Anthony's Computer Forensics

Could someone explain this to me in very simple terms? Am I understanding correctly that chloroform was only searched once, and the 84 times was that the same site was visited 84 times through myspace? Or she didn't even visit it 84 times, and it was just a computer glitch thing? Did the state's expert get it wrong?

Thanks! BTW This wouldn't change for me that I believe C murdered her daughter. I just want to have the facts straight.

Chloroform was searched for, "How To Make Chloroform" was searched for, and many other search terms. Someone please correct me if I'm wrong, but I don't think that the information has yet been made public as to the software bugs that were discovered in both software programs that the computer forensics techs used. Could have been 84 visits to MySpace, could have been 84 visits to scispot, the 84 might have even have referred to the consecutive day of the year. I don't believe that this information has been made public yet. (Sorry if I've provided any misinformation here.)
 
Bump25252520Smiley.gif
 
Could someone explain this to me in very simple terms? Am I understanding correctly that chloroform was only searched once, and the 84 times was that the same site was visited 84 times through myspace? Or she didn't even visit it 84 times, and it was just a computer glitch thing? Did the state's expert get it wrong?

Thanks! BTW This wouldn't change for me that I believe C murdered her daughter. I just want to have the facts straight.

There were 2 programs used to decode the history file from the computer. One was NetAnalysis, the other was CacheBack. The first run of the file, through NetAnalysis, only showed one visit to SciSpot.com. This website was opened after a Google search for "how to make chloroform" was performed. The SciSpot website allegedly talked about the use of chloroform in the past (I have not personally verified this).

The second program, CacheBack, initially identified the website being visited 84 times. The chief developer of the program, Mr. Bradley, was asked to come testify in court. He thought he would be talking about the software in general, and about the results of the decoding of the history file.

He was surprised that the prosecution was really pushing the questions about the 84 visits, strongly pointing out the fact that this meant premeditation. He went home and decided to double-check his data.

As he looked at the raw data, he noticed the discrepancies between NetAnalysis and CacheBack results. Made some, minor adjustments to the algorithms that ran the reports, and realized that while both software had small errors, NetAnalysis was correct about the amount of visits to SciSpot.

He claims that the prosecution received both reports a long time ago and that they must have noticed the discrepancies. Yet, they have never reported them, and even more, decided to use the data that better suited their theory.

One of my prior posts has been deleted since I stated some of my credentials, so I don't want to do it here. But let me just say that decoding the history file is quite a task. And as we can see, they don't have a software that is doing it flawlessly.

I am fully conviced KC is guilty, however, I don't think that the searches had anything to do with what happened to Caylee. And while the DT has thousands of examples where they didn't play fair, this one goes on the prosecution. They had both reports but they decided to misuse their data to suit their purpose.
 
There is a lot of good stuff in the browser history files that AZlawyer kindly shared with me. :thumb: Some of it is illuminating, some of it is funny, and some of it is a bit disturbing in some ways.

Let's start with the allegation that George is the one who searched for the term "foolproof suffocation" on the afternoon of June 16, 2008, as Jose Biaz claims in his book. I have not read the book, but as I understand it he gives three reasons why it was George and not Casey who did this search:

  • George claimed Casey had already left for work when the search was done.
  • George is a poor speller, and Google corrected his spelling before doing the search.
  • George had an AIM account and Casey did not. The search was done within seconds of an AIM session being started.
Addressing these in order …


  • There is a thread on this site that has a lengthy debate on whether or not George was accurately recalling the events of June 16 or some earlier date (IIRC, the most likely candidate was June 9). I subscribe to the notion that there is no way that George would treat and commit to memory June 16 as it happened any differently than any other day. After 4 weeks, when pressed to recall details of events he had not spent effort to commit to memory, he misremembered. Casey never left that day before George went to work. He probably did not take much notice as he left for work. George's recollection is unreliable.
There is evidence to support this notion. Casey's cell phone pings place her at or near the home the entire time. More importantly, George places a very rare call to Casey at the home around 3:00 PM that day. He does this immediately after attempting a call to her cell (she was on her cell at the time). Why call her at home if he believed she were gone?
  • George is the poor speller and Casey is not? Actually, the apple does not fall far from the tree. Casey misspelled chloroform when she searched for it in March. She misspelled it twice (as chloraform). The misspelling on the 16th of June was "less severe" - "fool-proof" was changed to "foolproof". Basically, the misspelling proves nothing.

