my software na express

[naexp]

Hi everyone .

My software na express has been published. You can visit my website: www.na94.com to get it, and the website still under building.

The software is alpha version now, and totally free.

if you find some bug or suggest ,please contact me. nadev@na94.com

Thank you.

[naexp]

sorry for my mistake . my email: dev@na94.com

[terminator2]

hi naexp
Congratulations for developing such powerful software all by yourself.
Thanks for releasing it freely as well. I will check its functionality extensively .
Wishing you all the Best.

[higgsboson]

If successful this venture will revolutionalize data recovery as it is challenging $10000 device. In the past many peoples and companies have tried but no one sustained herculean task of reverse engineering,
Wishing you every success. Presently program gives all errors only and it need impreovemnets from ground zero

[index]

On face value the software looks interesting.

However upon downloading the software and a quick review, there appears to be triggers for malware.

I would say requires further investigation.

[northwind]

Right, and how do you control the power of the drive without hardware?
This also looks like a ripoff from PC3k, Ace will be happy to know.

[Arch Stanton]

Right, and how do you control the power of the drive without hardware?
This also looks like a ripoff from PC3k, Ace will be happy to know.

http://www.na94.com/NaExpressDoc.php?id=3

[Arch Stanton]

How do I use NAND Flash tool? It never becomes active, is greyed out.

[fzabkar]

Right, and how do you control the power of the drive without hardware?
This also looks like a ripoff from PC3k, Ace will be happy to know.

Scared?

[fzabkar]

On face value the software looks interesting.

However upon downloading the software and a quick review, there appears to be triggers for malware.

I would say requires further investigation.

"No security vendors flagged this URL as malicious"

http://www.na94.com/download/naexp.zip

https://www.virustotal.com/gui/url/079907c586c9c8742473e327615470c865fb8a141a3f57dd5be6d19b577cc076/detection

[pepe]

Scared?

well, yeah. Power without knowledge = disaster.

pepe

[fzabkar]

Scared?

well, yeah. Power without knowledge = disaster.

pepe

A clueless person armed with PC3000's power has infinitely more opportunity for disaster.

[pepe]

there's a slight difference: more clueless people with this have a couple of times more opportunity for it.

and there are 2 kind of people who will suck this very hard: the owners of data and the ones who will do the disaster recovery. In the end, it will be the first one who take it all, coz the 2nd one will charge their price.
So where's the gain?

and it has a tiny bit to do with ethics as well: i doubt that the info used to build such tool was gained by own research, more likely by reversing other tools. The amount of stuff to be researched is just so immensely huge that somebody just not comes out with such thing with a year (or two) of hard working.

anyway, sooner or later it won't be free i guess.


pepe

[Arch Stanton]

The actual exe triggers some https://www.virustotal.com/gui/file/f97 ... /detection.

If I am not mistaken these are all 'AI' and heuristic scanners that cry wolf far too often and quickly - translation: they suck. Someone, I can look the example up again, once compiled an exe that only printed text "hello world" to screen and submitted it to VT, and to his surprise some scanners flagged it as malicious.

https://imgur.com/csInZ9V

Source code of the malicious program:

Code:

    #include <stdio.h>

    int main()
    {
        printf("Hello world!\n");
        return 0;
    }

[fzabkar]

and it has a tiny bit to do with ethics as well

If you want to go down the ethics rabbit hole, then one could argue that the whole business of firmware based data recovery is unethical. It is predicated on security breaches uncovered by hackers (white hat or otherwise). In the normal world, any security flaw would be immediately addressed by a firmware update, and there should be no exception for HDD firmware. In fact there should be even greater concern for such security breaches since they can be used by bad actors in a cyberwar.

IMO a free tool which exploits these flaws is the only way to compel the HDD manufacturers to make our data safe, even if it is at the expense of legitimate data recovery cases.

If a hacker, white hat or otherwise, fails to inform the manufacturer of a security flaw, and instead exploits it for his own financial gain, is he a reputable person? That's the real ethical question.

[Arch Stanton]

and it has a tiny bit to do with ethics as well

If a hacker, white hat or otherwise, fails to inform the manufacturer of a security flaw, and instead exploits it for his own financial gain, is he a reputable person? That's the real ethical question.

There is a difference of course between:

Due to my knowledge I can brick your drive, and unbrick after payment (sort of ransomware) and

Is your hard drive dead? Maybe I can fix it for you because of my knowledge, however I do require payment (because I invested time etc.)

I mean is it this black/white. For example, this guy: https://forum.hddguru.com/viewtopic.php?f=13&t=26971, I personally do not consider him a criminal while he could be considered a 'hacker'. And it IMO also shows that an individual can get quite far given enough time and perseverance, this in reply to other ethics comment. Since we do not know how long this software has been worked on etc. it is not fair to simply assume he reverse engineered PC3000.

[pepe]

IMO a free tool which exploits these flaws

a tool that can freely modify the fw does not address the security flaws of it. It has nothing to do with security in fact. You know that there is no perfect software, firmware, so each one can have and will have points where it can fail in some way, and this is not a security issue in most of the cases. It's just life. Nothing is perfect. Neither you, nor me.
What manufacturers do is their business, they do release updates that address certain kinds of known bugs. We do ours to help people with inaccessible data. Pure fw problems are not the main stream anyway, there are complex problems are most often. I mostly know what you think about the greedy DR people, but hey, just ask them how many have really fancy cars and spend their life on the bahamas with coctails. These are not us, although you clearly have that picture in mind. Yeah, i do rip of my clients one week a month and spend the other 3 weeks in luxury hotels and casinos, yeah, that's what most of us do.
A freely accessible tool that manipulates the fw, on the other hand, has nothing to do with enhancing security, coz it would be used by laymen to screw things up more than one could ever imagine. This is the most widely probable usage. Any hdd fw is nothing for a hacker of a good kind, i don't think it is a real objection for smart guys. They will hack whatever they want, without needing the help of anybody. Even your soap in your bathroom, so watch out

pepe

[fzabkar]

IMO a free tool which exploits these flaws

a tool that can freely modify the fw does not address the security flaws of it. It has nothing to do with security in fact. You know that there is no perfect software, firmware, so each one can have and will have points where it can fail in some way, and this is not a security issue in most of the cases. It's just life. Nothing is perfect. Neither you, nor me.
What manufacturers do is their business, they do release updates that address certain kinds of known bugs. We do ours to help people with inaccessible data. Pure fw problems are not the main stream anyway, there are complex problems are most often. I mostly know what you think about the greedy DR people, but hey, just ask them how many have really fancy cars and spend their life on the bahamas with coctails. These are not us, although you clearly have that picture in mind. Yeah, i do rip of my clients one week a month and spend the other 3 weeks in luxury hotels and casinos, yeah, that's what most of us do.
A freely accessible tool that manipulates the fw, on the other hand, has nothing to do with enhancing security, coz it would be used by laymen to screw things up more than one could ever imagine. This is the most widely probable usage. Any hdd fw is nothing for a hacker of a good kind, i don't think it is a real objection for smart guys. They will hack whatever they want, without needing the help of anybody. Even your soap in your bathroom, so watch out :)

pepe

The fact that there are tools of any kind that can access the hard drive's firmware is a serious security issue. If you depend on this security issue for your livelihood, then your objectivity is questionable.

[pepe]

So if there was no tool and i built my own (there exists one after that), it is a security issue and my whole personality is questionable if i do DR using that. bravo.
What about AV software makers? They rely on security issues as well, i'm afraid...
What do you have for car mechanics, carpenters, electronic technicians who live from repairing other people's stuff? Cars should not break if they were built perfect, same is true for a bunch of useless rip-off profession.
I think you may have lost the connection to real life, being a pensioner you have nothing to worry about, nothing better to do than building weird philosophies...

Looks like i am arguing with the one in possessing THE knowledge , please forgive me for being so sinful not understanding the profound thoughts of gods. I am trying to learn. But i 'm afraid i will never become so perfect. maybe i give up...
now.

pepe

[Lardman]

Hypothetically, as this is all above my pay grade.

The Customer owns the drive - so the customer can do whatever they want with the drive. It's not our place or the drive manufacturers place to try and enforce anything on stuff we don't own.