<?xml version='1.0' encoding='UTF-8'?><?xml-stylesheet href="http://www.blogger.com/styles/atom.css" type="text/css"?><feed xmlns='http://www.w3.org/2005/Atom' xmlns:openSearch='http://a9.com/-/spec/opensearchrss/1.0/'><id>tag:blogger.com,1999:blog-1746946614390371171.post8281397370375506972..comments</id><updated>2010-02-14T10:08:20.071-08:00</updated><category term='Cell Phones'/><category term='CRLF'/><category term='Wireless'/><category term='Vista'/><category term='Kindle'/><category term='CP'/><category term='File Signatures'/><category term='Hash'/><category term='SQL'/><category term='File System'/><category term='Email'/><category term='Patch'/><category term='Exclusion List'/><category term='dd'/><category term='SHA1'/><category term='MFT'/><category term='Photos'/><category term='Service Pack'/><category term='Keywords'/><category term='Import'/><category term='Encryption'/><category term='Firewall'/><category term='export'/><category term='EnScript Requests'/><category term='Install Date'/><category term='Timestamps'/><category term='Office Metadata'/><category term='NIST'/><category term='Password Bypass'/><category term='EnScript Tutorial'/><category term='MAC Address'/><category term='Domains'/><category term='GREP'/><category term='Thumbnails'/><category term='FTP'/><category term='USB History'/><category term='Virus'/><category term='Search Hits'/><category term='Bookmark'/><category term='MD5'/><category term='Winen'/><category term='LogFile'/><category term='EMLX'/><category term='Video'/><category term='Operating System'/><category term='Yahoo'/><category term='Duplicates'/><category term='Icons'/><category term='USNJRNL'/><category term='Restore Points'/><category term='Windows 7'/><category term='Base64'/><category term='Unallocated'/><category term='eBlaster'/><category term='Ghost'/><category term='XOR'/><category term='VSS'/><category term='Selected Text'/><category term='Network Information'/><category term='Forensic Practical'/><category term='Decode'/><category term='SANS'/><category term='Extensions'/><category term='Limewire'/><category term='Search'/><category term='Registry'/><category term='OSX'/><category term='IIS'/><category term='Unused Disk Space'/><category term='Event Logs'/><category term='Norton AV'/><category term='Foreign Language'/><category term='Lanman'/><category term='Redaction'/><category term='UserAssist'/><category term='ICAC'/><category term='LUHN'/><category term='Count'/><category term='Filename'/><category term='thumbcache'/><category term='ROT13'/><category term='HTML'/><category term='Incident Response'/><category term='Anti-Forensics'/><category term='Memory'/><category term='Internet History'/><category term='LEF'/><category term='File Types'/><category term='Triage'/><category term='SearchPak'/><category term='F-Response'/><category term='BitLocker'/><title type='text'>Comments on Computer Forensics, Malware Analysis &amp;amp; Digital Investigations: EnScript to decode Yahoo chats in unallocated - UP...</title><link rel='http://schemas.google.com/g/2005#feed' type='application/atom+xml' href='http://www.forensickb.com/feeds/8281397370375506972/comments/default'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/1746946614390371171/8281397370375506972/comments/default'/><link rel='alternate' type='text/html' href='http://www.forensickb.com/2009/10/few-days-ago-i-posted-enscript-to.html'/><author><name>Lance Mueller</name><uri>http://www.blogger.com/profile/15789264000499223230</uri><email>noreply@blogger.com</email><gd:image xmlns:gd='http://schemas.google.com/g/2005' rel='http://schemas.google.com/g/2005#thumbnail' width='16' height='16' src='http://img2.blogblog.com/img/b16-rounded.gif'/></author><generator version='7.00' uri='http://www.blogger.com'>Blogger</generator><openSearch:totalResults>1</openSearch:totalResults><openSearch:startIndex>1</openSearch:startIndex><openSearch:itemsPerPage>25</openSearch:itemsPerPage><entry><id>tag:blogger.com,1999:blog-1746946614390371171.post-7722496421260483819</id><published>2010-02-14T10:08:20.071-08:00</published><updated>2010-02-14T10:08:20.071-08:00</updated><title type='text'>Very cool.  Only one thing it doesn&amp;#39;t handle w...</title><content type='html'>Very cool.  Only one thing it doesn&amp;#39;t handle well: right to left languages.  I have tested this on Hebrew (I&amp;#39;m able to read and write Hebrew) and it doesn&amp;#39;t come out correctly.  I have written a fix to PBobby&amp;#39;s Yahoo messenger EnScript and will post the change to the GSI forum soon.  Basically the solution entails writing to a memory buffer as you decrypt the message and then extracting the message after all decrypting has taken place.  This will ensure byte order is maintained.</content><link rel='edit' type='application/atom+xml' href='http://www.blogger.com/feeds/1746946614390371171/8281397370375506972/comments/default/7722496421260483819'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/1746946614390371171/8281397370375506972/comments/default/7722496421260483819'/><link rel='alternate' type='text/html' href='http://www.forensickb.com/2009/10/few-days-ago-i-posted-enscript-to.html?showComment=1266170900071#c7722496421260483819' title=''/><author><name>JL</name><uri>http://www.blogger.com/profile/16089000750284843256</uri><email>noreply@blogger.com</email><gd:image xmlns:gd='http://schemas.google.com/g/2005' rel='http://schemas.google.com/g/2005#thumbnail' width='32' height='32' src='http://4.bp.blogspot.com/_55uSCYxbQ8M/SZtzdpr80BI/AAAAAAAAAbQ/_JuHtnFyXZo/S220/hd.jpg'/></author><thr:in-reply-to xmlns:thr='http://purl.org/syndication/thread/1.0' href='http://www.forensickb.com/2009/10/few-days-ago-i-posted-enscript-to.html' ref='tag:blogger.com,1999:blog-1746946614390371171.post-8281397370375506972' source='http://www.blogger.com/feeds/1746946614390371171/posts/default/8281397370375506972' type='text/html'/><gd:extendedProperty xmlns:gd='http://schemas.google.com/g/2005' name='blogger.itemClass' value='pid-1332681149'/></entry></feed>
