I didn't even know Microsoft took calls from the general public about bullshit (You should do this feature this way, I want this, fix this).
In fact, what's the number? Which users have gotten the number? Can you find it on microsoft.com?
Maybe if they packed their 800 number for reporting bugs into the THIS PROGRAM HAS PERFORMED AN ILLEGAL OPERATION AND WILL BE SHUT DOWN dialog box they'd get just a few more bug reports?
Paul Thurrott's SuperSite for Windows is dedicated to providing all of the information you need to evaluate Microsoft's current and upcoming Windows operating system technologies. These exciting products include Windows XP Service Pack 1 (SP1), Windows XP Media Center Edition (code-named Freestyle) Windows XP Tablet PC Edition, Windows Media 9 Series (code-named Corona), and Windows Server 2003, which will launch in April.
Sounds like it'll be an EXCITING, unbiased, hard hitting, honest review to me!
Maybe that's not the best example. But even when you read technical treatises on Microsoft technologies the authors always manage to pack in gushing, surrealist praise.
Wasn't there even a book? THE AWESOME POWER OF DIRECT3D? Amusingly enough, it was released
several months after John Carmack and the rest of the gaming industry started bitching Microsoft out for pushing Direct3D over the clearly superior OpenGL.
I'd hate to be all conspiracy here, but damn it's either that or believing that all Microsoft reviewers/writers are really stupid.
seriously, ibook + osx + fink + apple X11 == everything you want in a linux laptop, except for the ugly fonts. If you're dying for more speed get the new 12" G4 Powerbook (~$1700), which is just like the ibook only smaller in every dimension, and faster.
OSX is not a Linux replacement. Although it may be a good Windows replacement. If someone specifically asks for Linux, chances are they're not interested in what OSX has to offer.
I'm having a problem right now with a tenant who is a complete alcoholic. She refuses to get help (I know a few people who could help her), has assaulted me, makes noise all night, and threatens us on a daily basis, at every opportunity (once we called the cops to report domestic violence because we thought her boyfriend was beating her, it turns out they were both just drunk and talking trash, and she's been mad at me ever since). The police don't care about us. They told us if we're afraid we should move out, and don't want to hear it.
She seemed like a nice person at first...
We live in New York City. It will take approximately 6+ months to evict her. I imagine she's not going to pay rent anymore.
From now on, I am background checking EVERYONE and requiring 5 personal recommendations. Credit history, driving records, convictions, if their name appears in a database I want to see what it says. I hate going through it myself, but after this god damned nightmare I can understand why people insist on it.
If you're a fuckup, that's your damned fault. The rest of us are trying to be decent.
Now if only the credit reporting agencies had correct data once in awhile.
Apple hardware. Very sexy, reliable, very intruiging, none of the crap of x86. Linux and Apple hardware seem a nice blend.
In fact, I will buy a Powerbook right now. Fortunately Apple has seen the light, and I can buy one to run Linux without paying the MacOS X tax.
What? The new Powerbooks have soft modems? No problem! Apple "gets it"! I'll just ask for the specs and write my own driver!
Oh wait, I can't do either of these things. And more! Apple doesn't "get it" at all! I've been deceived by the people telling me that they Thunk Differently.
Also, you don't need an executable heap/stack for these overflows to cause damage (overwrite access tokens, change flag states, etc.)
Sure every little bit helps, but it's still kind of a losing battle.
IMO, it would be better to spend more time educating people and making it socially unacceptable to use C/C++ when they could just as easily use a high level language with bounds checking. You know, like LISP people have been saying for 30 years..;)
But alas this is a touchy subject.
THE XSL VULNERABILITY IS SNAKE OIL
on
Cross-Site-TRACE
·
· Score: 5, Informative
If your applications aren't vulnerable to XSS, you have nothing to worry about w.r.t. HTTP TRACE. If your applications ARE vulnerable to XSS, you have bigger problems than HTTP TRACE.
If users visiting other sites somehow have untrusted code running in them, which performs an HTTP TRACE to your site, the user's browser is broken for not enforcing domain restrictions.
Ignore this advisory, it's sensationalist snakeoil. Leaving HTTP TRACE enabled is harmless (although you probably don't use it, so disable it anyway).
