Trial 1 Trial Day
◀ Day 25 Trial 1 Day 27 ▶

Day 26 - June 17, 2024

Judge Beverly J. Cannone · Trial 1 · 10 proceedings · 2,219 utterances

Day 26 of 35
Appearing:

Joseph Paul's collision reconstruction testimony concludes amid ongoing methodology challenges, while Cellebrite expert Ian Whiffin places Jennifer McCabe's Google search at 6:23 a.m. and digital forensics trooper Nicholas Guarino rebuts the defense deletion theory before introducing Karen Read's final texts to O'Keefe.

Full day summary

Day 26 completed the testimony of MSP crash reconstructionist Joseph Paul, whose redirect and recross left both sides with partial ground — Lally secured Paul's confirmation that odometer analysis places the vehicle at 34 Fairview Road, while Jackson established that the analysis depends on unverifiable route-of-travel assumptions and that Paul had shifted emphasis from key cycles to odometer mileage after the weekend. Cellebrite product manager Ian Whiffin then delivered the prosecution's technical counter-narrative on the McCabe search: cross-referencing multiple iPhone databases, he concluded the 'how long to die in cold' search occurred at 6:23–6:24 a.m., not 2:27 a.m., and demonstrated the tab-focus timestamp mechanism live for the jury. Yannetti's cross challenged Whiffin on iOS version mismatches and raised the possibility of database tampering, but redirect left Whiffin stating he had no doubt about the morning timing — with Yannetti's single recross question about 'spontaneous deletion' drawing Whiffin's admission that the term is not recognized in forensics. Norfolk DA digital forensics trooper Nicholas Guarino closed the day by systematically rebutting defense expert Richard Green's claims that McCabe deleted searches and phone records, explaining each flagged item as automatic WAL file purging rather than user action, then introduced extensive Read-O'Keefe text messages from the night of January 28–29 depicting an escalating argument that ended with Read texting 'I'm going home' at 12:55 a.m.

  • Paul admits during cross that 'we cannot calculate anything from this collision' — the prosecution's own reconstruction expert conceding a fundamental methodological limitation.
  • Whiffin demonstrates the tab-focus timestamp mechanism live for the jury, providing a concrete technical explanation for why the 2:27 a.m. BrowserState timestamp does not reflect when the McCabe search was conducted.
  • Yannetti's single recross question — 'prior to today, have you ever heard of spontaneous deletion?' — draws Whiffin's admission that the term has no recognized meaning in digital forensics.
  • Guarino characterizes Green's defense report as 'mostly incorrect' and explains that the flagged deletions were automatic WAL file purges, not user-initiated deletions.
  • Prosecution introduces Read-O'Keefe text messages from the night of the incident showing an escalating argument, closing with Read texting 'I'm going home' at 12:55 a.m. on January 29th.
Ian Whiffin
“I'm of no doubt that the only time those two searches were conducted was at 6:23 and 6:24 on the morning of the 29th.”
Whiffin's most definitive statement of the day — and the trial — on the central search-timing question, landing after both the iOS version challenge and the deletion theory had been addressed on redirect.
Joseph Paul
“We cannot calculate anything from this collision.”
The prosecution's own reconstruction expert conceding he cannot perform the physics calculations underlying his core conclusions — the day's most damaging admission to the Commonwealth's case.
Ian Whiffin
“It's not a term that I'm familiar with.”
A Cellebrite expert with years of forensic experience confirming that the prosecution's explanation for the missing BrowserState record has no recognized name in the field, giving the defense a clean rhetorical close to the digital forensics battle.

Joseph Paul - Direct

Trooper Paul concludes his direct examination by presenting his collision reconstruction opinion — that Karen Read's Lexus struck John O'Keefe while reversing at 24 mph on Fairview Road.

Direct
Joseph Paul Adam Lally
81 utt.

