Collaborate Disseminate
I’m learning about linux hardening and I’m creating a sudoers file. My idea is to separate things. There will be a user to see log files, another that can sudo to manage system processes, another for network managements, and so on and so f… Continue reading Linux access control policies sudoers
Before uploading a photo or image to a forum, I may typically strip the metadata to remove identifying material with exiftool. The thing is, the Linux file system itself seems to leave some metadata on a file:
cardamom@pluto ~ $ ls -la
ins… Continue reading What metadata from the Linux file system is in my uploaded photos?
Hi, my name is Jens-Petter Sandvik and I’m a PhD student at Norwegian University of Science and Technology (NTNU for short). In addition to trying to finish a PhD, I’m working for the Norwegian police in the national cyber crime &hell… Continue reading Coffee Forensics: Reconstructing Data in IoT Devices Running Contiki OS
I’m not an Information Security professional, just a worried layperson.
A few years ago, when I was logged into my own account on a shared laptop, the disc space mysteriously kept filling up. I deleted vast amounts of videos and other larg… Continue reading Shared computer’s disc space mysteriously filling up – worried about illegal content
Alice and Bob are on the same file system. Alice made a spam filter plugin, which reads /tmp/mail and then writes the report to /tmp/report. The /tmp/mail has permission 400 and /tmp/report has permission 600. Both files have owner and gro… Continue reading Use side-channel attack to steal file with permission 600?
I just noticed a strange loop device that was added to my machine today.
It is mounted under /run/media/<user>/CENA_X86FREE_EN-US_DV9 and seems to contain Windows files, probably a Windows installer with a bit more than 4.1GB used sp… Continue reading Loop device added at package installation – is it a security threat?
If one formats the same USB stick (or SD card) to FAT32 file system on Windows, or on Linux, or on Android – would there be differences so a forensic guy could definitely tell on which OS or even on which specific machine the USB stick was… Continue reading Are there differences on how storages are formatted between different OS?
If one uses a micro SD card with a card reader on Windows, or on Linux, or on Android – would there be a way so a forensic guy could definitely tell on which computer the flash card was used by examining it?
I know OS can log which devices… Continue reading Which traces leave on a flash card after using it?
If one uses a FAT32-formatted USB stick on Windows, Linux, or Android, would there be a way to determine on which computer the USB stick was used by examining the USB stick?
I know OS can log which USB sticks were connected. As far as I kn… Continue reading What traces are left on a USB stick after using it?
Say I’ve found a perfect SSRF vulnerability in a web application that lets me send web requests to any URL, any host, any port, any scheme. I can use the file:// scheme to get the contents of local files, such as file:///C:/Windows/win.ini… Continue reading Uploading/writing server files via SSRF?