2010-11-16 limewire made me do it

LimeWire Made Me Do It

Frederick S. [email protected]

www.ComputerForensicsDigest.com

Federal Public Defenders of Nevada16 November 2010

www.FrederickLane.com

And Other Digital Follies


Seminar Logistics

• Ask ‘em If You’ve Got ‘em

• Download a PDF of slides from:

ComputerForensicsDigest.com

• Email Me: [email protected]

www.FrederickLane.com www.ComputerForensicsDigest.com

Seminar Overview

• Introduction

• Basics of P2P Software

• Evidence of Intent

• Law Enforcement Initiatives

• P2P in the Courtswww.FrederickLane.com www.ComputerForensicsDigest.com

Personal Background• Computer

Forensics Expert



Forensics Expert

• Author of 5 Books



Forensics Expert


• Chair, Burlington (VT) School Board



Forensics Expert



• Attorney & Lecturer



Forensics Expert



• Attorney & Lecturer

• Privacy Expert


Computer Forensics Experience

• A Decade of Computer Forensics Experience -- United States v. Dean (1999)

• Civil and Criminal Cases

• Emphasis on Obscenity and Child Pornography

• Training in X-Ways Forensics

• ComputerForensicsDigest.com & Digital Dirt Blawg


• Sneakernets


“And File Sharing Begat P2P…”

• Sneakernets

• 1999 – Napster



• Sneakernets


• DMCA = #epicfail



• Sneakernets



• 2000 - Gnutella



• Sneakernets



• 2000 – Gnutella

• 2009 – P2P the largest source of network traffic



Popular Peer-to-Peer Networks

• Gnutella, Gnutella2

• BitTorrent

• FastTrack

• KaZaA

• eDonkey

• Mininova

• Skype


Popular Peer-to-Peer Clients

• LimeWire

• FrostWire

• BitComet

• Vuze

• µTorrent

• MP3 Rocket

• BitTorrent

• Morpheus

• LimeWire Pro

• Ares Galaxy


Typical Operation of P2P Software

• Users Download Client Software and Register for an Account

• Users Search for Specific Types of Content

• Users Click on a Search Result to Initiate Download

• P2P Software Typically Downloads to a “Shared” Directory

• Content Can Be Made Instantly Available to Other Users of P2P Software


Core Issue: Extent of User Control

• Nature and Name of Downloaded Contents

• Evidence Downloaded Files Were “Previewed” During Download Process

• Search Terms Used

• Are Client Settings Default or Specialized? Directories, Sharing, etc.

• Evidence of Degree of Sophistication


Federal Anti-CP Programs

• FBI Cyber Crimes Program

• Innocent Images National Initiative

• Internet Crimes Against Children (ICAC)

• National Center for Missing and Exploited Children

• Myriad Task Forces

• Operation Fairplay (Wyoming/TLO)


Typical P2P Investigation

• Law Enforcement Officer Uses P2P Client to Search for Contraband – Keywords & Hashes

• Download of Possible Contraband Initiated

• P2P Client Shows IP Address of Source

• List of Files at That Source Can Be Viewed

• IP Address Is Traced to Physical Address

• Warrant Obtained for Search and Seizure of Computer Equipment at That Address


P2P In the Courts

• An area of increasing interest for courts: roughly 300 federal decisions involving P2P software – only 25 or so state decisions

• Does law enforcement use of P2P client constitute “search” of suspect’s computer?

• Questions of control and distribution by suspect

• Enhancements under sentencing guidelines


LimeWire Made Me Do It

Frederick S. [email protected]


Federal Public Defenders of Nevada16 November 2010

www.FrederickLane.com

And Other Digital Follies


2010-11-16 limewire made me do it

Law

file sharing begat p2p

itsneakernets1999 napsterdmca

epicfail2000 gnutella2009

epicfail2000 gnutella

digital follieswww

digital dirt blawgwww

itseminar logisticsask

criminal casesemphasis