[19974] in bugtraq
Re: Invisible file extensions on Windows
daemon@ATHENA.MIT.EDU (Mimi Carpenter)
Sat Mar 31 21:38:23 2001
MIME-Version: 1.0
MIME-Version: 1.0
Content-Type: multipart/signed; protocol="application/x-pkcs7-signature";
micalg=SHA1; boundary="----=_NextPart_000_0014_01C0B92B.A5217720"
Message-ID: <4DCBE4B38676D31193EC00508B44EB9C708A9E@UTILITY3>
Date: Fri, 30 Mar 2001 15:10:17 -0800
Reply-To: Mimi Carpenter <mcarpenter@SAGPH.ORG>
From: Mimi Carpenter <mcarpenter@SAGPH.ORG>
To: BUGTRAQ@SECURITYFOCUS.COM
This is a multi-part message in MIME format.
------=_NextPart_000_0014_01C0B92B.A5217720
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
Actually, scrap objects are useful to WRITERS -- not of code but of
documents -- who are using Office.
Create a Word document, select all or part of the document, and drag the
selection onto the desktop or to a window. You will have a new file
called "Document scrap 'something or other'". This can be useful when
you want to keep scraps of text around without using the clipboard or
notes.
I ran across this info while reading a "Windows Tips and Tricks" mailing
list of all things. Hope it's useful. (I do agree that the situation is
serious, just wanted to mention I knew of a use for the file type)
--
Mimi L. Carpenter, Network Security Engineer
Screen Actors Guild Producers Pension and Health Plans
mailto:mcarpenter@sagph.org
I speak only for myself.
-----Original Message-----
From: Tony [mailto:bugtraq-list@ATTRON.COM]
Sent: Friday, March 30, 2001 1:32 AM
To: BUGTRAQ@SECURITYFOCUS.COM
Subject: Re: Invisible file extensions on Windows
For an excellent overview of Shell Scraps, see:
http://www.pc-help.org/security/scrap.htm
These can be scary little buggers because they have the functionality of
both batch files and executables (see the example in the link above.)
It
appears to be an artifact of Win3.1 OLE that never seemed to disappear.
I have never seen them used in a useful capacity, but there is most
likely some enterprise application depending upon them for its
functionality.
------=_NextPart_000_0014_01C0B92B.A5217720
Content-Type: application/x-pkcs7-signature;
name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
filename="smime.p7s"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------=_NextPart_000_0014_01C0B92B.A5217720--