## ## haX0red Intel C/C++ Compiler ## ## This simple shell script will h4x0r the icc compiler so that ## it skips the check for a valid license file. I was inspired ## to do this because of the asshole Intel engineer at ## LinuxWorld 2002 who did everything he could to dodge ## my questions about Intel's compiler and other general rudeness. ## ## I developed this hack against this version: ## ## Intel(R) C++ Compiler for 32-bit applications, Version 5.0.1 Build 010730D0 ## Copyright (C) 1985-2001 Intel Corporation. All rights reserved. ## ## ## Usage: ## Install the Intel C compiler. Don't download a license! ## ## Make sure to import all of the variables that the compiler ## needs to function (it won't work with vanilla include/libraries) ## ## Enjoy! ##
JACK (V.O.) I'm a recall coordinator. My job is to apply the formula. It's a story problem.
TECHNICIAN #1 Here's where the infant went through the windshield. Three points.
JACK (V.O.) A new car built by my company leaves somewhere traveling at 60 miles per hour. The rear differential locks up.
TECHNICIAN #2 The teenager's braces around the backseat ashtray would make a good "anti-smoking" ad.
JACK (V.O.) The car crashes and burns with everyone trapped inside. Now: do we initiate a recall?
TECHNICIAN #1 The father must've been huge. See how the fat burnt into the driver's seat with his polyester shirt? Very "modern art."
JACK (V.O.) Take the number of vehicles in the field, (A), and multiply it by the probable rate of failure, (B), then multiply the result by the average out-of-court settlement, (C). A times B times C equals X...
CUT TO:
INT. AIRPLANE CABIN - MOVING DOWN RUNWAY
Jack is speaking to the BUSINESSWOMAN next to him.
JACK If X is less than the cost of a recall, we don't do one.
BUSISNESS WOMAN Are there a lot of these kinds of accidents?
As we all know, technology can be used for the purposes of both good and evil. Here are things that I consider good about where TCPA is going, along with the evil.
Good
Users can protect their computers from viruses or other unapproved malware.
Evil
The BIOS can be feasibly configured to only boot only "approved" code.
By extension, "approved" code means that the Operating System must be a fresh, "blessed" install from a certain large proprietary software vendor.
Developing this further, this means that this certain large proprietary software vendor's OS can cease to function if any unapproved modifications are made to the system.
This gives the vendors, and anyone they do business with, incredible control over our PCs and the user is incapable of doing a damn thing about it unless they violate the DMCA and face criminal prosecution.
There are many advantages for the hardware/software/content vendors if this is realized, but few of them seem consumer driven: the erosion of fair use, the control of speech, taking a cut of every e-commerce transation, eliminating standards and competition.
Undoubtedly, your shareholders will push you to cooperate with the software/content vendors because it means big money for them and anyone who plays ball, but for us, it means we lose a lot. PR will say that it stops pirates from raising music/movie prices, and that it means ISVs can produce software that can't be warezed, no more cheating in online games, no more child porn, ad infinitum, and it's all for our own good.
Unfortunately, the potential for abuse is extraordinary, and the last thing I want to see is more of my friends being locked up because they do something with their computers that some company doesn't agree with. And right now it looks like AMI wants just that to happen.
Yes, right now your BIOS may offer choice, but hardware vendors seem committed to building an infrastructure that one day can make it very easy to eliminate this choice.
Please explain why we do want TCPA, why we should support your company, and how we can be assured that our colleagues don't go to jail just for believing they still control systems they bought. Also, please explain why the system we have now is so inadequete.
I would like to add a third purpose that you should consider using a debugger for: Understanding other peoples code.
If you need a debugger to understand what some code does, I suggest it it is badly written.
That reminds me..
The author of MaraDNS had to inspect BIND network traffic captures because he couldn't deduce from either the RFCs nor the source code just what exactly a valid DNS packet looked like.
They're like the buzzing of an insignificant group of retarded flies who keep demanding attention when they have nothing noteworthy.
Here's a plan.
SCO's current market capitalization is 215 million dollars, with no majority stakeholder.
We Linux hackers start DEATH TO SCO, Inc. whose sole purpose is to destroy SCO.
The company makes it very clear that when it has enough money, it will purchase a controlling stake of SCO on the market.
People with a stake in Linux, instead of paying their patent, would donate to this company instead. I would never pay their $96/cpu license, but I'd consider $500 towards crushing SCO to be money well spent.
