OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: Windows file problem
From: Blake Frantz (blakeMAIL.MC.NET)
Date: Sat Oct 07 2000 - 19:23:28 CDT

What you are seeing is a splice, I believe it was RFP that wrote a tool
that searches for them on your computer, but I'm not positive. I believe
tripwire for windows will also locate these such files.

Blake

On Fri, 6 Oct 2000 poeppingLOGICAL.CM.NU wrote:

> I don't know if this is a hole, or the file is going somewhere
> else, but here is what I found.
>
> create a directory i.e c:\tempfolder
>
> go into the folder and type dir (its empty)
>
> now type echo junk >> :myfile
>
> type dir again (its still empty)
>
> now find a copy of vi.exe for windows (its all I can find that can read
> and write these files) once you get vi.exe type vi :myfile and presto
> it loads the file, with the conent of "junk" you wrote to it.
>
> next type start . and you can see that windows explorer can't see it.
>
> and if you try to delete the file it doesn't work.
>
> So if someone wanted to, they could log onto a server/workstation and
> create a file that fills up the harddrive (assuming that it takes up
> space, haven't tried), And no one would see it, or be able to delete it.
>
>
> Am I mising something? or is this just a flaw in windows (tested on
> windows nt 4.0 doesn't seem to work on windows 98, but need to try
> creating the file with vi.exe)
>
>
>
> thanks,
> matt
> poeppingksni.net
>