[throwaway13234]

Can you show me where in the expert testimony this is? I haven't yet found this exact allegation myself. I've seen the media parrot this over and over again.

The expert testimony identified a specific model card reader attached to the computer a full three days later. It didn't say that a memory card was ever inserted into the card reader and mounted a logical volume. Nor did the expert testimony mention any files copied to an external drive. The have an expert testimony with specific details from logs about a card reader being inserted but no specific details about a storage device or files being copied? Does the lack of these details but specificity of other details not strike anyone else as odd?

The only copying of files that were specifically identified in the expert testimony was the copying of about a half dozen files to Google drive. That's it. I'm not saying that there isn't the possibility of wrongdoing, but the expert testimony certainly doesn't support the allegations enough to meet the criteria of "preponderance of evidence" for me at least. The testimony definitely doesn't meet the criteria of being a smoking gun, yet that is how it has been reported.

[kbenson]

> Does the lack of these details but specificity of other details not strike anyone else as odd?

Not particularly. There's only so much they can log easily by tying into the system. Card reader insertions are easily tracked through OS level event logs in most operating systems, but generating a log entry for every file copy that happens is quite another level of granularity.

It's sort of like street level cameras. They may catch someone going into a a house or business, but unless you have prior knowledge that there is a camera inthe house or business that the state should have access to, omission of footage of what happened inside does not insinuate that something is being omitted on purpose.

> The only copying of files that were specifically identified in the expert testimony was the copying of about a half dozen files to Google drive.

Yep, and only one of them was by Levandowski. "Chauffer TL Weekly Updates - Q4 2015"

There's only so much that the expert testimony was able to establish. But what it did do was get the judge to authorize more discovery, so Google will apparently get a lot of data from Uber to search through to find their smoking gun, if it exists.

[throwaway13234]

Yeah, I wouldn't expect logs for every file, but I would expect logs for the insertion of a card into the card reader and mounting a logical volume from that card. How big was the card/volume, if any? And if there even was one, was it even big enough to hold the entirety of that repo.

Also, while copying isn't auditable on windows, windows can audit object reads and writes. Were there any logs showing that the directory with the files were read while the card reader was inserted into the machine? It's off by default however. Does anyone know the default audit settings of a new google windows installation to know what folders it turns on logging for if any?

https://technet.microsoft.com/en-us/library/cc976403.aspx

These are all issues and details I would expect to be mentioned in an expert's report if they weren't trying to be selective in the details they provided. Since this expert works for Google, omitting details in Google's favor wouldn't surprise me. I didn't see any statement in the expert's report where they had to make a statement under oath where they declare that they aren't omitting any other details that may be relevant to the court. Without such a declaration, it's possible to be truthful, but deceptive without perjuring yourself.