The very existence of DEATH TO SCO, Inc. would drive down SCO's stock price, which would make it even easier to acquire.
Once the company acquires a controlling stake in SCO, it liquidates it down to the fucking floorboards, and crushes all of its patents.
SCO's accounts are transferred to SCO-to-Linux support companies who will migrate them over to a sensible Linux distribution.
Sounds like fun. I call dibs on the SCO Ethics Manual.
..if the flood is randomly generated queries from thousands of compromised hosts. There would be no way to separate flood traffic from legit traffic. A worm could do this, or a teenager with a lot of time on their hands.
It's easier for peons to get together a smurf list to attack the roots, but a nice set of compromised hosts issuing bogus spoofed queries would be just devastating.
The solution is not more root servers. Attackers gain compromised hosts for free, root servers must be paid for. The solution is to make some kind of massively distributed root server system.
Purpose 1. Segmentation Fault (core dumped). Uhm, now where did that happen? Whip out gdb, find the line that generated SIGSEGV, and it's usually obvious how it happened. If not, I have it print out a stack backtrace. If I really can't figure it out then, a 5 minute walk around the block and I'll have figured it out as soon as I sit back down.
When writing in high level languages, I'm finding that debuggers are wholly unnecessary. In fact, I can't remember the last time I spent more than 20 minutes trying to track down a bug. *shrug*
It'd be nice if debuggers solved my problems automatically, but I'm really finding that I don't need them. I might even go so far as saying use of debuggers encourages dependency on debuggers, which in turn discourages thinking about the program itself. Not saying that EVERYONE does this, just that some of the best work gets done remarkably well even without debuggers.
The Linux kernel, for example, was largely developed without the aid of a debugger, and the core developers seem to eschew them. Here's a good thread on why the developers don't want to include a debugger.
Purpose 2. On the other hand, debuggers are remarkably good at helping you break program code. With having almost no experience using gdb, I was able to break the license key check on Intel's C Compiler in about an hour. I was amazed at how easy it was to attach a debugger to the compiler and skip the subroutine that performed the license key check. With no debugging symbols to work with. Disassemblers rule. It took another 10 minutes to turn this into a script that could be distributed as a wrapper for icc (called xicc), so all you had to do was set CC=xicc in the Makefile.
Sure I could have used LD_PRELOAD so that time() always returned a date within the trial period, but breaking program code with a debugger is just so gosh darn fun.
When I used to work at an ISP, whenever we were summonsed for log files they'd always be for records that were weeks or months old. Most of them were from the "CyberSmuggling" division of US Customs.
Right now I maintain a high traffic site that doesn't store more than 4 days worth of logs on each web server (each day is about 2GB). One time they subpeona'd us for logs that were literally 3 months old. Hah.
can you imagine what our economy would be like if all of our professionals dropped their careers to follow their dreams? we'd be a nation of ballerinas and astronauts.
Nonsense. Is it unreasonable for a doctor to enjoy healing the sick?
For a chef to enjoy making delicious food for people?
I very much enjoy solving people's problems with technology. It has its downsides, but every party has its bad moments. Overall I very much enjoy my career.
Your users are computer illiterate and need basic functionality and you want to make administration of these machines as easy as possible (both technically and politically).
Automatically boot to a window manager that has a "web" and "log out" feature. And maybe an xmms which runs against the company music fileshare. And maybe GAIM to keep in touch with other employees.
Fits the bill better than Windows, especially if your "killer app" is entirely web based, such as phpGroupware or heck, SQL-Ledger.
Also good for grandma who wants to get on the world wide intarweb but doesn't want the hassle of managing an actual computer.
Linux is good for the uber-technical and the totally illiterate. The in-betweens are more troublesome. They want more functionality but have already taken the time to learn Windows and don't want to relearn anything.
Given the weight of the issue and the evidence that could be contained on the disks therein, and given that the US government has an unlimited budget whenever anyone says "terrorism", why they went with dd (or the equivalent ) to copy a disk is beyond me.
I've seen doughnut shops have their hard disks worked on with more advanced technology.
Shouldn't they have taken the hard disk to a clean room, removed the platters from the disk and painstaking recorded every nanometer of them? I wouldn't trust a suspect's hard disk to make a copy of itself.
Almost $680,000/year in salary for just 4 company executives.
