Full Disclosure mailing list archives

RE: Windows covert channel


From: "Joe" <mvp () joeware net>
Date: Sun, 19 Oct 2003 19:24:14 -0400

I think you mean alternative file streams. AKA NTFS-FileStreams. It allows
you to add additional data to a file without it being in the main data
stream.

  joe 


-----Original Message-----
From: full-disclosure-admin () lists netsys com
[mailto:full-disclosure-admin () lists netsys com] On Behalf Of James Kelly
Sent: Sunday, October 19, 2003 7:04 PM
To: full-disclosure () lists netsys com

I seem to remember in the dim reaches of my memory a covert channel in the
Windows file system where you could paste one file at the end of another
without it being detectible when you edited the orginal file.


can someone aim me at the right "buzz phrase" that describes this so I can
Google it further?

jim k

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: