A file system is a way of organizing information on a storage device like a computer hard drive.

learn more… | top users | synonyms

0
votes
0answers
5 views

Contents of Users\Default folder in Windows [migrated]

Can you help me with two things: On a Windows machine, what does the folder named 'Default' (Found under Users\Default) contain? I have a slight idea that it serves as a template for different user ...
-1
votes
0answers
16 views

Impossible to modify Windows 10 drives from other OSs [migrated]

I'm here to describe an interesting issue I've been facing today, in order to get some hints or solutions. My goal : access and modify one of my computer's Windows (10) system hard drive in order to ...
-1
votes
3answers
42 views

Forensic analysis of file metadata

Suppose I have received a file (doesn't matter what it is - document, image, video, audio, etc). I know that the operating system and also programs that create the file like Office, and even hardware ...
3
votes
1answer
47 views

Reading/Writing content of files - what can happen?

I'm setting up a simple system that is using an HTTP server which is writing incoming data to JSON files in a specific directory. This is functioning as a very simple pseudo-database. For simplicity, ...
1
vote
2answers
116 views

Don't encrypt the hard drive, but make it impossible to change things without a password?

I recently bought an SSD drive and realized that my CPU (Celeron 1007U - has no AES instructions) cannot really keep up encrypting it and the SSD doesn't have hardware encryption built in. This made ...
-1
votes
1answer
157 views

Decrypt or prevent Teslacrypt [closed]

Has anyone come up with a method to prevent receiving Teslacrypt or a method to decrypt encrypted files? Is there a way to prevent encryption on network attached storage? Is email the main avenue ...
1
vote
2answers
105 views

Limiting FTP privileges on Windows Server

I currently have a Windows 2012 Server which is acting as a webserver running IIS. I am using Filezilla to host an FTP server to allow some clients FTP access to their own websites. I have setup the ...
5
votes
2answers
108 views

Path Disclosure without ability to read files

So I am a pentester, and I have discovered "feature" on a server that allows me to, essentially, blindly traverse a web server's files (without executing or reading them). The problem is that I ...
1
vote
0answers
46 views

Does erasing slack space ever make sense on flash-based storage?

Slack space appears when a file written to the disk does not occupy the last cluster entirely. For example, if I write a 512B file on the HDD formatted with 16KB clusters, only a single 512B sector ...
2
votes
1answer
104 views

Secure data by encrypting and rewriting on same file

I'm working on a project to Encrypt files using AES encryption with a key generated from SHA-256 from a keyword. My idea to claim this was to first : read all bytes from a file second : encrypt ...
-1
votes
2answers
61 views

How likely is it to find valuable information in the slack space of a workstation?

I just read about slack space which is the unused space at the end of a sector. This space is unused in some sectors when either the file itself is smaller then the sector or the sector contains the ...
1
vote
1answer
69 views

What kind of answer is this textbook question looking for in access control model?

I'm going over a practice question and I have trouble understanding what it's asking. Draw an access control matrix for the following Linux file system. Group A1 contains S1 and S3, group A2 ...
1
vote
1answer
701 views

VeraCrypt: create encrypted container: Volume Format: Options: Filesystem: None?

I see VeraCrypt has an option to create an encrypted container with no filesystem. How is this possible? If there is not filesystem there, then how can I place my files or folders in the container? Is ...
20
votes
1answer
2k views

I forgot to shred a file before deleting it (on Windows). How do I shred that part of file system now where the file was located?

My company has a policy that files have to be shredded after they've been read. They provide with a tool shred.exe that I run on the file and it overwrites it with garbage in the file system before ...
2
votes
1answer
159 views

Antivirus monitoring activity: why do they not have an internal firewall to prevent processes' access to user's documents?

A question that arises after an updated and licensed version of Norton Internet Security has detected a trojan installed in my new laptop (Windows 7 installed on 26 Aug'15 and fully updated). Trojan ...
3
votes
2answers
141 views

Is it possible to browse/access the files on a computer's hard drive by booting from an OS installed in a flash drive?

