Roger Upole wrote:
> On Windows NTFS file systems, you can add data to a file using named streams.
> The extra streams aren't visible from Explorer so the average end-user won't
> even know they're there.
>
I hadn't realised how easy it is to access alternate data streams from
Python. A filename of the right form ("basefile.ext:alternatename")
works just fine, it appears.
Unfortunately you then have the problem of how to create it, since there
is no way to carry it around outside an NTFS filesystem, so some sort of
post-install script would be required.
There's also the issue that alternate data stream of any significant
size will be regarded with great suspicion by forensic examinations and
similar tests.
regards
Steve
--
Steve Holden +44 150 684 7255 +1 800 494 3119
Holden Web LLC/Ltd http://www.holdenweb.com
Skype: holdenweb http://holdenweb.blogspot.com
Recent Ramblings http://del.icio.us/steve.holden
--
http://mail.python.org/mailman/listinfo/python-list
