Questions tagged [file-system]

A file system is a way of organizing information on a storage device like a computer hard drive.

Filter by
Sorted by
Tagged with
1 vote
0 answers
34 views

How to create read-only pendrive (no availability of coping, deleting or overwriting) [duplicate]

I want to create pendrive or external HDD, that is read only. To be precise - I want to be open to read files on it (documents or video files), but to prevent files from being copied off disk. As I ...
Herman Pompka's user avatar
1 vote
0 answers
54 views

Best collaboration and file sharing platform across multiple organizations (and IT ecosystems) [closed]

Four discrete organizations wish to share calendars, files, and folders for collaboration purposes on multi-year projects (including regular online and in-person events). Each one has their own ...
Bashi's user avatar
  • 11
3 votes
1 answer
254 views

How to properly sanitise a file name

I am to generate a file name that will be used for a ZIP file sent back to the user from a web app. I have no idea what OS that file will ultimately be saved to so I have to come up with a way to ...
Stephane's user avatar
  • 18.7k
0 votes
0 answers
213 views

Outdoor backup: gocryptfs --init --reverse: alway same .diriv in 1st level directory

Intro Trying to send encrypted backup of in productions filesystems, I was interested by the ability of using gocryptfs in reverse mode! The idea is to use gocryptfs --reverse from any existing (...
F. Hauri  - Give Up GitHub's user avatar
1 vote
0 answers
86 views

File System with SGX assistance threat model

I am studying some published papers that demonstrate how I can a secure file system been implemented with the assistance of Intel SGX. However, in each one of these papers, the threat model is not ...
johnkaramp's user avatar
0 votes
1 answer
114 views

Can I upload files to a certain website to see exactly what code they contain and what they do (heuristics)?

I want to upload files somewhere to see exactly what their behaviour is, but I’m not sure how. One of them is an EFI file. Does anyone know some website or method, like on a virtual machine, to check ...
pej 's user avatar
  • 1
1 vote
0 answers
433 views

API hooking with Microsoft Detours

I want to hook certain API calls, e.g. CreateFile (or NtCreateFile if I hook ntdll.dll), but there are some issues. I can use several methods to achieve this goal, e.g. DLL injection, Inline hooking ...
Moooz's user avatar
  • 35
1 vote
1 answer
254 views

How does an attacker modify local files when I access them in Chrome?

I have a trusted html file containing a script that handles sensitive information. When I open it in Chrome 108 on Android, it says: What is this about? The above warning seems to appear ...
personal_cloud's user avatar
1 vote
1 answer
313 views

How can we restrict users from copying "non-allowed" file types from USB?

We blocked USB ports on most of the devices using Intune. However, a subset of users requires USB access due to their job scope which requires them to copy images from their cameras to their PCs. Is ...
TDK's user avatar
  • 11
1 vote
0 answers
459 views

Restrict node.js filesystem access

I have a Node.js app which has a lot of npm-dependencies, running on Linux (Centos) machine. When Node starts, the script has access to the files outside its directory (as least by default), so ...
Oleg's user avatar
  • 309
1 vote
1 answer
367 views

Why does some Ransomware encrypt also the file header and trailer?

Some time ago I read an article that mentioned that it is possible for some ransomware to change the magic numbers of a file (that makes sense). However, the authors claimed that their method was ...
Moooz's user avatar
  • 35
2 votes
1 answer
226 views

Linux access control policies sudoers

I'm learning about linux hardening and I'm creating a sudoers file. My idea is to separate things. There will be a user to see log files, another that can sudo to manage system processes, another for ...
guu1's user avatar
  • 21
22 votes
2 answers
4k views

What metadata from the Linux file system is in my uploaded photos?

Before uploading a photo or image to a forum, I may typically strip the metadata to remove identifying material with exiftool. The thing is, the Linux file system itself seems to leave some metadata ...
cardamom's user avatar
  • 379
0 votes
0 answers
91 views

Shared computer's disc space mysteriously filling up - worried about illegal content

I'm not an Information Security professional, just a worried layperson. A few years ago, when I was logged into my own account on a shared laptop, the disc space mysteriously kept filling up. I ...
Notmycupoftea's user avatar
0 votes
1 answer
299 views

Loop device added at package installation - is it a security threat?

I just noticed a strange loop device that was added to my machine today. It is mounted under /run/media/<user>/CENA_X86FREE_EN-US_DV9 and seems to contain Windows files, probably a Windows ...
kaiya's user avatar
  • 452
1 vote
1 answer
2k views

What traces are left on a USB stick after using it?

If one uses a FAT32-formatted USB stick on Windows, Linux, or Android, would there be a way to determine on which computer the USB stick was used by examining the USB stick? I know OS can log which ...
William's user avatar
  • 21
0 votes
1 answer
651 views

Uploading/writing server files via SSRF?

