/publication/cd62c46b?page=81"> looking at the do's and don'ts of fraud detection</a> <a title="DFM14 - Online page 82" href="http://viewer.zmags.com/publication/cd62c46b?page=82"> / COLUMN IRQ Why can't we all just get along? Gby</a> <a title="DFM14 - Online page 83" href="http://viewer.zmags.com/publication/cd62c46b?page=83"> </a> <a title="DFM14 - Online page 84" href="http://viewer.zmags.com/publication/cd62c46b?page=84"> </a>