A file system is a way of organizing information on a storage device like a computer hard drive.
11
votes
3answers
3k views
Prevent acccess to the C drive on Windows systems
Is it possible to prevent regular users from accessing the C drive via Windows Explorer? they should be allowed to execute certain programs. This is to ensure that employees cannot steal or copy out ...
10
votes
1answer
192 views
A filesystem with chunks hidden all over the internet?
I am wondering if there are any implementations of a filesystem (as in FUSE) that would allow me to host a file in chunks steganographically distributed all over the internet.
The way I imagine it, ...
8
votes
5answers
5k views
How secure is NTFS encryption?
How secure is the data in a encrypted NTFS folder on Windows (XP, 7)?
(The encryption option under file|folder -> properties -> advanced -> encrypt.)
If the user uses a decent password, can this ...
8
votes
1answer
512 views
Hadoop security, isolation, and hardening
This is a multiple part question, which all really come back to the main question:
How best to protect data in a Hadoop (wikipedia) cluster.
(Current version, vanilla main-branch distro - ...
7
votes
3answers
414 views
How effective is something like Deep Freeze against boot sector infections?
I work for an embedded system manufacturer and on our older generation systems, which are powered by Windows Embedded, a number of customers have been experiencing virus infections. Due to the real ...
7
votes
3answers
876 views
How to recover securely deleted data
Since we all know files are recoverable with programs after being deleted from the recycling bin, everyone is told to do secure wipes by putting random data over the files you're deleting on the disk ...
7
votes
3answers
451 views
What prevents this exploit from working (unix SUID)?
If I have a user on a unix system where Im allowed to create new files, what prevents me from downloading an executable file onto that system which is already SUID'ed to root on a different system?
...
7
votes
3answers
261 views
Secure cleaning of deleted files
So I know how to secure delete files. But at our company, we have a laptop which had many important documents, which now have been deleted, but not in a secure way.
We can't perform a full format of ...
7
votes
2answers
1k views
Best way for a hacker to hide a file on Linux?
Suppose a hacker obtains a shell on my Linux host and wants to hide a file. What's the best way for him to do this? You may assume unprivileged or root access.
My thoughts are
Use a .file ...
5
votes
2answers
103 views
Monitoring a specific application for creation or modification of files
I don't know if I'm looking for a file integrity monitoring software here.
Basically let's say we have firefox or chromium, let's say the user is watching a youtube video, then we'll find that video ...
5
votes
2answers
863 views
Raw hard disk data extraction possible?
Suppose that the administrator's account is hacked.
Then, can a hacker extract hard disk raw data (by raw data, I mean every raw data, not just files that can be read by a file system.)?
5
votes
3answers
1k views
Can someone tell if you delete deleted files?
I am aware that to delete something completely we will have to use a program that over-writes the deleted file such that it is unrecoverable.
Is there anyway to tell that this has happened? Or is the ...
5
votes
1answer
93 views
Database encryption or filesystem encryption?
Recently I've been working on some data which, although not directly governed by any infosec laws, is sensitive enough to warrant being encrypted. I'm interested in finding out about best practises ...
5
votes
1answer
623 views
Windows mandatory access control: How to remove “mandatory level” label from the file?
1) How to remove "mandatory level" label from the file?
I have two files, for first icalcs return
Mandatory Label\Medium Mandatory Level:(NW)
for second icalcs doesn't return anything (that means ...
5
votes
1answer
250 views
Are NTFS Alternate File Streams considered a security risk in your organisation; how is it mitigated?
Alternate File Streams allows a user to embed hidden content within any NTFS file. That file can be a TXT file, or MOV for example. Some may consider this a form of steganography, and therefore the ...
4
votes
6answers
672 views
Is there any asymmetrically encrypted file system?
Is there a file system providing a directory where everybody can write, but only the directory owner can read the files? In theory it could be done by encrypting using the public key while writing, ...
4
votes
3answers
185 views
Could browsers improve security of stored passwords by using setuid?
On Unix-esque systems, Mozilla Firefox stores a users' preferences, web history and stored passwords in a set of files that are readible and writeable by that particular user.
This makes sense: when ...
4
votes
2answers
658 views
What are the dangers of storing webserver temp files in the /tmp/ folder?
I have configured my first publicly accessible nginx server. I have configured it to use a /tmp/nginx folder to store temp files. This includes the body of http requests, proxy files etc. The /tmp ...
3
votes
5answers
987 views
Secure mount options + partitioning on Ubuntu
What is the best solution for mount options/partitioning when having e.g.: an Ubuntu minimal install (11.04) for Desktop use? e.g.: put /tmp on different partition to give it mount options like: ...
3
votes
3answers
218 views
Why should every file have a user and a group?
I've been reading in most hardening guides for linux, that you should check for files and directories without valid user or valid group. What I can't find, is how this could be used for an attack, or ...
3
votes
3answers
340 views
How do polymorphic/metamorphic/self-encrypting/self-changing file infectors know if they have infected a file or not?
If a virus rewrites itself for each infection how would it know if it has infected a file or not? If it keeps infecting the same file soon the whole file structure will be corrupt. For example how ...
3
votes
1answer
3k views
Repairing corrupt TrueCrypt volumes/disks?
(I'm asking this for a friend of mine as I'm trying to help him with this problem over remote desktop, so if any details are needed, just ask and I will get them). Two entire hard disks were encrypted ...
3
votes
2answers
176 views
Which access rights should be chosen for doku wiki?
I'm currently making my first experiences with a CMS called "DokuWiki" (Link). This CMS needs only PHP and writes the information to files (seems to be /dokuwiki/data/pages).
