...PB, HERE YA GO...
Originally Posted by dilbert firestorm
He sure isn't a dynamic speaker. Lot of people do not understand that there are multiple file date stamps associated with any given file. The Binney analysis looked predominately at atime, I believe. Basically all files were copied in a short time, consistent with USB copy speeds versus across a long-distance network connection.
Hit tip to HowToGeek.com for their definitions
access timestamp (
atime)
The access timestamp is the last time a file was read. This means someone used a program to display the contents of the file or read some values from it. Nothing was edited or added to the file. The data was referenced but unchanged.
modified timestamp (
mtime)
A modified timestamp signifies the last time the contents of a file were modified. A program or process either edited or manipulated the file. “Modified” means something inside the file was amended or deleted, or new data was added.
changed timestamp (
ctime)
Changed timestamps aren’t referring to changes made to the contents of a file. Rather, it’s the time at which the metadata related to the file was changed. File permission changes, for example, will update the changed timestamp.
Old adages in hacker-parlance:
A good hacker does not leave finger prints behind
A great hacker leaves someone else's finger prints behind
No earthly idea why or how I know those things
Class dismissed