Do you own a MacBook?
If yes, then you must be careful because you could be exposing critical information about your website or applications through '.DS_Store' files. DS refers to Desktop Services.
What are DS_Store files?
A file with the 'ds_store' extension is a Mac OS X database file. Mac database files are used by many applications to store data in the form of flat files, which are stored on a database server when the database application is not running. Databases typically store information such as names of people and companies, phone numbers, email addresses, or other personal data for an organization (including its employees and customers), or information about how one product should be handled in its supply chain.
The application Mac DS_Store File is specially designed for storage and access to files on the Mac OS X operating system. This wizard allows you to manage the content of your Mac hard drive, creating, moving, and removing folders and files, renaming them, copying between volumes of disks, or creating new hard drives from scratch.
Mac Ds_store files are associated with a specific product, e.g., toolkit, media player, etc. The Mac Ds_store files are exploitable and have the potential to obtain users’ information.
This file contains several potential security vulnerabilities that can be exploited by security researchers popularly known as hackers.
Stay tuned for part 2 on how DS_Store files are exploited.
Top comments (0)