Re: Where are my bytes hiding?
Re: Where are my bytes hiding?
- Subject: Re: Where are my bytes hiding?
- From: Charles Srstka <email@hidden>
- Date: Thu, 05 May 2016 14:28:12 -0500
> On May 5, 2016, at 2:01 PM, Martin Wierschin <email@hidden> wrote:
>
>> Those files are compressed by the filesystem. In HFS+/MacOS Extended that
>> means that the data fork is empty and the file contents are stored in the
>> resource fork or extended attributes structure.
>>
>> http://wiki.sleuthkit.org/index.php?title=HFS#HFS.2B_File_Compression <http://wiki.sleuthkit.org/index.php?title=HFS#HFS.2B_File_Compression>
>
> Huh, that's interesting and surprising, thanks for the link. Is this method of stashing compressed data in the xattrs something that's currently commonly used by OSX? Or is it just some weird infrequently used trick? I see this on the linked page:
>
>> Compression is most often used for files installed as part of Mac OS X; user files are typically not compressed (but certainly can be!)
>
> Are a lot of system files compressed like this? Is there any way a user file might be compressed in such a way through normal user actions?
>
> ~Martin Wierschin
It’s normally only done for files preinstalled by the operating system.
Charles
_______________________________________________
Cocoa-dev mailing list (email@hidden)
Please do not post admin requests or moderator comments to the list.
Contact the moderators at cocoa-dev-admins(at)lists.apple.com
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden