Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [file-system]

A file system is a way of organizing information on a storage device like a computer hard drive.

5
votes
1answer
77 views

Is there a file system allowing read-only access enforced by cryptography

Is there a file system standard (like LUKS) that allows anyone who can plug in the hard drive to read files, but requires a passphrase to modify or write? For example, I can do something similar by ...
0
votes
0answers
28 views

Fixing Corrupted ELF Section Size

I dropped an ELF to IDA, which IDA give me an error that the "Binary data is incorrect". I research a bit and found out that some of the ELF sections dont have a valid section size and their section ...
0
votes
1answer
67 views

Is it possible to spoof the user agent of any application?

I love using .torrent files instead of file hosting sites like Mediafire and google drive because of their lack of support for larger files. However, even with a VPN your User Agent is still ...
1
vote
0answers
29 views

How to protect certain macOS user directory from unauthorized access?

I have several directories on my Mac, two most popular examples are: ~/.aws ~/.ssh They can be read by any script file or third-party app in system. I do not see a way to protect them in macOS (...
0
votes
1answer
32 views

How files are allocated to memory in NTFS? [closed]

If a file is deleted in memory which is using NTFS and after that, I copied a new file, then where is the new file is allocated in memory? Is the file allocated in the deleted memory space or it is ...
0
votes
3answers
157 views

How to protect company sensitive data from being deleted by a user when data is on their computer?

There more than 300 computers and more than 400 users are available. We face two incidents recently when critical users(who has critical data) leave from company.We have deleted their data when they ...
1
vote
1answer
48 views

Best Practices for exporting sensitive database data and transforming it whilist keeping it encrypted?

Say one has to export database data to use in another tool, such as an Excel Spreadsheet or for use as a csv file with some other program. There's a problem with this, and that's that it ends up in ...
2
votes
2answers
198 views

Can a website see the file location of a document I upload?

While applying to a job, I uploaded a resume to a recruiting website: C:\myname\an\embarrassing\path\to\my\resume.pdf Can the website see the file path of my uploaded document?
1
vote
1answer
747 views

openssl vs gpg for file based encryption? Pros vs cons for security?

I want to encrypt a tar archive and optionally a block file system (akin to DMG image). Does anyone know the pros vs cons of encrypting each with OpenSSL vs GPG? I ask because some have stated that ...
1
vote
0answers
24 views

Using the same passphrase for files and filenames with filesystem-level encryption such as eCryptfs

In filesystem-level encryption schemes where files are encrypted and stored individually, filenames may or may not be encrypted. eCryptfs allows to encrypt filenames with a different key than the one ...
1
vote
1answer
182 views

Files on external drives executable by default with exFAT or NTFS under Ubuntu

On Ubuntu, if you use (external) drives formatted as exFAT or NTFS, i.e. not ext4 or something made for the UNIX world, you may end up with a situation where all files are executable. This is because ...
2
votes
1answer
70 views

Risks of letting the browser open local/network file system listing

Browsers do not generally allow web pages to interact with client-side file system as a security measure. I would like to know what can go wrong with the following scenario: Clicking a special ...
3
votes
1answer
127 views

Weird group name ( 1002)

Please forgive me if this is the wrong place to ask this, but I ran ls -l on an ubuntu machine today in /etc and found a few entries like the following middle entry which appears to have spaces in ...
126
votes
9answers
34k views

What stops Google from saving all the information on my computer through Google Chrome?

I noticed that in Google Chrome, if I type in file:///C:/Users/MyUsername/Desktop/ it shows me all of the folders on my Desktop, and I can type open up PDFs and such in chrome just by typing in the ...
1
vote
1answer
188 views

How secure is it to store passwords in a non-accessible file?

So, I was thinking about workarounds for saving passwords in text files (just because I'm curious), and I thought, what if I saved my file somewhere that is non-accessible? My server has a public_html ...
0
votes
2answers
84 views

Privacy concern about file modification on SSDs

We all know that files which are deleted from a modern system usually don't get erased immediately from memory, which is a security risk in itself. However, this question focuses on a different topic:...
2
votes
1answer
121 views

Can you construct a non-lossy steganographic filesystem

Recently I've been having a look at some interesting stenographic filesystems such as RubberhoseFS and StegFS. As far as I can see (at least in the case of StegFS) infeasibility of determining how ...
1
vote
1answer
154 views

Is shred -n1 /dev/sda demonstrably worse than Bleachbit?

