Was actually disappointed when it didn't involve the ISP throttling the troll's connection to the internet using some sort of bandwidth-shaping or destination blocking. I mean, blocking access to google (that den of copyright infringement!) would certainly slow down searches for infringement. 😉
Patently false at least in the US where the purpose is explicitly
to promote the Progress of Science and useful Arts, by securing for limited Times to Authors and Inventors the exclusive Right to their respective Writings and Discoveries. —United States Constitution, Article I, Section 8, Clause 8
Copyright is just an attempt at a means to advance "Science and useful Arts".
There is no way for anyone to know if any speech is "NOT the first step in doing something really bad."
Oh, I know of at least one phrase that nigh guarantees subsequent malfeasance. “I do solemnly swear that I will faithfully execute the office of President of the United States, and will to the best of my ability, preserve, protect, and defend the Constitution of the United States.”
Just making sure that your router logged *all* WAN traffic, not just HTTP/HTTPS. A 70GB discrepancy is still a HUGE difference and would be hard to reach on DNS/NTP-queries (or other common UDP traffic) alone, but I could see it being from IMAP/POP/SMTP or SSH/BitTorrent traffic.
Or maybe Comcast is injecting 70GB of super-cookies in your HTTP(non-S) traffic and billing you for the privilege. 😉
Options include accepting the spoliation of evidence as collateral damage for the illegal search; coming up with a Faraday-bag style isolation like you describe; or being willing to accept that a remote wipe is a possibility. If the phone's owner has been arrested, it's less likely that they have capabilities to execute a remote wipe, but it's a possibility.
However, it's possible to force either the potential spoliation-of-battery-case-evidence or device-gets-wiped situation by writing some sort of "wake every 30 minutes and check if my owner has entered their pass-code at any time in the last 24hr, and if not, wipe myself" program.
If you're going to bring a bomb to school in TX, make sure that it looks like some professionally made football equipment, not like a tinkerer's project. Because this is TX where football goes unquestioned (unlike all that sciency-math-inventor stuff).
Given that all other communications seemed to occur by secure couriered flash-drives, that browsing porn (or any other sort of images) via flash-drive would be pretty tedious.
Osama: [browsing aforementioned gay Mexican midget porn] Amir, I request to see this image but with his leather jacket removed Amir: Yes, sir. [3 months transpire] Amir: Here, sir, is the next image in the series. He has removed the leather jacket. Osama: Mmm. That naughty fellow. Just how I like it. Now, Amir, fetch me the next image in the sequence. The one without the leather chaps… Amir: «sighs» Yes, sir. [3 more months transpire] Amir:Sir, your… Osama: [rips flash drive from Amir's hand and runs to private section of cave]