Re: A Truecrypt Trick "nemo_outis" <abc@xyz.com> wrote in message
news:Xns983ADCE3D3C31abcxyzcom@204.153.244.170...
> "Vanguard" <vanguard.news@yahooNIX.com> wrote in
> news:vaqdndA2hZR0J5nYnZ2dnUVZ_u2dnZ2d@comcast.com:
>
>
>> Data streams is a feature of the NT file system (NTFS), not of
>> TrueCrypt. Data streams have been around since NTFS was invented.
>> It
>> is sometimes used but not often. In fact, Kaspersky used it...
>
>
> You're coming a little late to the party - I have already noted
> these
> points.
>
> As for steganography, it is readily detectable unless the payload is
> less
> than a few percent (i.e., the ratio of hidden to host data). While
> now
> rather long in the tooth, you could start with reading the history
> of such
> things as OutGuess and stegdetect. Then move on to the Crypto
> conferences
> (published by Springer).
>
> Regards,
>
For my post dated 9/10/06 at 8:24 PM, you only had 2 posts before
that. In those 2 posts, just where did you say that ADS was a feature
of NTFS (so we knew that you knew what ADS was about)? The only
mention of "NTFS" was in your first post and that was for the name of
a utility, not in your description of data streams. Where in those
posts did you address the issue of anti-malware programs triggering on
the streams and possibly resulting in deleting their files because of
the inclination to eradicate "pests"? Where in your 2 prior posts did
you mention using the hidden volume within a TC volume to hide content
(rather than waste effort to hide the fact that the TC volume exists)?
So on what was I "late"? Remember that indentation shown in
newsreaders for thread posts in a discussion will push down the
branches with older datestamps to show the subbranches that were added
at later times. Obviously my post could not address or account for
topics discussed in posts that were submitted later. |