29

I have Mac PC, in which I have created a Windows partition and have installed Windows using Boot Camp.

If I log in to the Mac OS, I can read all the files from the Windows partition from Mac. If I compare the same scenario from within Windows, Windows claims to secure a user's private files (stored in My Documents for instance) from other users with equal or less privilege.

I was expecting to see the same protection from Mac as well. I was expecting an error message in Mac to show that these files are inaccessible, if I try to see or open them.

Can someone explain if my perception is right or am I missing something?

6
  • 11
    You're not missing anything.
    – user3463
    May 3, 2011 at 17:46
  • 6
    Note that this also happens in the reverse path -- the Windows OS can technically speaking see anything on your Mac partition, if someone writes software that can understand HFS+. May 4, 2011 at 0:16
  • 4
    Further to what Billy (and others) said, if you pop a Linux Live CD in you'll be able to read both the Mac & Windows files.
    – boehj
    May 4, 2011 at 3:09
  • @Billy ONeal: not if you use FileVault. It creates an encrypted disk image and uses it for the home directory.
    – Javier
    May 4, 2011 at 6:08
  • 6
    @Javier; And you can encrypt your disk under windows too - his point was that access restrictions are not part of the filesystem. There's nothing stopping me reading your encrypted image, after all, I just won't be able to understand it.
    – Phoshi
    May 4, 2011 at 10:44

3 Answers 3

58

The NTFS access control lists are enforced by Windows. If a user can access the partition from outside Windows (for example by using a different operating system) then there are no guarantees of enforcement.

If you have files which must be protected, then use NTFS's encryption features.

2
  • 23
    Or Truecrypt's full disk encryption, or other full disk encryption method.
    – LawrenceC
    May 3, 2011 at 18:18
  • 4
    You can also get the disk, attach it to another Windows systems where you have admin privileges and take ownership of any file you like, and then access it. OS file security is valid only as long as the "original" OS is the only one accessing the disk. There is no magic protecting the files at the hardware level, are just OS level enforced rules.
    – ldsandon
    May 4, 2011 at 8:28
12

Unless you encrypt the files then the disk will be always fully readable. And yes it's completely normal.

Think of it this way. The superuser (administrator) always has full access to anything (and if he doesn't, he can gain the access). On your MacOS, you are the superuser, therefore if you don't forbid yourself access to the files you will be able to access them. Now if you would want to limit access for other users, you can of course do that (but that's something that has to be configured in MacOS not the Windows partition).

2
  • I think you meant to say "on Windows you are the superuser", cause it's definitely not true on OSX. On windows, many default installation setups will assume you don't want privilege separation. May 3, 2011 at 21:00
  • 6
    @Wes : you mean on "legacy end user versions of Windows", right? Because otherwise this sounds like unfounded Windows bashing. Since Windows NT 3.51 ACLs are enforced and privilege separation was normal. With Windows 2000 Pro and XP the problem was more the target market and what that market expected. Also, there is a distinction between privileges (which allow to circumvent permissions) and permissions on Windows. May 3, 2011 at 23:38
2

Filesystems are really only (potentially) secure when they're accessed over a network, so that there's no option for raw disk access.

There are a number of ways filesystem security can be bypassed, as you witnessed yourself with the dual-booting. With MacOS or Linux accessing a NTFS disk, this actually happens because the security specs of NTFS weren't implemented when the driver was written, rather than because of any attempt to bypass it.

Even with filesystem encryption in place, a suitably motivated hacker with physical access to a machine can break security, either by infecting the OS to log passwords, or by bugging a keyboard. Even biometric security isn't a full guarantee - for example, capture raw signals from a fingerprint reader, then play it back later.

Data can never be kept 100% secure if it is to be accessible at some point.

6
  • 4
    Not true -- it's perfectly possible to make a filesystem secure locally. Stealing passwords is not a failure of the filesystem's security, it's a failure of your password scheme. There are plenty of ways of securing things (e.g. Smartcard authentication) which can't be so easily bugged as a keyboard. Further such behavior requires physical access to the target machine for a long time. That's not any software's fault. Even the lowest common access control denominator, POSIX permissions, is more secure than any system which has it's passwords physically compromised, no matter that system design. May 4, 2011 at 3:48
  • @Billy I wasn't blaming the software; I was highlighting that a local disk can never be considered 100% secure (whatever OS you choose).
    – Phil Lello
    May 4, 2011 at 3:59
  • @Phil: Your answer says "Filesystems are really only (potentially) secure when they're accessed over a network" -- which is not true. The filesystem is perfectly secure. The system which is the computer as a whole might not be perfectly secure. But the filesystem is fine. May 4, 2011 at 4:01
  • 1
    The real point is that a filesystem is just a way of laying data out on a disk, and it doesn't have any intrinsic security of its own. May 4, 2011 at 9:29
  • @Ganesh Sittampalam of course the disk itself might have intrinsic security being fully hardware encrypted. May 4, 2011 at 12:26

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .