Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Forensics
Converting an external hard drive enclosure into a write blocker? Nov 14 2007 02:59AM
Tom Yarrish (tom yarrish com) (3 replies)
RE: Converting an external hard drive enclosure into a write blocker? Nov 19 2007 07:06PM
Kian Stipp (kstipp gowhitehat com) (1 replies)
Re: Converting an external hard drive enclosure into a write blocker? Nov 20 2007 04:11PM
Terry Roebuck (terry roebuck usask ca) (1 replies)
Re: Converting an external hard drive enclosure into a write blocker? Nov 25 2007 01:23AM
Matthew Pepe (mtpepe mac com) (1 replies)
The easiest thing to do is to use a bridge whose firmware can be
modified to take a different action upon the issuance of a write (or
write-related) command. Operating systems will react differently
depending upon whether the device returns an error code, success code,
or remains quiet. The bottom line is that you need to intercept
packetized commands - write enable is not based off of a pin pulled
high or low. For more information, check out the ATA/ATAPI5 documents
from the T13 working group.

- Matt

On Nov 20, 2007, at 11:11 AM, Terry Roebuck wrote:

> A*nix mount with DD would be my option of choice, but for windows, I
> hesitatingly ask could you not modify an IDE cable to make any
> connected drive 'read-only' (might require a resistor - not sure if
> you can just clip a wire? - maybe some one with better EE skills
> could answer that?)

0? *?H?÷
 ?0?1 0 +0? *?H?÷
 ?0?Ö0?? )?¹¦-\T5Âñü.¿0
 *?H?÷
0b1 0 UZA1%0#U
Thawte Consulting (Pty) Ltd.1,0*U#Thawte Personal Freemail Issuing CA0
071101223327Z
081031223327Z0@10UThawte Freemail Member10 *?H?÷
 mtpepe (at) mac (dot) com0 [email concealed]?"0
 *?H?÷
?0?
??é?hw¯óaÐW?ݾ?ïPª³aÏ?W??Yëß'B ongÀÁå?|½W ?MõØK?UH6+ÌÔ??c ?¹àÎPBÅÈ® ºh0 ]z6Ö?_uÁ4ÓÐ?@Ï·BRf7d>'Æ?[_£\zr³´H?»eã¤hkåU²Ù×#| æÄ]ÕãòÜ|¨ECÀÀl>¢Ü0èRpn%?<Ø? PáHD?£ì¦α_ÛËÈ¢ö°pÞM¶NÏ/ö¹¹>Ùçv
ÄMU»Ì?!:0 ??!}ÃsJÖÏ?5¦áAvÓÕ-&Ü?Å6ËÔÈl¥?q?öÔo£+0)0U0mtpepe (at) mac (dot) com [email concealed]
0 Uÿ00
 *?H?÷
U `>ù?~?Lêêg@Ôh? ɏÚe¶*ã'5ç¹ôÆ
w)=ÀmìõàRÔ>¯TS??6?yÓ÷ Øö ?èy[¾k{?0^?±?ËCCgë+?ÞÅ¡Üë?Ã_?Z½¨M??ñÞZ?A0Âza#FEÀb?¾ý²U¸?$,?Á0??
0?¨ 
0
 *?H?÷
0Ñ1 0 UZA10U Western Cape10U Cape Town10U
Thawte Consulting1(0&U Certification Services Division1$0"UThawte Personal Freemail CA1+0) *?H?÷
 personal-freemail (at) thawte (dot) com0 [email concealed]
030717000000Z
130716235959Z0b1 0 UZA1%0#U
Thawte Consulting (Pty) Ltd.1,0*U#Thawte Personal Freemail Issuing CA0?0
 *?H?÷
0?Ä¦<UsUûN¹Ê?ZhÀupßéÿ£ì½Íõ[òv½ :aò¿QÎÔåP
0×cZ,?p?ÝÉð+?Zª?qV˯< çñ?6$*Ï+Õó?w=¾+þ»>¿@?d×§¦»?eÑÅ*T?H§¶Ñ<
a@dr`·û£?0?0Uÿ0ÿ0CU<0:08 6 4?2http://crl.tha
wte.com/ThawtePersonalFreemailCA.crl0 U0)U"0 ¤010UPrivateLabel2-1380
 *?H?÷
H?ÑP?ê .Ì
£f¬g¯¬¾Â¡C??L!¸ø6ª-?6/ÀôP ?p<ý­áabÃÙ:~?±?Å ?t?%P?bÇÛ'qW%Ý©?9?? Oe_?Ú÷÷?ÖÆN®öê4å[5MwãV!x?Ü!5Þ$±ÓFÿ]_eO1?0? 0v0b1 0 UZA1%0#U
Thawte Consulting (Pty) Ltd.1,0*U#Thawte Personal Freemail Issuing CA)?¹¦-\T5Âñü.¿0 + ?o0 *?H?÷
 1  *?H?÷
0 *?H?÷
 1
071125012360Z0# *?H?÷
 1̤YSÊ'=.¾á?äO?¾¨K0? +?71x0v0b1 0 UZA1%0#U
Thawte Consulting (Pty) Ltd.1,0*U#Thawte Personal Freemail Issuing CA)?¹¦-\T5Âñü.¿0? *?H?÷
  1x v0b1 0 UZA1%0#U
Thawte Consulting (Pty) Ltd.1,0*U#Thawte Personal Freemail Issuing CA)?¹¦-\T5Âñü.¿0
 *?H?÷
???ȝrìoõÉÐQU©#??äû?ÐÎÝB®Ùú¡?U?õ§JlpÇÇEþR××á Ç?²vJMØÕÉ&ùÊQÕ*ÉÌŸ¶!ltÎÜKÞáaz¥
ÀÞ<µÞ)Y?µúoÉØ??7u ?üÐD[7Vu?K,27ÃíOÌÛ©?ÎúKp'èB?3@¿?ïn%ÊÍ?äf?A®-Î
\WÊÔÈf. ÄIZ"·?ªÄ3T?\·ªèDMQ¨2I#@"6ö¾W£·tU?o ý¶úf=?v?Yõ'?Ü+Á^?H½Ñ9I
M á÷EMëNzbãGw¡?Ñè?êºÂ4&w¶

[ reply ]
RE: Converting an external hard drive enclosure into a write blocker? Nov 26 2007 09:13PM
Robinson, Sonja (Sonja Robinson fticonsulting com)
Re: Converting an external hard drive enclosure into a write blocker? Nov 17 2007 07:58AM
Pavel Gladyshev (pavel gladyshev info)
Re: Converting an external hard drive enclosure into a write blocker? Nov 17 2007 03:14AM
Max Gribov (max neuropunks org) (1 replies)







 

Privacy Statement
Copyright 2009, SecurityFocus