Questions tagged [file-system]

A file system is a way of organizing information on a storage device like a computer hard drive.

Filter by
Sorted by
Tagged with
1 vote
0 answers
34 views

How to create read-only pendrive (no availability of coping, deleting or overwriting) [duplicate]

I want to create pendrive or external HDD, that is read only. To be precise - I want to be open to read files on it (documents or video files), but to prevent files from being copied off disk. As I ...
1 vote
1 answer
564 views

Can file recovery tools recover deleted small files from SSD drive's NTFS Master File Table?

According to this page and site, small files are kept in Master File Table when filesystem is NTFS. Let's assume that computer is using Windows 10 and a SSD drive with TRIM support. If a user ...
1 vote
2 answers
472 views

What config files and logs files of a Linux system (CentOS 7) deserve to be monitored by a SIEM?

I am not a security expert (I am more a software developer) and I am working on a project related to a SIEM installation (Wazuh). This installation is only a demo for a customer, in a second time a ...
2 votes
2 answers
3k views

Files on external drives executable by default with exFAT or NTFS under Ubuntu

On Ubuntu, if you use (external) drives formatted as exFAT or NTFS, i.e. not ext4 or something made for the UNIX world, you may end up with a situation where all files are executable. This is because ...
1 vote
0 answers
54 views

Best collaboration and file sharing platform across multiple organizations (and IT ecosystems) [closed]

Four discrete organizations wish to share calendars, files, and folders for collaboration purposes on multi-year projects (including regular online and in-person events). Each one has their own ...
3 votes
1 answer
254 views

How to properly sanitise a file name

I am to generate a file name that will be used for a ZIP file sent back to the user from a web app. I have no idea what OS that file will ultimately be saved to so I have to come up with a way to ...
0 votes
0 answers
213 views

Outdoor backup: gocryptfs --init --reverse: alway same .diriv in 1st level directory

Intro Trying to send encrypted backup of in productions filesystems, I was interested by the ability of using gocryptfs in reverse mode! The idea is to use gocryptfs --reverse from any existing (...
1 vote
0 answers
86 views

File System with SGX assistance threat model

I am studying some published papers that demonstrate how I can a secure file system been implemented with the assistance of Intel SGX. However, in each one of these papers, the threat model is not ...
0 votes
1 answer
114 views

Can I upload files to a certain website to see exactly what code they contain and what they do (heuristics)?

I want to upload files somewhere to see exactly what their behaviour is, but I’m not sure how. One of them is an EFI file. Does anyone know some website or method, like on a virtual machine, to check ...
1 vote
0 answers
433 views

API hooking with Microsoft Detours

I want to hook certain API calls, e.g. CreateFile (or NtCreateFile if I hook ntdll.dll), but there are some issues. I can use several methods to achieve this goal, e.g. DLL injection, Inline hooking ...
1 vote
1 answer
254 views

How does an attacker modify local files when I access them in Chrome?

I have a trusted html file containing a script that handles sensitive information. When I open it in Chrome 108 on Android, it says: What is this about? The above warning seems to appear ...
1 vote
1 answer
313 views

How can we restrict users from copying "non-allowed" file types from USB?

We blocked USB ports on most of the devices using Intune. However, a subset of users requires USB access due to their job scope which requires them to copy images from their cameras to their PCs. Is ...
1 vote
0 answers
459 views

Restrict node.js filesystem access

I have a Node.js app which has a lot of npm-dependencies, running on Linux (Centos) machine. When Node starts, the script has access to the files outside its directory (as least by default), so ...
2 votes
2 answers
218 views

Unusual file permissions on WordPress websites

I've been asked by a customer of mine, to manage a few hundred WordPress sites. Doing an initial security assessment, I've found that every site (350 sites) has unusual file permissions on every php ...
3 votes
1 answer
678 views

Sanitising a file/folder path from user input

I have an external server make backups of my main server via scp and a backup-only user account. I successfully restricted it to scp only using GNU Rush. The scp command below executed on the backup ...
1 vote
1 answer
367 views

Why does some Ransomware encrypt also the file header and trailer?

Some time ago I read an article that mentioned that it is possible for some ransomware to change the magic numbers of a file (that makes sense). However, the authors claimed that their method was ...
7 votes
1 answer
5k views

Windows mandatory access control: How to remove “mandatory level” label from the file?

