3 ms·

> nothing marked 'from web' and non-executable should be loadable into a memory segment How would you "mark something 'from web'"? This is a file after all. T

> nothing marked 'from web' and non-executable should be loadable into a memory segment How would you "mark something 'from web'"? This is a file after all. There are ways to sign files (executable or not) but there is no 'from web' flag as far as I know.

fortran77 6y ago
Sure there is: https://textslashplain.com/2016/04/04/downloads-and-the-mark-of-the-web/ https://textslashplain.com/2016/04/04/downloads-and-the-mark... Windows File System is very advanced and has metadata streams.
lultimouomo 6y ago
> How would you "mark something 'from web'"? This is a file after all. Files can have metadata, and most modern filesystems provide some kind of file attribute facility. On macOS browsers do exactly what described, setting a file attribute on downloaded files. The user will then be warned when trying to execute the file.
vlovich123 6y ago
You would be incorrect. File Quarantine on OSX: > https://support.apple.com/en-us/HT201940 https://support.apple.com/en-us/HT201940 Alternate data stream on Windows: > https://www.howtogeek.com/70012/what-causes-the-file-downloaded-from-the-internet-warning-and-how-can-i-easily-remove-it/ https://www.howtogeek.com/70012/what-causes-the-file-downloa... I wouldn't be surprised if Linux had it but I haven't used desktop Linux in a long time so I don't know what to search for, but generally having browsers annotate their file streams isn't an uncommon thing to support for filesystems & browsers.
- BrandoElFollito 6y ago
  OK thanks - so this is a NTFS feature, meaning that if the file is stored on an non-NTFS partition, or sent further that "flag" is cancelled.
- yjftsjthsd-h 6y ago
  A decent number of linux filesystems do support extended attributes, which is how I assume you'd do this (actually, looking at https://en.wikipedia.org/wiki/Extended_file_attributes https://en.wikipedia.org/wiki/Extended_file_attributes a lot of OSs support xattrs), but I'm not aware of any browsers using them to mark downloads.
  - vlovich123 6y ago
    I'm not aware of any browsers that don't mark files downloaded from the web as such.

fortran77 6y ago

Sure there is: https://textslashplain.com/2016/04/04/downloads-and-the-mark-of-the-web/ https://textslashplain.com/2016/04/04/downloads-and-the-mark... Windows File System is very advanced and has metadata streams.

lultimouomo 6y ago

> How would you "mark something 'from web'"? This is a file after all. Files can have metadata, and most modern filesystems provide some kind of file attribute facility. On macOS browsers do exactly what described, setting a file attribute on downloaded files. The user will then be warned when trying to execute the file.

vlovich123 6y ago

You would be incorrect. File Quarantine on OSX: > https://support.apple.com/en-us/HT201940 https://support.apple.com/en-us/HT201940 Alternate data stream on Windows: > https://www.howtogeek.com/70012/what-causes-the-file-downloaded-from-the-internet-warning-and-how-can-i-easily-remove-it/ https://www.howtogeek.com/70012/what-causes-the-file-downloa... I wouldn't be surprised if Linux had it but I haven't used desktop Linux in a long time so I don't know what to search for, but generally having browsers annotate their file streams isn't an uncommon thing to support for filesystems & browsers.

BrandoElFollito 6y ago
OK thanks - so this is a NTFS feature, meaning that if the file is stored on an non-NTFS partition, or sent further that "flag" is cancelled.
yjftsjthsd-h 6y ago
A decent number of linux filesystems do support extended attributes, which is how I assume you'd do this (actually, looking at https://en.wikipedia.org/wiki/Extended_file_attributes https://en.wikipedia.org/wiki/Extended_file_attributes a lot of OSs support xattrs), but I'm not aware of any browsers using them to mark downloads.
- vlovich123 6y ago
  I'm not aware of any browsers that don't mark files downloaded from the web as such.