Giveaway: Vovsoft Hide Files (Lifetime) – Secures Your Files and Folders

Without encryption the hiding is superficial, once an item is locked a standard windows hidden attributed folder is created on the C: drive “C:\VVSFTFLDRHD” with security through obscurity a file is created for each hidden item N.db where N is a number that appears to increase sequentially. the file is NOT an sqlite database but the original file renamed… If one enables encryption then the *.db files contain the encrypted contents and not the plain text. As I said there is zero plausible deniability, even if stealth mode is enabled which for some reason just hides the GUI from view so you cannot do anything more with the program… not even exit normally… not sure it’s purpose as the C:\VVSFTFLDRHD folder with contents still remain and the process hidefiles.exe still shows in task manager details page and would have to be End tasked to return to normality. Ah just read on vovsofts product page CTRL + ALT + SHIFT + Z toggles stealth mode so now it kind of makes sense even if the stealthiness is superficial and proof of the programs activity remain. Oddly there is no portable edition of this even though that would make the most sense that the program not be installed on the host machine but just the obscure data files… renaming the appdata/roaming subfolder to be something more obscure would be advisable too. The use of fixed folder and file naming and installation on the host computer destroy the possible security through obscurity… One suggestion I can make is go a little deeper, most modern drives have multiple partitions to produce the EFI boot environment and that leaves often megabytes sometime hundreds of megabytes of slack space between GPT partitions that are free to hide away data if you compile in your own filesystem driver into your program to have an extended slack space partition table in the slack between the GPT/MBR records and boot sectors and the first partition which is often a megabyte later… to define the slack space partitions to be used for storing a few hundred megabytes of encrypted data in place that will not be touched by windows. I’m also concerned that the chosen password is shared and stored by vovsoft in association with the registered email address to enable the password recovery process to occur which is an unnecessary risk that one should be able to opt out of as vovsoft could get hacked and the password/email database stolen. Do you get a copy of SOS participants passwords even though they cannot use the recovery facility as no end user email is associated with the winningpc license? If so that is unfair data exposure for no potential benefits!

dead