Print

[ldotsfan]

QUOTE(Bomb Bloke @ Jun 27 2008, 11:08 AM)

Ldotsfan, is that tool bright enough to take advantage of quotes around the passcode? So you'd have a command like this for a Seagate:

CODE

hdparm --security-unlock "SEAGATE                         " /dev/hdb

If not, perhaps the tools bundled with XBoxHDM can CHANGE the master passcode. You boot ATAPWD for eg, switch the master code to something the Windows tool will work with (taking care to leave the user code well alone of course), and then reboot.

The tool can't handle spaces even with quotes. The code goes like this:

CODE

#define GET_ASCII_PASSWORD(flag, pwd) tmpstr = pwd; \
                memset(&pwd,0,sizeof(pwd)); \
                if (!*p && argc && isgraph(**argv)) \
                    p = *argv++, --argc; \
                while ((tmpstr - pwd) < 32) { \
                    if (!isgraph(*p)) { \
                        if (*p > 0) { \
                            flag = 0; \
                            printf("Abort: Password contains non-printable characters!"); \
                        } else flag = 1; \
                        break; \
                    } else {\
                        sscanf(p,"%c",(unsigned char *) &tmpstr[0]); \
                        p = p+1; \
                        ++tmpstr; \
                    } \
                }

The isgraph function filters out whitespace even if argv received from the OS shell has already quoted the spaces.

[ldotsfan]

QUOTE(run088 @ Jun 27 2008, 10:13 AM)

Why not build a master password for the hdd into the softmod installer.This way if the mobo ever died and the hdd is locked and you dont have an eeprom backup all would still be good.
Would it be possible to do this?

If you unlock the hdd with configmagic first and lock it back with the same tool before you reboot, configmagic would have reconfigured the master password to TEAMASSEMBLY - in theory.

[run088]

QUOTE(ldotsfan @ Jun 27 2008, 08:32 AM)

If you unlock the hdd with configmagic first and lock it back with the same tool before you reboot, configmagic would have reconfigured the master password to TEAMASSEMBLY - in theory.

So could this function be taken from config and put in to the softmod installer so it automaticlly runs a lock test when it runs the installer so any hdd configered with the softmod installer would be set with a master password?

[ldotsfan]

QUOTE(run088 @ Jun 29 2008, 04:39 AM)

So could this function be taken from config and put in to the softmod installer so it automaticlly runs a lock test when it runs the installer so any hdd configered with the softmod installer would be set with a master password?

In this case, there may not be any installer that runs on the xbox. The 'installer' runs on the PC to copy the softmod files directly onto the temporarily unlocked hdd and when the xbox boots up, it is already modded.

But I suppose you can script EvoX dash for the first bootup to do an hdd unlock and hdd lock in one single action. I'm not familiar enough at this stage to try it myself. I saw some similiar examples in Krayzie's Ndure if I'm not mistaken of something that ran only once when the softmod is first installed.

[Bomb Bloke]

Yeah, I reckon you could do that with EvoX (it also uses "TEAMASSEMBLY" as the master) - It'd be pointless for the purposes of actually installing a mod, but for ensuring easy recovery later on it could be invaluable.

The EEPROM would *need* to be backed up to the console's HDD before doing the lock cycle though. A chance power spike at the wrong moment and the user would be looking at an error 05. With the drive unlocked, they'd at least be able to get the HDD key info so as to be able to re-lock using their PC.

[ldotsfan]

QUOTE(ldotsfan @ Jun 29 2008, 10:22 AM)

In this case, there may not be any installer that runs on the xbox. The 'installer' runs on the PC to copy the softmod files directly onto the temporarily unlocked hdd and when the xbox boots up, it is already modded.

I'm testing "Magic Boot Disk 2.0" from MHDD website. It supports UNLOCK command, TOF ( Save sectors TO a File), FF (read From File) all in one tool and comes in a small bootable ISO.

Based on this:http://www.xbox-linux.org/wiki/Hard_Disk_Backup_HOWTO
The start LBA sector and end LBA sector should be 4609024 and 5633024 for C drive. And the partition image file is readable by xplorer360 for the softmod files to be inserted (You just need to mod C drive for the rescue dash in ndure to boot). But I don't know why the write back doesn't work yet. I'm testing with qemu and a 8Gb disk images created by xboxhdm.

Let's see if I can figure it out.

[kingroach]

is it possible to hardcode the unlock passwords in hdparm so that we can type something like unlock segate to unlock the seagate drives.

[ldotsfan]

QUOTE(kingroach @ Jul 7 2008, 02:55 AM)

is it possible to hardcode the unlock passwords in hdparm so that we can type something like unlock segate to unlock the seagate drives.

It's possible and not really difficult but we are still waiting for confirmation for people with locked stock drives on the master passwords.

[daleswanson]

Well I just tried and it didn't work for me with a stock Seagate.  It was from an unmodded v1.0 Xbox, HDD Model ST310211A Firmware 6.55.  I used XboxHDM 1.9 and got:
'Error, invalid password - must be less than 32 bytes (64 chars) and should be an even number of chars'

I used the command:
unlockhd -p Seagate                        
I tried Seagate, SEAGATE, and seagate, all with and without 25 spaces, and with and without quotes.  I tried the ones with spaces twice to make sure I didn't get the count wrong.

I've already softmodded it now, but I'll probably have another one in a week or so, and I'd be happy to try again if someone wants me to try something different.

[Bomb Bloke]

Could you try it with ATAPWD next?

[daleswanson]

I hadn't actually softmodded it yet (I was about to), so I decided to try ATAPWD first, it didn't work again.  I got Ultimate Boot CD 4.1.1, which has ATA Password Tool V1.1 on it.  I did Unlock With Master Password, and Unlock With User Password, again I tried different forms of capitilzation, and with and without spaces.  Every time I got 'ERROR: command rejected by drive'.  I think it's worth noting that the security level was m - maximum.

[ldotsfan]

QUOTE(daleswanson @ Jul 10 2008, 06:01 PM)

 I think it's worth noting that the security level was m - maximum.

This explains why this method wasn't 'discovered' earlier in the lifespan of the modding history of the xbox. Maximum implies only user password can be used to unlock the drive. Thanks for answering the question and settling this once and for all.

[obcd]

I just did the test myself on a WD harddisk from a 1.0 xbox.
Atapwd also reports to me that the security level is set to maximum. (m)

So, if the Master password is only usefull for harddisks that are locked by xboxhdm or configmagic, we might as well keep using the User password calculated from the Eeprom.

regards.

[Bomb Bloke]

That does mean that maximum security drives can't be accessed using this method, yes. But we do know some stock drives aren't locked that way.

[kingroach]

there is a windows port of hdparm here:

http://hdparm-win32.dyndns.org/hdparm/

if the master password really works then maybe we can unlock the drive from windows and then run xplorer 360 without resetting. However the version listed here is old and does not support latest hdparm 8 versions ATA security unlock.