  • I have no idea if George had an AIM account, but I know for certain that Casey did. Casey logged in the morning of June 16 at 7:53 AM and started chatting with witeplayboi within minutes. The URL for her AIM Today connection contained the unique identifier "SN=CBOFHLHFFIGCOKCLHKEPCPNDBB&PC=HDLEDICEBJ" and had her login number registered as 215.
Then she logged in again at 10:08 AM with login number of 216, but did not chat with anyone. Another login without chat at 10:14 with login number of 217. Then 1:39 PM with login number of 218. And 2:50 PM with login number of 219. This final login was supposedly George, but it had Casey's unique identifier string and matched her login sequence. All of the logins also contained the unique identifier.
Casey got a call from Jesse Grund two minutes after her last login to AIM, or one minute after the "foolproof suffocation" search. George called the home phone from his cell around 3:03 and hung up when the answering machine picked up. He then immediately called Casey's cell from his cell at 3:04. One could speculate that George - diabolically clever guy that he is - was simply setting up an alibi. Or one could assume George was not at home, knew Casey was, and was trying to reach her while she was on the phone with an ex-boyfriend and online trying to chat with a new one. Which is the simpler explanation?

The evidence supports Casey searching for a method of "foolproof suffocation" just before 3 PM on June 16, not George. The evidence supports George being at work, or close to pulling in the parking lot. Not at the computer.
 
Here are the URLs and the visit times, for completeness.

http://aimtoday.aim.com/today/aimtoday.adp?product=9&platform=1&channel=360&build=6_5_9_1&SN=CBOFHLHFFIGCOKCLHKEPCPNDBB&PC=HDLEDICEBJ&segment=0&UTC=1213642185&LocalTime=1213624185&nlogin=219&mcAuth=%2FBcAG0hWtfcAAK8zAcB%2FZkhWtjMIWm7zNSvM2R8AAA%3D%3D aimtoday.aim.com 6/16/08 14:50:42
http://aimtoday.aim.com/today/aimto...=/BcAG0hWpT0AAK82Ab7yfEhWpXkIOfgt9fijr98AAA== aimtoday.aim.com 6/16/08 13:39:23
http://aimtoday.aim.com/today/aimto...=/BcAG0hWdTUAAPeCAbjvAkhWdXEI/DJPRYh+pewAAA== aimtoday.aim.com 6/16/08 10:14:29
http://aimtoday.aim.com/today/aimto...=/BcAG0hWc68AAK82AbeSsUhWc+sIizsqmGDCwIgAAA== aimtoday.aim.com 6/16/08 10:07:52
http://aimtoday.aim.com/today/aimto...=/BcAG0hWVC4AAPdzAbNqKkhWVGoIKLwHldxaRNwAAA== 6/16/08 7:53:41

The aimtoday links always immediately followed an AIM login. I did not post the AIM login because the token passing did not uniquely identify the user. The user was identified in the Aimtoday after the tokens were authenticated.
 
On March 11, just 6 days before she searched for chloroform, Casey spent some time watching *advertiser censored*. The video linked to at 12:01:36 is one she could have watched to completion. For those faint of heart, I am told it was soft-core - though I would never check something like that out myself. :angel::whistle: :nono:

Immediately before (like seconds) she was on Myspace. Immediately after (like seconds) she was on Facebook.