ADA Lally resumes Trooper Joseph Paul's direct examination from the prior Friday, first clarifying that his vehicle testing occurred after Crime Services processed the Lexus. Lally elicits general testimony about contact damage, induced damage, and paint transfer in vehicle collisions, then connects the two EDR events at odometer mile 12,629 to specific locations — the three-point turn on Cedarcrest Road and the 24.2 mph reverse on Fairview Road. Paul delivers his ultimate conclusion: Karen Read's Lexus was traveling in reverse at approximately 24 mph over 62 feet when the right rear struck pedestrian John O'Keefe, projecting him forward onto the lawn of 34 Fairview Road. The vehicle continued in reverse and left the scene. Paul found no mechanical defects or environmental factors contributing to the crash. His testimony about an 'attentive and reasonable operator' is struck after defense objection.

+1 procedural segment

Joseph Paul - Cross

Defense attorney Alan Jackson cross-examines Trooper Joseph Paul, challenging his qualifications in physics and kinematics, his reconstruction methodology, and his conclusion that Karen Read's SUV struck John O'Keefe.

Cross
Joseph Paul Alan Jackson
985 utt.

Alan Jackson conducts an extensive cross-examination of MSP Trooper Joseph Paul, the collision reconstruction analyst. Jackson establishes that Paul holds no degrees in physics, mathematics, biomechanics, engineering, or kinematics — only an associate's degree — and cannot define basic concepts in the fields underlying his analysis. Jackson challenges Paul's determination of the area of impact by introducing a previously unaccounted-for piece of taillight debris near a fire hydrant, forcing Paul to concede he cannot identify a definitive point of impact. Jackson questions how O'Keefe could have retained a glass cup and cell phone while being 'projected' 30 feet, highlights that Paul's body-position measurements relied on Lieutenant Gallagher pointing at the ground without photographs, and demonstrates that Paul never performed the physics calculations he told the grand jury he would complete. Jackson also walks through key cycle analysis suggesting additional ignition events between the triggering events and Paul's testing, potentially placing the triggers during law enforcement custody rather than the alleged collision.

Joseph Paul - Redirect/Recross

ADA Lally rehabilitates Trooper Paul's testimony on collision mechanics and odometer analysis; Jackson questions the methodology before Lally confirms the calculations.

Redirect
Joseph Paul Adam Lally
148 utt.

ADA Lally conducts redirect examination of Trooper Joseph Paul to rehabilitate testimony undermined during Jackson's cross. Lally has Paul re-explain why the EDR speed drop at triggering event 12629B is consistent with a pedestrian strike, clarifies the distinction between area of impact and point of impact, and addresses the glass-traveling-with-victim question by eliciting multiple explanations for how glass could remain with O'Keefe's body. Lally establishes that odometer mileage is more reliable than key cycles for placing the vehicle at the collision location, countering Jackson's key-cycle hypothetical. Paul provides his most detailed description of the collision mechanism — the taillight's sharp plastic consistent with arm injuries, and a dent with scratches consistent with a hand holding a glass striking the vehicle.

Recross
Joseph Paul Alan Jackson
31 utt.

Alan Jackson conducts a brief recross focused on the relationship between key cycles and odometer mileage in Trooper Paul's collision analysis. Jackson highlights that on Friday's direct examination, Paul emphasized key cycles as the basis for his analysis, but after weekend redirect preparation, Paul now characterizes odometer mileage as the dominant factor. Paul denies watching social media or consulting with Lally over the weekend. Jackson closes by establishing that if Paul's assumed route of travel was wrong, his odometer-based mileage calculations placing the triggering events at 34 Fairview Road would also be incorrect. Paul begins to note that certain mileage would place the vehicle in MSP custody, but the judge cuts him off as beyond scope.

Redirect
Joseph Paul Adam Lally
3 utt.

In a three-utterance re-redirect, ADA Lally asks Trooper Paul to confirm that his calculated range for the defendant's path of travel is consistent with the odometer reading placing the vehicle at 34 Fairview Road for both the three-point turn and the subsequent 24.2 mph reverse travel. Paul confirms with a single 'Yes.' Lally immediately concludes.

Ian Whiffin - Direct

Cellebrite expert Ian Whiffin testifies about the timing of the 'how long to die in cold' Google search found on Jennifer McCabe's phone, concluding it was searched at 6:23 a.m., not 2:27 a.m.

Direct
Ian Whiffin Adam Lally
470 utt.

