hargrove's spirit of nine

This is the last post (hopefully) on our walk through the boot sector. There are couple byte ranges I want to briefly discuss, so I’m grouping them all into the final post. For reference, here’s our ever-present hex editor screenshot.

¶ Posted 24 June 2009 § Forensics § Security ‡ Comments (1)

2009-06-24: Song of The Day: Frankenstein Drag Queens From Planet 13 – The Witch Is Dead

Frankenstein Drag Queens From Planet 13 – The Witch Is Dead

¶ Posted 24 June 2009 § Music § sotd ‡ Comments Off

RIP Ed McMahon

This is truly the end of an era.

¶ Posted 23 June 2009 § Miscellaneous ‡ Comments Off

Revisiting Bytes 17 and 18

This is an important difference between FAT12/FAT16 and FAT32. In FAT12 and FAT16, the beginning of the data area is reserved for the root directory. In FAT32, the root directory can be located anywhere in the data area.

¶ Posted 23 June 2009 § Forensics § Security ‡ Comments Off

2009-06-23: Song of The Day: Mushroomhead – Before I Die

Mushroomhead – Before I Die

¶ Posted 23 June 2009 § Music § sotd ‡ Comments Off

MarsEdit and DropBox

How to make MarsEdit work with Dropbox.

¶ Posted 22 June 2009 § OS X ‡ Comments Off

Revisiting Bytes 14-15 and 16

A FAT file system contains a FAT Area. This is the File Allocation Table area. For now, think of the FAT Area as a list of file names and pointers to the Data Area, and think of the Data Area as the place where a file’s content actually resides. So, we’ve got our boot sector, followed by a list of file names which point to that particular file’s content.

¶ Posted 22 June 2009 § Forensics § Security ‡ Comments Off

2009-06-22: Song of The Day: Gothminister – Devil

Gothminister – Devil

¶ Posted 22 June 2009 § Music § sotd ‡ Comments Off