http://tour.brazzers.com/ads/dynamic/custom/youporn3/ 3/11/08 12:05:38
http://tour.brazzers.com/ads/dynamic/custom/youpornsmall/white/?nats=NTcwNDE6Nzo0MQ 3/11/08 12:05:38
http://tour.brazzers.com/ads/dynamic/custom/youporn5/ 3/11/08 12:05:38
http://tour.brazzers.com/ads/dynamic/custom/youporn5 3/11/08 12:05:38
http://tour.brazzers.com/ads/dynamic/custom/youpornsmall/?nats=NTcwNDE6Nzo0MQ 3/11/08 12:05:32
http://galleries.ztod.com/youporn/index.php 3/11/08 12:05:32
http://tour.brazzers.com/ads/dynamic/custom/youporn4 3/11/08 12:05:32
http://tour.brazzers.com/ads/dynamic/custom/youporn4/ 3/11/08 12:05:32
http://youporn.com/watch/156038 3/11/08 12:05:32
http://youporn.com/?page=11 3/11/08 12:05:32
http://youporn.com/?page=10 3/11/08 12:05:15
http://youporn.com/watch/157480 3/11/08 12:01:36
http://youporn.com/?page=9 3/11/08 12:01:18
http://youporn.com/watch/158008 3/11/08 12:00:58
http://youporn.com/?page=8 3/11/08 12:00:46
http://youporn.com/?page=7 3/11/08 12:00:36
http://youporn.com/watch/158401 3/11/08 11:59:26
http://youporn.com/?page=6 3/11/08 11:59:08
http://youporn.com/watch/158510 3/11/08 11:58:58
http://youporn.com/?page=5 3/11/08 11:58:48
http://youporn.com/watch/157384 3/11/08 11:58:37
http://youporn.com/?page=4 3/11/08 11:58:19
http://youporn.com/?page=3 3/11/08 11:58:03
http://youporn.com/?page=2 3/11/08 11:57:46
http://youporn.com/watch/158711 3/11/08 11:57:09
http://youporn.com/ 3/11/08 11:56:11
http://youporn.com/?user_choice=Enter 3/11/08 11:56:11
 
I have previewed this post and have no idea why it looks so ugly. Perhaps it is me?

Here are the searches for chloroform and other nefarious items, with ads removed:

http://en.wikipedia.org/w/index.php...search=head+injuries&fulltext=Advanced+search Search - Wikipedia, the free encyclopedia 3/17/08 15:00:14
[ame="http://en.wikipedia.org/wiki/Head_Injuries"]Head Injuries - Wikipedia, the free encyclopedia[/ame] Head Injuries - Wikipedia, the free encyclopedia 3/17/08 15:00:14
http://en.wikipedia.org/wiki/Special:Search?search=head+trama&go=Go Search - Wikipedia, the free encyclopedia 3/17/08 15:00:04
[ame]http://en.wikipedia.org/wiki/Hand_to_hand_combat[/ame] Hand to hand combat - Wikipedia, the free encyclopedia 3/17/08 14:59:08
[ame="http://en.wikipedia.org/wiki/RBSD"]RBSD - Wikipedia, the free encyclopedia[/ame] Reality-based self-defense - Wikipedia, the free encyclopedia 3/17/08 14:58:58
http://en.wikipedia.org/wiki/Special:Search?search=self+defense&go=Go
3/17/08 14:58:38
[ame]http://en.wikipedia.org/wiki/Self_defense[/ame] Self-defense - Wikipedia, the free encyclopedia 3/17/08 14:58:38
[ame="http://en.wikipedia.org/wiki/Death"]Death - Wikipedia, the free encyclopedia[/ame] Death - Wikipedia, the free encyclopedia 3/17/08 14:58:11
[ame="http://en.wikipedia.org/wiki/Inhalation"]Inhalation - Wikipedia, the free encyclopedia[/ame] Inhalation - Wikipedia, the free encyclopedia 3/17/08 14:57:44
http://en.wikipedia.org/wiki/Special:Search?search=hydrogen+peroxide&go=Go
3/17/08 14:56:33
[ame="http://en.wikipedia.org/wiki/Hydrogen_peroxide"]Hydrogen peroxide - Wikipedia, the free encyclopedia[/ame] Hydrogen peroxide - Wikipedia, the free encyclopedia 3/17/08 14:56:33
http://en.wikipedia.org/wiki/Special:Search?search=hydrogen+peroxode&go=Go Search - Wikipedia, the free encyclopedia 3/17/08 14:56:29
[ame="http://en.wikipedia.org/wiki/Peroxide"]Peroxide - Wikipedia, the free encyclopedia[/ame] Peroxide - Wikipedia, the free encyclopedia 3/17/08 14:55:34
[ame="http://www.google.com/search?hl=en&q=peroxide&btnG=Search%20peroxide%20-%20Google%20Search%203/17/08%2014:55:34%20http://www.google.com/search?hl=en&q=acetone&btnG=Search%20acetone%20-%20Google%20Search%203/17/08%2014:54:42%20http://en.wikipedia.org/wiki/Acetone%20Acetone%20-%20Wikipedia,%20the%20free%20encyclopedia%203/17/08%2014:54:42%20http://www.google.com/search?hl=en&q=alcohol&btnG=Search%20alcohol%20-%20Google%20Search%203/17/08%2014:54:26%20http://en.wikipedia.org/wiki/Alcohol%20Alcohol%20-%20Wikipedia,%20the%20free%20encyclopedia%203/17/08%2014:54:26%20http://en.wikipedia.org/wiki/Chloroform%20Chloroform%20-%20Wikipedia,%20the%20free%20encyclopedia%203/17/08%2014:53:25%20http://www.google.com/search?hl=en&sa=X&oi=spell&resnum=0&ct=result&cd=1&q=chloroform&spell=1%20chloroform%20-%20Google%20Search%203/17/08%2014:43:41%20http://www.google.com/search?hl=en&q=chloraform&btnG=Google+Search"]Error 400 (Bad Request)!!1[/ame] chloraform - Google Search 3/17/08 14:43:41
 
