Desktop.ini

>desktop.ini

Other urls found in this thread:

securityxploded.com/findhiddenprocess.php
cyberarms.wordpress.com/2010/07/16/windows-backdoor-system-level-access-via-hot-keys/
anders.unix.se/2015/10/28/screenshots-from-developers--unix-people-2002/
freebsd.org/doc/handbook/
twitter.com/NSFWRedditVideo

>svchost.exe

>thumbs.db

>NTUSER.DAT

>PROGMAN.EXE

I can believe he said this

>pagefile.sys

>tmp00000000

Is a recursive Fibonacci even possible? Wouldn't it be like O(n^2) or some shit?

>Speech, inking, & typing

>ЃϵϳSЂϿϽϯIχϯπρϴϱЄϱЃϵϳS
>ЃϵϳSЂϿϽϯIχϯπρЂϻϵЉЃϵϳS

Older windows
>con:con
Even worked on network share requests.

are you serious my dude?

if n==0 or n==1 return n
else return fib(n-1)+fib(n-2)

>cmd.exe

you mean con\con (IIRC). also lpt\lpt or something

>icon.ico

>favicon.ico

>Textures.bsa

The fuck does desktop.ini do anyway?

Could be, has been a while.

Same as C:\explorer.exe with your own shit (IIRC that was first in PATH even before the one in the Windows folder... boom on startup). Bunch of websites like the one in pic related still have all the stupid shit from back then.

>resources.rc

jesus christ windows is scary

OTOH undeletable unmovable unrenamable files (with the easy ways on cmd or explorer, you could edit em through like 7zfm) still were a thing in Win7 when I last checked.

>lost+found

Yeah but it would explode in complexity for anything above 10

This sort of shenanigans is mostly fixed in modern Windows, but similar tricks can be used to get access to things you shouldn't have access to on a server hosting a RemoteApp.

>.* in my home directory

fuck this, i'm so tired of this crap
why can't you use the .config directory like a normal application

Yes. And that would be O(2^n). Far, far worse than O(n^2).

>.wmv

It is there on the desktop to annoy you. Delete it and it comes back.

I think it is an insidious way to get us to hide system files again.

regarding the gif, there was a similar fuck up win windows xp that was fixed in sp1 or sp2...
ironically, android has similarly retarded vulns

>scary
windows is funny as hell, it has provided many lulz to those who wanted it

Local剜捯獫慴⁲慇敭屳呇⁁屖湥楴汴浥湥⹴湩潦

>but similar tricks can be used to get access to things you shouldn't have access to on a server hosting a RemoteApp.
explain?

why is your 'ls' command showing "hidden" files/folders?

Endless retarded shit, yes. And in the past MS took years to patch anything and often fixed terrible flaws like that on major updates only.

Well, that one was at least better than c-a-d & run explorer.exe before.

>LOST.DIR

Even better than undeleteable, unmovable, unrenamable: truly hidden to everything that comes with Windows, undetectable without very specific 3rd party tools.

that's the point

Fuck all, wrong image

>$ grep "alias ls" ~/.bashrc
alias ls='ls -ahF --color=auto'

>requires printer setup
so no one could ever use it

You could use a memoization array and get it to O(N) but then you are just wasting memory unless you actually need an array of all fib values from 1 to N. Especially when there is a matrix multiplication way to get the N'th fibonachi number in O(log(N))

RemoteApp is basically RDP exporting only one program. That is, you are given access to one program running on a remote server.

Most obvious place to start: Open/save dialogs. You can browse the whole disk from there.

Want a command prompt? Right click, new, shortcut, cmd.exe.

Command prompt is disabled? Did they also think to disable Powershell, etc.?

Maybe you can even sneak in an exe embedded in a document, depending on the app you have access to.

True.

Microsoft generally liked hiding shit anyhow. Also great in how many ways you could and can hide processes from users. securityxploded.com/findhiddenprocess.php and so on...

Folder customization (icon, infotip, and more)

heh, ADSs...

>>$ grep "alias ls" ~/.bashrc
you don't need to do this, typing "alias ls" will show the aliases

>ls -ahF
remove the -a ...