Say I've found a perfect SSRF vulnerability in a web application that lets me send web requests to any URL, any host, any port, any scheme. I can use the file:// scheme to get the contents of local ...
Bob's user avatar
  • 89
0 votes
1 answer
165 views

If I move a file within the same drive or partition and then shred that file with a file shredder, would it still be recoverable?

If I move a file within the same drive or partition, suppose from one folder to another, and then shred that file with a file shredder, would it still be recoverable? Is there still some trace of that ...
Musa's user avatar
  • 1
1 vote
1 answer
187 views

How does Sequoia allow unprivileged users to get root if it requires mounting a filesystem?

CVE-2021-33909 AKA "Sequoia" is a vulnerability against the filesystem code within the Linux kernel. According to the description of the vulnerability from Qualys Successful exploitation of ...
Josh's user avatar
  • 1,096
0 votes
0 answers
120 views

asymmetric file system authentication

Here is how integritysetup from the cryptsetup package in Linux works. A user provides an authentication key to the OS when reading or writing data to a file system. When reading, the OS only returns ...
beroal's user avatar
  • 158
0 votes
1 answer
225 views

Unrestricted file write in Java

Would it be possible to write a file to a directory outside of the uploads folder if the $ext variable is used controlled and unrestricted? The uploads directory is empty except for the freshly ...
Fred's user avatar
  • 1
0 votes
0 answers
118 views

Additional verification, sanitization for transcoded CJK paths in URLs

Suppose there is a file hosting server, and most filenames are strings with mostly CJK characters. Transmitting those characters in HTTP GET requests requires encoding them using UTF-8 (x3 overhead) ...
DannyNiu's user avatar
  • 374
1 vote
2 answers
472 views

What config files and logs files of a Linux system (CentOS 7) deserve to be monitored by a SIEM?

I am not a security expert (I am more a software developer) and I am working on a project related to a SIEM installation (Wazuh). This installation is only a demo for a customer, in a second time a ...
AndreaNobili's user avatar
0 votes
3 answers
163 views

How to technically introduce my boss to computer file security?

My boss truly believes that keeping files on paper and locked in his drawer is the safest place ever. He is the type of guy that processes a file in Word/Excel, prints it, delete the file and store ...
RA828's user avatar
  • 473
1 vote
2 answers
502 views

Can someone know who created a cpp file?

I know that one can see the modification, access, and creation date of a file on Windows. And that the creation date, as well as other dates, can be modified at will. I just wonder if it is possible ...
C.Unbay's user avatar
  • 207
2 votes
1 answer
1k views

Is native OpenZFS (on FreeBSD) block-level encryption secure?

I am considering using OpenZFS on FreeBSD. I am not quite sure how secure native OpenZFS encryption is? If somebody steals my server and the disks, is he able to decrypt the files? In a Discord room I ...
Sybil's user avatar
  • 1,469
2 votes
2 answers
218 views

Unusual file permissions on WordPress websites

I've been asked by a customer of mine, to manage a few hundred WordPress sites. Doing an initial security assessment, I've found that every site (350 sites) has unusual file permissions on every php ...
Roberto Jobet's user avatar
1 vote
1 answer
192 views

Drive with deniable encryption and multiple independent file systems

So I read this question about deniable encryption but it left me with a few questions. The first answer describes how you could hide one file system on a drive. The process goes like this: Fill the ...
Cookie04's user avatar
  • 291
1 vote
1 answer
199 views

Question regarding data encryption/decryption and sharing said keys with third party's

At work we have a pretty complex problem(for me at least) and I have no idea what a fitting solution would be. To give a bit of context, the company I work for is a data processor/provider for big ...
Devchn's user avatar
  • 11
0 votes
2 answers
262 views

Windows File Metadata Audit

As part of auditing, I have to find whether an Excel file is modified by anyone after it was created in 2018 by the original user on a Windows 7 computer. I had verified the creation, modified and ...
Vrs's user avatar
  • 1
0 votes
3 answers
346 views

How can I protect me from... myself?

So, here is the deal: I have a file I cannot change. I cannot, but I know in the future I will want to change it. It's of my understanding that it's not possible to make this file unchangeable while ...
chedieck's user avatar
2 votes
1 answer
397 views

Homebrew and NOPASSWD sudo

I like to be able to run some commands installed via Homebrew without typing my sudo password. The problem is that Homebrew installs everything with user permissions, so if I add the executables to ...
HappyFace's user avatar
  • 121
0 votes
0 answers
282 views

Does Windows log the movement of files?

If I move a file from a non-hidden encrypted drive to my main C drive, then move the original file to a hidden container on the encrypted drive, then wipe the original file with ccenhancer/secure ...
thatsmynickityname's user avatar
48 votes
4 answers
16k views

Aren't keyfiles defeating the purpose of encryption?

