Skip to content
2015 Federal Trialtrial-daytrial-dayTimothy HowardSerrin A. TurnerJoshua Lewis DratelGregory FineThomas KiernanChristopher Jon BeesonRichard Chapman BatesdirectcrossredirectrecrossDay 6 - January 22, 2015Thomas Kiernan and Christopher Jon Beeson testified about laptop evidence and forensic collection limits. Richard Chapman Bates described Ulbricht's early operation of Silk Road, later statements about selling it, and his own nonprosecution agreement. The court denied a defense mistrial motion and instructed jurors that the defendant need not call witnesses.
← Day 52015 Federal TrialDay 7 →

Day 6 - January 22, 2015

Laptop Forensics, Bates's Silk Road Account, and Mistrial Denial

Judge Katherine B. Forrest
15Proceedings
7Pages
4Witnesses
2,601Lines
3Sidebars
Day 6 of 12
Appearing:

Thomas Kiernan and Christopher Jon Beeson testified about laptop evidence and forensic collection limits. Richard Chapman Bates described Ulbricht's early operation of Silk Road, later statements about selling it, and his own nonprosecution agreement. The court denied a defense mistrial motion and instructed jurors that the defendant need not call witnesses.

Full day summary

Thomas Kiernan completed testimony about files recovered from Ross Ulbricht's laptop and two thumb drives. He described decrypting two active thumb-drive files with a password found on the laptop, comparing website files and log versions, and extracting a bitcoin wallet file. On cross-examination, he acknowledged that timestamps and chat text were editable and that his hash comparison checked his working copy against Christopher Jon Beeson's image, not directly against the laptop. No actual intrusion or alteration was established. Kiernan described encryption-related access difficulties but later acknowledged lacking personal knowledge of what would have happened had the laptop been closed. The court limited questioning about computer security and malware. FBI Special Agent Gregory Fine identified the two USB drives recovered from Ulbricht's bedroom and described their transport to evidence storage. Richard Chapman Bates then testified that Ulbricht told him in 2011 that he had created and ran Silk Road. Bates described providing programming help before and after learning its purpose. He admitted lying to investigators after Ulbricht's arrest and testified under a nonprosecution agreement. The court admitted chats over defense objections and a voicemail without objection. Outside the jury's presence, the court explained its authentication and hearsay rulings on the chats. Joshua Dratel sought a mistrial over restrictions on questioning Kiernan and the court's comment that the defense could call a witness. The court denied the motion. After lunch, it instructed jurors that the defendant need not call witnesses and that the government retained the burden of proof throughout. Bates's resumed testimony addressed both continued involvement and statements about leaving Silk Road. He testified that Ulbricht was running the site in October 2011, but recounted Ulbricht saying on November 11 that he had already sold it. Bates said he believed that account. He interpreted a February 2013 chat as acknowledging that Ulbricht was no longer working on the site while still requesting secrecy. Cross-examination examined Bates's prior lies, his agreement's incentives, and his receipt and deletion of Silk Road code. After Bates was excused, the prosecutor read previously admitted chats concerning a claimed sale and later adoption of the Dread Pirate Roberts name. Beeson described copying selected folders and imaging the laptop's Linux partition while it remained running because of encryption. On cross-examination, he acknowledged a tar error and uncertainty at the time about whether all files had copied. He could not identify the precise cause or affected file. An attempt to image and hash simultaneously failed; he repeated the imaging without simultaneous hashing and calculated the hash later. He also acknowledged possible access-time changes without establishing that they occurred here. His cross-examination remained unfinished at recess.

2. Thomas Kiernan — Cross/Redirect/Recross (Part 4)

Thomas Kiernan's cross-examination and follow-up testimony addressed the laptop image, editable records, BitTorrent and encryption. The court limited several lines of questioning, and Kiernan was excused after a malware question went unanswered.

→
Cross
Thomas Kiernan — Cross Thomas Kiernan Joshua Lewis Dratel
617 lines

Dratel tested Kiernan's laptop analysis, Tor chat test and recollection of the arrest. The court admitted two defense exhibits, one conditionally, and restricted broader computer questioning.

1 sidebar inside this proceeding
  1. Limits on BitTorrent and FBI-Practice QuestionsDratel defended questions about BitTorrent and FBI computer practices as an inquiry into the program’s lack of security.
Redirect
Thomas Kiernan — Redirect Thomas Kiernan Timothy Howard
41 lines

Kiernan distinguished BitTorrent downloads from admitted files, confirmed the source of the Tor chats, and explained how closing the computer would have blocked access.

Recross
Thomas Kiernan — Recross Thomas Kiernan Joshua Lewis Dratel
28 lines

Kiernan acknowledged limits to his knowledge about laptop closure and BitTorrent activity. The court sustained an objection to further malware questioning.

Redirect
Thomas Kiernan — Further Redirect Thomas Kiernan Timothy Howard
17 lines

Kiernan confirmed a malware review, but Howard withdrew the follow-up after the court noted its earlier restriction.

Highlights

6. Richard Chapman Bates — Direct/Cross (Part 2)

Richard Chapman Bates describes Ulbricht’s programming work and statements about selling Silk Road. The defense challenges Bates’s credibility and explores his nonprosecution agreement before his testimony ends.

→
Direct
Richard Chapman Bates — Direct (Resumed) Richard Chapman Bates Timothy Howard
152 lines

Bates described Silk Road assistance and commissions, but also recounted Ross's claim that he sold the site and a later chat suggesting he had stopped working on it.

Cross
Richard Chapman Bates — Cross Richard Chapman Bates Joshua Lewis Dratel
614 lines

Dratel challenged Bates's credibility and cooperation incentives, revisited statements suggesting Ulbricht had left Silk Road, and elicited admissions about deleted code and computers not provided to investigators.

1 sidebar inside this proceeding
  1. Using a 302 Document to Challenge TestimonyCounsel disputed whether using a 302 document to question the witness constituted impeachment by a prior inconsistent statement or an improper attempt to refresh recollection.

Highlights

7. Christopher Jon Beeson — Direct/Cross (Part 1)

FBI examiner Christopher Jon Beeson described collecting Ulbricht's laptop data and faced cross-examination about copying errors and integrity checks. His cross-examination remained unfinished at the recess.

→
Direct
Christopher Jon Beeson — Direct Christopher Jon Beeson Serrin A. Turner
229 lines

Beeson explained live imaging of the encrypted laptop, thumb-drive copying, and hash records, and disclosed that his photograph timestamps were about 40 minutes slow.

Cross
Christopher Jon Beeson — Cross Christopher Jon Beeson Joshua Lewis Dratel
168 lines

Dratel tested Beeson's live laptop collection, eliciting limits on access-time knowledge, a copying error, and a failed simultaneous hashing attempt. Cross-examination remained unfinished.

Highlights

← Day 52015 Federal TrialDay 7 →