>Well, that one was at least better than c-a-d & run explorer.exe before.
I don't remember this one... and couldn't find anything on youtube

It can also be abused to force a user to load an icon from an attacker's network share. Of course Windows authenticates to that machine automatically to access the share. Then the attacker can use that to get into other shares you have access to.

The joys of NTLM auth...

>File.png
>file.png

>Do you want to override?

Linux will happily let you make separate File.png and file.png on an NTFS drive. Then Windows behaves strangely around those files.

Similarly it lets you create filenames with characters like > in them, which really upsets Windows.

Is that the notation for NTFS streams or something?

what's wrong with .bsa it's great

>remove the -a ...
no shit, i want to see hidden folders for a reason
I don't want applications saving their configurations in the home folder like some kind of slob

>I don't remember this one... and couldn't find anything on youtube
Was a login bypass on like win95, available by default.

Still worked almost the same on Win 7 if you could substitute anything in the early startup for cmd so that starts.

cyberarms.wordpress.com/2010/07/16/windows-backdoor-system-level-access-via-hot-keys/

>totally legal according to NTFS limitations
>NTFS is a Microsoft product
>Microsoft's Windows freaks out whne you use valid NTFS data
Why even allow it if the only OS that uses NTFS won't support it. Is there any reason to use NTFS on other systems?

he didn't

What? You can't be serious

>And in the past MS took years to patch anything and often fixed terrible flaws like that on major updates only.
there are many unpatched vulns to bypass UAC...

yep

then run everything as root! just like you'd do on windows xp....
dumbass

Yeah, alternate data streams.

Here's a 23 byte text file that contains a sizable archive. The properties window suggests that something is strange about it, but it doesn't give much of a hint.

>Is there any reason to use NTFS on other systems?
For cross platform compatibility. It's at least readable out of the box on Windows, Linux and Mac, unlike any of the other better-than-FAT32 choices.

I used to use a DC client that would store the file hash in the NTFS stream, it was really handy because you could swap between clients or machines and not have to rehash the files.

Also the memoization, even though it is 0(n), is still huge overhead compared to just itteritively doing it.

.

He's using a Windows desktop. Take note.

>there are many unpatched vulns to bypass UAC...
Good point. I wonder if they abandon it or if they will patch it up...

fucking why? Why is desktop.ini in every folder windows touches?

TRIGGERED
>idle on desktop
> >= 25% cpu
>cpu fans full fucking speed
>random disk writing causing the drive to sound like its about to blow up
>5 gb of ram used
>NOTHING IS EVEN OPEN
svchost is the reason I switched to linux.

That editor looks like ACME, I wouldn't be surprised if he did all the work inside a plan9 vm.

>._filename

no m8 its drawterm

real plan 9 users were like real unix users. they used remote computers with terminal programs from comfy desktop-oriented systems. only their terminals were 250% better than 1970s shit.

it is and you can run it on linux windows and osx.

I use it aswell on linux and my plan9 server.

.DS_Store
.Trashes

Neat, I noticed what looked like that Rio grey but I meant the thing above that looked like ACME.

I wonder if those ports existed when that image was taken. Last time I checked the Plan9port had spotty issues with building and running on Windows, I think I could only get ACME itself to run and someone else had compiled it, I couldn't get mk or anything else to build myself, maybe that's changed by now I'd love to experiment with those tools nativity. I know Russ Cox and some of the Plan9 team primarily use p9p on OS X.

>$Recycle.Bin

Not drawterm.

It's acme in drawterm on windows NT. That was DMR's preferred setup.

Funny how we've regressed and the average dev is using vim or emacs from tmux on crippled UNIX.

anders.unix.se/2015/10/28/screenshots-from-developers--unix-people-2002/

try acmesac

>inferno vm

it's shit

at least you get spaces in filenames despite the bell labs autism

Fight me, I fucking loved progam.
You know it could still run in windows 95?

