[cook1984]

Originally Posted by photodude

You could just send them an Email, then check the senders IP when they reply
Here is their public list of Email addresses for all the partners in the company
[url]http://www.davenportlyons.com/html/about_us/partners.html[/url

Thanks. I already have a handle on their IP addresses, and hopefully a return email will confirm them.

Originally Posted by Jbad

We use accredited software and we are fully accredited to operate and gather evidence using it.

What software is that? You should be able to tell us because if it stands up in court it must be open to scrutiny by the defence.

We connect to the P2P network with the software and search for the “hash”

Once found we start to download the file

Interesting method but flawed in one obvious way. The file hash may never change, but the file name might. Thus, someone might innocently download a file called "Cake Recipies.txt" that was originally called "Bomb making instructions.doc" and you would target them based on the hash.

We look in and record the contents of the “shared” folder

I'm glad I disabled that.

We identify a target and drop ALL other connections until we have the target on a “one to one” connection

I'm glad Winny / Share / Perfect Dark / Freenet / Tor was invented to prevent that from identifying the source of the file.

We download the COMPLETE file from the target over this one to one connection

There are already versions of eMule / Azureus that do not transmit all parts of a file to a single IP address, so it looks like people are already on to you. Presumably failure to download the whole file = investigation dropped?

Thanks for confirming that valuable bit of self-defence.

IP indicates subscriber is Mr X living in Southend, UBR say subscriber on Tyne and Wear UBR = Possible cloned modem = investigation dropped.

Presumably whatever you are looking for is so terrible that concerns about hacked/open wifi connections are not enough to drop the investigation then? That must mean you are working on criminal cases.

Thanks for letting all the terrorists / paedos know that all they need is a cloned modem to deflect any attention.

Presumably anyone up to no good is using Peer Guardian or similar. Do you have some sort of arrangement with them not to block your IP address?

or did Logistep hash and make the original file available renamed as something that we would download?? Before we realized we would have downloaded their “copyrighted material”…..has anyone looked for the file they allegedly downloaded??

LOL, you are accusing them of renaming the file and tricking you into downloading it, but apparently that danger isn't enough to stop your own investigation.