At the moment I gave the ...
3
votes
2answers
64 views
What precaustions should be taken when the file displayed by a webpage is specified by the GET value
My website shows some files based on the get value in the URL. For example http://www.mysit.com/navigate.php?d=firstpage.html The thing is navigate.php knows which folder to look in and it's not in ...
3
votes
2answers
81 views
How can I identify / discover files hidden with ADS?
ADS, or alternate data streams, were added in to Windows in 1993 (First Windows NT version) as a feature of the new NTFS file system to help support some features of the Mac OS at the time. I like to ...
3
votes
3answers
1k views
Is running an erase tool after an OS install sufficient to ensure no data from the old install is recoverable?
How secure do you consider this process?
A drive has data from a previous OS installation.
A new OS installation is made on the drive, and Heidi Eraser is run on free space.
What are the chances ...
3
votes
1answer
104 views
Recognizing PGP-encrypted disks
I am studying various disk encryption schemes (such as PGP, MS Bit Locker, BestCrypt and TrueCrypt) on my Windows OS.
I am interested to know how an encrypted partition/disk/file with a particular ...
3
votes
2answers
686 views
How to check for null byte injection in Java webapp
Looks like Null Byte Injection is possible in Java apps. see: Is null-byte injection possible in Java filenames?
So how does one protect against it? Inspect all the bytes of the filename for a 0 ...
3
votes
1answer
478 views
Which Domain Administrator created file X on a Windows 2008 R2-based server?
Someone created a file (web.config) in a location that basically caused IIS to not work. Is there any way I can determine who created this file?
The creator/owner says "Domain Administrators".
...
2
votes
4answers
220 views
How to restrict flash drives in Local Area Network
It is prohibited to use USB drives at our office, due to security reasons. But some people still use them to steal information. It is now a great risk factor at our office.
Now we need to ensure any ...
2
votes
3answers
174 views
Theft of data via live boot disk
I have been working with live boot disks recently and I know that it gives you access to the computer's processing power, internet, and various other tasks without the hassle of a username/password.
...
2
votes
4answers
200 views
Overwriting hard drive to securely delete a file?
I am working on a computer that I am not allowed to install new software on. It does not have secure delete software installed. Suppose I have a file (or files) that are sensitive that I'd like to ...
2
votes
2answers
203 views
Possible implementations of networked+encrypted filesystem
Is it possible to implement scheme where remote server just share its filesystem (or resizable container file in it) and it's locally encrypted and mounted? And what is best practical method? (On ...
2
votes
2answers
133 views
What's a good secure file deleter
I've used cipher \w which is built into Windows to overwrite free space but I'm looking for a tool that securely deletes files which have not been deleted yet. It would be a plus (but certainly not ...
2
votes
3answers
198 views
How to protect data on your hard disk if it is in an unfriendly environment?
The essence of the problem as follows:
There is a server located on the side of our company.
There is a hardware client module, which is in a public place, which communicates with the server via a ...
2
votes
5answers
459 views
Security purpose of asking admin password to mount partition on Linux
So I divided my 250GB laptop drive into 2 partitions and some swap. On the second partition which is an ext4 60GB partition I installed Fedora 17. On the other bigger NTFS partition I've got Win XP ...
2
votes
1answer
382 views
Is the mount manpage saying nosuid *is* secure, or is *not*?
I'm a bit confused about the description of nosuid in the mount manpage on this RedHat system I'm setting up:
nosuid Do not allow set-user-identifier or set-group-identifier bits to
take ...
1
vote
3answers
209 views
Are file permissions set in Unix/Linux effective in Windows or Any other OS?
Consider some files and folder in Unix/Linux OS which are configured for only read access by root, if the hard drive stolen, and used in Windows Environment, are these permissions are still effective?
...
1
vote
1answer
86 views
Best way to secure file removals in Windows remotely
I have Windows 2008 R2 box on colocation. I want to remove certain files with a high degree guarantee it cannot be recovered from physical HDD access.
Could someone please explain what levels of ...
1
vote
4answers
120 views
Free space shredding
I'm an avid fan of file system forensics but I'm an amateur so far. I've been reading up on NTFS forensics and I've noticed you sometimes can know if a file was on a certain volume even if it was ...
0
votes
4answers
576 views
Writing file shredder
I want to write a simple file shredder in c++, i.e. a program that deletes a file so that it is not recoverable. Would the following be a secure and correct way to do that?
(1) Open the file with
...
0
votes
2answers
34 views
Safely generate a non-log file within an application server
How does one go about safely write a temporary file to a location within an application server that is publicly accessible?
0
votes
1answer
96 views
is there any program that can tell me which files have been transferred from my computer thru the web
Is there a program that can tell me which files have been transferred from my computer thru the web?
So if I have virus on my computer that transfer files I will know about it according to the files ...
-1
votes
1answer
125 views
Can File Sharing being Controlled by Mac Address? [closed]
I am currently setting up secure environment between 2 pc in isolated network.
Just wondering can we do file sharing based on that pc mac address instead of username?
The environment is OEM Windows ...
-1
votes
1answer
103 views
Would this be plausible for a metamorphic virus? Not repeatedly infecting same system
Would this be plausible for a metamorphic virus? When a new generation (for lack of better word) is created it would hard code a random file name, that would be checked to see if the system was ...
-3
votes
4answers
217 views
What role does paging play in respect to security?
What role does paging play in respect to security?
By paging I mean memory management technique of splitting file memory into pages
I guess the question is does it make files more secure?
