Daily Blog #48: Saturday Reading 8/10/13

Hello Reader,
            It's Saturday! Hooray! The week is over and fedex pickup ends earlier today meaning you either have extra time in the lab or a some time at home. Either way, get some coffee and lets get our forensic reading going.

1. Joachim Metz has updated his volume shadow specification paper, not this week bu recently enough that I didn't read it until this week. If you are at all curious about how the volume shadow service data structures are stored then read this for what I believe to be the most detailed guide outside of whatever internal team at Microsoft developed it. In addition if you care more about the usage of volume shadow copies in your analysis and the existence of unallocated space in VSC's you should read this paper he presented which will answer questions you didn't even know you had.

2. Did you read yesterday's blog? No? Oh well we had another Forensic Lunch with David Nides, Kyle Maxwell, Joseph Shaw and the fine fellows I work with at G-C Partners. Tune in and keep up with what I think was a great hour of forensic discussion.

3. Andrea London has posted the slides for her talk at DefCon http://www.strozfriedberg.com/wp-content/uploads/2013/08/DefCon-2013.pdf tilted 'The Evidence Self Destructing Message Apps Leave Behind'. Her talk covers a wider base of these applications than I've seen covered before and it's a good read as she and Kyle O'Meara go deep into the file system internals and network traffic exchanged.

4. Lenny Zeltser posted a nice retrospective of how teaching Malware Analysis has grown, http://blog.zeltser.com/post/57795714681/teaching-malware-analysis-and-the-expanding-corpus-of. It's a nice short read and reinforced the idea that his advice remains the same 10 years later:

• Too many variables to research without assistance
• Ask colleagues, search Web sites, mailing lists, virus databases
• Share your findings via personal Web sites, incidents and malware mailing lists

5. If you are doing USB device forensics and have a Windows 8 system that Woanware's USB Device Forensics application does not support yet then check out TzWork's USB Storage Parser. So far its the only tool that I have that take the multiple Windows 8 USB artifacts and combines them to a single report of activity.

6. Hal Pomeranz put out a new Command Line Kung Fu entry this week, http://blog.commandlinekungfu.com/2013/08/episode-169-move-me-maybe.html, always a good read.

7.  On an earlier Forensic Lunch you may have heard Rob Fuller talk about anti-forensic hard drive custom firmwares. Going more into that topic here is a great article about Hard Drive hacking and showing how these firmware changes are researched, implemented and performed. If you are dealing with an advanced subject you might want to be aware of these new possibilities! http://spritesmods.com/?art=hddhack

8. In this week Forensic Lunch we talked about parsing carved binary plists. For those of you looking to implement your own parsers or just try to understand the format better here are two sources. The first is the OSX code for binary plists, http://opensource.apple.com/source/CF/CF-550/CFBinaryPList.c, and a great write up on plist forensics by CCL http://www.cclgroupltd.com/images/property%20lists%20in%20digital%20forensics%20new.pdf.

That's all I have for this Saturday Reading. I hope these links are enough to get you through your day. Tomorrow is Sunday Funday and I have yet another challenge waiting for you to solve. This week we will have 'winners choice' where the winner can pick from a free ticket to PFIC or a year license to AccessData's Triage tool!

Tidur Bayi

Tidur Bayi - Tiap bayi memiliki pola tidur yang tak
sama dengan setiap bayi lainnya. Ada yang dapat tidur semalaman tanpa tbangun, ada
juga yang bangun beberapa kali karena ingin menyusu atau karna ganti popok. Kapan bayi akan mulai dapat tidur semalam tanpa terbangun pun berbeda-beda pada tiap bayi.Akan tetapi, tidur bayi nyenyak dapat Bunda usahakan dengan melakukan pembiasaan. Karena, pola

Bayi Tidur

Bayi Tidur - Beberapa bayi akan tidur dengan cukup serta lama selama hari-hari pertamanya dan hanya akan bangun sebentar karena mungkin kurang menarik untuk menyusu. Sementara bayi  lain malah terkadang sebaliknya, bangun, rewel serta harus sering disusui. Kedua bayi dengan kebiasaan tersebut adalah normal. Siklus tidur bayi sangatlah berhubungan dengan seberapakah sering ia menyusu. Setelah

Gangguan Kesehatan Wanita penyebab Sulit Hamil

Gangguan Kesehatan Wanita sangat beragam,
namun yang tentu tidak ingin dialami adalah gangguan kesehatan yang menyebabkan
seorang wanita sulit untuk mendapatkan keturunan. Berdasarkan sebuah penelitian
diketahui
bahwa sekitar 10-25%  pasangan di Amerika
Serikat tidak subur. Dan yang yang menjadi penyebab umum wanita yang tidak
subur adalah karena adanya masalah dengan ovulasi (pelepasan sel

Daily Blog #47: Forensic Lunch 8/9/13

Hello Reader,
Going to try something different today and see if I can embed our Forensic Lunch live stream in the blog!