I have installed Tails in an USB flashdrive and then booted my macbook with it. I noticed that Tails was capable of seeing my macbook's hard drive. Out of curiosity I tried to browse it. ...
3
votes
1answer
57 views

Unauthorized file writes on Linux

Suppose my web browser or any other web-connected app has a minor security hole that won't allow an attacker to run code but will allow them to write a piece of text into a text file I own. On a ...
2
votes
2answers
207 views

Can you access Google Drive documents if you have the absolute path to the file?

I have been digging into Google Drive while I am trying to investigate a proper way to protect files on a site. In my experience if a user has the URL to a file they can access it without any ...
3
votes
2answers
241 views

Secure file deletion vs wiping free space

Say I only wanted to delete specific files and want to feel confident they can't be recovered. Is it better to use a specific program (such as Eraser) for wiping only the files, or is it better to ...
2
votes
1answer
59 views

Difference in size avaialbe in encrypted volume [closed]

I was making a volume with trucrypt and I set the size to be 12MB. I tried copying 10 files totalling 7.13MB (on Disk) but got an error saying I did not have enough space. Why is this? Is it because ...
1
vote
2answers
162 views

What are hardened ACLs for the Windows %systemroot% folder?

What are the recommended file permissions for %systemroot% in Windows 8.1? I couldn't find hardened file system permissions to apply to better secure a Windows installation.
3
votes
3answers
197 views

How do I know how a file got onto my computer?

I would like to know if there is any way to know how a file was written onto my server (Windows server) i.e if a file X got written via http or via ftp or by simple network copy or someone manually ...
1
vote
4answers
571 views

Possible to find out the last person to open a file on Windows without specialist tools?

So I suppose this is specific to the OS you are using or the filetype or software used to open it, but my question stands open for all really but I am particularly interested in more common files such ...
1
vote
1answer
66 views

What are the risks of file server access over wireless? [closed]

In our office, all computers connect to the network over wireless. The wireless is protected by a pass phrase and communication is AES encrypted. On the same network is a file server that is used ...
2
votes
2answers
301 views

exploiting setuid and setgid bit

I was reading material on secure coding and at many places it is mentioned not to use setuid and setgid bits for privilege escalation. These a vulnerable and can lead to security issues. Instead we ...
1
vote
1answer
120 views

Is storing a client's folder structure a security risk?

At work, we generate sensitive report files for our clients. Currently, these files are stored in cloud storage. Some partners want the files on their local machine, instead, so we will need the ...
1
vote
1answer
95 views

Tell if someone accessed my filesystem

In the organization I work for, the computers are connected in a network, and I can access each PC's filesystem via '\' if I state the "Master User" credentials, once the login window pops up. since ...
7
votes
1answer
124 views

Anonymity of sneakernet: identifiable information on removable storage

Alice, an anonymous informant, would like to transmit digital documents to Bob while maintaining her anonymity. For whatever reason, she chooses to copy the documents to some kind of physical ...
1
vote
2answers
213 views

How to secure sensitive information on cloud from administrator (end-to-end encryption)

When I use end-to-end encryption to secure documents and sensitive information on cloud or on computer, there is always a risk of accessing these information by administrator. For example if you use ...
4
votes
2answers
570 views

Possible to detect an/or shut off CryptoLocker by limiting total network bytes transferred?

Since a virus infected PC has to download (encrypt) reupload the entire file (to a file server), and repeat the process for every network drive, is is possible to detect this unusually high bandwidth ...
1
vote
2answers
175 views

Whitelist-based integrity scanner for Windows EXEs, DLLs, etc [closed]

I am looking for some kind of security software that scans your computer for all EXE and DLL files, calculates a cryptographic hash for them, and looks each one up in a database, logging all the ones ...
2
votes
3answers
1k views

On Windows, how to restrict access to a folder, sub folder and files to only some applications (not users)

We have an application which is not per user and can be used by multiple users simultaneously. Data is also shared by all users. The path to the data folders we use is ProgramData\OurAppName\Data ...
-1
votes
1answer
65 views

Undelete-secure AES software and software for carrying out “full undeletion” free-partition-space zeroing/reformatting on Windows?

