Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I have Mac PC, in which I have created a Windows partition and have installed Windows using Boot Camp.

If I log in to the Mac OS, I can read all the files from the Windows partition from Mac. If I compare the same scenario from within Windows, Windows claims to secure a user's private files (stored in My Documents for instance) from other users with equal or less privilege.

I was expecting to see the same protection from Mac as well. I was expecting an error message in Mac to show that these files are inaccessible, if I try to see or open them.

Can someone explain if my perception is right or am I missing something?

share|improve this question
11  
You're not missing anything. –  user3463 May 3 '11 at 17:46
6  
Note that this also happens in the reverse path -- the Windows OS can technically speaking see anything on your Mac partition, if someone writes software that can understand HFS+. –  Billy ONeal May 4 '11 at 0:16
4  
Further to what Billy (and others) said, if you pop a Linux Live CD in you'll be able to read both the Mac & Windows files. –  boehj May 4 '11 at 3:09
    
@Billy ONeal: not if you use FileVault. It creates an encrypted disk image and uses it for the home directory. –  Javier May 4 '11 at 6:08
6  
@Javier; And you can encrypt your disk under windows too - his point was that access restrictions are not part of the filesystem. There's nothing stopping me reading your encrypted image, after all, I just won't be able to understand it. –  Phoshi May 4 '11 at 10:44
show 1 more comment

3 Answers 3

up vote 58 down vote accepted

The NTFS access control lists are enforced by Windows. If a user can access the partition from outside Windows (for example by using a different operating system) then there are no guarantees of enforcement.

If you have files which must be protected, then use NTFS's encryption features.

share|improve this answer
23  
Or Truecrypt's full disk encryption, or other full disk encryption method. –  ultrasawblade May 3 '11 at 18:18
4  
You can also get the disk, attach it to another Windows systems where you have admin privileges and take ownership of any file you like, and then access it. OS file security is valid only as long as the "original" OS is the only one accessing the disk. There is no magic protecting the files at the hardware level, are just OS level enforced rules. –  ldsandon May 4 '11 at 8:28
add comment

Unless you encrypt the files then the disk will be always fully readable. And yes it's completely normal.

Think of it this way. The superuser (administrator) always has full access to anything (and if he doesn't, he can gain the access). On your MacOS, you are the superuser, therefore if you don't forbid yourself access to the files you will be able to access them. Now if you would want to limit access for other users, you can of course do that (but that's something that has to be configured in MacOS not the Windows partition).

share|improve this answer
    
I think you meant to say "on Windows you are the superuser", cause it's definitely not true on OSX. On windows, many default installation setups will assume you don't want privilege separation. –  Wes Hardaker May 3 '11 at 21:00
6  
@Wes : you mean on "legacy end user versions of Windows", right? Because otherwise this sounds like unfounded Windows bashing. Since Windows NT 3.51 ACLs are enforced and privilege separation was normal. With Windows 2000 Pro and XP the problem was more the target market and what that market expected. Also, there is a distinction between privileges (which allow to circumvent permissions) and permissions on Windows. –  0xC0000022L May 3 '11 at 23:38
add comment

Filesystems are really only (potentially) secure when they're accessed over a network, so that there's no option for raw disk access.

There are a number of ways filesystem security can be bypassed, as you witnessed yourself with the dual-booting. With MacOS or Linux accessing a NTFS disk, this actually happens because the security specs of NTFS weren't implemented when the driver was written, rather than because of any attempt to bypass it.

Even with filesystem encryption in place, a suitably motivated hacker with physical access to a machine can break security, either by infecting the OS to log passwords, or by bugging a keyboard. Even biometric security isn't a full guarantee - for example, capture raw signals from a fingerprint reader, then play it back later.

Data can never be kept 100% secure if it is to be accessible at some point.

share|improve this answer
4  
Not true -- it's perfectly possible to make a filesystem secure locally. Stealing passwords is not a failure of the filesystem's security, it's a failure of your password scheme. There are plenty of ways of securing things (e.g. Smartcard authentication) which can't be so easily bugged as a keyboard. Further such behavior requires physical access to the target machine for a long time. That's not any software's fault. Even the lowest common access control denominator, POSIX permissions, is more secure than any system which has it's passwords physically compromised, no matter that system design. –  Billy ONeal May 4 '11 at 3:48
    
@Billy I wasn't blaming the software; I was highlighting that a local disk can never be considered 100% secure (whatever OS you choose). –  Phil Lello May 4 '11 at 3:59
    
@Phil: Your answer says "Filesystems are really only (potentially) secure when they're accessed over a network" -- which is not true. The filesystem is perfectly secure. The system which is the computer as a whole might not be perfectly secure. But the filesystem is fine. –  Billy ONeal May 4 '11 at 4:01
1  
The real point is that a filesystem is just a way of laying data out on a disk, and it doesn't have any intrinsic security of its own. –  Ganesh Sittampalam May 4 '11 at 9:29
    
@Ganesh Sittampalam of course the disk itself might have intrinsic security being fully hardware encrypted. –  Chris Marisic May 4 '11 at 12:26
show 1 more comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.