[or-cvs] r15942: Mention that deleted files can be obtained with a forensics (torbrowser/trunk/docs)

[sjm217 at seul.org]

Author: sjm217
Date: 2008-07-15 12:51:38 -0400 (Tue, 15 Jul 2008)
New Revision: 15942

Modified:
   torbrowser/trunk/docs/traces.txt
Log:
Mention that deleted files can be obtained with a forensics tool

Modified: torbrowser/trunk/docs/traces.txt
===================================================================
--- torbrowser/trunk/docs/traces.txt	2008-07-15 16:18:05 UTC (rev 15941)
+++ torbrowser/trunk/docs/traces.txt	2008-07-15 16:51:38 UTC (rev 15942)
@@ -64,6 +64,15 @@
 calc.exe, mspaint.exe, notpad.exe, etc...) Therefore the modification of this
 does not indicate that Tor Browser Bundle was run.
 
+Other traces
+============
+
+If the Tor Browser Bundle is initially saved to the hard disk, then
+deleted, the contents will likely be obtainable with a forensic disk
+analysis tool or undeletion program. A safer option is to download and
+install the bundle on a USB drive, and then take this away after using
+the computer.
+
 Future steps
 ============