Forensic Lunch is something we are trying to do every Friday where we talk about updates to research from around the community as well as our challenges and successes here in the G-C Lab. If all goes well you can watch the show either love or recorded in the embedded Youtube below!

Tomorrow is Saturday Reading and I have some good articles and papers to pass on and don't forget Sunday for our weekly forensic contest!

Gangguan Kesehatan Remaja yang Semakin Sering Terjadi

Gangguan Kesehatan Remaja berkaitan dengan
perubahan psikis atau mental emosional. Usia remaja  adalah masa proses pertumbuhan seseorang dari
anak-anak menjadi dewasa. Pada fase ini ditandai dengan munculnya bulu-bulu disekitar kelamin,
ketiak, kumis cambang jenggot, suara membesar dan perkembangan organ-organ
seksual yang siap menghasilkan keturunan.



Fakta mengenai Gangguan Kesehatan

A War on Patients: Panel Says EHRs Should Not Be Vetted Before Marketing and Deployment

"First, do harm - it's a learning experience, and injured or dead patients are just a bump in the road, anyway" - the apparent creed of the healthcare computing hyperenthusiasts

Joe Conn and Modern Healthcare published the following article:

Work group says OK to some HIT safety regs (link), Joe Conn, Modern Healthcare, Aug. 7, 2013

What is important is what safety regs the Workgroup said "no" to.  It comes as no surprise:

A federally chartered special work group with representatives from three federal agencies has submitted its draft recommendations on establishing a regulatory framework for health information technology. Chief among those recommendations is that health IT should not be subjected to pre-market federal regulation, but there were a few exceptions.

The exceptions are narrow, and are likely already covered as Class III medical devices by FDA (see http://www.fda.gov/MedicalDevices/DeviceRegulationandGuidance/Overview/ClassifyYourDevice/):

The exceptions under which there should be FDA regulation, according to the work group, include medical device accessories to be defined as such by the FDA; certain forms of “high risk” clinical decision support systems, such as “computer aided diagnostics,” also to be defined by the FDA; and some “higher risk software” use cases to be defined by the committee's own safety work group.

They did acknowledge the need for postmarket surveillance:

... The group also recommended: developing a federally supported, post-market surveillance system for health IT products “to ensure safety-related decision support is in place,” creating a process for gathering information on safety issues, aggregated at the federal level and establishing a public process for “customer rating of HIT to enhance transparency.”

Dr. David Bates [a professor at Harvard Medical School], chairman of the Food and Drug Administration Safety Innovation Act work group, presented the preliminary findings Wednesday at a meeting of HHS' Health Information Technology Policy Committee.

Let me translate this to plain English:  the health IT systems that go in (and their upgrades and patches) are recommended to be free from pre-marketing regulation and regulatory vetting.  Patients are to be the guinea pigs for testing of the software.  

If patients are harmed or killed, they get the honor of being named as "postmarket surveillance learning cases" who gave their all for the betterment of healthcare information technology.  

(Without their consent, but who needs consent to test experimental and unvetted devices on guinea pigs?)

Bates did express some liability concerns:

Asked during a question and answer period following his presentation whether the committee had considered the liability implications of its recommendations, Bates said, “It's not something we discussed at length, but it's something we can discuss over the next month.”

I, on the other hand, as a legal consultant on health IT-related medical errors and evidence tampering, am considering liability issues.

Unfortunately, patients would rather be whole than in lawsuits (or dead).  Also, sadly, it's physicians and nurses who will bear the brunt, if not all, of the liability for bad outcomes due to defective IT such as at these two recent posts, with vendor alerts regarding serious flaws of medication and other orders not being retained:

• Another Health IT "Glitch" - Can Digital Disappearing Ink Kill Patients? - Siemens Safety Advisory Notification #1

• Can Digital Disappearing Ink (An EHR "Glitch") Kill Patients? Part 2 - Siemens Safety Advisory Notification #2

• and the others posted at this blog at query link: http://hcrenewal.blogspot.com/search/label/glitch

A clarification for all those proletarians who lack Harvard educations, and for the Workgroup members as well. Allow me to point out that the above manufacturer safety alerts of life-threatening fundamental flaws (involving entered text that "disappears", apparently found in live-patient scenarios, and the other "glitches" that did cause life-threatening errors sometimes en masse involving thousands of patients such as another apparent Siemens debacle at http://hcrenewal.blogspot.com/2011/11/lifespan-rhode-island-yet-another.html) would likely not have occurred if the systems had been vetted before being turned loose on patients.

Finally:  David and panel members, my mother and I thank you profusely. 

Oh wait...my mother can't thank you, she's dead from the toxic effects of un-premarket-vetted health IT on simple care processes at the very hospital where I performed my residency two decades ago.

She might have died a few times before she actually did thanks to other IT "glitches" that cropped up during her recovery from the first one, but I was able to (in one case, by sheer happenstance of showing up at  the right time) discover or provide staff with information to work around additional unvetted-health-IT flaws before those did her in.

