İçeriğe atla

TIL the DCIM directory stands for "Digital Camera Images"

Today I Learned
5 3 11
  • This post did not contain any content.
  • This post did not contain any content.

    Imagine if you were a malicious actor and you wanted a copy of all photos someone plugged into a computer that were not things like browser cache, just good honest to god OC.

    All you have to do is listen on drive letters D, E, F, G and when one is plugged in with a DCIM directory... silently upload the data contents to a server over the internet when a drive is detected with that subdirectory.

    Have you ever wondered why you couldn't eject a drive without rebooting? It's not like it's going to tell you what process is keeping it locked... Encryption wouldn't even matter, because you're gonna need to decrypt/unlock it to access it, and windows doesn't care what service or application is trying to access it, it is glad to allow any kind of file action without even admin rights.

    Anywho, actor has your photo, AI trivially builds facial recognition models, pulls in timestamps, geolocation metadata, camera metadata... and now those photos you never intended to upload anywhere are in a database of PII that will be shared to god-knows-who.

  • Imagine if you were a malicious actor and you wanted a copy of all photos someone plugged into a computer that were not things like browser cache, just good honest to god OC.

    All you have to do is listen on drive letters D, E, F, G and when one is plugged in with a DCIM directory... silently upload the data contents to a server over the internet when a drive is detected with that subdirectory.

    Have you ever wondered why you couldn't eject a drive without rebooting? It's not like it's going to tell you what process is keeping it locked... Encryption wouldn't even matter, because you're gonna need to decrypt/unlock it to access it, and windows doesn't care what service or application is trying to access it, it is glad to allow any kind of file action without even admin rights.

    Anywho, actor has your photo, AI trivially builds facial recognition models, pulls in timestamps, geolocation metadata, camera metadata... and now those photos you never intended to upload anywhere are in a database of PII that will be shared to god-knows-who.

    The unmounting needing a reboot seems very much a you problem.

    I have managed over 1000 systems since XP days and never came across it.

  • The unmounting needing a reboot seems very much a you problem.

    I have managed over 1000 systems since XP days and never came across it.

    You've never, ever plugged in a thumbdrive and then used the "safely remove hardware" tray to try and eject... only to receive an error that says "unable to remove, in use" or similar?

    I guess i've never seen it happen when I was using a thumb drive to image a machine well over a decade ago.

    There are a few people on the internet who seem to have reported this though:

    There are thousands of results of this. I have encountered this dozens of times personally across dozens of different systems.

  • You've never, ever plugged in a thumbdrive and then used the "safely remove hardware" tray to try and eject... only to receive an error that says "unable to remove, in use" or similar?

    I guess i've never seen it happen when I was using a thumb drive to image a machine well over a decade ago.

    There are a few people on the internet who seem to have reported this though:

    There are thousands of results of this. I have encountered this dozens of times personally across dozens of different systems.

    You’ve never, ever plugged in a thumbdrive and then used the “safely remove hardware” tray to try and eject… only to receive an error that says “unable to remove, in use” or similar?

    no, not even with those fake size ones.


Önerilen Başlıklar