full-disclosure - annoying bug in Windows XP

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <4353353A.9040308@unoc.net>
Date: Mon Oct 17 06:23:18 2005
From: amir.fd at unoc.net (Amir Malik)
Subject: annoying bug in Windows XP

Hi,

The default setting on Windows is to create an 8.3 short file name for 
every file that cannot fit in the 8.3 format. The example you posted is 
expected behavior on a default Windows installation.

Fire up the Registry Editor and drill down to: 
HKLM\SYSTEM\CurrentControlSet\Control\FileSystem

To disable creation of 8.3 short file names on local NTFS file systems, 
create or update the following DWORD registry keys:

NtfsDisable8dot3NameCreation // NTFS only
Win95TruncatedExtensions // del *.xxx phenomenon

I don't think it's possible to disable 8.3 creation on FAT file systems. 
Other interesting keys:

Win31FileSystem  // FAT compatibility
NtfsDisableLastAccessUpdate // OT, but personal favorite

Changes take place after reboot.

Cheers.

- Amir

On 2005-10-16 01:25, Frank Dietrich wrote:
> Hi to all readers,
> 
> this day I found a annoying misbehavior in Windows XP professional
> with SP2. 
> 
> I had a directory with some Java sources (*.java) and some backup
> files (*.jav). Because I din't longer need the backup files I would
> delete them with 'del *.jav'. But this command also delete all the
> source files. #?%*. The last backup was 4 hours ago. :-/
> 
> So I tried what happen and the result is the command above checks
> only the first three chars from the extension (DOS is alive).
> 
> Here is how you can reproduce it:
> 
> mkdir testbug
> cd testbug
> rem.>file1.jav
> rem.>file2.java
> rem.>file3.javas
> del *.jav
> 
> All three files are deleted. Is this a known bug or a unknown feature?
> 
> Frank