Re: Windows covert channel

[Jeremiah Cornelius <jeremiah () nur net>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Sunday 19 October 2003 16:48, 8tImER wrote:
> Hello James,
>
> my guess is you are talking about 'streams' in NTFS.
> Example:
> Create a text file, save it.
> Then use 'echo "hidden text" >> file.txt:1' to add the hidden stuff.
> I don't remember how to read that stuff out afterwards though.

Interesting point for clarification...

How does ADS in NTFS differ from arbitrary metadata types added to Reiserfs - 
for instance?

It would be interesting to see if this is subject to a similar potential for 
abuse.  I admit that I am only passingly familiar with the topic - but I have 
never seen this discussed before either.

Is anybody cluefull _and_ objective about this?
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)

iD8DBQE/kz53Ji2cv3XsiSARAlWoAJ9kmxqh8QuzNo9gpLgBsKxJ6ZTp5QCdEhjW
Y+FsN7FjbytTiBru2YiINhc=
=INEG
-----END PGP SIGNATURE-----

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html