”The Volume Shadow Copy Service (VSS) keeps historical versions of files and fol... | Hacker News

Hacker News new | past | comments | ask | show | jobs | submit

login

jpalomaki on Oct 11, 2018 | parent | context | favorite | on: Windows 10 October 2018 Update no longer deletes y...

”The Volume Shadow Copy Service (VSS) keeps historical versions of files and folders on NTFS volumes by copying old, newly overwritten data to shadow copy via copy-on-write technique. The user may later request an earlier version to be recovered.”

https://en.m.wikipedia.org/wiki/NTFS#Volume_Shadow_Copy

canada_dry on Oct 11, 2018 [–]

> Volume Shadow Copy Service

Sure, and the first thing every WIN virus does is deletes the shadow copies.

Spivak on Oct 11, 2018 | [–]

I don't see what you're getting at, an equivalent virus on Linux would delete snapshots as well.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact