IT Security Stack Exchange
IT Security Stack Exchange

Questions tagged [file-system]

A file system is a way of organizing information on a storage device like a computer hard drive.

A file system is a way of organizing information on a storage device like a computer hard drive.

201 questions
3
votes
2 answers

Secure file deletion vs wiping free space

Say I only wanted to delete specific files and want to feel confident they can't be recovered. Is it better to use a specific program (such as Eraser) for wiping only the files, or is it better to delete them normally and then use a utility like…
Celeritas
  • 10,039
  • 22
  • 77
  • 144
3
votes
3 answers

How do I know how a file got onto my computer?

I would like to know if there is any way to know how a file was written onto my server (Windows server) i.e if a file X got written via http or via ftp or by simple network copy or someone manually created this file? Are there any logs in Windows…
shrivb
  • 131
  • 3
3
votes
3 answers

On Windows, how to restrict access to a folder, sub folder and files to only some applications (not users)

We have an application which is not per user and can be used by multiple users simultaneously. Data is also shared by all users. The path to the data folders we use is ProgramData\OurAppName\Data (post Vista), and we give full control to all users,…
Abhishek Jain
  • 131
  • 1
  • 2
3
votes
1 answer

Which Domain Administrator created file X on a Windows 2008 R2-based server?

Someone created a file (web.config) in a location that basically caused IIS to not work. Is there any way I can determine who created this file? The creator/owner says "Domain Administrators". This is a Windows 2008 R2 server.
makerofthings7
  • 50,090
  • 54
  • 250
  • 536
3
votes
1 answer

Zeroing empty sectors on various Linux filesystems

There exist various tools for Windows filesystems (NTFS, FAT) to write zeroes or random numbers to free space on the drive/filesystem. Do there exist tools like this for Linux filesystems like ext4 and btrfs?
Naftuli Kay
  • 6,715
  • 9
  • 47
  • 75
3
votes
2 answers

How risky is having sensitive files on webroot?

I understand that having anything sensitive under webroot is not smart; someone may be able to access it via url. However, I do not have a choice with my web host (iPage) as they limit my server space to just the web root. So my question is: how…
ink
  • 33
  • 4
3
votes
1 answer

Uploading Executable Files

Using proxy software, I was able to bypass a file upload control file-checking for an asp.net system I am pen testing. I noticed they are saving the file into the database as bytes, and it is available for download in my own portal at any time after…
NullHypothesis
  • 191
  • 1
  • 4
3
votes
2 answers

Which access rights should be chosen for doku wiki?

I'm currently making my first experiences with a CMS called "DokuWiki" (Link). This CMS needs only PHP and writes the information to files (seems to be /dokuwiki/data/pages). At the moment I gave the whole dokuwiki-folder + subfolders and files the…
Martin Thoma
  • 3,902
  • 6
  • 30
  • 42
3
votes
5 answers

Why can't just any program use his own file-system-access-system?

This may sound stupid for everyone who knows more than me about the UNIX-System and security in software: Imagine you have a program trying to cause harm by deleting files. You just do something like "rm -rf /home/" and get an error message, because…
kono
  • 31
  • 2
3
votes
2 answers

How can I ensure that Dropbox is using only its folder?

I'm using several cloude storage services, like Dropbox. Each have windows app for its synchronization, and this app actually can read anything from my disc, not just files from its 'synchronized' folder. I want to make sure that this apps never…
setec
  • 133
  • 3
3
votes
2 answers

What does Gazzang zNcrypt actually protect against?

In an effort to increase security of our website, I'm reading up on Gazzang zNcrypt, which claims to protect data in databases from breaches. Technically, it seems to do filesystem encryption. As far as I know, this is effective against hackers…
Martijn
  • 205
  • 1
  • 7
3
votes
2 answers

How do worms spread over LAN?

I've been researching LAN recently, and I came across a post talking about viruses spreading over LAN, and I was wondering, how is this possible? Would it not be a huge security issue to allow files to automatically be installed over LAN?
Dylan Katz
  • 243
  • 1
  • 3
  • 9
3
votes
5 answers

Secure mount options + partitioning on Ubuntu

What is the best solution for mount options/partitioning when having e.g.: an Ubuntu minimal install (11.04) for Desktop use? e.g.: put /tmp on different partition to give it mount options like: nodev,nosuid,noexec - it could increase security. I…
LanceBaynes
  • 6,149
  • 11
  • 60
  • 91
3
votes
2 answers

What precaustions should be taken when the file displayed by a webpage is specified by the GET value

My website shows some files based on the get value in the URL. For example http://www.mysit.com/navigate.php?d=firstpage.html The thing is navigate.php knows which folder to look in and it's not in the web root directory. Are there any precautions I…
Celeritas
  • 10,039
  • 22
  • 77
  • 144
3
votes
1 answer

Recognizing PGP-encrypted disks

I am studying various disk encryption schemes (such as PGP, MS Bit Locker, BestCrypt and TrueCrypt) on my Windows OS. I am interested to know how an encrypted partition/disk/file with a particular scheme (e.g. PGP) can be distinguished from other…
Gopal
  • 131
  • 3
1 2 3
…
13 14