N900 Mobile Forensics
 

For those interested in N900 mobile forensics, check out this link by the SANS institute... this article talks about performing computer forensics ON the N900, not FROM the N900... but very interesting...

http://blogs.sans.org/computer-foren...c-cheat-sheet/

Re: N900 Mobile Forensics
 

Wow it's a good read. As a PHP developer I got so many ideas from those SQLite databases, imagine the fun stuff involved linking a website to a phone. Even if the website is private. I could probably set it up to send SMS via a webform, or do some other fun stuff.. haha

Re: N900 Mobile Forensics
 

I will see if I can port srm to the N900 if that's not been done before.
Well...this is somehow a full blown linux install with all the ups and downs.

At least the home directory should be wiped when giving the phone away (e.g. repairs or something else).

Do we have a tutorial on setting up /home/user on the external MMC card? That would leave not much personal data on the phone itself.

Re: N900 Mobile Forensics
 

As the n900 is flash based memory, you gain no real benefit from srm'ing files. Due to wear level algorithms there is no guarantee that srm will overwrite the sectors where the file resided.

On flash based memory you are better off deleting as normal with rm and then doing a wipe of free space.

If anyone capable of porting wanted to help, it would be great* to have secure-delete (article) ported, in particular the sfill program that will wipe free space.

* especially in lieu of an encrypted file system.

Re: N900 Mobile Forensics
 

The opening:

Nokia's new n900 is the unsung hero of the smart phone world.

Sweet. I like the way he started it.