New answers tagged file-system
0
Try this PDF: NTFS Forensics: A Programmers View of Raw Filesystem Data Extraction by Jason Medeiros,
Grayscale Research 2008
It should answer your questions.
Also, you can read your image with a Hex editor... Well, good luck with that.
2
NTFS Meta datas
Considering ntfs, if you overwrite a block with any data, this block is irreversibly overwrited but,
NTFS hold name, size and some other information (meta data) in another place than datas. So overwritting data won't hide this.
If the data writted in place is totally random or zero only, origin of data won't be surely determinable.
Low ...
1
If you're doing a full-disk wipe on a modern drive, a single pass of ones and then a single pass of zeros is enough (technically speaking, with modern hard drives, even one pass is enough). You don't need a complicated algorithm, or PRNG-generated data. Your disk will look as if it were new, and you can deny that you wiped it.
If you're wiping free space or ...
-2
It's very interesting question. At not shredded filesystem (after some real work) we can "undelete" some files. That's why for "invisible shredding" we need write at free space parts of real files (copy of existing files or files from other HDD). At other way, to determine was HDD () shredded or not - we need only run any program for "undelete" files. If ...
-1
Generally speaking, free space shredding is simply the act of overwriting unused clusters with (pseudo-)random data. If the PRNG in use is good, it should not be possibly to differentiate shredding from random noise. The one interesting note about the shredding is that most brand new drives will read as if they have all bits set to 0 -- so a drive with all ...
-1
When we delete files on any OS, it only delete the file list from index.
Now OS have no record if file is there or not, it will write new file to older file location.
Some application like [TuneUp utility See 7th point] provide Trasher option to securely delete files.
To do this, Install TuneUp Utility
Simple right click on any file
Select TuneUp ...
1
You can't be guaranteed that your file will be deleted successfully just by trying to overwrite it with other files. You don't have any say over what sectors get written with data. Your deleted file will stay on the hard drive until the OS determines that it needs to write over those sectors. So the short answer is no. Sdelete is a sysinternals tool that ...
3
It depends. If you want to delete every trace of the file, it is more complex than overwriting sectors.
Depending on which file system you are using, but if e.g. NTFS: even if you fill all free space, there can be things left behind in the MFT, journaling areas, etc. If it is a very small file, the entire file can be contained in the MFT, etc
Also, ...
5
If you use sdelete from Microsoft (http://technet.microsoft.com/en-us/sysinternals/bb897443.aspx) you don't have to install anything. It has an option to fill the unused disk space with zeroes too. If you already deleted the files this is what I'd just to make sure that nothing remains of the original file.
1
What precaustions should be taken when the file displayed by a webpage is specified by the GET value
To answer you question, it all depends on how your site treats the input parameter. If, like mentioned, it is possible to change the directory using the input, then yes.
GET params just end up as strings when it gets to the php; You are not sending it special commands like you would in a command line interface (unless it is coded that way in the php).
4
What precaustions should be taken when the file displayed by a webpage is specified by the GET value
You should be sure to put additional filtering on it to make sure it doesn't try things like that. Personally, at a minimum, I would attempt to parse and reform the input and make sure that no operations like directory changes can occur.
A better option would be to store the filenames in a DB and pass in a simple token that could be used to look up the ...
3
If the encryption software stores meta-data or other (unencrypted) signatures/magic-numbers, or verifiable structures, then these can be used for identification of course — but, since this gives the game away in a sense, you'll find that the better ones explicitly do not, e.g. from the Truecrypt volume format specification:
TrueCrypt volumes have no ...
3
The need for such a distributed file store is largely filled by Freenet. Freenet is a distributed hash table where by various chunks of a file is obtained anonymously from various nodes in the network.
The addition of stenography upon Freenet would add a level of secrecy in that only people who know where to look can find the information.
3
The encryption you use depends on the risk you're trying to mitigate. File/disk encryption is typically used to protect against theft of the physical media. i.e. they won't be able to access the content as it's encrypted. For a web application this doesn't provide any additional protection so protection of the data within the database may make more sense.
...
Top 50 recent answers are included
