Questions tagged [file-system]

A file system is a way of organizing information on a storage device like a computer hard drive.

Filter by
Sorted by
Tagged with
0
votes
0answers
28 views

Safely store W-9 forms

I am currently working on a web application that requires W-9 file submissions. Currently we are storing these on a designated file system, but since these forms can contain SSN I would like to know ...
20
votes
2answers
3k views

At which point can a system be compromised when downloading archived data from an untrusted source?

If I download archived data from a possibly untrusted source at which point am I at possible risk of harming my system: Initially downloading and saving the archived data (still packed) Unpacking the ...
0
votes
4answers
117 views

Generate Fake Encrypted Data

I want to create a file server that will be serving encrypted files without permissions. It would be really awesome if it were impossible for a hacker to tell if a file exists or not, so I am thinking ...
2
votes
1answer
893 views

EncFS vs EFS advantages for Dropbox-seamless encryption

I am considering a solution for securing my private data in Dropbox. In spite of OneDrive, MEGA and AmazonCloud are also being considered but now I put my focus on Dropbox as the most feature-rich of ...
1
vote
1answer
280 views

Files on external drives executable by default with exFAT or NTFS under Ubuntu

On Ubuntu, if you use (external) drives formatted as exFAT or NTFS, i.e. not ext4 or something made for the UNIX world, you may end up with a situation where all files are executable. This is because ...
5
votes
1answer
81 views

Is there a file system allowing read-only access enforced by cryptography

Is there a file system standard (like LUKS) that allows anyone who can plug in the hard drive to read files, but requires a passphrase to modify or write? For example, I can do something similar by ...
0
votes
0answers
30 views

Fixing Corrupted ELF Section Size

I dropped an ELF to IDA, which IDA give me an error that the "Binary data is incorrect". I research a bit and found out that some of the ELF sections dont have a valid section size and their section ...
1
vote
0answers
31 views

How to protect certain macOS user directory from unauthorized access?

I have several directories on my Mac, two most popular examples are: ~/.aws ~/.ssh They can be read by any script file or third-party app in system. I do not see a way to protect them in macOS (...
1
vote
1answer
51 views

Best Practices for exporting sensitive database data and transforming it whilist keeping it encrypted?

Say one has to export database data to use in another tool, such as an Excel Spreadsheet or for use as a csv file with some other program. There's a problem with this, and that's that it ends up in ...
0
votes
1answer
34 views

How files are allocated to memory in NTFS? [closed]

If a file is deleted in memory which is using NTFS and after that, I copied a new file, then where is the new file is allocated in memory? Is the file allocated in the deleted memory space or it is ...
0
votes
3answers
164 views

How to protect company sensitive data from being deleted by a user when data is on their computer?

There more than 300 computers and more than 400 users are available. We face two incidents recently when critical users(who has critical data) leave from company.We have deleted their data when they ...
2
votes
2answers
261 views

Can a website see the file location of a document I upload?

While applying to a job, I uploaded a resume to a recruiting website: C:\myname\an\embarrassing\path\to\my\resume.pdf Can the website see the file path of my uploaded document?
2
votes
1answer
96 views

Reading/Writing content of files - what can happen?

I'm setting up a simple system that is using an HTTP server which is writing incoming data to JSON files in a specific directory. This is functioning as a very simple pseudo-database. For simplicity, ...
1
vote
1answer
1k views

openssl vs gpg for file based encryption? Pros vs cons for security?

I want to encrypt a tar archive and optionally a block file system (akin to DMG image). Does anyone know the pros vs cons of encrypting each with OpenSSL vs GPG? I ask because some have stated that ...
1
vote
0answers
26 views

Using the same passphrase for files and filenames with filesystem-level encryption such as eCryptfs

In filesystem-level encryption schemes where files are encrypted and stored individually, filenames may or may not be encrypted. eCryptfs allows to encrypt filenames with a different key than the one ...
2
votes
1answer
96 views

Risks of letting the browser open local/network file system listing

Browsers do not generally allow web pages to interact with client-side file system as a security measure. I would like to know what can go wrong with the following scenario: Clicking a special ...
0
votes
4answers
846 views

Forensic analysis of file metadata

Suppose I have received a file (doesn't matter what it is - document, image, video, audio, etc). I know that the operating system and also programs that create the file like Office, and even hardware ...
3
votes
1answer
178 views

Weird group name ( 1002)

Please forgive me if this is the wrong place to ask this, but I ran ls -l on an ubuntu machine today in /etc and found a few entries like the following middle entry which appears to have spaces in ...
127
votes
9answers
34k views

What stops Google from saving all the information on my computer through Google Chrome?