It is fairly well known that on Windows, when you delete a file (or folder which may contain any number of files and subfolders possibly containing other files and subfolders and so on), Windows just ...
8
votes
2answers
582 views

Are there any filesystems that have secure deletion as a feature?

There's many 3rd party tools people have designed to perform secure deletion, but I don't know of any filesystems where secure deletion is built in. In fact, secure deletion has to work around ...
3
votes
1answer
86 views

Zeroing empty sectors on various Linux filesystems

There exist various tools for Windows filesystems (NTFS, FAT) to write zeroes or random numbers to free space on the drive/filesystem. Do there exist tools like this for Linux filesystems like ext4 ...
-1
votes
1answer
471 views

How does one find out the file system / directories structure of a webserver they don't own? [closed]

How does one with simple access rights find out the remote host directory structure? I see that web archives are able to not only backup content on the specified domain, but every folder within it.
1
vote
1answer
72 views

How much access to the file system does the recent Drupal vulnerability give?

A friends drupal site was hacked. What is strange is that the root directory of the installation at the hosting company (let us call it rootdir) was copied (or renamed) rootdir_hacked and the ...
2
votes
1answer
291 views

Where to store uploaded images from perspective of security

It is quite common that uploaded files (images, videos, etc.) are stored on a file server because of performance and database-recovery-time reasons. But is there a benefit of storing such files in ...
2
votes
2answers
223 views

How risky is having sensitive files on webroot?

I understand that having anything sensitive under webroot is not smart; someone may be able to access it via url. However, I do not have a choice with my web host (iPage) as they limit my server space ...
46
votes
6answers
11k views

Unix execute permission can be easily bypassed. Is it superfluous, or what's the intention behind it?

The unix read permission is actually the same as the execute permission, so if e.g. one process has write access it's also able to execute the same file. This can be done pretty easily:First this ...
1
vote
2answers
109 views

Are there any artifacts for filesystem forensics in memory?

I have a memory dump. I know it is infected by a rootkit which uses its own file system installed at the end of the disk. Can there be any artifacts in dmp file to show this?
9
votes
3answers
173 views

Finding artifacts of software

I was wondering if there is an established way to know what a running particular program on a system might leave behind (in terms of changes to a filesystem, such as in Linux). I am thinking of this ...
0
votes
1answer
219 views

Secure distributed storing and querying of [medical] data?

Comparing ways of distributing and securely storing and querying structured and schemaless data. Currently I am using MongoDB, but am looking into (Postgres|MySQL)&CryptDB, Cassandra and others. ...
2
votes
3answers
430 views

Wipe free space or take image and wipe entire disk?

Read some of the stuff here regarding wiping disks and securely deleting files. From what I've understood, after deleting (not securely) files they become part of the unallocated(free) space of the ...
2
votes
1answer
402 views

Uploading Executable Files

Using proxy software, I was able to bypass a file upload control file-checking for an asp.net system I am pen testing. I noticed they are saving the file into the database as bytes, and it is ...
3
votes
1answer
99 views

Are files created in Chrome OS developer mode tracked by Google?

If I enable developer mode, then open a shell and create /some/directory/temp.txt, it is invisible to me through the Chrome Filesystem API. But does this mean that it's also invisible to Chrome OS ...
1
vote
0answers
1k views

External hard drives: 'date last accessed' file?

I'm trying to figure out if there's a way to figure out when files on my external hard drive were last opened. I'm using a Seagate Backup Plus, and it's both mac and PC compatible. BUT, I've also read ...
2
votes
5answers
213 views

Why can't just any program use his own file-system-access-system?

This may sound stupid for everyone who knows more than me about the UNIX-System and security in software: Imagine you have a program trying to cause harm by deleting files. You just do something like ...
3
votes
2answers
185 views

How can I ensure that Dropbox is using only its folder?

I'm using several cloude storage services, like Dropbox. Each have windows app for its synchronization, and this app actually can read anything from my disc, not just files from its 'synchronized' ...
1
vote
2answers
991 views

best practice for encrypted filesystem inside a file

This is an extension of my question on UNIX. Let's suppose I create a file, map it to /dev/loop0, and create a LUKS partition inside dd if=/dev/zero of=myfile bs=1M count=1000 losetup /dev/loop0 ...