Minister promises that Part III is coming

[Caspar Bowden]

>admin@chiark.greenend.org.uk] On Behalf Of Ian Brown
..
>> More simply, the author of the malware could just release a
>> pornography-viewer application which read data bizarrely stegoed into
>> the interstices of your hard drive, by a worm which never itself
touches
>> the disk. Neither the worm nor the viewer leave any metadata, by
design.

>Which application would the prosecution therefore allege had been used
>by the suspect to view the KP?

Yes. The worm would thoughtfully leave a copy of the viewer behind.

>Could you be sure your worm would at no point be swapped to disk by the
>OS, leaving evidence in the swapfile?

NonPaged Pool

--
Caspar Bowden