Given an ext4 harddrive (not SSD) with no files, is running sudo shred -n1 /dev/sda # one pass, no zeroes, over whole drive demonstrably less reliable than using Bleachbit's "Wipe free disk space" ...
12
votes
4answers
3k views

Why is it impossible to verify whether a file has been modified since creation?

From what I understand, it is impossible to verify whether a file has been modified since its creation. Specifically, I was wondering whether it was possible to verify whether a photo was modified ...
1
vote
1answer
1k views

Autopsy uncovering slack space of a file

I'm using Autopsy and need to recover a hidden password inside a slack space in another file. Autopsy shows that each sector for my disk is 512 bytes. The file starts at 4365 of the sector and the ...
1
vote
1answer
100 views

How to completely remove all traces of a file on Linux? (Overriding everything if needed)

How can I delete a file and completely remove it from the system FOREVER. I does have in mind that it's needed to override it. But how can I do that?
-2
votes
2answers
117 views

How safe are encrypted file systems and how does their updates work? [closed]

Not so long ago the media widely discussed the deciphering of the encrypted iPhone of a terrorist in the United States. Apple said it was impossible to decrypt. Edit: The iPhone was encrypted, and ...
0
votes
1answer
542 views

EML file type analysis

I'm working on finding infection points in EML file format. Want to know on what grounds does a scanner declare an email as spam or attachment as malicious? I mean does it scan by MIME content or any ...
3
votes
2answers
82 views

Privacy and File Uploading

Can websites see your computer's directory structure when you upload files through web forms (especially JavaScript)? If so, what are ways to avoid this when uploading?
-1
votes
1answer
45 views

Modifying the date time of the files before creating a zip archive

When we create a zip archive with same content more than once, the output zip archive may have different digest. It because date and time in the files we used in creating the zip archive. Because of ...
1
vote
1answer
133 views

How can I capture files malware creates and then deletes? [closed]

Malware on Windows often creates and deletes files. How can I capture the files it creates if it deletes them too quickly to copy?
-3
votes
1answer
645 views

Directory Traversal or File System Permissions? [closed]

A network administrator discovers several unknown files in the root directory of his Linux FTP server. One of the files is a tarball, two are shell script files, and last one is a binary- file is ...
8
votes
9answers
13k views

Is there a file system that doesn't support encryption?

I would prefer that no one, even me, could encrypt my files. I have no use for it, and don't want it. Is there a way to permanently disable any sort of encryption at the OS level? If not, is this a ...
6
votes
1answer
513 views

Run native code from shell on read-only filesystem

I'm researching an embedded device running Linux, busybox, and a few custom services. I've found a way to obtain unprivileged shell access, and trying to see if it's possible to escalate privileges. ...
3
votes
3answers
2k views

Do moved files leave a trace on the drive they created on?

I have created a word document on my computer, or any other file like txt, image, PSD etc. Now, I then take that file and move it to an external device, would that file leave a trace on the computer? ...
1
vote
0answers
180 views

Does aslr definitely end the possibility of code execution in the case of filesystems heap overflows?

Local only Filesystems (like ntfs or btrfs) consists of many data structures that require very complex code for parsing them. So, such filesystems if implemented in user space can suffer of buffer ...
3
votes
2answers
485 views

Security vulnerabilities when sharing files between virtual machine and host

According to this link, when running a windows OS virtual machine on a windows host OS, one can share files like one would share files between two computers on a network by ensuring that file sharing ...
6
votes
2answers
472 views

`rsync -K`-based exploit

In the description of the -K (--keep-dirlinks) flag, the rsync man page gives this warning (my emphasis): One note of caution: if you use --keep-dirlinks, you must trust all the symlinks in the ...
1
vote
3answers
95 views

Security of different Filesystems

Are there any preferred filesystems that have some boni regarding security and confidentiality? Or does it really not matter if I, for example, encrypt a HDD with LUKS? As an example, I read that the ...
5
votes
1answer
192 views

Web application reacts differently to Windows reserved names like CON, AUX, NUL

Several web applications I tested have the behavior that reserved Windows filenames such as AUX, CON, NUL, PRN, COM1, LPT1 have different behavior than other pages. For example, http://example.com/foo ...
2
votes
1answer
70 views

Is it safe to include full filesystem paths in files published on Github?

