Go Back   Wireless and Wifi Forums > News > Newsgroups > alt.computer.security
Register FAQ Forum Rules Members List Calendar Search Today's Posts Advertise Mark Forums Read

 
Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 06-22-2012, 11:47 AM
The Dubious Khelair
Guest
 
Posts: n/a
Default Tiger OS FileVault Encryption Issue

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

First off I'd like to thank anybody that might be reading this for your
help in trying to get this problem solved. To jump right into things,
I've recently been able to pull the harddrive out of an old MacBook
which was, I believe, running OS/X Tiger at the time of its demise that
I had been using awhile back. I don't currently have easy access to any
macs, unfortunately (budget constraints), but after a whole lot of
searching I finally found some utilities that could help me with getting
my sparseimage encrypted FileVault home directory off of that harddrive
and onto my primary desktop Linux system. Once again, after a whole
bunch of searching, I was FINALLY able to find a utility that would do
decryption and extraction of files of it for me. This being the utility
HFSExplorer 0.21. However, once I pointed it at the correct image file,
I've tried all of the usual suspects for my password, and none of them
are working. This is strange because at the very least the
backup/master system password for that machine was a password that I
_KNOW_ I tried to enter and should have given me access to that disk
image.

Anyway, here is what I'm attempting right now. I've located the file
/mnt/private/var/db/dslocal/nodes/Default/users/myOldUsername.plist
which contains a whole bunch of XML formatted data about the account.
I've run across various resources on the web that are telling me that my
encrypted hash for the account/FileVault password is in there somewhere,
but I'm unable to locate it by first cursory eyeball passes. I'm
thinking that my options are kind of limited at this point to trying to
brute-force the password, which is a pain because I use extremely long
and secure passphrases, but what else can I do? Unless there is some
sort of a known bug in HFSExplorer that is causing my correct password
not to work.

So I guess what I'm wondering at this point is A) if anybody can help me
try to find the encrypted hash in that .plist file so that I can begin
trying a brute force attack on my encrypted image, B) if there might be
any sort of easier way to do this, and C) if there are any other
utilities that might be working a little bit better for me to try to
decrypt this information, being as I'm almost certain that one of the
passwords that I'm trying should be unlocking this AES encryption.

Also if this is not the appropriate newsgroup and anybody can point me
to a more applicable one I would be more than happy to move this there.
Thanks for your time, again. Any tips or pointers in the right
direction are deeply appreciated.

- -Damon Getsman
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (OpenBSD)

iQIcBAEBAgAGBQJP5FiYAAoJECqJ6HQbyBt4wtAQAKvNb0ri+9 ehTFT9RZvQC7xa
MUBRzOYlTBcsGK4iZLY16R5fK+Je4VofNwg8DQtPfkMgpc4tr1 F+G3iliwhe0I1R
hFfe1byoLDmdk7v00pMFaz8b79FIWR36Ecdtj/PNmCKWedTsDQ1LzrwVHJTHEfNK
LQ6rNHlE9PnPM8CQXRxuwKJrPueGRCbP9nIk/9c893yXYqiSMGw1/aaLR5FXAx1s
LzUxrhLnn6Ce8rmCv52L7iGbgUBLPwyPBTG/h9dgQqO/3+iC19W9JjNXTVNRKUQn
IfHguf1PEmw+dauuAgAuPC3myg2abZvkin8ZyhGfYL5Nih37aK Tlt6ngPc1qsvS0
8F0gft1NnDRRwDbrq9OmKb4ZS4XDzwTN4oduUzaaTs8CUKJMR4 g0yHYLbqViHFEi
y0cky2+uF5xSt01AN+wXK5QIs29HUKbg2XoPw9XCRNvtgxDCLI PEajD+meg1o3uK
DKAARgLBWlvRQZ541I7piRDle4zSDuqqOZ9aKUiYwVzfoWbR+G ptuWaXks++g0v7
CVeLp9eiDEcdFjEb0cZlLA3Iq8GbxMdG7FJF9VWGBt7accWKRl 2+qasNHwJM1oSx
pCs76K4+BdPBwaXe8ICnsg5Wzof7YhEZ4JQ+fF5EwO0E9TdPR4 pZ4ETl/4+RVHz1
wg0U7ckIlIA3a+qtMl56
=IF8A
-----END PGP SIGNATURE-----

Reply With Quote
  #2 (permalink)  
Old 06-22-2012, 11:49 AM
The Dubious Khelair
Guest
 
Posts: n/a
Default Re: Tiger OS FileVault Encryption Issue

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Crap I'm sorry I forgot to mention if email is easier for a response
please feel free to mail me privately regarding this issue at
damo.gets@gmail.com.

Thanks again.

- -Damon Getsman
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (OpenBSD)

iQIcBAEBAgAGBQJP5FklAAoJECqJ6HQbyBt48pMQAJMMPi37vf k4P/CHzsHYcX2d
+O45pib9nMLlIidWxeNdmuem/1fPEBvU8/qrY4+uO0QMqGzQjjxzNya7izCHg4pT
zd+jgii2/zwuk1DLpypoAuF8B/sWiZfoApn3vaqMwAzaGcsmc//DGhRpc0bQJqcB
intv12DfeSMCN1jn5/zbS+ocoqK2jgUuB+xQPPv616R83xrko3ThLmwsrvf/bdGH
iqz+kp+E7jO1sq4+krVzpbLUFyzqzrz7N9RJcPlaDTaWdp33d1 J2DGPZYpYlY1kE
fMxatb/Fzz7asl6pu3qQXZwzTDbYcijeTC96gA+c+Xuhc+MuBKv3pN7wl 4AXQhJb
GDz7u8mFG8pxS6bR3midNipFB+M9izc/s87pGGTe+P1+G6GYxh6tVat9EICome2G
5+XPLFuAv6SaZ44xMOimD/vYlRcj51OKXiMwrEebZ6wT/5pf2cFwesiztMBabu0j
EpX2SGQ5bmY1rV/4UBueUTMsHJQBg42CHUV3hg8zFDor1n2Kd1JW83gzDMmTM/Hb
AfM+CZ8wmZ2KgbbNOhCthGX66iZmVkxG/US9EMOUqkh5O+jA8TwEMrUiwxCGfGOB
2ijmoR00qxdt67jS8MHnaZ1+ns1YIZXStp6sIAUo2GhbrmFtzT JIuJnVHXi5lLv1
SGewpcwfNNGXIiEr9QuX
=kOBM
-----END PGP SIGNATURE-----

Reply With Quote
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


Similar Threads
Thread Thread Starter Forum Replies Last Post
Conenction issue - Multiple devices on wireless network ageetkumar Network Troubleshooting 2 11-12-2011 01:12 PM
Encryption Key Storage MickyM comp.security.misc 3 09-01-2005 01:34 PM
VOIP over Wi-Fi subject to eavesdropping? Steve alt.internet.wireless 46 08-09-2005 10:03 PM
VOIP over Wi-Fi subject to eavesdropping? Steve comp.security.misc 46 08-09-2005 10:03 PM
[SSL-Talk List FAQ] Secure Sockets Layer Discussion List FAQ v1.1.1 Shannon Appel comp.security.misc 0 07-31-2005 04:25 AM


All times are GMT. The time now is 09:03 AM.



Powered by vBulletin® Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.6.0 PL2

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45