Ian Whiffin, a Cellebrite decoding product manager and former police digital forensics examiner, testified about his analysis of Jennifer McCabe's phone extraction. He examined multiple databases — history.db, BrowserState.db, the Mobile Safari plist, and KnowledgeC — to determine when the search 'how long to die in cold' was actually conducted. Whiffin concluded the 2:27:40 a.m. timestamp reflected when the browser tab took focus, not when the search occurred, and that corroborating evidence from the plist and KnowledgeC placed the actual searches at 6:23:51 and 6:24:18 a.m. He further testified that the deleted BrowserState record could not have been user-deleted, and demonstrated the tab-focus timestamp behavior live for the jury using his ARTX forensic tool.

Ian Whiffin - Cross/Redirect/Recross

Ian Whiffin, a Cellebrite digital forensics expert, undergoes cross-examination, redirect, and recross. The proceedings focus on the validity of his mobile device analysis and whether evidence could have been selectively deleted.

Cross
Ian Whiffin David Yannetti
79 utt.

David Yannetti cross-examined Cellebrite expert Ian Whiffin on two main fronts. First, he established that Whiffin's simulation used iOS 15.8.2 rather than Jennifer McCabe's actual iOS 15.2.2, and that artifact storage behavior depends on the iOS version — undermining the precision of the replication. Second, Yannetti pressed on the deletion mechanisms for BrowserState record 4028, getting Whiffin to confirm that only two possibilities remained: selective user deletion or an unknown internal mechanism. Yannetti then explored whether someone with access to the extracted data could have used tools like MySQL to selectively delete and renumber records, with Whiffin conceding it was 'potentially possible' but would require significant skill to avoid detection.

Redirect
Ian Whiffin Adam Lally
9 utt.

In a concise nine-utterance redirect, ADA Adam Lally addressed the two main points raised during Yannetti's cross-examination. Whiffin testified that every iOS version he tested — from 12 through 18 — showed the same timestamp behavior, meaning the version discrepancy between his demonstration and McCabe's phone had no impact on his conclusions. On the selective deletion question, Whiffin explained that deletion would require a record to exist in the history database first, and the absence of missing records indicates the entry was never written. He found no evidence of tampering. Whiffin concluded with an unequivocal statement that the two Google searches were conducted at 6:23 and 6:24 a.m. on January 29th.

Recross
Ian Whiffin David Yannetti
5 utt.

In a brief recross consisting of a single question, defense attorney David Yannetti asked Ian Whiffin whether he had ever heard the term 'spontaneous deletion' prior to today. Whiffin replied that it was not a term he was familiar with. Judge Cannone then excused the witness, who indicated he could pack up his equipment quickly.

Nicholas Guarino - Direct (Part 1)

MSP Trooper Guarino testifies about digital forensic extractions from multiple phones and the defendant's vehicle, rebuts defense expert claims about Jennifer McCabe's phone data, and reads text messages between Karen Read and John O'Keefe showing relationship conflict on January 28, 2022.

Direct
Nicholas Guarino Adam Lally
405 utt.

Trooper Nicholas Guarino, a digital forensics specialist with the Norfolk DA's office, testified about his extensive but ultimately unsuccessful efforts to extract data from Karen Read's Lexus infotainment system using Berla technology and a chip-off process. He rebutted defense expert Richard Green's claims that Jennifer McCabe deleted Google searches and phone calls, explaining that the flagged items came from WAL (Write-Ahead Log) files that are automatically purged by the iOS operating system, not user-deleted. Guarino described extracting data from four phones — Read's, O'Keefe's, McCabe's, and Roberts' — and finding no evidence of data deletion from any device. The prosecution then used Guarino to read extensive text messages between Read and O'Keefe from January 28-29, 2022, depicting an escalating argument about their relationship, with O'Keefe repeatedly asking Read to stop calling and Read pressing him about whether he was still interested in the relationship. The final messages shown include Read texting 'I'm going home' at 12:55 a.m. on January 29th, followed by 'your kids are alone' and 'the kids are home alone.'

+1 procedural segment
◀ Day 25 Trial 1 Day 27 ▶