On Tue, Dec 05, 2000 at 06:06:41PM -0800, [EMAIL PROTECTED] wrote: > To prove destruction of evidence you must prove that it existed in a > form that was retrievable ( good luck ) and then that its destruction > was done by a person who was aware of the crime ( not always so in the > networking world ) for the purpose of concealing the crime( burden of > proof on you ). I clean disk space randomly and not according to any > schedule. > Readers interested in this somewhat nuanced topic might find the text "Destruction of Evidence" by Jamie Gorelick (yes, THAT Jamie Gorelick) of interest; it's out of print but still findable through used book sources; publisher is Wiley & Sons, ISBN 0471611387. -- Greg Broiles [EMAIL PROTECTED] PO Box 897 Oakland CA 94604