I have previewed this post and have no idea why it looks so ugly. Perhaps it is me?

Here are the searches for chloroform and other nefarious items, with ads removed:

http://en.wikipedia.org/w/index.php...search=head+injuries&fulltext=Advanced+search Search - Wikipedia, the free encyclopedia 3/17/08 15:00:14
Head Injuries - Wikipedia, the free encyclopedia Head Injuries - Wikipedia, the free encyclopedia 3/17/08 15:00:14
http://en.wikipedia.org/wiki/Special:Search?search=head+trama&go=Go Search - Wikipedia, the free encyclopedia 3/17/08 15:00:04
http://en.wikipedia.org/wiki/Hand_to_hand_combat Hand to hand combat - Wikipedia, the free encyclopedia 3/17/08 14:59:08
RBSD - Wikipedia, the free encyclopedia Reality-based self-defense - Wikipedia, the free encyclopedia 3/17/08 14:58:58
http://en.wikipedia.org/wiki/Special:Search?search=self+defense&go=Go
3/17/08 14:58:38
http://en.wikipedia.org/wiki/Self_defense Self-defense - Wikipedia, the free encyclopedia 3/17/08 14:58:38
Death - Wikipedia, the free encyclopedia Death - Wikipedia, the free encyclopedia 3/17/08 14:58:11
Inhalation - Wikipedia, the free encyclopedia Inhalation - Wikipedia, the free encyclopedia 3/17/08 14:57:44
http://en.wikipedia.org/wiki/Special:Search?search=hydrogen+peroxide&go=Go
3/17/08 14:56:33
Hydrogen peroxide - Wikipedia, the free encyclopedia Hydrogen peroxide - Wikipedia, the free encyclopedia 3/17/08 14:56:33
http://en.wikipedia.org/wiki/Special:Search?search=hydrogen+peroxode&go=Go Search - Wikipedia, the free encyclopedia 3/17/08 14:56:29
Peroxide - Wikipedia, the free encyclopedia Peroxide - Wikipedia, the free encyclopedia 3/17/08 14:55:34
Error 400 (Bad Request)!!1 chloraform - Google Search 3/17/08 14:43:41
Hydrogen peroxide? What the heck was she attempting to concoct? That's what I first thought.
Why wasn't this released with the other stuff? Any idea? And how come this wasn't used?
 
