Re: Windows covert channel

[madsaxon <madsaxon () direcway com>]

At 07:04 PM 10/19/03 -0400, James Kelly wrote:
> I seem to remember in the dim reaches of my memory a covert channel in the 
> Windows file system where you could paste one file at the end of another 
> without it being detectible when you edited the orginal file.
>
>
> can someone aim me at the right "buzz phrase" that describes this so I can 
> Google it further?

Sounds like NTFS file streaming.

m5x

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html