OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Desktop.ini file ignored by Windows Encryption...

From: Scott Lockington (SLockingtonVICAL.COM)
Date: Mon Nov 01 2004 - 14:55:15 CST

Hello All,

In working with Windows EFS (i.e. 2000 sp4 and XP sp2) Any file named
"desktop.ini" is ignored when encrypting the containing directory with EFS.
The contents of this file are not verified to be that of a valid desktop.ini
file, instead it can contain anything. Any file dropped named desktop.ini
could avoid requiring decryption at a later date. Abuses of such an exclusion
are left as an exercise for the reader.

Thank you

J. Scott Lockington
Security Administrator
slockingtonvical.com

--
NTBugtraq Editor's Note:

Want to reply to the person who sent this message? This list is configured such that just hitting reply is going to result in the message coming to the list, not to the individual who sent the message. This was done to help reduce the number of Out of Office messages posters received. So if you want to send a reply just to the poster, you'll have to copy their email address out of the message and place it in your TO: field.
--