Live data from Hacker News

I did what is taking government years and millions to do

news.ycombinator.com

11–16 of 16 posts

Re: I did what is taking government years and millions to do

#14

Earlier quoted context omitted.

Do you think uploading straight to a department's S3 bucket would address any of the audit/security concerns? http://docs.aws.amazon.com/AmazonS3/latest/dev/UsingHTTPPOST... I'm looking into https://aws.amazon.com/cloudtrail/

I think you may still run into some issues, but to be honest, if you are looking to make a business out of this, I would find and talk extensively to law enforcement and/or the state's attorney office in your area. I am neither. I did work for several years alongside law enforcement and have been to more crime scenes than I care to recount. I know from that experience that even what appears to be the simplest of task…

I just added the MD5 checksum from AWS S3 to the email alerts for each linked "evidence".

Re: I did what is taking government years and millions to do

#16

There is definitely an opportunity here. Several things you will need to consider: 1. Documented chain of custody for the evidence. For it to hold up in court everybody that touches any evidence must be logged. 2. There is a process that police departments utilize when handling computer data in terms of photos or videos. Most big cities and states have large computer forensics departments that handle this type of evi…

Do you think uploading straight to a department's S3 bucket would address any of the audit/security concerns? http://docs.aws.amazon.com/AmazonS3/latest/dev/UsingHTTPPOST... I'm looking into https://aws.amazon.com/cloudtrail/

You may want to look at https://guardtime.com/ for audit/data tampering concerns.

I'm copy pasting this from their site https://guardtime.com/ksi-technology

* A user interacts with the KSI system by submitting a hash-value of the data to be signed into the KSI infrastructure and is then returned a signature which provides cryptographic proof of the time of signature, integrity of the signed data, as well as attribution of origin i.e. which entity generated the signature.

Post reply on HN