3 ms·
If you are on windows, I guess ntfs alternative data stream is a good places to hide random items. You can write whatever information into it while not visible
by mmis1000 5y ago
If you are on windows, I guess ntfs alternative data stream is a good places to hide random items. You can write whatever information into it while not visible to user or most of file explore because it is so rarely used and windows hide it intentionally (excepts the windows itself use it to mark downloaded files)
- ale42 5y agoWindows also uses it for metadata, e.g. if you edit the "Comment" of a DLL file. The problem with NTFS alternate streams it's that they are very easy to find if you know what you're looking for. It might be better to hide data in plain sight in the middle of existing registry keys. Or actually you can create inaccessible registry keys (depending on the API you use, you can actually put NULLs in registry key names, making them inaccessible for regedit... but there are programs to easily detect this as it's known since a long time, see https://docs.microsoft.com/en-us/sysinternals/downloads/regdelnull https://docs.microsoft.com/en-us/sysinternals/downloads/regd...)
- mmis1000 5y ago`it's that they are very easy to find...` is probably true for most methods. Those methods aren't magic anymore if you knows about them. And that is also the reason everybody why don't want to talk about how they hide thing?