+ Reply to Thread
Page 2 of 3 FirstFirst 1 2 3 LastLast
Results 11 to 20 of 24
  1. January 30th, 2004 06:08 PM #11
    576869746568617
    576869746568617 is offline
    Yes, that's my CC number! 576869746568617 has much to be proud of 576869746568617 has much to be proud of 576869746568617 has much to be proud of 576869746568617 has much to be proud of 576869746568617 has much to be proud of 576869746568617 has much to be proud of 576869746568617 has much to be proud of 576869746568617 has much to be proud of 576869746568617 has much to be proud of 576869746568617's Avatar
    Join Date
    Dec 2003
    Location
    Earth
    Posts
    397
    Count me in too!
    Reply With Quote Reply With Quote
  2. January 30th, 2004 06:10 PM #12
    groovicus
    groovicus is offline
    Senior Member groovicus has a reputation beyond repute groovicus has a reputation beyond repute groovicus has a reputation beyond repute groovicus has a reputation beyond repute groovicus has a reputation beyond repute groovicus has a reputation beyond repute groovicus has a reputation beyond repute groovicus has a reputation beyond repute groovicus has a reputation beyond repute groovicus has a reputation beyond repute groovicus has a reputation beyond repute
    Join Date
    Aug 2003
    Posts
    1,019
    Had this ready yesterday but didn't know where you wanted it posted....
    HijackThis Team
    Reply With Quote Reply With Quote
  3. January 30th, 2004 08:48 PM #13
    576869746568617
    576869746568617 is offline
    Yes, that's my CC number! 576869746568617 has much to be proud of 576869746568617 has much to be proud of 576869746568617 has much to be proud of 576869746568617 has much to be proud of 576869746568617 has much to be proud of 576869746568617 has much to be proud of 576869746568617 has much to be proud of 576869746568617 has much to be proud of 576869746568617 has much to be proud of 576869746568617's Avatar
    Join Date
    Dec 2003
    Location
    Earth
    Posts
    397
    OK mate....I know how you got that info...everything except the user account I was logged on as.....how the hell!
    Windows 9x: n. A collection of 32 bit extensions and a graphical shell for a 16 bit patch to an 8 bit operating system originally coded for a 4 bit microprocessor. Written by a 2 bit company that can\'t stand 1 bit of competition.

    Reply With Quote Reply With Quote
  4. January 30th, 2004 08:49 PM #14
    Cybr1d
    Cybr1d is offline
    HeadShot Master N1nja Cybr1d has a reputation beyond repute Cybr1d has a reputation beyond repute Cybr1d has a reputation beyond repute Cybr1d has a reputation beyond repute Cybr1d has a reputation beyond repute Cybr1d has a reputation beyond repute Cybr1d has a reputation beyond repute Cybr1d has a reputation beyond repute Cybr1d has a reputation beyond repute Cybr1d has a reputation beyond repute Cybr1d has a reputation beyond repute Cybr1d's Avatar
    Join Date
    Jul 2003
    Posts
    1,835
    one word: metadata
    [gloworange]
    VISIT MY PHOTOS     [/gloworange]
    Reply With Quote Reply With Quote
  5. January 30th, 2004 08:53 PM #15
    576869746568617
    576869746568617 is offline
    Yes, that's my CC number! 576869746568617 has much to be proud of 576869746568617 has much to be proud of 576869746568617 has much to be proud of 576869746568617 has much to be proud of 576869746568617 has much to be proud of 576869746568617 has much to be proud of 576869746568617 has much to be proud of 576869746568617 has much to be proud of 576869746568617 has much to be proud of 576869746568617's Avatar
    Join Date
    Dec 2003
    Location
    Earth
    Posts
    397
    I don't know...worked fine for me.....does the metadata id the actual name of the account or the sid
    Reply With Quote Reply With Quote
  6. January 30th, 2004 09:03 PM #16
    Cybr1d
    Cybr1d is offline
    HeadShot Master N1nja Cybr1d has a reputation beyond repute Cybr1d has a reputation beyond repute Cybr1d has a reputation beyond repute Cybr1d has a reputation beyond repute Cybr1d has a reputation beyond repute Cybr1d has a reputation beyond repute Cybr1d has a reputation beyond repute Cybr1d has a reputation beyond repute Cybr1d has a reputation beyond repute Cybr1d has a reputation beyond repute Cybr1d has a reputation beyond repute Cybr1d's Avatar
    Join Date
    Jul 2003
    Posts
    1,835
    I dont think it goes that far. It will leak certain information which you would rather not share . Be careful when you email your resume to someone . If they really want to look, they might find something that they wont like.

