Saturday, June 6, 2009

Law Enforcement Only?

Lee Whitfield over at Forensics4Cast posted a very good piece on the subject of law enforcement only tools and training, along with the disparity of pricing between law enforcement consumers and private consultants.

You can read his post along with reader comments here.

I have to say that I am in agreement with Lee on this subject and have been for a long time.  As a consultant who does a lot of criminal defense work, I am puzzled by the animosity I get from law enforcement people at conferences.  If I want to have a conversation with anyone from law enforcement, I have to avoid mentioning that I do criminal defense work.  Otherwise the majority of them get defensive and start making claims about how perfect the law enforcement examiners are.  In other words, I am wasting my time working for the defense, since their evidence is infallible.

The way I see it, I have no issue working for either side, since the job of a forensics examiner is to gather evidence, both incriminating and exculpatory.  As Sergeant Friday used to say "Just the facts, ma'am."

I am also puzzled by law enforcement "discounts" for tools and software.  In my opinion, the discounted price is the real price and private companies are getting up charged.

Where did this practice come from?  I suspect it is there to discourage private consultants or at the minimum to handicap them by making tools and software more expensive.  It reminds of the practice of charging overtime when a serviceman comes to your home or business after hours.  That practice started, not as a means to recover additional costs on the part of the service company, but simply to punish customers who called for after hours service.  It was desigend to discourage after hours calls by invoking a contrived penalty on those who had the audacity to interrupt the serviceman's weekend.

A few years ago, Guidance Software considered restricting customer access to their message boards by forcing all private users into a "Consultant's Forum" and denying them access to the forums used by law enforcement.  Fortunately, they came to their senses before they ended up losing a lot of clients who have to pay a premium for their products to other companies.

I believe in the free exchange of information to advance the field for every exmainer, regardless of who they work for or what kind of cases they take.  Digital forensics, as a discipline, is not predicated on what kind of case it is used to analyze.  Attempting to give one side an advantage by keeping secrets, restricting training or price gouging certain classes of customers is counter-productive for everyone.

The same holds true for associations that exclude certain classes of examiners by the types of cases they work.  It is a lot like cutting off your nose to spite your face.  By refusing to interact with examiners who may work on the other side from you in cases just keeps you from learning about how they view the opposing side's work, keeps you from gaining knowledge that can prevent problems for you in cases and does nothing  help everyone to learn and avoid common mistakes.

As people who practice a discipline that is in the realm of forensics, open discourse is the best way to improve the field and advance knowledge for everyone.

In the famous words of Forrest Gump, "That is all I have to say about that."

No comments:

Post a Comment

I have moderated my comments due to spam.