| Cc: Jeff Pagliuca <jpagliuca@hmflaw.com>, "ceverdell@cohengresser.com"<ceverdell@cohengresser.com>, "Bobbi Sternheim (bcsternheim@mac.com)"<bcsternheim@mac.com> |
| Subject: RE: US v. Maxwell - [conferral re photo and other discovery deficiencies] |
| Date: Fri, 21 May 2021 00:21:35 +0000 |
| Image: image001.png; image002.png |
Inline-Images: image001.png; image002.png¶
Laura,¶
I will pass this on to the FBI and our vendor for review. Once I have consulted with them, I will revert back to you on this issue.¶
Thank you,¶
Cc: Jeff Pagliuca jpagliuca@hmflaw.com; ‘ceverdell@cohengresser.com’ ceverdell@cohengresser.com; ‘Bobbi Sternheim (bcsternheim@mac.com)’ bcsternheim@mac.com¶
Subject: RE: US v. Maxwell - [conferral re photo and other discovery deficiencies]¶
Thank you for your explanation. I also have gone back to our IT department and, unfortunately, your FBI/vendor explanation is insufficient.¶
-
Based on our review, which has been double-checked, there are hash values in the overlay that don’t match the index and visa-versa.
-
The snips below show an example of an entry from the overlay file you provided (with file names and MD5 Hash) which did not join to the non-nude index. We were able to find the corresponding file in the index using the file name, which in this particular instance was unique. As you can see, the MD5 hashes don’t match.
From the overlay file¶
| ProdBegBates | File Name | MD5 Hash |
| SDNY_GM_00503260 | Jeffrey VF2.psd | DA92DF87819FCC13F38E0584D8D77DFB |
| SDNY_GM_00506551 | LSJ librarywindow150dpi.tif | 58AC5CBE826591AEFD0604ABA226272D |
| File Name | SHA-1 | MD5 |
| LSJ librarywindow150dpi.tif | 043670EDF17D35EE5794EBDF094AEF63A95D4B9A | BDEB66247E99D1C9EED2BA30FB8F72D5 |
-
More importantly, if as you report you did not deduplicate the production and if the index you produced is accurate, we should be able to match files based on the combination of File Name and MD5 hash. The hash + file name combination might not be unique, but each hash+file name value in the index should have a corresponding entry in the overlay unless hash values and/or file names were modified somewhere in the process.
-
As previously reported, if we require a match on the hash value and ignore file names, there are 65 production numbers that don’t match the index.
EFTA00089743¶
- There are more entries in SDNY011 (40,567) than entries on the non-nude index (40,536). We cannot understand the discrepancy based on your explanation.
My earlier requests - a new copy of the non-nude index with an added column to note the production number of each file and a new index for the produced files that were not included in the prior index – still stand.¶
Thank you,¶
Laura¶
Laura A. Menninger | Partner¶
Haddon, Morgan & Foreman, P.C.¶
150 ■. 10th Avenue | Denver, CO 80203¶
+1 303 831 7364 (Office)¶
| Cc: Jeff Pagliuca | <jpagliuca@hmflaw.com>; 'ceverdell@cohengresser.com'<ceverdell@cohengresser.com>; 'Bobbi Sternheim(bcsternheim@mac.com)" |
| Subject: RF: US v. Maxwell - [conferral re photo and other discovery deficiencies] |
Subject: RE: US v. Maxwell - [conferral re photo and other discovery deficiencies]¶
Laura,¶
I have consulted with the FBI and our vendor regarding the issues you raised with the overlay. Below is what I understand from them:¶
• When using the overlay, you should require only a match of the hash value.¶
-
when our vendor uses the overlay, they do not see any production numbers that do not have a match in the index. If you are still seeing outliers, please let us know which files are not matching up with the index, and our vendor will look into what that issue could be.
-
The 17 files with no hash values were either incomplete files or corrupt files when they were recovered from the CDs. We produced them to you so that you would have a copy of every file on the CDs that did not have identifiable nudity.
-
Any non-unique hash values are duplicate files. There were many duplicate files on the CDs. The FBI and vendor did not deduplicate the images before producing them in an effort to ensure that you had a complete set of all files recovered from the CDs.
-
There are a number of files that were recovered from the CDs but are unopenable on our end. We produced them to you so that you would have a copy of every file on the CDs that did not have identifiable nudity. If you would like to check to see if any particular files are unopenable on our end, we would be happy to check.
Given the above, the FBI and the vendor believe the overlay previously provided should be sufficient to allow you to review the metadata in this production.¶
Best,¶
Assistant United States Attorney¶
Southern District of New York¶
1 St. Plaza¶
New York, NY 10007¶