It seems hypocritical to beg for gift donations when you pay yourself 6-10x more than the average American's income.
I didn't even know Microsoft took calls from the general public about bullshit (You should do this feature this way, I want this, fix this).
In fact, what's the number? Which users have gotten the number? Can you find it on microsoft.com?
Maybe if they packed their 800 number for reporting bugs into the THIS PROGRAM HAS PERFORMED AN ILLEGAL OPERATION AND WILL BE SHUT DOWN dialog box they'd get just a few more bug reports?
...so full of shit?
To step around the topic for a second:
Paul Thurrott's SuperSite for Windows is dedicated to providing all of the information you need to evaluate Microsoft's current and upcoming Windows operating system technologies. These exciting products include Windows XP Service Pack 1 (SP1), Windows XP Media Center Edition (code-named Freestyle) Windows XP Tablet PC Edition, Windows Media 9 Series (code-named Corona), and Windows Server 2003, which will launch in April.
Sounds like it'll be an EXCITING, unbiased, hard hitting, honest review to me!
Maybe that's not the best example. But even when you read technical treatises on Microsoft technologies the authors always manage to pack in gushing, surrealist praise.
Wasn't there even a book? THE AWESOME POWER OF DIRECT3D? Amusingly enough, it was released several months after John Carmack and the rest of the gaming industry started bitching Microsoft out for pushing Direct3D over the clearly superior OpenGL.
I'd hate to be all conspiracy here, but damn it's either that or believing that all Microsoft reviewers/writers are really stupid.
what people call "linux" is a combination of a kernel and a bunch of applications.
osx will run everything except the kernel itself, so I am not sure I understand what you are trying to say.
So will Solaris. But I don't run that either.
seriously, ibook + osx + fink + apple X11 == everything you want in a linux laptop, except for the ugly fonts. If you're dying for more speed get the new 12" G4 Powerbook (~$1700), which is just like the ibook only smaller in every dimension, and faster.
OSX is not a Linux replacement. Although it may be a good Windows replacement. If someone specifically asks for Linux, chances are they're not interested in what OSX has to offer.
Niether does my bottom of the line merc (c230k)
I'm having a problem right now with a tenant who is a complete alcoholic. She refuses to get help (I know a few people who could help her), has assaulted me, makes noise all night, and threatens us on a daily basis, at every opportunity (once we called the cops to report domestic violence because we thought her boyfriend was beating her, it turns out they were both just drunk and talking trash, and she's been mad at me ever since). The police don't care about us. They told us if we're afraid we should move out, and don't want to hear it.
She seemed like a nice person at first...
We live in New York City. It will take approximately 6+ months to evict her. I imagine she's not going to pay rent anymore.
From now on, I am background checking EVERYONE and requiring 5 personal recommendations. Credit history, driving records, convictions, if their name appears in a database I want to see what it says. I hate going through it myself, but after this god damned nightmare I can understand why people insist on it.
If you're a fuckup, that's your damned fault. The rest of us are trying to be decent.
Now if only the credit reporting agencies had correct data once in awhile.
Score one more for the we came from a puddle of sludge team!
Not that I wouldn't prefer creation over evolution. Probably wouldn't have hiccups. Thanks a lot, natural selection.
It's definitely more fun when you play with a group of people you know. But even then it doesn't last too long.
I played the beta for about a week. Then just lost interest.
Apple hardware. Very sexy, reliable, very intruiging, none of the crap of x86. Linux and Apple hardware seem a nice blend.
In fact, I will buy a Powerbook right now. Fortunately Apple has seen the light, and I can buy one to run Linux without paying the MacOS X tax.
What? The new Powerbooks have soft modems? No problem! Apple "gets it"! I'll just ask for the specs and write my own driver!
Oh wait, I can't do either of these things. And more! Apple doesn't "get it" at all! I've been deceived by the people telling me that they Thunk Differently.
Long live closed source and empty promises!
Also, you don't need an executable heap/stack for these overflows to cause damage (overwrite access tokens, change flag states, etc.)
Sure every little bit helps, but it's still kind of a losing battle.
IMO, it would be better to spend more time educating people and making it socially unacceptable to use C/C++ when they could just as easily use a high level language with bounds checking. You know, like LISP people have been saying for 30 years.. ;)
But alas this is a touchy subject.