JWG...it won't be long before this stuff will appear on Hal's blog, I'm sure.
Thanks for all of your hard work. You're always there when we need you.
 
Hydrogen peroxide? What the heck was she attempting to concoct? That's what I first thought.
Why wasn't this released with the other stuff? Any idea? And how come this wasn't used?

Yes, this brings up many interesting questions.
Did Jose even read this and if so why is his (story) so very, very different?
He mentioned WS in his book. Me thinks he underestimated this forum and JWG.
I would very much like to see this shoved in Jose's face and see what spin he concocts. Better yet I would like this out there for all of KC's fans to see..but that won't do a thing, since Jose's book is their *truth*.
Since Logical went to bed early, I can not wait until she sees this and just what she has to say. Sweet dreams Logical.
 
JWG...it won't be long before this stuff will appear on Hal's blog, I'm sure.
Thanks for all of your hard work. You're always there when we need you.

Boy do I hope you are right on that. Hope it is soon.
 
More to come, but I spent way too much time today decoding and formatting the files today, and I am tired. So more tomorrow. As for the hydrogen peroxide searches, I do believe those were mentioned at trial. I am puzzled as to why the suffocation ones were not. I will post on that timeline tomorrow, I hope.
 
More to come, but I spent way too much time today decoding and formatting the files today, and I am tired. So more tomorrow. As for the hydrogen peroxide searches, I do believe those were mentioned at trial. I am puzzled as to why the suffocation ones were not. I will post on that timeline tomorrow, I hope.

Thank you very much for everything you have done and still do to reveal the truth. Thank you AZ for sharing this with JWG.
 
There is a lot of good stuff in the browser history files that AZlawyer kindly shared with me. :thumb: Some of it is illuminating, some of it is funny, and some of it is a bit disturbing in some ways.

Let's start with the allegation that George is the one who searched for the term "foolproof suffocation" on the afternoon of June 16, 2008, as Jose Biaz claims in his book. I have not read the book, but as I understand it he gives three reasons why it was George and not Casey who did this search:

  • George claimed Casey had already left for work when the search was done.
  • George is a poor speller, and Google corrected his spelling before doing the search.
  • George had an AIM account and Casey did not. The search was done within seconds of an AIM session being started.
Addressing these in order …


  • There is a thread on this site that has a lengthy debate on whether or not George was accurately recalling the events of June 16 or some earlier date (IIRC, the most likely candidate was June 9). I subscribe to the notion that there is no way that George would treat and commit to memory June 16 as it happened any differently than any other day. After 4 weeks, when pressed to recall details of events he had not spent effort to commit to memory, he misremembered. Casey never left that day before George went to work. He probably did not take much notice as he left for work. George's recollection is unreliable.
There is evidence to support this notion. Casey's cell phone pings place her at or near the home the entire time. More importantly, George places a very rare call to Casey at the home around 3:00 PM that day. He does this immediately after attempting a call to her cell (she was on her cell at the time). Why call her at home if he believed she were gone?
  • George is the poor speller and Casey is not? Actually, the apple does not fall far from the tree. Casey misspelled chloroform when she searched for it in March. She misspelled it twice (as chloraform). The misspelling on the 16th of June was "less severe" - "fool-proof" was changed to "foolproof". Basically, the misspelling proves nothing.

  • I have no idea if George had an AIM account, but I know for certain that Casey did. Casey logged in the morning of June 16 at 7:53 AM and started chatting with witeplayboi within minutes. The URL for her AIM Today connection contained the unique identifier "SN=CBOFHLHFFIGCOKCLHKEPCPNDBB&PC=HDLEDICEBJ" and had her login number registered as 215.
Then she logged in again at 10:08 AM with login number of 216, but did not chat with anyone. Another login without chat at 10:14 with login number of 217. Then 1:39 PM with login number of 218. And 2:50 PM with login number of 219. This final login was supposedly George, but it had Casey's unique identifier string and matched her login sequence. All of the logins also contained the unique identifier.
Casey got a call from Jesse Grund two minutes after her last login to AIM, or one minute after the "foolproof suffocation" search. George called the home phone from his cell around 3:03 and hung up when the answering machine picked up. He then immediately called Casey's cell from his cell at 3:04. One could speculate that George - diabolically clever guy that he is - was simply setting up an alibi. Or one could assume George was not at home, knew Casey was, and was trying to reach her while she was on the phone with an ex-boyfriend and online trying to chat with a new one. Which is the simpler explanation?

