Questions tagged [file-system]

A file system is a way of organizing information on a storage device like a computer hard drive.

20 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
2 votes
0 answers
762 views

How to detect file or file system tampering

I would like to know if the following is possible: Is it possible to detect a file that has been put into my file system using back dating? Are there any trace artifacts left behind which can help to ...
ananth's user avatar
  • 21
2 votes
2 answers
3k views

Files on external drives executable by default with exFAT or NTFS under Ubuntu

On Ubuntu, if you use (external) drives formatted as exFAT or NTFS, i.e. not ext4 or something made for the UNIX world, you may end up with a situation where all files are executable. This is because ...
caw's user avatar
  • 229
2 votes
1 answer
397 views

Homebrew and NOPASSWD sudo

I like to be able to run some commands installed via Homebrew without typing my sudo password. The problem is that Homebrew installs everything with user permissions, so if I add the executables to ...
HappyFace's user avatar
  • 121
1 vote
0 answers
86 views

File System with SGX assistance threat model

I am studying some published papers that demonstrate how I can a secure file system been implemented with the assistance of Intel SGX. However, in each one of these papers, the threat model is not ...
johnkaramp's user avatar
1 vote
0 answers
433 views

API hooking with Microsoft Detours

I want to hook certain API calls, e.g. CreateFile (or NtCreateFile if I hook ntdll.dll), but there are some issues. I can use several methods to achieve this goal, e.g. DLL injection, Inline hooking ...
Moooz's user avatar
  • 35
1 vote
0 answers
459 views

Restrict node.js filesystem access

I have a Node.js app which has a lot of npm-dependencies, running on Linux (Centos) machine. When Node starts, the script has access to the files outside its directory (as least by default), so ...
Oleg's user avatar
  • 309
1 vote
1 answer
564 views

Can file recovery tools recover deleted small files from SSD drive's NTFS Master File Table?

According to this page and site, small files are kept in Master File Table when filesystem is NTFS. Let's assume that computer is using Windows 10 and a SSD drive with TRIM support. If a user ...
ccccc1cc's user avatar
1 vote
0 answers
99 views

Using the same passphrase for files and filenames with filesystem-level encryption such as eCryptfs

In filesystem-level encryption schemes where files are encrypted and stored individually, filenames may or may not be encrypted. eCryptfs allows to encrypt filenames with a different key than the one ...
Arcturus B's user avatar
1 vote
0 answers
375 views

Does aslr definitely end the possibility of code execution in the case of filesystems heap overflows?

Local only Filesystems (like ntfs or btrfs) consists of many data structures that require very complex code for parsing them. So, such filesystems if implemented in user space can suffer of buffer ...
user2284570's user avatar
  • 1,472
1 vote
0 answers
134 views

Database was Deleted, Suspected Tampering

So basically at the beginning of the year a database of intellectual property (IP) disappeared at the close of a falling out between some upper-level employees and the executive staff at my company. ...
CKM's user avatar
  • 111
1 vote
0 answers
1k views

Does erasing slack space ever make sense on flash-based storage?

Slack space appears when a file written to the disk does not occupy the last cluster entirely. For example, if I write a 512B file on the HDD formatted with 16KB clusters, only a single 512B sector ...
Dmitry Grigoryev's user avatar
1 vote
2 answers
472 views

What config files and logs files of a Linux system (CentOS 7) deserve to be monitored by a SIEM?

I am not a security expert (I am more a software developer) and I am working on a project related to a SIEM installation (Wazuh). This installation is only a demo for a customer, in a second time a ...
AndreaNobili's user avatar
0 votes
0 answers
213 views

Outdoor backup: gocryptfs --init --reverse: alway same .diriv in 1st level directory

Intro Trying to send encrypted backup of in productions filesystems, I was interested by the ability of using gocryptfs in reverse mode! The idea is to use gocryptfs --reverse from any existing (...
F. Hauri  - Give Up GitHub's user avatar
0 votes
0 answers
91 views

Shared computer's disc space mysteriously filling up - worried about illegal content

I'm not an Information Security professional, just a worried layperson. A few years ago, when I was logged into my own account on a shared laptop, the disc space mysteriously kept filling up. I ...
Notmycupoftea's user avatar
0 votes
0 answers
120 views

asymmetric file system authentication

Here is how integritysetup from the cryptsetup package in Linux works. A user provides an authentication key to the OS when reading or writing data to a file system. When reading, the OS only returns ...
beroal's user avatar
  • 158
0 votes
0 answers
118 views

Additional verification, sanitization for transcoded CJK paths in URLs

Suppose there is a file hosting server, and most filenames are strings with mostly CJK characters. Transmitting those characters in HTTP GET requests requires encoding them using UTF-8 (x3 overhead) ...
DannyNiu's user avatar
  • 374
0 votes
0 answers
282 views

Does Windows log the movement of files?

If I move a file from a non-hidden encrypted drive to my main C drive, then move the original file to a hidden container on the encrypted drive, then wipe the original file with ccenhancer/secure ...
thatsmynickityname's user avatar
0 votes
0 answers
231 views

Encrypt files transparently from applications

Many CLI applications store or need secrets in plaintext files. I'm searching preferably for a tool, or a methodology, to encrypt those files without the application knowing. What do I mean by that : ...
VannTen's user avatar
  • 101
0 votes
0 answers
1k views

Secure mount options in Ubuntu CIS benchmarks too narrow?

this is the first of a series of questions on hardening Linux servers at the filesystem level. At work I'm hardening an Ubuntu 18.04 Server following the CIS benchmark 2.0.1. Instead of just running ...
Nostromo's user avatar
0 votes
0 answers
162 views

How to protect certain macOS user directory from unauthorized access?

I have several directories on my Mac, two most popular examples are: ~/.aws ~/.ssh They can be read by any script file or third-party app in system. I do not see a way to protect them in macOS (...
Croll's user avatar
  • 163