If your applications aren't vulnerable to XSS, you have nothing to worry about w.r.t. HTTP TRACE. If your applications ARE vulnerable to XSS, you have bigger problems than HTTP TRACE.
If users visiting other sites somehow have untrusted code running in them, which performs an HTTP TRACE to your site, the user's browser is broken for not enforcing domain restrictions.
Ignore this advisory, it's sensationalist snakeoil. Leaving HTTP TRACE enabled is harmless (although you probably don't use it, so disable it anyway).
And ask them what they think about this?
/tmp/icc.hack. /tmp/icc.hack. /tmp/icc.hack.
/tmp/icc.hack. icc /tmp/icc.hack.
#!/bin/sh
##
## haX0red Intel C/C++ Compiler
##
## This simple shell script will h4x0r the icc compiler so that
## it skips the check for a valid license file. I was inspired
## to do this because of the asshole Intel engineer at
## LinuxWorld 2002 who did everything he could to dodge
## my questions about Intel's compiler and other general rudeness.
##
## I developed this hack against this version:
##
## Intel(R) C++ Compiler for 32-bit applications, Version 5.0.1 Build 010730D0
## Copyright (C) 1985-2001 Intel Corporation. All rights reserved.
##
##
## Usage:
## Install the Intel C compiler. Don't download a license!
##
## Make sure to import all of the variables that the compiler
## needs to function (it won't work with vanilla include/libraries)
##
## Enjoy!
##
echo 'break *0x8056451' >
echo "run $*" >>
echo 'jump *0x80567d0' >>
gdb -batch -x
rm
JACK (V.O.)
I'm a recall coordinator. My job is
to apply the formula. It's a story
problem.
TECHNICIAN #1
Here's where the infant went through
the windshield. Three points.
JACK (V.O.)
A new car built by my company leaves
somewhere traveling at 60 miles per
hour. The rear differential locks up.
TECHNICIAN #2
The teenager's braces around the
backseat ashtray would make a good
"anti-smoking" ad.
JACK (V.O.)
The car crashes and burns with
everyone trapped inside. Now: do we
initiate a recall?
TECHNICIAN #1
The father must've been huge. See
how the fat burnt into the driver's
seat with his polyester shirt? Very
"modern art."
JACK (V.O.)
Take the number of vehicles in the
field, (A), and multiply it by the
probable rate of failure, (B), then
multiply the result by the average
out-of-court settlement, (C). A
times B times C equals X...
CUT TO:
INT. AIRPLANE CABIN - MOVING DOWN RUNWAY
Jack is speaking to the BUSINESSWOMAN next to him.
JACK
If X is less than the cost of a
recall, we don't do one.
BUSISNESS WOMAN
Are there a lot of these kinds of
accidents?
JACK
Oh, you wouldn't believe.
As we all know, technology can be used for the purposes of both good and evil. Here are things that I consider good about where TCPA is going, along with the evil.
Good
Evil
There are many advantages for the hardware/software/content vendors if this is realized, but few of them seem consumer driven: the erosion of fair use, the control of speech, taking a cut of every e-commerce transation, eliminating standards and competition.
Undoubtedly, your shareholders will push you to cooperate with the software/content vendors because it means big money for them and anyone who plays ball, but for us, it means we lose a lot. PR will say that it stops pirates from raising music/movie prices, and that it means ISVs can produce software that can't be warezed, no more cheating in online games, no more child porn, ad infinitum, and it's all for our own good.
Unfortunately, the potential for abuse is extraordinary, and the last thing I want to see is more of my friends being locked up because they do something with their computers that some company doesn't agree with. And right now it looks like AMI wants just that to happen.
Yes, right now your BIOS may offer choice, but hardware vendors seem committed to building an infrastructure that one day can make it very easy to eliminate this choice.
Please explain why we do want TCPA, why we should support your company, and how we can be assured that our colleagues don't go to jail just for believing they still control systems they bought. Also, please explain why the system we have now is so inadequete.
Thank you.
I would like to add a third purpose that you should consider using a debugger for: Understanding other peoples code.
If you need a debugger to understand what some code does, I suggest it it is badly written.
That reminds me..
The author of MaraDNS had to inspect BIND network traffic captures because he couldn't deduce from either the RFCs nor the source code just what exactly a valid DNS packet looked like.
They're like the buzzing of an insignificant group of retarded flies who keep demanding attention when they have nothing noteworthy.