I noticed that in Google Chrome, if I type in file:///C:/Users/MyUsername/Desktop/ it shows me all of the folders on my Desktop, and I can type open up PDFs and such in chrome just by typing in the ...
2
votes
3answers
3k views

Do moved files leave a trace on the drive they created on?

I have created a word document on my computer, or any other file like txt, image, PSD etc. Now, I then take that file and move it to an external device, would that file leave a trace on the computer? ...
30
votes
6answers
31k views

How secure is NTFS encryption?

How secure is the data in a encrypted NTFS folder on Windows (XP, 7)? (The encryption option under file|folder -> properties -> advanced -> encrypt.) If the user uses a decent password, can this ...
1
vote
1answer
195 views

How secure is it to store passwords in a non-accessible file?

So, I was thinking about workarounds for saving passwords in text files (just because I'm curious), and I thought, what if I saved my file somewhere that is non-accessible? My server has a public_html ...
6
votes
4answers
1k views

What's a good secure file deleter

I've used cipher \w which is built into Windows to overwrite free space but I'm looking for a tool that securely deletes files which have not been deleted yet. It would be a plus (but certainly not ...
0
votes
2answers
85 views

Privacy concern about file modification on SSDs

We all know that files which are deleted from a modern system usually don't get erased immediately from memory, which is a security risk in itself. However, this question focuses on a different topic:...
2
votes
1answer
123 views

Can you construct a non-lossy steganographic filesystem

Recently I've been having a look at some interesting stenographic filesystems such as RubberhoseFS and StegFS. As far as I can see (at least in the case of StegFS) infeasibility of determining how ...
2
votes
1answer
101 views

Is there a solution that shows a prompt before mounting an USB drive?

Is there such thing as a prompt that asks for permission to mount an detected USB device? In order to prevent against physical attacks with USB devices. Like "A USB device is detected would you like ...
3
votes
3answers
567 views

Why should the user ID and group ID of every file match an existing user?

I've been reading in most hardening guides for Linux, that you should check for files and directories without valid user or valid group. What I can't find, is how this could be used for an attack, or ...
1
vote
1answer
175 views

Is shred -n1 /dev/sda demonstrably worse than Bleachbit?

Given an ext4 harddrive (not SSD) with no files, is running sudo shred -n1 /dev/sda # one pass, no zeroes, over whole drive demonstrably less reliable than using Bleachbit's "Wipe free disk space" ...
4
votes
1answer
4k views

External hard drives: 'date last accessed' file?

I'm trying to figure out if there's a way to figure out when files on my external hard drive were last opened. I'm using a Seagate Backup Plus, and it's both mac and PC compatible. BUT, I've also read ...
12
votes
4answers
4k views

Why is it impossible to verify whether a file has been modified since creation?

From what I understand, it is impossible to verify whether a file has been modified since its creation. Specifically, I was wondering whether it was possible to verify whether a photo was modified ...
1
vote
1answer
1k views

Autopsy uncovering slack space of a file

I'm using Autopsy and need to recover a hidden password inside a slack space in another file. Autopsy shows that each sector for my disk is 512 bytes. The file starts at 4365 of the sector and the ...
1
vote
1answer
108 views

How to completely remove all traces of a file on Linux? (Overriding everything if needed)

How can I delete a file and completely remove it from the system FOREVER. I does have in mind that it's needed to override it. But how can I do that?
-2
votes
2answers
117 views

How safe are encrypted file systems and how does their updates work? [closed]

