Here’s a common story when it comes to password retrieval: guy sets up a PC, and being very security-conscious, puts a password on his Seagate hard drive. Fast forward a few months, and the password is, of course, forgotten. Hard drive gets shuffled around between a few ‘computer experts’ in an attempt to solve the problem, and eventually winds up on [blacklotus89]’s workbench. Here’s how he solved this problem.
What followed is a walk down Hackaday posts from years ago. [blacklotus] originally found one of our posts regarding the ATA password lock on a hard drive. After downloading the required tool, he found it only worked on WD hard drives, and not the Seagate sitting lifeless on his desk. Another Hackaday post proved to be more promising. By accessing the hard drive controller’s serial port, [blacklotus] was able to see the first few lines of the memory and the buffer.
Two hours and two Python scripts later, [blacklotus] was able to dump the contents of his drive. He then took another Seagate drive, locked it, dumped it, and analyzed the data coming from this new locked drive. He found his old password and used the same method to look for the password on the old, previously impenetrable drive. It turns out the password for the old drive was set to ‘0000’, an apparently highly secure password.
In going through a few forums, [blacklotus] found a lot of people asking for help with the same problem, and a lot of replies saying. ‘we don’t know if this hard drive is yours so we can’t help you.’ It appears those code junkies didn’t know how to unlock a hard drive ether, so [blacklotus] put all his tools up on GitHub. Great work, and something that didn’t end up as a Hackaday Fail of the Week as [blacklotus] originally expected.
This one nearly ended up in today’s Links post, but on second look we think it deserves a feature of its own. [Profezzorn] designed some mounting brackets to house a file server inside of an external drive enclosure. Click on the instructions tab to get a bit more of the story.
The enclosure that he’s using is meant for a 5.25″ optical drive. It comes with a USB to SATA converter which is how he connects the hard drive to the Raspberry Pi serving the files. His mounting system uses the original holes in the enclosure, the threaded holes of the drive, and the holes in the RPi PCB to mount everything with just ten screws. The enclosure included a Molex power connector. He sacrificed an old connector to make a custom cable for the Pi’s power.
Add a portable power supply, do a little work with the Linux configuration, and you could easily turn this into a pirate box.
Even if he hadn’t done any firmware hacking on this hard drive [Sprite_TM’s] digital exploration of the controller is fascinating. He gave a talk at this year’s Observe, Hack, Make (OHM2013) — a non-commercial community run event in the Netherlands and we can’t wait for the video. But all the information on how he hacked into the three-core controller chip is included in his write up.
[Sprite_TM] mentions that you’re not going to find datasheets for the controllers on these drives. He got his foot in the door after finding a JTAG pinout mentioned on a forum post. The image above shows his JTAG hardware which he’s controlling with OpenOCD. This led him to discover that there are three cores inside the controller, each used for a different purpose. The difference between [Sprite_TM’s] work and that of mere mortals is that he has a knack for drawing surprisingly accurate conclusions from meager clues. To see what we mean check out the memory map for the second core which he posted on page 3 or his article.
Using JTAG he was able to inject a jump into the code (along with a filler word to keep the checksum valid) and run his own code. To begin the firmware hacking portion of the project he pulled the flash ROM off of the board and installed it on that little board sticking out on the left. This made it easy for him to backup and reflash the chip. Eventually this let him pull off the same proof of concept as a firmware-only hack (no JTAG necessary). He goes onto detail how an attacker who has root access could flash hacked firmware which compromises data without any indication to they system admin or user. But we also like his suggestion that you should try this out on your broken hard drives to see if you can reuse the controllers for embedded projects. That idea is a ton a fun!
When we were poking around the OHM2013 website (linked above) we noticed that the tickets are sold out; good for them! But if you were still able to buy them they take Bitcoin as one payment option. Are there any other conferences that allow Bitcoin for registration?
If you’re reading this blog then chances are you have a dead hard drive hanging out somewhere in your house. Here’s a weekend project that will put it back into use. [Andreas] took on the popular project which combines a hard drive and optical mouse to build a scratch controller.
The gist of the build is that you use an optical mouse sensor to track the movement of the platter. But [Andreas] made things harder on himself by not using the USB capability of the mouse and mapping it in software for his needs. Instead he plucked the sensor from the mouse, reading it using an Arduino. After much trial and error with the best way to coat the underside of the platter to play nicely with the sensor he managed to get it up and running. The controller issues commands using the MIDI protocol, forming a strong foundation for future upgrades which could lead to a full-blown DJ console hack.
Continue reading “Building a hard drive scratch controller”
Not wanting too many disks lying around his Apple II battlestation, [NeXT] started looking into hard drive solutions. There is the old-time solution – a ProFile hard drive initially designed for the Apple /// and Lisa, but those are rare as hen’s teeth, and just as expensive as newer Compact Flash adapters. [NeXT] had another option – SCSI, with an adapter card, but most of the SCSI devices of the era didn’t fit in with the cool ‘stackable’ aesthetic of AII peripherals.
With a bit of Bondo and some paint, [NeXT] modded an old dual disk drive into a retro-looking hard drive perfect for storing and running hundreds of old games.
[NeXT] began his build by taking an old Apple DuoDisk (the two-disk drive seen above) and Bondoing over the holes in the front. A drive activity light was added above the Apple logo, and the old drives saved for another day. Inside the new enclosure, an old 40MB hard drive, tested on a Macintosh SE/30, was installed along with a small power supply for the drive. With a few custom SCSI cables, the drive will be ready for it’s grand debut. We think it looks awesome just sitting there, and is sure to be the pride of [NeXT]’s collection.
The concept behind this clock has been seen before, but [Dieter] tried to combine the best aspects of several projects into his HDD POV clock (translated). The basic principle of the design is to cut a slot into the top platter of the hard drive. This will let the light from some LEDs shine through. By carefully synchronizing the LED with the spinning platter a set of differently colored hands can be shown to mark time. We’ve been looking at the project for several minutes now and we’re not quite sure if the lines marking the 5-minute segments on the clock are generated in the same way as the hands, or if they’re marks on a faceplate on top of the platters. Check out the clip after the break and let us know what you think.
Past HDD clock project include this one, or this other one. Some of the design improvements include a better motor driver (which [Dieter] pulled from an old VCR) and the inclusion of an RTC chip to keep accurate time without the need to be connected to a computer. We also think it’s a nice touch to sandwich the hardware between two picture frames for a nice finished look.
Continue reading “HDD POV clock takes the best from those that came before it”
[David] is serving up files on his home network thanks to this Frankenstein’s monster of a Network Attached Storage device. It looks like he raided all the good bits from his parts bin to bring it all together.
The case is a tin box which may have been for a card/board game or some holiday treats. The hardware started with an NS-K330 server which he picked up from Deal Extreme. It has a NIC and a couple of USB ports but it tends to run really hot so he added a heat sinks to the board’s main chips. The hard drives are both 2.5″ form factor from old laptops. He uses some 2.5″ to 3.5″ mounting adapters to attach them to the tin box. A pair of USB to IDE adapters shed their cases and were solder directly to the wires which make a connection with the server’s USB ports.
There is a Linux distro specifically for this hardware but [David] wasn’t impressed with it. He ended up compiling OpenWRT for it and is satisfied with the functionality that provides.