Results 1 to 4 of 4

Thread: Alternate Data Streams - is HFS vulnerable too?

  1. #1
    Junior Member
    Join Date
    Mar 2003
    Posts
    9

    Alternate Data Streams - is HFS vulnerable too?

    I've been reading a lot about ADS as of late, but I haven't found an answer to this question: Is ADS a vulnerability of HFS as well? Supposedly NTFS uses a rip off of HFS's forking which leaves NTFS vulnerable to ADS attacks, but what about HFS? Is this a problem too?

  2. #2
    Master-Jedi-Pimps0r & Moderator thehorse13's Avatar
    Join Date
    Dec 2002
    Location
    Washington D.C. area
    Posts
    2,885
    Wow, a question about the ancient Hierarchical File System (HFS). Are you referring to the original UNIX version, Macintosh, OS/2, DOS or WinNT? To date, no file (data) streaming vulnerabilities are known to exist in the *original* (UNIX) implementation. The problem with NTFS file streaming is not directly related to the original design of HFS, rather, the bastardized implementation that Microsoft cooked up based on how HFS forking operates.


    --TH13
    Our scars have the power to remind us that our past was real. -- Hannibal Lecter.
    Talent is God given. Be humble. Fame is man-given. Be grateful. Conceit is self-given. Be careful. -- John Wooden

  3. #3
    Junior Member
    Join Date
    Mar 2003
    Posts
    9
    Ah, thank you. I was under the impression that MacOSX is run on HFS..

  4. #4
    Regal Making Handler
    Join Date
    Jun 2002
    Posts
    1,668
    I was under the impression that MacOSX is run on HFS..
    It does afaik. But it is journalled.

    Fresh on the heels of its "Jaguar" release of Mac OS X 10.2, Apple Computer Inc. is about to spring a new surprise for the Unix-based OS: A journaled file system designed to provide corporate Mac sites with a new, historical view of their data.
    Taken from this article: http://www.eweek.com/article2/0,3959,634711,00.asp
    What happens if a big asteroid hits the Earth? Judging from realistic simulations involving a sledge hammer and a common laboratory frog, we can assume it will be pretty bad. - Dave Barry

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •