On Viernes, 18 de Abril de 2003 12:23, email lists wrote: > normally a well configured citrix gateway should only allow ram based > bitmap caching. this assumes: > > - users connect to citrix via the company's nfuse portal > - the sysadmins of the nfuse portal have modified the template.ica files > to disable disk caching, etc. How about virtual memory? The swap behaviour is out of any app's reach, an application cannot control (IMHO) whether their data are being swapped to disk. So, I think we're once again in a case where looking at swap areas in the disk may reveal interesting data. Last time I commented this was about IRC sessions (that one was easy: just "strings" and let's see what you find), this one seems a little more complicated as you would have to look for the magic number corresponding to bitmaps and try to determine whether what you are finding IS a bitmap, in that case maybe opening it would give you good news..... As usual, am I right? Or does this make not any sense ? Regards from Spain Pope -- Luis Gomez Miralles InfoEmergencias - Technical Department Phone (+34) 654 24 01 34 Fax (+34) 963 49 31 80 lgomezat_private PGP Public Key available at http://www.infoemergencias.com/lgomez.asc ----------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com
This archive was generated by hypermail 2b30 : Tue Apr 22 2003 - 09:01:52 PDT