Simson L. Garfinkel

icon indicating a website link https://simson.net/ icon indicating an email [email protected]

icon company BasisTech, LLC icon location Somerville, MA icon location I'm an author, programmer, former associate professor, and a part-time US Government employee. That photo is more than 30 years old. ORCID 0000-0003-1294-283

Results 853 comments of Simson L. Garfinkel

Imgdump does not report the same times for FAT32 disks with timestamps in months that are EST and EDT on Windows and Linux

https://github.com/sleuthkit/sleuthkit/pull/2532 only addresses mactimes.

Imgdump does not report the same times for FAT32 disks with timestamps in months that are EST and EDT on Windows and Linux

We have to support XP because there are paying customers for CyberTriage who are doing investigations on XP systems that are in use. There are MANY XP systems still in...

Imgdump does not report the same times for FAT32 disks with timestamps in months that are EST and EDT on Windows and Linux

Thanks for sharing that code. However, we can't have a `boost` dependency.

Imgdump does not report the same times for FAT32 disks with timestamps in months that are EST and EDT on Windows and Linux

> Right, so these insane constraints coupled with an extreme tolerance for bugs, lack of regression testing, and neglect are why I think it might just be better use of...

fsstat fails with additional arguments

Tagging @bcarrier and @jayaramcs as this appears to be a core function...

fsstat fails with additional arguments

@copilot any thoughts?

ext4 journal descriptor block parsing error.

I'm unclear what the patch is to do. If we just update the structure, does that fix it? Otherwise, what else is there to do? Can you give us a...

ext4 journal descriptor block parsing error.

> Looks like someone originally opened a pull request to just modify the structure. > > * ["modify ext4 journal descriptor table structure" #1477](https://github.com/sleuthkit/sleuthkit/pull/1477) > > I don't think this...

ext4 journal descriptor block parsing error.

I don't have these sitting around. If you can give me a script that makes them with `mkfs`, I'll add them to the test suite.

ext4 journal descriptor block parsing error.

Sure. Tomorrow. I will also see if I can make some images with various VMs. On Thu, Sep 11, 2025 at 10:57 PM bjangelo ***@***.***> wrote: > *bjangelo* left a...