WEBVTT

00:00:01.619 --> 00:00:04.799 align:middle line:90%
Section 5.4, Mobile Browsers--

00:00:04.799 --> 00:00:07.979 align:middle line:84%
we assume that you will
leverage your commercial tools

00:00:07.979 --> 00:00:11.579 align:middle line:84%
to parse the history, the cache,
the cookies, the databases that

00:00:11.579 --> 00:00:15.929 align:middle line:84%
contain all this information,
the downloads, the bookmarks.

00:00:15.929 --> 00:00:19.379 align:middle line:84%
But what happens if someone
is using in-private browsing,

00:00:19.379 --> 00:00:21.779 align:middle line:90%
or incognito, or Tor browsing?

00:00:21.779 --> 00:00:24.479 align:middle line:84%
What happens if they
selectively delete things?

00:00:24.479 --> 00:00:26.279 align:middle line:84%
What if they clear
the browser history?

00:00:26.279 --> 00:00:29.339 align:middle line:84%
Are you going to be able
to uncover those artifacts?

00:00:29.339 --> 00:00:31.859 align:middle line:84%
What if they are syncing
from different devices

00:00:31.859 --> 00:00:35.189 align:middle line:84%
if it actually didn't even
happen on the handset you're

00:00:35.189 --> 00:00:35.909 align:middle line:90%
examining?