DAT file compilation

Steve Holden steve at holdenweb.com
Sat Sep 30 14:47:55 EDT 2006


Roger Upole wrote:
> On Windows NTFS file systems, you can add data to a file using named streams.
> The extra streams aren't visible from Explorer so the average end-user won't
> even know they're there.
> 
I hadn't realised how easy it is to access alternate data streams from 
Python. A filename of the right form ("basefile.ext:alternatename") 
works just fine, it appears.

Unfortunately you then have the problem of how to create it, since there 
is no way to carry it around outside an NTFS filesystem, so some sort of 
post-install script would be required.

There's also the issue that alternate data stream of any significant 
size will be regarded with great suspicion by forensic examinations and 
similar tests.

regards
  Steve
-- 
Steve Holden       +44 150 684 7255  +1 800 494 3119
Holden Web LLC/Ltd          http://www.holdenweb.com
Skype: holdenweb       http://holdenweb.blogspot.com
Recent Ramblings     http://del.icio.us/steve.holden




More information about the Python-list mailing list