Re: [inbox] Re: [Full-Disclosure] Reacting to a server compromise

[Valdis.Kletnieks@vt.edu]

On Tue, 05 Aug 2003 09:45:59 +0200, Michal Zalewski said:
> On Mon, 4 Aug 2003, Curt Purdy wrote:
> 
> > Actually the traditionally accepted court evidence is real-time printouts o
f
> > data received by the syslog server.
> 
> So what would stop anyone from replacing some of the printouts after the
> fact?

It's kind of hard to replace sheet 1,487 from a box of fanfold paper. :)

PGP signature