Yeah but closed program group icons looked like ass.

i use acme like a start page on my laptop.
It starts from boot and it has my folders and mail on display aswell as the editor to work on and i can use it to surf the web aswell as use it as a terminal in bash and plan9 rc.

Anything worth while or just hiding archives and text docs? This can be done with stenography, can any executable run from the background or is this just a spot to hide collected information to send out at a later time? I would like a real word purpose for this not just know it can be done, we all know IronGeek.

inferno vm? I dont use vms

shit disregard. it is shit.

Acme SAC is an inferno vm that's set up to just launch acme, man.

I really like the plumbing going on in ACME and how it integrates with everything but I have a hard time accepting that a mouse driven environment can be more productive than a purely keyboard driven one. I don't doubt it's possible but I haven't experienced it yet, trying to switch to something new like that is always hard since you have to slow down your work before you can achieve enough familiarity to either dismiss it as "not better" or be back to your existing speed or potentially surpass it. Plan9 especially has a few customs I'm not familiar with and it will be hard to drop my muscle memory.

I guess I need to buckle down and just force myself to use it already to really know instead of just wondering.

I think that's what I tried before. ACME is neat but what I really want to mess with it mk, Plan9's C and their compilers. I could just run Plan9 itself but I'm worried about doing that, I don't want to find and enjoy something that's exclusive to plan9 and not be able to use it on other systems.

I am so confused on what Inferno really is or what the purpose is, I've come to the conclusion before that it's the same motivation for p9p but using a virtual machine instead of porting all the tools. I'm not really sure but it seems like learning Plan9 would be more beneficial than learning Inferno. I have no clue.

...

I set up a full blown 9 grid on raspberry pis. Takes like 6 seconds to boot and run fossil and venti.

Instead of composing advanced tasks out of actions like in vi and emacs, you write scripts.

It's a programmers environment first and foremost. It's not intuitive, it's programmed.

Ive also tried plan9 from gentoo. Its a little buggy but it a fun thing to play with.

At least from cmd.exe, you cannot run an exe from an ADS. It may be possible other ways, but it would appear in the process list like any other program. It's mainly a way to hide files, and not a terribly great one either since they're still stored unencrypted on disk, the "size on disk" in Properties indicates something is there, and there are tools for listing all ADSes in a filesystem.

One real world purpose is hiding pieces of malware or its data -- though a rootkit would hide it even better. A more innocent use is hiding your porn folder.

And no I'm not hiding anything real in there. I just zipped up some porn I have elsewhere on my disk as a demo file. It's my computer and I have no need to hide it, so long as I don't strew it across the desktop.

>IO.SYS

What distribution are you running and what resources do you use? I've heard people say to use 9front over Bell Labs, I'm also looking for something as close to the FreeBSD handbook as I can.
freebsd.org/doc/handbook/

I really do want to understand Plan9 and see if I can use it as a development environment but also understand the system and it's advantages if any. People always talk about its networking capabilities and distribution but I'm not familiar with specifics.

Hows the documentation of Plan9 and related Plan9 things? I may dive in this weekend.

Sounds alright if the interaction is easy, do you have any example scripts for some common tasks? I'm curious the syntax and how the scripts interact with the editor/cursor.

yeah man? can you PROVE he didn't say it?

how about you stop taking a dump on people and let them have little moment to shine, huh?? i thought it was a fun and cool quote

in fact just fuck off
you're filtered now :^)

for raspberry pi...
plan9.bell-labs.com/sources/contrib/miller/9pi-old.img.gz

for raspberry pi2
plan9.bell-labs.com/sources/contrib/miller/9pi.img.gz

Join the 9fans mailing list and dont be a Cred Forumstard there as real hackers hang there and they will shut you down.

I didn't intend to take the 9pill today but I hope I'm glad I did in a few weeks.

Installing it is rather easy and there is a fair bit of info out there youll love it.
Redad up on the different types of servers like cpu and file aswell as terminals.

*Read.

I intend to look into it seriously soon but for now I'm dinking about in a vm. What is the rc equivalent of EOF/ctrl-z? I ran a program without arguments so it's expecting stdin and I can't seem to terminate the input in any of the ways I tried.