Trial 1 Trial Day
◀ Day 25 Trial 1 Day 27 ▶

Day 26 - June 17, 2024

Judge Beverly J. Cannone · Trial 1 · 10 proceedings · 2,219 lines

Day 26 of 35
Appearing:

Paul's collision-reconstruction testimony concludes amid methodology challenges. Whiffin places McCabe's search at 6:23 a.m.; Guarino explains WAL cleanup and the contact/screenshot distinction before Read-O'Keefe texts are introduced.

Full day summary

Day 26 completed the testimony of MSP crash reconstructionist Joseph Paul. On redirect, Lally elicited Paul's view that odometer mileage was more reliable than key cycles and his confirmation that his calculated range was consistent with placing the vehicle at 34 Fairview Road. On recross, Jackson questioned the route assumptions behind that mileage analysis; Paul said he used a range because he could not identify a definitive route or path, and denied watching coverage or discussing key-cycle issues over the weekend. Cellebrite product manager Ian Whiffin then delivered the prosecution's technical counter-narrative on the McCabe search: cross-referencing multiple iPhone databases, he concluded the 'how long to die in cold' search occurred at 6:23–6:24 a.m., not 2:27 a.m., and demonstrated the tab-focus timestamp mechanism live for the jury. Yannetti's cross challenged Whiffin on iOS version mismatches and raised the possibility of database tampering. On the term 'spontaneous deletion,' Whiffin said he would not use it; he described a system cleanup operation that could remove old orphan records without user direction and said he had not replicated that cleanup. Norfolk DA digital forensics trooper Nicholas Guarino rebutted Green's claims about the search and phone calls as WAL-file artifacts automatically handled by the operating system. Separately, Guarino said Green's report described a deleted screenshot of Brian Albert's contact while the contact remained on the phone, and he did not know whether the screenshot itself had been deleted. Guarino then introduced extensive Read-O'Keefe text messages from the night of January 28–29 depicting an escalating argument that ended with Read texting 'I'm going home' at 12:55 a.m.

  • During cross, Paul said, 'We cannot calculate anything from this collision,' in an exchange about calculations of how far a body would move after impact.
  • Whiffin demonstrates the tab-focus timestamp mechanism live for the jury, providing a concrete technical explanation for why the 2:27 a.m. BrowserState timestamp does not reflect when the McCabe search was conducted.
  • Yannetti's single recross question about 'spontaneous deletion' drew Whiffin's statement that he was unfamiliar with the term; earlier, he said he would not use it and described a system cleanup operation that could remove old orphan records without user direction, though he had not replicated that cleanup.
  • Guarino characterizes Green's defense report as 'mostly incorrect,' testifying that the search and calls he discussed were WAL-file artifacts automatically handled by iOS; separately, Green's report described a deleted screenshot of Brian Albert's contact, while Guarino found the contact still present and said he did not know whether the screenshot had been deleted.
  • Prosecution introduces Read-O'Keefe text messages from the night of the incident showing an escalating argument, closing with Read texting 'I'm going home' at 12:55 a.m. on January 29th.
Ian Whiffin
“I'm of no doubt that the only time those two searches were conducted was at 6:23 and 6:24 on the morning of the 29th.”
Whiffin stated that he had no doubt the searches occurred only at 6:23 and 6:24 a.m.
Joseph Paul
“We cannot calculate anything from this collision.”
Paul said he could not calculate anything from the collision during Jackson's questions about body-movement calculations.
Ian Whiffin
“It's not a term that I'm familiar with.”
Whiffin said 'spontaneous deletion' was not a term familiar to him; earlier, he described a system cleanup operation that could remove old orphan records without user direction.
Video thumbnail for Day 26 — Paul (redirect), Whiffin, Guarino 7h 32m
Watch this day Day 26 — Paul (redirect), Whiffin, Guarino Watch with synced transcript →

Joseph Paul — Direct

After jury admonitions, Lally resumed Trooper Paul's direct. Paul opined that the Lexus reversed up to 24 mph over about 62 feet, struck O'Keefe with its right rear, and projected him toward 34 Fairview Road.

