User forgot password WD10JMVW-11S5XS0

[zeroalpha]

I converted this drive to SATA and it operates healthy. I have cleared modules 123,124,125,126,127 but can't get past this:

[Maxim_TS]

Unfortunately if the customer forgot his JMS538S password, there is no solution for now.

[DataMedics]

That's encryption doing what it's supposed to do. Keeping out anyone who doesn't know the password.

You sure it's really even their drive? You'd be surprised how often cases like this turn out to be a stolen drive, usually taken from an ex-wife, ex-husband, ex-girlfriend, etc.

[Doomer]

JMicron password can be hacked, as was described in this document - https://eprint.iacr.org/2015/1002.pdf
I started doing R&D on it and even re-created full RNG LFSR sequence from Appendix A but dropped this because of lack of financial motivation.

Somebody with a lot of free time and decent knowledge of the subject can do it.

[einstein9]

Source of the post I converted this drive to SATA and it operates healthy. I have cleared modules 123,124,125,126,127 but can't get past this:

Zeroalpha, we can handle such a case here (even without the hdd password)
(more details can be found here http://unixgtc.com/wp/wd-smartware-pass ... l-service/ )

Source of the post Unfortunately if the customer forgot his JMS538S password, there is no solution for now.

One day when i visit your Acelab in Prague will Demonstrate this to you and your team Max.

[zeroalpha]

Thanks for your response. I will pass your details onto the owner.

[einstein9]

Source of the post Thanks for your response. I will pass your details onto the owner.

You welcome

[Maxim_TS]

Source of the post One day when i visit your Acelab in Prague will Demonstrate this to you and your team Max.

Dear Anwer, it would be great if we could see the solution someday In website the solution offer for WD SmartWare is presented. Will it solve JMS538S and INIC1607E lost password as well?

[Amarbir[CDR-Labs]]

Source of the post

Source of the post One day when i visit your Acelab in Prague will Demonstrate this to you and your team Max.

Dear Anwer, it would be great if we could see the solution someday In website the solution offer for WD SmartWare is presented. Will it solve JMS538S and INIC1607E lost password as well?

Maxim,
I am also waiting for anwers answer ,Sometimes i do get stuff like this its rare though

[einstein9]

Source of the post

Source of the post One day when i visit your Acelab in Prague will Demonstrate this to you and your team Max.

Dear Anwer, it would be great if we could see the solution someday In website the solution offer for WD SmartWare is presented. Will it solve JMS538S and INIC1607E lost password as well?

Hi Maxtim, sorry for the late replying here, Yes it does work for both, i don`t need the password to access the user data

[AJ2008]

My understanding is the password acts as a key encryption key that on correct authentication will decrypt the media encryption key - either the way WD implements it has been compromised, or it is a brute force attack?

[AJ2008]

I have many doubts about many things

[Doomer]

Source of the post or it is a brute force attack?

it's a smart brute force, if done correctly the key should be brute-forced in about half an hour(for JMicron), at least that's the idea.
Initio theoretically could be hacked the same way (I didn't try it but I have a vague idea on how it can be done) but per my understanding
1. the R&D is a lot harder comparing to JMicron
2. brute-force should take significantly longer because of the way RNG LFSR works on Initio

[AJ2008]

I guess the main issue with this is that each revision of this encryption engine becomes obsolete relatively quickly which makes you wonder if all the research time and effort is worth it in the long run.

Also, forgotten passwords is not a common issue in data recovery. I see the value in it for forensics and law enforcement, but I can count the number of cases of forgotten smart-ware passwords I ever saw on one hand

It is still good info to know though

[einstein9]

Source of the post

Source of the post or it is a brute force attack?

it's a smart brute force, if done correctly the key should be brute-forced in about half an hour(for JMicron), at least that's the idea.
Initio theoretically could be hacked the same way (I didn't try it but I have a vague idea on how it can be done) but per my understanding
1. the R&D is a lot harder comparing to JMicron
2. brute-force should take significantly longer because of the way RNG LFSR works on Initio

Source of the post I guess the main issue with this is that each revision of this encryption engine becomes obsolete relatively quickly which makes you wonder if all the research time and effort is worth it in the long run.

Also, forgotten passwords is not a common issue in data recovery. I see the value in it for forensics and law enforcement, but I can count the number of cases of forgotten smart-ware passwords I ever saw on one hand

It is still good info to know though

Doomer & AJ2008

Quick Question for both, do you know a way to Downgrade the FW ?
WD released a Tool for that to Upgrade (am not sure if still there or not)

You will love the idea