    Go here and check out how to get rid of metadata.

    http://support.microsoft.com/default...b;EN-US;223396

    I guess every Office file uses them
    [gloworange]
    VISIT MY PHOTOS     [/gloworange]
    Reply With Quote Reply With Quote
  7. January 30th, 2004 09:07 PM #17
    576869746568617
    576869746568617 is offline
    Yes, that's my CC number! 576869746568617 has much to be proud of 576869746568617 has much to be proud of 576869746568617 has much to be proud of 576869746568617 has much to be proud of 576869746568617 has much to be proud of 576869746568617 has much to be proud of 576869746568617 has much to be proud of 576869746568617 has much to be proud of 576869746568617 has much to be proud of 576869746568617's Avatar
    Join Date
    Dec 2003
    Location
    Earth
    Posts
    397
    Thanks for the link, Cybr1d, but I couldn't bear to wait so I asked by best friend Google!

    I had no idea that much info was stored in the metadata! Bet I'll be fixing that shortly...last thing I need is another damn security leak!

    Thanks..It was fun nihil!
    Windows 9x: n. A collection of 32 bit extensions and a graphical shell for a 16 bit patch to an 8 bit operating system originally coded for a 4 bit microprocessor. Written by a 2 bit company that can\'t stand 1 bit of competition.

    Reply With Quote Reply With Quote
  8. January 30th, 2004 09:15 PM #18
    nihil
    nihil is offline
    Super Moderator: GMT Zone nihil has a reputation beyond repute nihil has a reputation beyond repute nihil has a reputation beyond repute nihil has a reputation beyond repute nihil has a reputation beyond repute nihil has a reputation beyond repute nihil has a reputation beyond repute nihil has a reputation beyond repute nihil has a reputation beyond repute nihil has a reputation beyond repute nihil has a reputation beyond repute nihil's Avatar
    Join Date
    Jul 2003
    Location
    United Kingdom: Bridlington
    Posts
    17,100
    576869746568617

    That is not so difficult because the default is to save into the folder "my documents" AFAIK a unique one of these is created for each user profile? When you look at the metadata, you see the access path, which includes the user account.

    Yes Cyber1d, I think that all Office documents do............even powerpoint.

    Cheers
    If you cannot do someone any good: don't do them any harm....
    As long as you did this to one of these, the least of my little ones............you did it unto Me.
    What profiteth a man if he gains the entire World at the expense of his immortal soul?
    Reply With Quote Reply With Quote
  9. January 30th, 2004 09:15 PM #19
    Cybr1d
    Cybr1d is offline
    HeadShot Master N1nja Cybr1d has a reputation beyond repute Cybr1d has a reputation beyond repute Cybr1d has a reputation beyond repute Cybr1d has a reputation beyond repute Cybr1d has a reputation beyond repute Cybr1d has a reputation beyond repute Cybr1d has a reputation beyond repute Cybr1d has a reputation beyond repute Cybr1d has a reputation beyond repute Cybr1d has a reputation beyond repute Cybr1d has a reputation beyond repute Cybr1d's Avatar
    Join Date
    Jul 2003
    Posts
    1,835
    what makes it even more interesting is that microsoft knows about its risks and they acknowledge the fact thats it is indeed a vulnerability. Metadata will show deleted text, and the names of whoever edited the text. They claim its an "option" for users to use. Personally i'd prefer that option being off by default.

    Cheers,
    [gloworange]
    VISIT MY PHOTOS     [/gloworange]
    Reply With Quote Reply With Quote
  10. January 30th, 2004 09:41 PM #20
    576869746568617
    576869746568617 is offline
    Yes, that's my CC number! 576869746568617 has much to be proud of 576869746568617 has much to be proud of 576869746568617 has much to be proud of 576869746568617 has much to be proud of 576869746568617 has much to be proud of 576869746568617 has much to be proud of 576869746568617 has much to be proud of 576869746568617 has much to be proud of 576869746568617 has much to be proud of 576869746568617's Avatar
    Join Date
    Dec 2003
    Location
    Earth
    Posts
    397
    Looked at it in Hex Workshop. Damn! I had no Idea!..

    yes, nihil, each user's default document directory is auto-generated from the user name by the OS. You could get around this by using a file server directory with a generic path.....If you didn't mind someone knowing the NetBIOS name of your file server instead! (that is, of course, if you didn't fix the whole metadata problem.)
    Reply With Quote Reply With Quote
« Previous Thread | Next Thread »

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts

Forum Rules

 Security News

     Patches

       Security Trends

         How-To

           Buying Guides