Direct
Joseph Paul Adam Lally
81 lines

ADA Lally resumes Trooper Joseph Paul's direct examination from the prior Friday, first clarifying that his vehicle testing occurred after Crime Services processed the Lexus. Lally elicits general testimony about contact damage, induced damage, and paint transfer in vehicle collisions, then connects the two EDR events at odometer mile 12,629 to specific locations — the three-point turn on Cedarcrest Road and the 24.2 mph reverse on Fairview Road. Paul delivers his ultimate conclusion: Karen Read's Lexus was traveling in reverse at approximately 24 mph over 62 feet when the right rear struck pedestrian John O'Keefe, projecting him forward onto the lawn of 34 Fairview Road. The vehicle continued in reverse and left the scene. Paul found no mechanical defects or environmental factors contributing to the crash. His testimony about an 'attentive and reasonable operator' is struck after defense objection.

+1 procedural segment

Joseph Paul — Cross

Alan Jackson cross-examines Trooper Joseph Paul on his scientific qualifications, impact-point analysis, projection theory, physics calculations, and key-cycle reconstruction, preserving Paul's qualified answers and denials.

Cross
Joseph Paul Alan Jackson
985 lines

Alan Jackson conducts an extensive cross-examination of MSP Trooper Joseph Paul, the collision reconstruction analyst. Jackson establishes that Paul holds no degrees in physics, mathematics, biomechanics, engineering, or kinematics — only an associate's degree — and cannot define basic concepts in the fields underlying his analysis. Jackson challenges Paul's determination of the area of impact by introducing a previously unaccounted-for piece of taillight debris near a fire hydrant, forcing Paul to concede he cannot identify a definitive point of impact. Jackson questions how O'Keefe could have retained a glass cup and cell phone while being 'projected' 30 feet, highlights that Paul's body-position measurements relied on Lieutenant Gallagher pointing at the ground without photographs, and demonstrates that Paul never performed the physics calculations he told the grand jury he would complete. Jackson also walks through key cycle analysis suggesting additional ignition events between the triggering events and Paul's testing, potentially placing the triggers during law enforcement custody rather than the alleged collision.

Joseph Paul — Redirect/Recross

ADA Lally rehabilitates Trooper Paul's testimony on collision mechanics and odometer analysis; Jackson questions the methodology before Lally confirms the calculations.

Redirect
Joseph Paul Adam Lally
148 lines

ADA Lally conducts redirect examination of Trooper Joseph Paul to rehabilitate testimony undermined during Jackson's cross. Lally has Paul re-explain why the EDR speed drop at triggering event 12629B is consistent with a pedestrian strike, clarifies the distinction between area of impact and point of impact, and addresses the glass-traveling-with-victim question by eliciting multiple explanations for how glass could remain with O'Keefe's body. Lally establishes that odometer mileage is more reliable than key cycles for placing the vehicle at the collision location, countering Jackson's key-cycle hypothetical. Paul provides his most detailed description of the collision mechanism — the taillight's sharp plastic consistent with arm injuries, and a dent with scratches consistent with a hand holding a glass striking the vehicle.

Recross
Joseph Paul Alan Jackson
31 lines

Alan Jackson conducts a brief recross focused on the relationship between key cycles and odometer mileage in Trooper Paul's collision analysis. Jackson highlights that Paul had testified on Friday and suggests a post-weekend change in emphasis; Paul denies watching social media or consulting with Lally or anyone else about the key-cycle issues. Jackson then challenges whether an incorrect assumed route of travel would undermine the mileage assumptions used to place the triggering events at 34 Fairview Road. Paul responds that he used a range because he could not identify a definitive route or path, and begins to note that a mileage scenario could place the vehicle in MSP custody before the judge cuts him off as beyond scope.

Redirect
Joseph Paul Adam Lally
3 lines

In a three-utterance re-redirect, ADA Lally asks Trooper Paul to confirm that his calculated range for the defendant's path of travel is consistent with the odometer reading placing the vehicle at 34 Fairview Road for both the three-point turn and the subsequent 24.2 mph reverse travel. Paul confirms with a single 'Yes.' Lally immediately concludes.

Ian Whiffin — Direct

Cellebrite expert Ian Whiffin testified that Safari searches for "how long to die in cold" occurred at 6:23:51 and 6:24:18 a.m., not 2:27 a.m.; the earlier time reflected tab focus.