Not so long ago the media widely discussed the deciphering of the encrypted iPhone of a terrorist in the United States. Apple said it was impossible to decrypt. Edit: The iPhone was encrypted, and ...
0
votes
1answer
598 views

EML file type analysis

I'm working on finding infection points in EML file format. Want to know on what grounds does a scanner declare an email as spam or attachment as malicious? I mean does it scan by MIME content or any ...
2
votes
2answers
83 views

Privacy and File Uploading

Can websites see your computer's directory structure when you upload files through web forms (especially JavaScript)? If so, what are ways to avoid this when uploading?
-1
votes
1answer
45 views

Modifying the date time of the files before creating a zip archive

When we create a zip archive with same content more than once, the output zip archive may have different digest. It because date and time in the files we used in creating the zip archive. Because of ...
4
votes
1answer
210 views

Web application reacts differently to Windows reserved names like CON, AUX, NUL

Several web applications I tested have the behavior that reserved Windows filenames such as AUX, CON, NUL, PRN, COM1, LPT1 have different behavior than other pages. For example, http://example.com/foo ...
6
votes
8answers
13k views

Overwriting hard drive to securely delete a file?

I am working on a computer that I am not allowed to install new software on. It does not have secure delete software installed. Suppose I have a file (or files) that are sensitive that I'd like to ...
1
vote
1answer
154 views

How can I capture files malware creates and then deletes? [closed]

Malware on Windows often creates and deletes files. How can I capture the files it creates if it deletes them too quickly to copy?
-2
votes
1answer
747 views

Directory Traversal or File System Permissions? [closed]

A network administrator discovers several unknown files in the root directory of his Linux FTP server. One of the files is a tarball, two are shell script files, and last one is a binary- file is ...
8
votes
9answers
13k views

Is there a file system that doesn't support encryption?

I would prefer that no one, even me, could encrypt my files. I have no use for it, and don't want it. Is there a way to permanently disable any sort of encryption at the OS level? If not, is this a ...
1
vote
1answer
182 views

How did stuxnet hid it's files after the infection?

I've noticed that when ~WTR4141.tmp is loaded, it doesn't set hidden file attributes to .lnk files and on the other .tmp rootkit file of the Stuxnet bundle. I've seen that these are all the possible ...
6
votes
1answer
546 views

Run native code from shell on read-only filesystem

I'm researching an embedded device running Linux, busybox, and a few custom services. I've found a way to obtain unprivileged shell access, and trying to see if it's possible to escalate privileges. ...
1
vote
0answers
186 views

Does aslr definitely end the possibility of code execution in the case of filesystems heap overflows?

Local only Filesystems (like ntfs or btrfs) consists of many data structures that require very complex code for parsing them. So, such filesystems if implemented in user space can suffer of buffer ...
3
votes
2answers
562 views

Security vulnerabilities when sharing files between virtual machine and host

According to this link, when running a windows OS virtual machine on a windows host OS, one can share files like one would share files between two computers on a network by ensuring that file sharing ...
2
votes
3answers
713 views

Limiting FTP privileges on Windows Server

I currently have a Windows 2012 Server which is acting as a webserver running IIS. I am using Filezilla to host an FTP server to allow some clients FTP access to their own websites. I have setup the ...
6
votes
2answers
497 views

`rsync -K`-based exploit

In the description of the -K (--keep-dirlinks) flag, the rsync man page gives this warning (my emphasis): One note of caution: if you use --keep-dirlinks, you must trust all the symlinks in the ...
1
vote
3answers
101 views

Security of different Filesystems

Are there any preferred filesystems that have some boni regarding security and confidentiality? Or does it really not matter if I, for example, encrypt a HDD with LUKS? As an example, I read that the ...
3
votes
1answer
115 views

Is it safe to call mount(2) and pass the password as a parameter?

I wanted to write a daemon that users can start, and that, every 2 hours, automatically mounts an authenticated network share. The daemon will prompt the user for the password only the first time, and ...
3
votes
1answer
125 views

How does Android prevent me from installing custom system services?

I am trying to understand the secure boot process. Lets say the firmware is locked and only does signed installation of an OS image. This "image" is a compressed bundle of all the binaries needed by ...