Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

The alternative is treating systems based evidence the same as witnesses. They're examined and cross referenced because they are rightly not presumed to be reliable.


I like this idea but since software and the data that runs through it changes constantly how would a system be interrogated if an incident were several years ago and the complete data picture cannot be reproduced?


Then the maintainers of the system have failed in their duty, the evidence cannot be verified, and it must be thrown out.




Consider applying for YC's Summer 2026 batch! Applications are open till May 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: