All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic  [ 45 posts ]  Go to page Previous  1, 2, 3  Next
Author Message
 Post subject: Re: Recover files from HP Simplesave 1TB
PostPosted: May 2nd, 2018, 15:16 
Offline
User avatar

Joined: December 19th, 2006, 8:49
Posts: 9510
Location: Portugal
cheadledatarecovery wrote:
I've just had a 2.5" WD disk in which had been in an HP SimpleSave caddy. The caddy had been disposed of by a PC Shop as the USB connector had been broken away. They put it in a standard caddy which they sold to the customer. She could not get her data when she got it back. Then another PC shop had an attempt - needless to say they could not recover the data either.

The HP Simplesave caddy appears to be a copy of WD My Passport encryption. In this case, using the INIC1607E processor. It was possible to read encryption keys from the from the SA, then decrypt in Data Extractor. Nice and straight forward and glad I didn't have to start searching eBay for a matching HP SimpleSave caddy from 2010!

John.


Thanks for sharing this !!!

Maybe reallymine or "Roberto" sollution would work as well ... - viewtopic.php?f=1&t=35048

_________________
1Q9xrDTzTddUXeJAFRn37aqh1Yr6buDCdw - (Bitcoin Donations)
paypal.me/Spildit - (PayPal Donations)
The HDD Oracle - Platform for OPEN research on Data Recovery.


Top
 Profile  
 
 Post subject: Re: Recover files from HP Simplesave 1TB
PostPosted: May 3rd, 2018, 12:17 
Offline

Joined: August 18th, 2010, 17:35
Posts: 3241
Location: Massachusetts, USA
Yep, HP used that chipset.
Reallymine may work as it is pretty much the same thing.

_________________
Hard Drive and RAID Data Recovery Specialist in Massachusetts


Top
 Profile  
 
 Post subject: Re: Recover files from HP Simplesave 1TB
PostPosted: June 25th, 2018, 19:10 
Offline

Joined: February 4th, 2017, 12:05
Posts: 22
Location: columbus ohio
Save your money. Instead of paying Roberto, try doing it yourself:

https://github.com/themaddoctor/linux-mybook-tools


Top
 Profile  
 
 Post subject: Re: Recover files from HP Simplesave 1TB
PostPosted: June 26th, 2018, 7:48 
Offline

Joined: August 18th, 2010, 17:35
Posts: 3241
Location: Massachusetts, USA
kaeding wrote:
https://github.com/themaddoctor/linux-mybook-tools

From the author: "tools for opening some encrypted WD My Book drives in linux".
The tool does not seem to be able to decrypt My Passport clones/images outside the native "My Passport environment", hence why the author recommends other ways (e.g. reallymine).

_________________
Hard Drive and RAID Data Recovery Specialist in Massachusetts


Top
 Profile  
 
 Post subject: Re: Recover files from HP Simplesave 1TB
PostPosted: June 26th, 2018, 11:18 
Offline
User avatar

Joined: December 19th, 2006, 8:49
Posts: 9510
Location: Portugal
labtech wrote:
kaeding wrote:
https://github.com/themaddoctor/linux-mybook-tools

From the author: "tools for opening some encrypted WD My Book drives in linux".
The tool does not seem to be able to decrypt My Passport clones/images outside the native "My Passport environment", hence why the author recommends other ways (e.g. reallymine).


Agree. Those tools are just to "open" the good working drives on linux as you would do on windows with the provided WD software so that you can work with those drives as you would on windows.

This will NOT decrypt damaged drives, drives outside of the enclosure, drives converted to SATA, etc ...

I think this is just "software" that works like the WD smartware software, etc ...

_________________
1Q9xrDTzTddUXeJAFRn37aqh1Yr6buDCdw - (Bitcoin Donations)
paypal.me/Spildit - (PayPal Donations)
The HDD Oracle - Platform for OPEN research on Data Recovery.


Top
 Profile  
 
 Post subject: Re: Recover files from HP Simplesave 1TB
PostPosted: June 26th, 2018, 13:36 
Offline

Joined: February 4th, 2017, 12:05
Posts: 22
Location: columbus ohio
Spildit wrote:
labtech wrote:
kaeding wrote:
https://github.com/themaddoctor/linux-mybook-tools

From the author: "tools for opening some encrypted WD My Book drives in linux".
The tool does not seem to be able to decrypt My Passport clones/images outside the native "My Passport environment", hence why the author recommends other ways (e.g. reallymine).


Agree. Those tools are just to "open" the good working drives on linux as you would do on windows with the provided WD software so that you can work with those drives as you would on windows.

This will NOT decrypt damaged drives, drives outside of the enclosure, drives converted to SATA, etc ...

I think this is just "software" that works like the WD smartware software, etc ...


You completely misunderstand it without even looking at it. It is for decrypting the drives after the SATA-USB bridge card is removed. Applies to the case that we are discussing now. It does not use the WD software. It uses command-line tools to read the keyblock and extract the key from it. Then it uses cryptsetup to REPLACE the WD software, so that the drive is seen by the OS as a decrypted drive.


Top
 Profile  
 
 Post subject: Re: Recover files from HP Simplesave 1TB
PostPosted: June 26th, 2018, 13:38 
Offline

Joined: February 4th, 2017, 12:05
Posts: 22
Location: columbus ohio
To do Passport drives with linux-mybook-tools, the drive must be converted to SATA, or the encryption chip must be bypassed. But it can.

Linux-mybook-tools is for SATA drives after the bridge card is removed. WD software is not used.

I don't know how you two are coming to those conclusions, unless you work for Roberto and want people to send him money.


Top
 Profile  
 
 Post subject: Re: Recover files from HP Simplesave 1TB
PostPosted: June 26th, 2018, 15:47 
Offline
User avatar

Joined: September 8th, 2009, 18:21
Posts: 10782
Location: Australia
kaeding wrote:
To do Passport drives with linux-mybook-tools, the drive must be converted to SATA, or the encryption chip must be bypassed. But it can.

Linux-mybook-tools is for SATA drives after the bridge card is removed. WD software is not used.

I don't know how you two are coming to those conclusions, unless you work for Roberto and want people to send him money.

It was a genuine misunderstanding. Spildit's forum, a "Platform for OPEN research on Data Recovery", openly promotes reallymine and your own tool:

http://www.hddoracle.com/viewtopic.php?f=22&t=1488&p=15122#p14993

_________________
A backup a day keeps DR away.


Top
 Profile  
 
 Post subject: Re: Recover files from HP Simplesave 1TB
PostPosted: June 26th, 2018, 15:50 
Offline

Joined: February 4th, 2017, 12:05
Posts: 22
Location: columbus ohio
Cool.

Roberto charges too much, so I get a little edgy when anyone talks about him.


Top
 Profile  
 
 Post subject: Re: Recover files from HP Simplesave 1TB
PostPosted: June 26th, 2018, 17:54 
Offline
User avatar

Joined: December 19th, 2006, 8:49
Posts: 9510
Location: Portugal
Ok ...

Quote:
https://github.com/themaddoctor/linux-mybook-tools/blob/master/README.md

linux-mybook-tools

tools for opening some encrypted WD My Book drives in linux

These tools are only useful for external drives with one of these chips on the USB-SATA bridge card: JMS538S, SW6316, INIC1607E, OXUF943SE. The tools are for drives whose USB-SATA bridge card has been damaged and removed.

These tools are specifically for mounting encrypted drives. This allows the drive to be used in linux, for example to recover the files on it, but does not decrypt the disk for use on Windows. If you prefer to make a decrypted disk image, see the ReallyMine project (link below), or use these tools for decryption and dd or ddrescue for imaging.

If you would like to help in development in a simple way, please submit your keyblock (and password, if any). Keyblocks can be uploaded as zipped binary files or by pasting the output of "hexdump -C" into a comment.

Users with MyPassport drives should look at this first: http://blog.acelaboratory.com/pc-3000-h ... drive.html If you can convert to an SATA drive, then these tools can still be helpful.

Users with MyBook Live drives should go here: http://n-dimensional.de/blog/2012/05/01 ... ata-rescue They are not encrypted, as far as I know.

Please do not contact me about password recovery unless you can show proof of ownership for the drive.

If you follow the tutorial, but are still unable to open your drive, first check that you made no typos. Most mistakes users make are typographical errors. If you believe that you made no such mistakes, and need further assistance, submit a dump of the first 2MB of the drive, the keyblock (if found), and the password (if used). DO NOT send screenshots or videos.

-EDIT- I don't think I can give personal help any longer, except for exceptional or interesting cases. Everything I have to offer is in this project. Take it and do as you like with it.

Windows is not supported.

Mac is supported only to the extent that some scripts and commands in the tutorial can be used in the Mac Terminal app, but mounting is not possible. Decryption is possible with a C program if you have Xcode for compiling and sufficient room for disk images.

Try ReallyMine for creating decrypted disk images on Mac, Windows, and linux. https://github.com/andlabs/reallymine ReallyMine is not my project. It has its own forum, if you need to ask about it.

If you find my email online, please be advised that I ignore all messages to that address. The only way to get help is through this site. TY

_________________
1Q9xrDTzTddUXeJAFRn37aqh1Yr6buDCdw - (Bitcoin Donations)
paypal.me/Spildit - (PayPal Donations)
The HDD Oracle - Platform for OPEN research on Data Recovery.


Top
 Profile  
 
 Post subject: Re: Recover files from HP Simplesave 1TB
PostPosted: June 26th, 2018, 19:51 
Offline
User avatar

Joined: December 19th, 2006, 8:49
Posts: 9510
Location: Portugal
kaeding wrote:
Cool.

Roberto charges too much, so I get a little edgy when anyone talks about him.


I did one recovery for Roberto 2 years ago and he was really a nice person to deal with ...

viewtopic.php?t=33182

_________________
1Q9xrDTzTddUXeJAFRn37aqh1Yr6buDCdw - (Bitcoin Donations)
paypal.me/Spildit - (PayPal Donations)
The HDD Oracle - Platform for OPEN research on Data Recovery.


Top
 Profile  
 
 Post subject: Re: Recover files from HP Simplesave 1TB
PostPosted: June 26th, 2018, 20:13 
Offline

Joined: February 4th, 2017, 12:05
Posts: 22
Location: columbus ohio
A couple months ago, someone told me Roberto quoted 500€.


Top
 Profile  
 
 Post subject: Re: Recover files from HP Simplesave 1TB
PostPosted: June 26th, 2018, 20:17 
Offline

Joined: October 16th, 2013, 13:21
Posts: 717
Location: Brazil
Well, we don´t know the full situation, details of the case, how much the hdd was already botched from the user trying to fix, etc.


Top
 Profile  
 
 Post subject: Re: Recover files from HP Simplesave 1TB
PostPosted: June 26th, 2018, 20:28 
Offline

Joined: February 4th, 2017, 12:05
Posts: 22
Location: columbus ohio
rogfanther wrote:
Well, we don´t know the full situation, details of the case, how much the hdd was already botched from the user trying to fix, etc.
I went back and looked at the emails. It was 550€ to recover a forgotten password on a MyBook and (I assume) recover the key. This quote was to a professional who would do the decryption and data recovery with the key. To me, 550€ seems like a lot for a doing a brute-force attack on one password. I told him I'd do it for 100, but his client pulled out by then.


Top
 Profile  
 
 Post subject: Re: Recover files from HP Simplesave 1TB
PostPosted: June 26th, 2018, 21:01 
Offline
User avatar

Joined: December 19th, 2006, 8:49
Posts: 9510
Location: Portugal
I don't think that $550 is a huge value IF the user did lock the drive with a password encrypting the drive and than forgot about the password.

I can bet that people like @einstein9 will charge a lot more !

Of course i'm not talking about a drive that is encrypted by itself without the user setting up a password, i'm talking about a drive that does have a password set up by the user.

Also the data recovery professional would most likely charge $1000 or $1500 so .... :D :D :D

_________________
1Q9xrDTzTddUXeJAFRn37aqh1Yr6buDCdw - (Bitcoin Donations)
paypal.me/Spildit - (PayPal Donations)
The HDD Oracle - Platform for OPEN research on Data Recovery.


Top
 Profile  
 
 Post subject: Re: Recover files from HP Simplesave 1TB
PostPosted: June 27th, 2018, 1:29 
Offline

Joined: November 22nd, 2017, 21:47
Posts: 146
Location: France
Well, I may be the one who reported a 500€ quote for the decryption of a forgotten password encrypting a WD My Passport drive, as exposed in this post...
Mr. Kaeding (who was very quick to reply, concise yet clear and thorough in his explanations, taking great care to stress the important little details of the procedure which someone unexperienced may overlook and which can greatly affect the outcome) explained to me that he knew how to exploit some security weaknesses in the key generation for some of the encryption chips used in those drives' controlers, which bypasses the requirement for a brute-force decryption (but, again, it doesn't work with all chips). I could only provide remote assistance for the decryption / extraction, based on Mr. Kaeding's instructions, with the decryption key he would hopefully be able to recover, and since the potential client, who had a 200€ budget for the whole thing (I was fine with that and Mr. Kaeding as well), wasn't confident enough to perform the required USB to SATA conversion himself, he prefered to give up, saying that it had been three years since the drive was inaccessible and it could wait some more (at this rate, it could wait until the very end of the guy's own shelf-life !... I tried to tell him that he was unlikely to find a better opportunity later on, considering how rare that particular type of service is around here, to no avail).
I also told about Mr. Kaeding to someone who posted a request here for a similar situation and had been in contact with Roberto, then a few days later I asked that person how his situation had evolved, and he replied among other things that Roberto's quote was now 550€, so the above figure must come from that person. The guy chose to go through with it anyway, since Roberto could take care of the whole procedure, while Mr. Kaeding only proposed to deal with the software part, albeit for a significantly cheaper fee.
Hope that clarifies, without disclosing too many “industrial secrets” nor offending any involved party... :)


Top
 Profile  
 
 Post subject: Re: Recover files from HP Simplesave 1TB
PostPosted: June 27th, 2018, 1:58 
Offline

Joined: August 18th, 2010, 17:35
Posts: 3241
Location: Massachusetts, USA
kaeding wrote:
I don't know how you two are coming to those conclusions, unless you work for Roberto and want people to send him money.

Am I one of "the two"?

_________________
Hard Drive and RAID Data Recovery Specialist in Massachusetts


Top
 Profile  
 
 Post subject: Re: Recover files from HP Simplesave 1TB
PostPosted: June 27th, 2018, 8:11 
Offline

Joined: October 16th, 2013, 13:21
Posts: 717
Location: Brazil
abolibibelot wrote:
.... wasn't confident enough to perform the required USB to SATA conversion himself, he prefered to give up......

and
abolibibelot wrote:
... The guy chose to go through with it anyway, since Roberto could take care of the whole procedure, while Mr. Kaeding only proposed to deal with the software part, albeit for a significantly cheaper fee.


Doesn´t seem to me that both parties offer the same services then.


Top
 Profile  
 
 Post subject: Re: Recover files from HP Simplesave 1TB
PostPosted: June 27th, 2018, 13:07 
Offline
User avatar

Joined: December 19th, 2006, 8:49
Posts: 9510
Location: Portugal
I don't see any problem with this. It's a fact of life. Example would be many jobs that are done at a recovery firm like firmware fixing could be done by people like me for a fraction of the price and yet people do chose the "professional" way and no-one complains at the end.

If the "costumer" is even aware that Roberto price is way more expensive than kaeding price and even so the costumer decide to go with Roberto who are we to complain or decide for the costumer ?

Instead of "Roberto" you can for example try a professional data recovery firm with PC-3000 DE that will decrypt the data on-the-fly as well and pay $600 or more on the majority of places ... Those "sollutions" do exist and are out there. If you do want to pay more or less it's up to you ... And as mentioned some services offer more than others ....

_________________
1Q9xrDTzTddUXeJAFRn37aqh1Yr6buDCdw - (Bitcoin Donations)
paypal.me/Spildit - (PayPal Donations)
The HDD Oracle - Platform for OPEN research on Data Recovery.


Top
 Profile  
 
 Post subject: Re: Recover files from HP Simplesave 1TB
PostPosted: June 27th, 2018, 14:51 
Offline

Joined: November 22nd, 2017, 21:47
Posts: 146
Location: France
@rogfanther
Quote:
Doesn´t seem to me that both parties offer the same services then.

In this particular case, no. But without the hardware part (which seems “relatively” easy in comparison) the pricing would have been (I guess) similar, “in the same ballpark”.


@Spildit
Quote:
If the "costumer" is even aware that Roberto price is way more expensive than kaeding price and even so the costumer decide to go with Roberto who are we to complain or decide for the costumer ?

Indeed, in this case, noone can complain. It's just that it seems very difficult to get a clear and complete information about the possible options for such a very specific task — which is rare, but not to the point that only one person in the world can perform it, as someone wrote to me... That is a bit disingenuous, and I can understand Mr. Kaeding's “edginess”. :)


Quote:
Instead of "Roberto" you can for example try a professional data recovery firm with PC-3000 DE that will decrypt the data on-the-fly as well and pay $600 or more on the majority of places ...

I may be wrong, but I don't think that even the almighty PC-3000 DE can decrypt such a drive without the user-defined password. (Or maybe by performing a brute-force decryption by itself ?)


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 45 posts ]  Go to page Previous  1, 2, 3  Next

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: Google [Bot], hddguy and 29 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group