1 reply to this topic

[bshavers]

Very cool of Alex to share his work.  Thanks Alex!

Alex Van Ginkel Final Thesis MSc_27nov by Brett Shavers

Alex van Ginkel Final Thesis MSc_27nov

View the full article

[Wonko the Sane]

Nice.

If I may two things:

1. cheatcheet should be cheatsheet (appendix 8.2)
2. still in appendix 8.2 (page 58 of 63) this is not entirely correct (I am picky):

 

‘Placing a Volume in Read-only does write to the disk. Connecting a NON-Windows drive
might write a disk signature.' The disk signature is a 4 byte entry and can be found on the
Master Boot Record (MBR) at offset 0x01B8.

 

A non-windows disk may have nonetheless a Disk Signature, the ONLY two cases in which Windows modifies the Disk Signature are:

1. a collision with the Disk Signature of another disk connected (very, very rare)
2. the disk signature being 00000000 <- the fact that non-windows NT based systems (not "windows") do not normally write a Disk Signature does not in any way mean that a Disk Signature different from 00000000 has not been written

 

Wonko