Valid characters on one o/s are invalid on another

From: Kayne Ian (Softlab) (Ian.Kayneat_private)
Date: Mon Jun 25 2001 - 01:15:29 PDT

  • Next message: Jason Spence: "Getting passwords from the heap?"

    Hey all,
    	This recent thread about antivirus scanners & DOS archives got me
    thinking. Years ago (before *zip introduced the non-absolute paths option),
    it was possible to create a zip archive with some files in, hex edit the
    archive and change the locations of some of these files, thus making it
    extremely easy to transparently replace files on a system that the archive
    is extracted on. This used to be a particularly nasty trick on amiga bbs's -
    the amiga version of zip was pretty pathetic to say the least. Anyway, this
    got me wondering about seeing whether this was still possible (albeit in a
    different manner). After playing around, I noticed something strange.
    
    	We all know Windows (well the FS really) doesn't allow certain ascii
    characters to be used for filenames - ?, " etc... But, other o/s's
    filesystems do - in this case Amiga O/S 3.0 & the FFS (fast file system).
    So, when I got a CD on the amiga containing some files with legal characters
    under workbench but illegal under windows, then tried to access the CD on a
    windows machine (specifically the badly named files), some dodgy behaviour
    happened. Files started "dissapearing" from the CD etc... Didn't go much
    further than this...
    
    	Just wondering if anyone else has any thoughts/opinions on this ...
    Is it even any use or worth looking into? 
    
    Ian Kayne
    Technical Specialist - IT Solutions
    Softlab Ltd - A BMW Company
    
    
    
    ******************************************************************** 
    This email and any files transmitted with it are confidential and 
    intended solely for the use of the individual or entity to whom 
    they are addressed. 
    
    If you are not the intended recipient or the person responsible for 
    delivering to the intended recipient, be advised that you have received 
    this email in error and that any use of the information contained within 
    this email or attachments is strictly prohibited. 
    
    Internet communications are not secure and Softlab does not accept 
    any legal responsibility for the content of this message. Any opinions 
    expressed in the email are those of the individual and not necessarily 
    those of the Company. 
    
    If you have received this email in error, or if you are concerned with 
    the content of this email please notify the IT helpdesk by telephone 
    on +44 (0)121 788 5480. 
    
    ********************************************************************
    



    This archive was generated by hypermail 2b30 : Mon Jun 25 2001 - 06:49:28 PDT