l i n u x - u s e r s - g r o u p - o f - d a v i s
L U G O D
 
Next Meeting:
October 20: Web Application Hacking: How to Make and Break Security on the Web
Next Installfest:
TBD
Latest News:
Oct. 10: LUGOD Installfests coming again soon
Page last updated:
2011 Jan 07 16:36

The following is an archive of a post made to our 'vox-tech mailing list' by one of its subscribers.

Report this post as spam:

(Enter your email address)
Re: [vox-tech] Search Warrant Question re: GUID
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [vox-tech] Search Warrant Question re: GUID



Sounds to me like you should think about a GUID as a unique ID. In this
case it sounds like Gnutella assigns GUIDs to user accounts so it knows
who's who (mildly anonymously). My guess is that it's based on the user
account when they log in to Gnutella or it's assigned by the Gnutella
service to the IP on login.

Any program could have GUIDs as part of how it works, even my hard drive
have UUIDs to keep track of what partition is what. That doesn't mean
that there is some magic number that uniquely identifies your computer
to all who ask in the world. At least not in a way that wouldn't require
law enforcement to break the law to obtain it by hacking into your system.

Enjoy,
Alex

On 01/07/2011 12:26 PM, Bob Scofield wrote:
> I'm trying to understand the notion of a GUID as used in a search warrant for 
> child pornography.  In fact a GUID has nothing to do with the case in which 
> the defendant is charged with possessing child pornography.  The police 
> officer who drafted the warrant has a section discussing various high tech 
> issues that were not used in the case.  But I'm just trying to learn this 
> stuff.
> 
> Below is an excerpt from the warrant.  "CPS" refers to a software program used 
> by the police in child porn cases.
> 
> "CPS will also keep a record of each time an IP address is identified as being 
> a download candidate for suspected child pornography on the Gnutella network.  
> CPS also keeps record of each time a users GUID (Globally Unique Identifier a 
> special type of identifier used in software applications to provide a unique 
> reference number) is identified as being a download candidate for suspected 
> child pornography on the Gnutella network."
> 
> Later in the warrant we have this:
> 
> "An investigator, using the CPS software, can also generate a historical 
> report showing the dates and times that a specific GUID was logged on the 
> Gnutella network, the IP address used and the SHA 1 hash values of any 
> suspected child porn images or videos shared by that computer."
> 
> I've been Googling "GUID," and I see that there are various uses of GUIDs.  
> But it's not crystal clear to me how it works in child porn investigations.  
> Does it mean that a person's Limewire program has a unique GUID, that is 
> different from another copy of the Limewire program?  Or is it that the 
> person's version of Windows has a unique GUID that is different from mine?
> 
> Do Linux and open source programs have GUIDs, or is this just a Microsoft 
> thing?
> 
> Thank you.
> 
> Bob
> _______________________________________________
> vox-tech mailing list
> vox-tech@lists.lugod.org
> http://lists.lugod.org/mailman/listinfo/vox-tech

_______________________________________________
vox-tech mailing list
vox-tech@lists.lugod.org
http://lists.lugod.org/mailman/listinfo/vox-tech



LinkedIn
LUGOD Group on LinkedIn
Sign up for LUGOD event announcements
Your email address:
facebook
LUGOD Group on Facebook
'Like' LUGOD on Facebook:

Hosting provided by:
Sunset Systems
Sunset Systems offers preconfigured Linux systems, remote system administration and custom software development.

LUGOD: Linux Users' Group of Davis
PO Box 2082, Davis, CA 95617
Contact Us

LUGOD is a 501(c)7 non-profit organization
based in Davis, California
and serving the Sacramento area.
"Linux" is a trademark of Linus Torvalds.

Sponsored in part by:
Appahost Applications
For a significant contribution towards our projector, and a generous donation to allow us to continue meeting at the Davis Library.