4 ms·
Hm, is there a security concern here? Someone could use this to A) Remotely check the presence of any specific file on your machine. B) Exfiltrate the conten
by Retr0id 4y ago
Hm, is there a security concern here?
Someone could use this to
A) Remotely check the presence of any specific file on your machine.
B) Exfiltrate the contents of any file they know the hash of (or possibly more specifically, the hash of each piece? I don't know the protocol details).
Fine if you have a dedicated "I expect the contents to be public" drive or directory, but not something I'd want to do on my OS drive.
- autoexec 4y agoI have seen people obviously sharing their entire hard drive on P2P platforms, and it's usually been someone's C drive and a massive security issue. I don't think some clients do enough to make it clear to people that they need to be careful not to share more than they intend to or should.
- londons_explore 4y agoOn modern windows, ideally there are no sensitive files accessible to a user program, because everything should be in the secret store/protectedstorage. Obviously a lot of programs still store cached session keys and passwords in plaintext somewhere in your user directory though...
- imhoguy 4y agoand assuming nobody puts their passwords.txt on desktop and keeps unprotected wallet.dat around.
- crtasm 4y agobesides that a user's Photos and Documents directories can be rather sensitive
- patrick451 4y agoThere's a lot more to be concerned about than session keys and passwords. Tax documents, health records, photos, private journal documents, just to name a few.