The evidence supports Casey searching for a method of "foolproof suffocation" just before 3 PM on June 16, not George. The evidence supports George being at work, or close to pulling in the parking lot. Not at the computer.

Thanks, JWG. :blowkiss: I knew if I got the materials for you, you could figure it out.

Two things to add: the search was actually "fool-proof suffication"--so "suffocation" was misspelled as well.

Also, when I look at the same data as you have, the "fool-proof suffication" search shows up at 1:50 pm, not 2:50 pm. Any idea what might be causing the difference? 1:50 pm is also what JB said, not that I'm assuming he has a clue. :rolleyes:

ETA: Someone quickly get on Amazon and let "Ron Manta" know that the AIM login was casey's!!

ETA2: BTW, JWG, I did confirm that George had an AIM account as well. George4937 or whatever the house number on Hopespring is. It shows up in some of the earlier internet history files.
 
JWG -
Great stuff!

You said:
The misspelling on the 16th of June was "less severe" - "fool-proof" was changed to "foolproof". Basically, the misspelling proves nothing.

My understanding was that Jose claimed the spelling error was "suffication" instead of "suffocation". (I did not read the book, but remember someone stating that was what was in it). What you saw was "fool-proof"? Is this another lie Jose put in his book? TIA.

ETA - I see AZLawyer answered my question for me. Thanks!
 
JWG -
Great stuff!

You said:


My understanding was that Jose claimed the spelling error was "suffication" instead of "suffocation". (I did not read the book, but remember someone stating that was what was in it). What you saw was "fool-proof"? Is this another lie Jose put in his book? TIA.

ETA - I see AZLawyer answered my question for me. Thanks!

Oh, and let me just add that Casey misspelled LOTS of Google searches.
 
Oh, and let me just add that Casey misspelled LOTS of Google searches.

She was such a bad speller, she even misspelled "begining" in her journal... in her own handwriting - can't pin that one on George.
 
JWG -
Great stuff!

You said:


My understanding was that Jose claimed the spelling error was "suffication" instead of "suffocation". (I did not read the book, but remember someone stating that was what was in it). What you saw was "fool-proof"? Is this another lie Jose put in his book? TIA.

ETA - I see AZLawyer answered my question for me. Thanks!


this is from his book. i cant find where he said what the spelling mistake is..

According to the computer records, at 1:50 P.M. someone got on the computer and signed into AOL Instant Messenger. George had an AOL Instant Messenger account. Casey didn’t. George’s user name was george4937. Right after someone logged in to instant messenger, the first search was to Google. Then someone typed in “foolproof suffocation.” It was misspelled, and George was a poor speller. Google automatically corrected the spelling, and the first link that was clicked was “venturing into the pro-suicide pit.”

Golenbock, Peter; Baez, Jose (2012-07-03). Presumed Guilty (Kindle Locations 3522-3526). Perseus Books Group. Kindle Edition.
 
The hyrdogen peroxide + suffocation + chloroform would have had a greater impact...IMO. Why wasn't the "suffocation" used???!!
I get that the DT could have claimed it was George...George's testimony locks him into the story that Casey and Caylee left the house before he did. But clearly the records show otherwise...especially the MySpace and FB activity on the computer. The PT must have shown George this info...and he still stuck by the story? All I can say, if that was the case, then George WAS willing early on to take the fall for his daughter. I wonder if LE thought George did mix up his dates?
 

Members online

Online statistics

Members online
161
Guests online
1,144
Total visitors
1,305

Forum statistics

Threads
589,931
Messages
17,927,830
Members
228,004
Latest member
CarpSleuth
Back
Top