Some of the configuration files I mean to publish as part of a Github project include full filesystem paths (including username login) in my localhost. Does this pose as a possible security ...
1
vote
1answer
175 views

How did stuxnet hid it's files after the infection?

I've noticed that when ~WTR4141.tmp is loaded, it doesn't set hidden file attributes to .lnk files and on the other .tmp rootkit file of the Stuxnet bundle. I've seen that these are all the possible ...
2
votes
1answer
860 views

EncFS vs EFS advantages for Dropbox-seamless encryption

I am considering a solution for securing my private data in Dropbox. In spite of OneDrive, MEGA and AmazonCloud are also being considered but now I put my focus on Dropbox as the most feature-rich of ...
3
votes
1answer
125 views

How does Android prevent me from installing custom system services?

I am trying to understand the secure boot process. Lets say the firmware is locked and only does signed installation of an OS image. This "image" is a compressed bundle of all the binaries needed by ...
3
votes
1answer
113 views

Is it safe to call mount(2) and pass the password as a parameter?

I wanted to write a daemon that users can start, and that, every 2 hours, automatically mounts an authenticated network share. The daemon will prompt the user for the password only the first time, and ...
-4
votes
1answer
71 views

How to keep users's files seperate from each other? [closed]

I want to create cloud storage platform that users can uploads any kind of files and download them.But I want to be sure that none will enter another people files thats why I think I need to deny ...
2
votes
3answers
241 views

Searching for files on unknown/proprietary filesystem [closed]

I am attempting to find any files or folders on an SD card. Currently I've been looking at it with Foremost, but with no success. I know for certain that the file-system on the SD card is non-...
1
vote
0answers
63 views

Database was Deleted, Suspected Tampering

So basically at the beginning of the year a database of intellectual property (IP) disappeared at the close of a falling out between some upper-level employees and the executive staff at my company. ...
3
votes
2answers
5k views

Uncover data in file slack

Today in class we learned about how information can be uncovered in a file slack. I understand this theoretically, given the physical and logical file size I can come up with the slack space of a file....
1
vote
1answer
320 views

nodev option for /tmp directory

The CIS standard for Ubuntu 14.04 LTS (01-07-2015) states that the /tmp directory should be mounted with a nodev flag - this is under the FileSystem Configuration (Section 2). This prevents the ...
4
votes
5answers
7k views

How do I run an unknown .exe file without being in risk [duplicate]

I would like to know whether there is any way I can run an absolutely unknown executable file without being hacked even if the file contains a lot of malicious code. Is there any program in which I ...
6
votes
3answers
200 views

Live OS : secure file deletion

In the case of a Live OS (i.e Tails) where filesystems are kept in RAM, is there any difference in the way a file is deleted ? Specific case considered : files "1.jpg" and "2.jpg" in a running Live ...
1
vote
1answer
475 views

Dangerous file extensions in Linux?

There are many dangerous file extensions in Windows with which an attacker could execute arbitrary commands on the target system. For example .exe, .js, .com, .wsh or .vbs. My question is now, are ...
2
votes
1answer
100 views

Is there a solution that shows a prompt before mounting an USB drive?

Is there such thing as a prompt that asks for permission to mount an detected USB device? In order to prevent against physical attacks with USB devices. Like "A USB device is detected would you like ...
2
votes
1answer
149 views

Is rootkit detection by comparison of file, process and connection lists a good practice?

I'm currently reading the Blue Team Handbook and one of the recommended methods to detect rootkits is to compare technical data obtained from various sources. As I understood it this is practiced like ...