It's taken more than a decade for critical-thinking, unconflicted writers and researchers ("iconoclasts") to force cybernetics-over-all hyperenthusasts (see here) like Bates and his panel members to own up the risks of health IT at all, e.g. via sites like this blog and this teaching site. These panel members IMO have their heads buried in sand.

Dr. Bates and his panel are, in my opinion, healthcare IT extremists, which is in part the apparent holding of the belief that computers have more rights than patients - and the other beliefs mentioned in this post:  "Another Health IT 'Glitch' - Can Digital Disappearing Ink Kill Patients?" at http://hcrenewal.blogspot.com/2013/08/another-health-it-glitch-can.html.

-- SS

Food Reward Friday

This week's lucky "winner"... cola!

Thirsty yet?  Visual cues such as these are used to drive food/beverage seeking and consumption behavior, which are used to drive profits.  How does this work?  Once you've consumed a rewarding beverage enough times, particularly as a malleable child, your brain comes to associate everything about that beverage with the primary reward you obtained from it (calories, sugar, and caffeine).  This is simply Pavlovian/classical conditioning*.  Everything associated with that beverage becomes a cue that triggers motivation to obtain it (craving), including the sight of it, the smell of it, the sound of a can popping, and even the physical and social environment it was consumed in-- just like Pavlov's dogs learned to drool at the sound of a bell that was repeatedly paired with food.

Read more »

Gambar wallpaper motivasi : Arah waktu itu seperti anak panah

Gambar wallpaper motivasi:

Waktu seperti arah mata panah

Gambar wallpaper motivasi : Arah waktu itu satu

---

Klik untuk mengetahui berapa resolusi monitor anda

Kata kata indah bergambar : Waktu

Pengertian Kesehatan Reproduksi

Pengertian kesehatan reproduksi berdasarkan organisasi kesehatan dunia, WHO ialah suatu kondisi
fisik, mental serta sosial yang utuh, tidak hanya terbebas dari penyakit ataupun
kecacatan dalam semua aspek yang berkaitan dengan sistem reproduksi,
fungsi dan prosesnya. Atau Sebuah kondisi di mana manusia bisa
menikmati kehidupan sekksualnya dan mampu menjalankan fungsi serta proses
reproduksi

Pria Inggris Ini Tewas, 'Hidup Lagi' Lalu Mati Kembali

Rumah sakit Raigmore, tempat diotopsinya Pria ini (BBC)

Pria Inggris Ini Tewas, 'Hidup Lagi' Lalu Mati Kembali, Seorang pria asal negeri Ratu Elizabeth jatuh dari Jembatan Kessock, Inverness, Inggris pada Jumat (11/06/2013). Segala upaya telah dilakukan untuk menyadarkannya, namun akhirnya tak membuahkan hasil. Nafasnya tidak lagi berhembus, jantung berhenti berdetak. Ia dinyatakan meninggal dunia di lokasi kejadian.

Jenazah korban lalu dibawa ke kamar jenazah Rumah Sakit Raigmore. Di sanalah keanehan terjadi. Saat pemeriksaan rutin dilakukan, staf merasa curiga, sebab, jasad yang semestinya kaku menunjukkan "tanda-tanda kehidupan".

Setelah sempat memicu kehebohan, paramedis dipanggil, akhirnya, orang itu kemudian dinyatakan meninggal dunia.

Tim penyelamat ketika sedang menarik Pria yang jatuh ke laut (BBC)

Kasus ini kemudian diselidilki oleh lembaga NHS Highland dan Procurator Fiscal Service, jaksa penyelidik yang menyelidiki kasus kriminal serta kematian mendadak atau mencurigakan.

Pihak Layanan darurat telah dipanggil ke Jembatan Kessock sekitar 20:20 pada hari Jumat setelah laporan seorang pria jatuh dari persimpangan ke laut.

"Setelah korban yang sempat tenggelam diangkat, staf ambulans mengupayakan untuk menyadarkan pasien," kata juru bicara Scottish Ambulance Service, seperti dilansir BBC 11 Juni 2013.

"Tidak ada respon. Penilaian klinis dilakukan termasuk pemantauan jantung, kemudian diketahui pasien telah meninggal dunia." Lalu dikirimlah ia ke kamar jenazah. Namun, kemudian panggilan aneh diterima pihak layanan ambulans. 

"Setelah menerima panggilan darurat 999 dari kamar mayat di Rumah Sakit Raigmore, kami segera merespon, segera ke rumah sakit dengan membawa serta tim ahli serangan jantung. Tapi, pasien kemudian dikonfirmasi sudah tak bernyawa."

Sementara, pihak tim penyelamat pantai Royal National Lifeboat Institution (RNLI) juga tak mau banyak bicara. "Insiden ini sedang jadi subyek investigasi lembaga lain. Maka dari itu, tak sepatutnya kami mengeluarkan pernyataan atau komentar."