full-disclosure - Windows covert channel

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: mvp at joeware.net (Joe)
Subject: Windows covert channel

I think you mean alternative file streams. AKA NTFS-FileStreams. It allows
you to add additional data to a file without it being in the main data
stream.

  joe 

-----Original Message-----
From: full-disclosure-admin@...ts.netsys.com
[mailto:full-disclosure-admin@...ts.netsys.com] On Behalf Of James Kelly
Sent: Sunday, October 19, 2003 7:04 PM
To: full-disclosure@...ts.netsys.com

I seem to remember in the dim reaches of my memory a covert channel in the
Windows file system where you could paste one file at the end of another
without it being detectible when you edited the orginal file.

can someone aim me at the right "buzz phrase" that describes this so I can
Google it further?

jim k

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html