Off Topic: EWF files
in [Laptops]
|
From: BillW50 on 21 Dec 2009 19:06 In news:hglpll$qdj$1(a)reader1.panix.com, the wharf rat typed on Sun, 20 Dec 2009 18:16:21 +0000 (UTC): > In article <hgk29l$sev$1(a)news.eternal-september.org>, > BillW50 <BillW50(a)aol.kom> wrote: >> >> http://www.computa.co.uk/staff/dan/?p=5 >> > Lol, turns out it's not really write protecting the disk. It's > spooling changes to memory then disgarding them on shutdown... Exactly! This allows you to run Windows from a DVD/CD, ROM, or whatever. Just like those Linux Live versions. And you have the option of not dumping them, but saving it. Which is better yet. This allows occasional writing. And this also stops viruses, malware, and what have you. As they can't get any of their hooks into the OS since it is write protected. >> Disclaimers are everywhere. Remember there was a time when ordering > > You can't use untested beta software from unknown developers > on production systems. You don't have too. As you also have manual directions to do it the other way. -- Bill Gateway MX6124 ('06 era) - Windows XP SP2
From: the wharf rat on 22 Dec 2009 01:16 In article <hgp2iu$608$1(a)news.eternal-september.org>, BillW50 <BillW50(a)aol.kom> wrote: > >Exactly! This allows you to run Windows from a DVD/CD, ROM, or whatever. >Just like those Linux Live versions. And you have the option of not >dumping them, but saving it. Which is better yet. This allows occasional A) It's not just like Linux Live. CDROM Linux runs from a ram disk, not by pretending to write to the CD. And no amount of Windows magic will let you flush a memory overlay to a write once cdrom :-) B) The context of this discussion was that Windows doesn't support an easy way to mount a read only file system, because no one in Redmond ever thought you'd want to do that. However, Linux, as with any unix-like system does, so the next time you have precious data on a flash drive just mount it read only and buggy music players won't be able to delete your files. >writing. And this also stops viruses, malware, and what have you. As >they can't get any of their hooks into the OS since it is write >protected. What stops malware from executing ewfmgr commit? :-)
From: BillW50 on 23 Dec 2009 07:56
In news:hgpo8d$dfm$1(a)reader1.panix.com, the wharf rat typed on Tue, 22 Dec 2009 06:16:45 +0000 (UTC): > In article <hgp2iu$608$1(a)news.eternal-september.org>, > BillW50 <BillW50(a)aol.kom> wrote: >> >> Exactly! This allows you to run Windows from a DVD/CD, ROM, or >> whatever. Just like those Linux Live versions. And you have the >> option of not dumping them, but saving it. Which is better yet. This >> allows occasional > > A) It's not just like Linux Live. CDROM Linux runs from a ram > disk, not by pretending to write to the CD. And no amount of Windows > magic will let you flush a memory overlay to a write once cdrom :-) You are not thinking straight. Windows with EWF is running totally from RAM just like a Linux Live distro is. That is the beauty of it. How it works isn't as important as the end result. > B) The context of this discussion was that Windows doesn't support > an easy way to mount a read only file system, because no one in > Redmond ever thought you'd want to do that. Are you sure? And why is it that nobody cares until you want to mount a device in Linux? As Linux applications like to toast files it is only supposed to be reading. Like what happens to me playing my WMA files under Linux. > However, Linux, as with any > unix-like system does, so the next time you have precious data on a > flash drive just mount it read only and buggy music players won't be > able to delete your files. Better yet, I stopped trusting Linux with any files. Now I don't have to worry about any WMA files being corrupted. >> writing. And this also stops viruses, malware, and what have you. As >> they can't get any of their hooks into the OS since it is write >> protected. > > What stops malware from executing ewfmgr commit? :-) The read only CD or ROM. <grin> Besides the numbers for users of EWF is so small that no virus has bothered with it. And if they did, still easy to get around. As commit waits until you do a proper shutdown. And when I use EWF, I just remove power instead. And that other commit that works right away, well that one would be a dead give away. As the drive lite would be on when it shouldn't be. -- Bill Gateway MX6124 ('06 era) - Windows XP SP2 |