How to remove "mandatory level" label from the file? I have two files, for the first one icacls returns Mandatory Label\Medium Mandatory Level:(NW) for the second icacls doesn't return ...
2 votes
1 answer
226 views

Linux access control policies sudoers

I'm learning about linux hardening and I'm creating a sudoers file. My idea is to separate things. There will be a user to see log files, another that can sudo to manage system processes, another for ...
4 votes
1 answer
1k views

EncFS vs EFS advantages for Dropbox-seamless encryption

I am considering a solution for securing my private data in Dropbox. In spite of OneDrive, MEGA and AmazonCloud are also being considered but now I put my focus on Dropbox as the most feature-rich of ...
4 votes
1 answer
7k views

External hard drives: 'date last accessed' file?

I'm trying to figure out if there's a way to figure out when files on my external hard drive were last opened. I'm using a Seagate Backup Plus, and it's both mac and PC compatible. BUT, I've also read ...
22 votes
2 answers
4k views

What metadata from the Linux file system is in my uploaded photos?

Before uploading a photo or image to a forum, I may typically strip the metadata to remove identifying material with exiftool. The thing is, the Linux file system itself seems to leave some metadata ...
0 votes
0 answers
91 views

Shared computer's disc space mysteriously filling up - worried about illegal content

I'm not an Information Security professional, just a worried layperson. A few years ago, when I was logged into my own account on a shared laptop, the disc space mysteriously kept filling up. I ...
0 votes
1 answer
299 views

Loop device added at package installation - is it a security threat?

I just noticed a strange loop device that was added to my machine today. It is mounted under /run/media/<user>/CENA_X86FREE_EN-US_DV9 and seems to contain Windows files, probably a Windows ...
0 votes
1 answer
225 views

Unrestricted file write in Java

Would it be possible to write a file to a directory outside of the uploads folder if the $ext variable is used controlled and unrestricted? The uploads directory is empty except for the freshly ...
128 votes
8 answers
35k views

What stops Google from saving all the information on my computer through Google Chrome?

I noticed that in Google Chrome, if I type in file:///C:/Users/MyUsername/Desktop/ it shows me all of the folders on my Desktop, and I can type open up PDFs and such in chrome just by typing in the ...
1 vote
1 answer
2k views

What traces are left on a USB stick after using it?

If one uses a FAT32-formatted USB stick on Windows, Linux, or Android, would there be a way to determine on which computer the USB stick was used by examining the USB stick? I know OS can log which ...
0 votes
2 answers
262 views

Windows File Metadata Audit

As part of auditing, I have to find whether an Excel file is modified by anyone after it was created in 2018 by the original user on a Windows 7 computer. I had verified the creation, modified and ...
0 votes
1 answer
651 views

Uploading/writing server files via SSRF?

Say I've found a perfect SSRF vulnerability in a web application that lets me send web requests to any URL, any host, any port, any scheme. I can use the file:// scheme to get the contents of local ...
0 votes
1 answer
165 views

If I move a file within the same drive or partition and then shred that file with a file shredder, would it still be recoverable?

If I move a file within the same drive or partition, suppose from one folder to another, and then shred that file with a file shredder, would it still be recoverable? Is there still some trace of that ...
1 vote
1 answer
187 views

How does Sequoia allow unprivileged users to get root if it requires mounting a filesystem?

CVE-2021-33909 AKA "Sequoia" is a vulnerability against the filesystem code within the Linux kernel. According to the description of the vulnerability from Qualys Successful exploitation of ...
0 votes
0 answers
120 views

asymmetric file system authentication

Here is how integritysetup from the cryptsetup package in Linux works. A user provides an authentication key to the OS when reading or writing data to a file system. When reading, the OS only returns ...
6 votes
2 answers
3k views

What's a good secure file deletion software?

