[14142] in bugtraq
Re: Disk (over)quota in Windows 2000
daemon@ATHENA.MIT.EDU (Curtis Anderson, CNE, MCSE)
Thu Mar 2 14:33:06 2000
Mime-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
Message-Id: <000601bf8459$36773100$196ba3c6@mb.ism.ca>
Date: Thu, 2 Mar 2000 09:08:47 -0600
Reply-To: canderso@ism.ca
From: "Curtis Anderson, CNE, MCSE" <canderso@ISM.CA>
X-To: BUGTRAQ@SECURITYFOCUS.COM
To: BUGTRAQ@SECURITYFOCUS.COM
In-Reply-To: <81FBBA8C21B9D311A6E500508B6144AA0328D5@eupalinos.aegean.gr>
Good point. I can spew hundreds of megabytes into an ADS stream an it won't
show up as being used (by me or any other user).
Frank Heyne wrote one of several available utils for listing ADS streams
(http://www.heysoft.de/) IIRC the utility's called LADS. Query your
favorite search engine for "Alternate Data Streams" and you can find other
utils to do this. If you're programmatically inclined, query the $MFT file
directly.
-------------------------------------------------
Curtis Anderson, CNE, MCSE
ISM Manitoba - an IBM Global Services team member
canderso@ism.ca andersoc@ca.ibm.com
-------------------------------------------------
-----Original Message-----
From: Sarkos Georgios
Subject: Re: Disk (over)quota in Windows 2000
How about using ads (NTFS only) ? Our university uses quotas (NT
4.0) and I bypass them quite easy. In fact with the use of ads you may also
do other things eg hide viruses .
