Since anyone can put anything they want on their servers, it seems like a lot of evidence could be thrown out in court cases if access to that information is not strictly monitored and audited to make sure the owners aren’t removing or adding data.

Does anyone know of industry-standard practices to ensure that data on servers is not being manipulated in a way to protect or harm users?

  • fodor@lemmy.zip
    link
    fedilink
    arrow-up
    2
    ·
    4 days ago

    If you have a computer at home and the cops think you might have evidence on it of some crime, they ask the judge for a warrant and then they take the machine and they put it in their evidence locker. Then nobody can manipulate it. I mean that assumes the cops are clean, which they aren’t, but it’s not every day that they tamper with evidence inside of evidence lockers.

    Or maybe you’re asking about data stored in the cloud, like if you have some possibly incriminating spreadsheet in your Google account. Then the pigs would ask Google to make a copy of the data stored in your account, and Google would probably do that, then sharing the data with the pigs. So if you decided to edit the data later, it would be too late, the copy would already be out there.

    Civil litigation in the US has different rules. At some point when you find out that someone is going to be suing you or is in fact suing you, you have a legal duty not to fuck with the evidence that’s likely to be relevant. If it is later discovered that you were fucking with the evidence, then the judge or jury might be able to assume that whatever you touched would have made you look bad. Of course the details matter. But anyway, suppose you want to edit some log file so you SSH into your server and then edit it, but that in turn creates a history of your login and commands that you executed, so then maybe you decide to delete your own history, but then the absence of your history is itself evidence of fuckery… All of that being said, we can be sure that some people are somewhat slick and somewhat lucky and get away with altering data from time to time. We just don’t know how often on account of them not getting caught.

    • haloduder@thelemmy.clubOP
      link
      fedilink
      arrow-up
      1
      ·
      edit-2
      4 days ago

      I’m asking about data stored on servers.

      Lemmy, for example, has its instances owned by people and those people can do whatever they want with the data that is stored on their servers. If there is ever a legal issue involving a user’s posts on Lemmy, how can courts or law enforcement determine that the owner hasn’t manipulated the data to protect or harm the user?

      Sure, they can look at other servers’ since Lemmy is federated. But in the case of a non-federated service (which most are) or instance, this kind of verification wouldn’t be possible.