I just added a drive to my system which is basically a partition mounted for extra storage. I'd like to encrypt it to protect my data in case of god knows what, and by doing that I'd need to enter the ...
php_nub_qq's user avatar
26 votes
5 answers
9k views

Permanently erasing a file

As far as I know, there is a table of files present in the hard drive that does not contain the data of each file but can point you to it. When you delete a file, the record of it gets deleted from ...
GuestBro's user avatar
  • 277
0 votes
0 answers
231 views

Encrypt files transparently from applications

Many CLI applications store or need secrets in plaintext files. I'm searching preferably for a tool, or a methodology, to encrypt those files without the application knowing. What do I mean by that : ...
VannTen's user avatar
  • 101
1 vote
1 answer
126 views

Is there any security issue while two different process using different hard link of same file?

To reduce disk space I have planned to use a hard link instead of full copy, Is there any security issue while two different processes using different hard links of the same executable file as base?
Karthik Nedunchezhiyan's user avatar
0 votes
1 answer
604 views

What is the best way to restrict /proc fs from malicious users (linux)?

I am trying to make a restriction to procfs like only a certain groups of members can perform read and write actions. kernel document says we can do that by setting hidepid and gid in /etc/fstab. It ...
Karthik Nedunchezhiyan's user avatar
22 votes
2 answers
7k views

Is NTFS encrypted by default?

Can an NTFS volume be read by forensics without having to log into the windows user or provide any passwords? aka can data be read straight from the sectors in clear text?
ZedPython's user avatar
  • 339
0 votes
0 answers
1k views

Secure mount options in Ubuntu CIS benchmarks too narrow?

this is the first of a series of questions on hardening Linux servers at the filesystem level. At work I'm hardening an Ubuntu 18.04 Server following the CIS benchmark 2.0.1. Instead of just running ...
Nostromo's user avatar
3 votes
1 answer
678 views

Sanitising a file/folder path from user input

I have an external server make backups of my main server via scp and a backup-only user account. I successfully restricted it to scp only using GNU Rush. The scp command below executed on the backup ...
ᴍᴇʜᴏᴠ's user avatar
8 votes
3 answers
2k views

Why are file URLs marked as not secure while HTTPS URLs are marked as secure in browsers?

I understand that modern HTTPS protocols are secure enough for an average user. However, since these protocols need to fetch files from the server while the file protocol just tells the browser to ...
freezable's user avatar
  • 118
0 votes
1 answer
685 views

Windows Encrypted temp directory for files at rest in Windows?

It would be nice if there was an area on my computer where I could work with temp files that may contain sensitive information that could be encrypted with bitlocker or something similar when the ...
leeand00's user avatar
  • 1,421
0 votes
1 answer
179 views

How are files in file container (posibly in archive file) encrypted? [closed]

I see advantage of using container in it that offer work with more files rather than with one but is there some advantage in encryption technique?I would like to know if it encrypt each single file in ...
Many's user avatar
  • 103
1 vote
1 answer
564 views

Can file recovery tools recover deleted small files from SSD drive's NTFS Master File Table?

According to this page and site, small files are kept in Master File Table when filesystem is NTFS. Let's assume that computer is using Windows 10 and a SSD drive with TRIM support. If a user ...
ccccc1cc's user avatar
2 votes
0 answers
762 views

How to detect file or file system tampering

I would like to know if the following is possible: Is it possible to detect a file that has been put into my file system using back dating? Are there any trace artifacts left behind which can help to ...
ananth's user avatar
  • 21
21 votes
2 answers
4k views

At which point can a system be compromised when downloading archived data from an untrusted source?

If I download archived data from a possibly untrusted source at which point am I at possible risk of harming my system: Initially downloading and saving the archived data (still packed) Unpacking the ...
T A's user avatar
  • 329
0 votes
4 answers
1k views

Generate Fake Encrypted Data

I want to create a file server that will be serving encrypted files without permissions. It would be really awesome if it were impossible for a hacker to tell if a file exists or not, so I am thinking ...
William Rusnack's user avatar
6 votes
1 answer
240 views

Is there a file system allowing read-only access enforced by cryptography

Is there a file system standard (like LUKS) that allows anyone who can plug in the hard drive to read files, but requires a passphrase to modify or write? For example, I can do something similar by ...
Liz's user avatar
  • 63
0 votes
0 answers
162 views

How to protect certain macOS user directory from unauthorized access?

I have several directories on my Mac, two most popular examples are: ~/.aws ~/.ssh They can be read by any script file or third-party app in system. I do not see a way to protect them in macOS (...
Croll's user avatar
  • 163

1
2 3 4 5