PDA

Click to See Complete Forum and Search --> : Linux Data Hiding and Recovery.


micael
March 14th, 2002, 01:16 PM
Good and interesting article :).


Source: Linuxsecurity.com (http://www.linuxsecurity.com/feature_stories/data-hiding-forensics.html)

Just when you thought your data was removed forever, Anton Chuvakin shows us how to recover data and even how data can surruptitiously be hidden within space on the filesystem.

The rest of the article can be found here. (http://www.linuxsecurity.com/feature_stories/data-hiding-forensics.html)

jcdux
March 14th, 2002, 02:28 PM
very interesting.
:cool:
J.

linuxcomando
March 14th, 2002, 07:45 PM
Pretty Tight
:)

chsh
March 16th, 2002, 04:30 PM
Great link Micael, now I'm beginning to wonder if it might be possible to do similar things with a Windows box, because with FAT16, you can still store a small jpeg in the remaining part of a 32K block.

Hell, given the right tools, you could probably use a combination of Apache and PHP to host a site where the files were invisible to the FS itself...

Hmm... Very intriguing ideas all around.. I think I'll try them myself. ;)

micael
March 16th, 2002, 04:52 PM
I'm beginning to wonder if it might be possible to do similar things with a Windows box, because with FAT16, you can still store a small jpeg in the remaining part of a 32K block.


It may be possible but I have not heard about it earlier though.. Other filesystems have the same or similiar function though. (NTFS, HPFS, *nix FS etc, etc).


Hell, given the right tools, you could probably use a combination of Apache and PHP to host a site where the files were invisible to the FS itself...


Thats possible and it should also be possible to "hide" filespace from the FS and share it via NFS or MS filesharing etc, etc. I have seen it be done with a NT4 server and NTFS "streams" :).