I've used cipher \w which is built into Windows to overwrite free space, but I'm looking for a tool that securely deletes files which have not been deleted yet. It would be a plus (but certainly not ...
0 votes
0 answers
118 views

Additional verification, sanitization for transcoded CJK paths in URLs

Suppose there is a file hosting server, and most filenames are strings with mostly CJK characters. Transmitting those characters in HTTP GET requests requires encoding them using UTF-8 (x3 overhead) ...
6 votes
1 answer
240 views

Is there a file system allowing read-only access enforced by cryptography

Is there a file system standard (like LUKS) that allows anyone who can plug in the hard drive to read files, but requires a passphrase to modify or write? For example, I can do something similar by ...
11 votes
2 answers
37k views

How can I identify / discover files hidden with ADS?

ADS, or alternate data streams, were added in to Windows in 1993 (First Windows NT version) as a feature of the new NTFS file system to help support some features of the Mac OS at the time. I like to ...
2 votes
1 answer
397 views

Homebrew and NOPASSWD sudo

I like to be able to run some commands installed via Homebrew without typing my sudo password. The problem is that Homebrew installs everything with user permissions, so if I add the executables to ...
1 vote
1 answer
192 views

Drive with deniable encryption and multiple independent file systems

So I read this question about deniable encryption but it left me with a few questions. The first answer describes how you could hide one file system on a drive. The process goes like this: Fill the ...
0 votes
3 answers
163 views

How to technically introduce my boss to computer file security?

My boss truly believes that keeping files on paper and locked in his drawer is the safest place ever. He is the type of guy that processes a file in Word/Excel, prints it, delete the file and store ...
1 vote
2 answers
502 views

Can someone know who created a cpp file?

I know that one can see the modification, access, and creation date of a file on Windows. And that the creation date, as well as other dates, can be modified at will. I just wonder if it is possible ...
2 votes
1 answer
1k views

Is native OpenZFS (on FreeBSD) block-level encryption secure?

I am considering using OpenZFS on FreeBSD. I am not quite sure how secure native OpenZFS encryption is? If somebody steals my server and the disks, is he able to decrypt the files? In a Discord room I ...
1 vote
1 answer
199 views

Question regarding data encryption/decryption and sharing said keys with third party's

At work we have a pretty complex problem(for me at least) and I have no idea what a fitting solution would be. To give a bit of context, the company I work for is a data processor/provider for big ...
22 votes
3 answers
3k views

I forgot to shred a file before deleting it (on Windows). How do I shred that part of file system now where the file was located?

My company has a policy that files have to be shredded after they've been read. They provide with a tool shred.exe that I run on the file and it overwrites it with garbage in the file system before ...
0 votes
3 answers
346 views

How can I protect me from... myself?

So, here is the deal: I have a file I cannot change. I cannot, but I know in the future I will want to change it. It's of my understanding that it's not possible to make this file unchangeable while ...
0 votes
0 answers
282 views

Does Windows log the movement of files?

If I move a file from a non-hidden encrypted drive to my main C drive, then move the original file to a hidden container on the encrypted drive, then wipe the original file with ccenhancer/secure ...
48 votes
4 answers
16k views

Aren't keyfiles defeating the purpose of encryption?

I just added a drive to my system which is basically a partition mounted for extra storage. I'd like to encrypt it to protect my data in case of god knows what, and by doing that I'd need to enter the ...
7 votes
1 answer
12k views

openssl vs gpg for file based encryption? Pros vs cons for security?

I want to encrypt a tar archive and optionally a block file system (akin to DMG image). Does anyone know the pros vs cons of encrypting each with OpenSSL vs GPG? I ask because some have stated that ...
26 votes
5 answers
9k views

Permanently erasing a file

As far as I know, there is a table of files present in the hard drive that does not contain the data of each file but can point you to it. When you delete a file, the record of it gets deleted from ...
0 votes
0 answers
231 views

Encrypt files transparently from applications

Many CLI applications store or need secrets in plaintext files. I'm searching preferably for a tool, or a methodology, to encrypt those files without the application knowing. What do I mean by that : ...
1 vote
1 answer
126 views

Is there any security issue while two different process using different hard link of same file?

To reduce disk space I have planned to use a hard link instead of full copy, Is there any security issue while two different processes using different hard links of the same executable file as base?
0 votes
1 answer
604 views

What is the best way to restrict /proc fs from malicious users (linux)?

I am trying to make a restriction to procfs like only a certain groups of members can perform read and write actions. kernel document says we can do that by setting hidepid and gid in /etc/fstab. It ...

1
2 3 4 5