Direct
Ian Whiffin Adam Lally
470 lines

Ian Whiffin, a Cellebrite decoding product manager and former police digital forensics examiner, testified about his analysis of Jennifer McCabe's phone extraction. He examined multiple databases — history.db, BrowserState.db, the Mobile Safari plist, and KnowledgeC — to determine when the search 'how long to die in cold' was actually conducted. Whiffin concluded the 2:27:40 a.m. timestamp reflected when the browser tab took focus, not when the search occurred, and that corroborating evidence from the plist and KnowledgeC placed the actual searches at 6:23:51 and 6:24:18 a.m. He further testified that the deleted BrowserState record could not have been user-deleted, and demonstrated the tab-focus timestamp behavior live for the jury using his ARTX forensic tool.

Ian Whiffin — Cross/Redirect/Recross

Ian Whiffin, a Cellebrite digital forensics expert, undergoes cross-examination, redirect, and recross. The proceedings focus on the validity of his mobile device analysis and whether evidence could have been selectively deleted.

Cross
Ian Whiffin David Yannetti
79 lines

David Yannetti cross-examined Cellebrite expert Ian Whiffin on two main fronts. First, he established that Whiffin's simulation used iOS 15.8.2 rather than Jennifer McCabe's actual iOS 15.2.2, and that artifact storage behavior depends on the iOS version — undermining the precision of the replication. Second, Yannetti pressed on the deletion mechanisms for BrowserState record 4028, getting Whiffin to confirm that only two possibilities remained: selective user deletion or an unknown internal mechanism. Yannetti then explored whether someone with access to the extracted data could have used tools like MySQL to selectively delete and renumber records, with Whiffin conceding it was 'potentially possible' but would require significant skill to avoid detection.

Redirect
Ian Whiffin Adam Lally
9 lines

In a concise nine-utterance redirect, ADA Adam Lally addressed the two main points raised during Yannetti's cross-examination. Whiffin testified that every iOS version he tested — from 12 through 18 — showed the same timestamp behavior, meaning the version discrepancy between his demonstration and McCabe's phone had no impact on his conclusions. On selective deletion, Whiffin explained that deleting a record would require it first to exist in the history database; he said the absence of missing records indicated the entry was never written and therefore could not have been selectively deleted. Separately, Whiffin said he did not have access to hash information to determine whether changes had been made to the extraction, but that the timestamps and historical pages gave him no indication of tampering; he said alteration was probably possible but would require substantial skill. Whiffin concluded with an unequivocal statement that the two Google searches were conducted at 6:23 and 6:24 a.m. on January 29th.

Recross
Ian Whiffin David Yannetti
5 lines

In a brief recross consisting of a single question, defense attorney David Yannetti asked Ian Whiffin whether he had ever heard the term 'spontaneous deletion' prior to today. Whiffin replied that it was not a term he was familiar with. Judge Cannone then excused the witness, who indicated he could pack up his equipment quickly.

Nicholas Guarino — Direct (Part 1)

Guarino says flagged McCabe phone items came from iOS-managed files, not user deletion; Brian Albert's contact remained, though a screenshot may have been deleted. The page then covers Read-O'Keefe texts and the recess.

Direct
Nicholas Guarino Adam Lally
405 lines

Trooper Nicholas Guarino, a digital forensics specialist with the Norfolk DA's office, testified about his extensive but ultimately unsuccessful efforts to extract data from Karen Read's Lexus infotainment system using Berla technology and a chip-off process. He rebutted defense expert Richard Green's claims that Jennifer McCabe deleted Google searches and phone calls, explaining that the flagged items came from WAL (Write-Ahead Log) files that are automatically purged by the iOS operating system, not user-deleted. Guarino described extracting data from four phones — Read's, O'Keefe's, McCabe's, and Roberts' — and finding no evidence of data deletion from any device. The prosecution then used Guarino to read extensive text messages between Read and O'Keefe from January 28-29, 2022, depicting an escalating argument about their relationship, with O'Keefe repeatedly asking Read to stop calling and Read pressing him about whether he was still interested in the relationship. The final messages shown include Read texting 'I'm going home' at 12:55 a.m. on January 29th, followed by 'your kids are alone' and 'the kids are home alone.'

+1 procedural segment
◀ Day 25 Trial 1 Day 27 ▶