Re: [Full-Disclosure] Windows covert channel

From: Karl DeBisschop (kdebisschop_at_alert.infoplease.com)
Date: 10/20/03

  • Next message: VeNoMouS: "Re: [Full-Disclosure] Linux Ported Version of MS03-043 DOS" 
    To: James Kelly <macubergeek@comcast.net>
Date: Sun, 19 Oct 2003 22:23:37 -0400

    On Sun, 2003-10-19 at 19:04, James Kelly wrote:
    > I seem to remember in the dim reaches of my memory a covert channel in
    > the Windows file system where you could paste one file at the end of
    > another without it being detectible when you edited the orginal file.
    >
    >
    > can someone aim me at the right "buzz phrase" that describes this so I
    > can Google it further?

    Many people have mentioned data streams. But since you said 'end of
    file' I wonder if you are referring to the DOS idea that ^Z is an end of
    file marker, and many apps won't look beyond it.

    For instance, given a file like:

    ====start====
    1
    2
    3
    4
    5
    
    6
    7
    8
    9
    ====end====

    the command 'type test.txt' provides:

    ====start====
    1
    2
    3
    4
    5
    ====end====

    If that is indeed what you are thinking of, it only applies to text
    files, not to binary files. 

    -- 
Karl DeBisschop <kdebisschop@alert.infoplease.com>
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html
  • Next message: VeNoMouS: "Re: [Full-Disclosure] Linux Ported Version of MS03-043 DOS"

    Relevant Pages

    • Re: [Full-Disclosure] Windows covert channel
      ... >I seem to remember in the dim reaches of my memory a covert channel in the ... >Windows file system where you could paste one file at the end of another ...
      (Full-Disclosure)
    • [Full-Disclosure] Windows covert channel
      ... I seem to remember in the dim reaches of my memory a covert channel in ...
      (Full-Disclosure)
    • Re: Very Slow reading excel data into an array (while opened in ne
      ... How can I read an excel file into memory without opening it? ... data array gets recycled each time it opens a new file so I don't have to ... Dim rowsMaster, colsMaster, lastCellMaster ...
      (microsoft.public.excel.programming)
    • Problems with calling avifil32.dll function in vb.net
      ... application which converts BMP Images to AVI. ... This function wants to receive a pointer to a pointer to an ... to a pointer to unmanaged memory. ... Dim oGC As GCHandle = GCHandle.Alloc ...
      (microsoft.public.vb.winapi.graphics)
    • Re: Memory management problem
      ... CDO is an optional component from your Outlook/Office cd that isn´t ... OL has known problems with a memory leak. ... Dim MyMailbox As Outlook.Folders ... Michael Bauer - MVP Outlook ...
      (microsoft.public.outlook.program_vba)