knoppix 3.7

[anyweb]

hmm...

<a class="ipsAttachLink ipsAttachLink_image" href="<fileStore.core_Attachment>/post-1-1107982969.png" data-fileid="267">[img]<fileStore.core_Attachment>/post-1-1107982969.png[/img]</a>

[anyweb]

this is a test TEXT encrypted file in windows xp

 

as you can see its GREEN in color (meaning encrypted) using Windows XP EFS

<a class="ipsAttachLink ipsAttachLink_image" href="<fileStore.core_Attachment>/post-1-1107985296.png" data-fileid="268">[img]<fileStore.core_Attachment>/post-1-1107985296.png[/img]</a>

[anyweb]

ok knoppix displays the files but once i click on 'test.txt' the system goes into a freefall, and basically crashes with the cd spinning non stop and no keyboard/mouse responses.

 

so it looks to me that EFS in windows xp is actually working, however, i wonder why it is allowing you (the user) to view file names/creation dates/directories

 

interesting experiment none the less

 

cheers

 

anyweb

[anyweb]

actually it doesnt crash, just looks like it is crashing

 

if you wait for a few minutes the cd will stop spinning and that's when you know its 'back to life'

 

so here is my final screenshot on this matter

 

notice the attributes of the file and i could NOT open it in knoppix

 

cheers

 

anyweb

<a class="ipsAttachLink ipsAttachLink_image" href="<fileStore.core_Attachment>/post-1-1107986893.png" data-fileid="269">[img]<fileStore.core_Attachment>/post-1-1107986893.png[/img]</a>

[anyweb]

heres the tpm directory, note it was not encrypted with xp EFS but it could be easily.

<a class="ipsAttachLink ipsAttachLink_image" href="<fileStore.core_Attachment>/post-1-1108034725.png" data-fileid="270">[img]<fileStore.core_Attachment>/post-1-1108034725.png[/img]</a>