Here's a plan.
Sounds like fun. I call dibs on the SCO Ethics Manual.
..if the flood is randomly generated queries from thousands of compromised hosts. There would be no way to separate flood traffic from legit traffic. A worm could do this, or a teenager with a lot of time on their hands.
It's easier for peons to get together a smurf list to attack the roots, but a nice set of compromised hosts issuing bogus spoofed queries would be just devastating.
The solution is not more root servers. Attackers gain compromised hosts for free, root servers must be paid for. The solution is to make some kind of massively distributed root server system.
But I only use debuggers for two purposes.
Purpose 1. Segmentation Fault (core dumped). Uhm, now where did that happen? Whip out gdb, find the line that generated SIGSEGV, and it's usually obvious how it happened. If not, I have it print out a stack backtrace. If I really can't figure it out then, a 5 minute walk around the block and I'll have figured it out as soon as I sit back down.
When writing in high level languages, I'm finding that debuggers are wholly unnecessary. In fact, I can't remember the last time I spent more than 20 minutes trying to track down a bug. *shrug*
It'd be nice if debuggers solved my problems automatically, but I'm really finding that I don't need them. I might even go so far as saying use of debuggers encourages dependency on debuggers, which in turn discourages thinking about the program itself. Not saying that EVERYONE does this, just that some of the best work gets done remarkably well even without debuggers.
The Linux kernel, for example, was largely developed without the aid of a debugger, and the core developers seem to eschew them. Here's a good thread on why the developers don't want to include a debugger.
Purpose 2. On the other hand, debuggers are remarkably good at helping you break program code. With having almost no experience using gdb, I was able to break the license key check on Intel's C Compiler in about an hour. I was amazed at how easy it was to attach a debugger to the compiler and skip the subroutine that performed the license key check. With no debugging symbols to work with. Disassemblers rule. It took another 10 minutes to turn this into a script that could be distributed as a wrapper for icc (called xicc), so all you had to do was set CC=xicc in the Makefile.
Sure I could have used LD_PRELOAD so that time() always returned a date within the trial period, but breaking program code with a debugger is just so gosh darn fun.
When I used to work at an ISP, whenever we were summonsed for log files they'd always be for records that were weeks or months old. Most of them were from the "CyberSmuggling" division of US Customs.
Right now I maintain a high traffic site that doesn't store more than 4 days worth of logs on each web server (each day is about 2GB). One time they subpeona'd us for logs that were literally 3 months old. Hah.
can you imagine what our economy would be like if all of our professionals dropped their careers to follow their dreams? we'd be a nation of ballerinas and astronauts.
Nonsense. Is it unreasonable for a doctor to enjoy healing the sick?
For a chef to enjoy making delicious food for people?
I very much enjoy solving people's problems with technology. It has its downsides, but every party has its bad moments. Overall I very much enjoy my career.
Microsoft is in the computing industry in much the same way that billboard-writers are in the literature industry.
Good show. :)
Er, for some reason your signature doesn't appear in the reply-to page, but it's there on the message board index.
Your users are computer illiterate and need basic functionality and you want to make administration of these machines as easy as possible (both technically and politically).
Automatically boot to a window manager that has a "web" and "log out" feature. And maybe an xmms which runs against the company music fileshare. And maybe GAIM to keep in touch with other employees.
Fits the bill better than Windows, especially if your "killer app" is entirely web based, such as phpGroupware or heck, SQL-Ledger.
Also good for grandma who wants to get on the world wide intarweb but doesn't want the hassle of managing an actual computer.
Linux is good for the uber-technical and the totally illiterate. The in-betweens are more troublesome. They want more functionality but have already taken the time to learn Windows and don't want to relearn anything.
Success is something that other people gauge your life by.
What do you care what other people think?
Do what makes you happy. Otherwise you'll become a Republican.
Given the weight of the issue and the evidence that could be contained on the disks therein, and given that the US government has an unlimited budget whenever anyone says "terrorism", why they went with dd (or the equivalent ) to copy a disk is beyond me.
I've seen doughnut shops have their hard disks worked on with more advanced technology.
Shouldn't they have taken the hard disk to a clean room, removed the platters from the disk and painstaking recorded every nanometer of them? I wouldn't trust a suspect's hard disk to make a copy of itself.