Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > comp.os.linux.misc > #36714
| Subject | Re: Gparted MSDOS Sector Zero with WIn 7 v XP |
|---|---|
| Newsgroups | comp.os.linux.misc |
| References | <tq1km9$ian$1@reader2.panix.com> <lsicnb01vPUQd1n-nZ2dnZfqnPWdnZ2d@earthlink.com> <N86dnZUx4oFUcFn-nZ2dnZfqnPidnZ2d@earthlink.com> <tq2uhf$2ll9v$2@dont-email.me> |
| From | "26C.Z968" <26C.Z968@noaada.net> |
| Date | 2023-01-16 19:28 -0500 |
| Message-ID | <2pqdnTqsWtkIdlj-nZ2dnZfqn_qdnZ2d@earthlink.com> (permalink) |
On 1/16/23 2:31 AM, Marco Moock wrote: > Am 16.01.2023 um 01:25:12 Uhr schrieb 26C.Z968: > >> Modern disks have TWO EXTRA SECTORS beyond the theoretical >> last sectors. One contains disk info - brand name/type/ >> real-size and such. The other is harder to decode, often >> seems to just have gobbledegoop. 'dd' may or may NOT pick >> up on those. > > Where is all that specified? > Or is it just arbitrariness of the manufacturers? Hang on ... I *have* looked at those sectors before, which is why I remember what was in them. There IS a linux utility, hdparm, that'll let you peek - but it's been a few years. These are not partitions, they seem to be a few data sectors not part of any partitioning scheme. They are KNOWN as the "HPA" (Host Protected Area) and "DCO" (Drive Configuration Overlay) sectors and, theoretically, the spooky people could maybe fit a little spy program in them. If "sudo hdparm --dco-identify /dev/sda" returns anything then you have the DCO sector. The DCO can be removed and, theoretically, restored. To see if you HAVE an HPA "sudo hdparm -N /dev/sda" can be used - but NOTE THAT COMMAND COMES WITH WARNINGS. It's a case of where just looking can do bad things. One SSD I checked has DCO, dunno about any and all. Peruse : https://niiconsulting.com/checkmate/2006/09/hiding-data-with-hpahost-protected-area-in-linux/ And some 'forensic' (usually commercial) suites can unhide and read the HPA.
Back to comp.os.linux.misc | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Gparted MSDOS Sector Zero with WIn 7 v XP vjp2.at@at.BioStrategist.dot.dot.com - 2023-01-15 19:37 +0000
Re: Gparted MSDOS Sector Zero with WIn 7 v XP "26C.Z968" <26C.Z968@noaada.net> - 2023-01-16 01:11 -0500
Re: Gparted MSDOS Sector Zero with WIn 7 v XP "26C.Z968" <26C.Z968@noaada.net> - 2023-01-16 01:25 -0500
Re: Gparted MSDOS Sector Zero with WIn 7 v XP Marco Moock <mo01@posteo.de> - 2023-01-16 08:31 +0100
Re: Gparted MSDOS Sector Zero with WIn 7 v XP "26C.Z968" <26C.Z968@noaada.net> - 2023-01-16 19:28 -0500
Re: Gparted MSDOS Sector Zero with WIn 7 v XP "26C.Z968" <26C.Z968@noaada.net> - 2023-01-16 19:44 -0500
Re: Gparted MSDOS Sector Zero with WIn 7 v XP vjp2.at@at.BioStrategist.dot.dot.com - 2023-01-17 13:58 +0000
Re: Gparted MSDOS Sector Zero with WIn 7 v XP vjp2.at@at.BioStrategist.dot.dot.com - 2023-01-17 17:09 +0000
Re: Gparted MSDOS Sector Zero with WIn 7 v XP "Carlos E.R." <robin_listas@es.invalid> - 2023-01-17 20:37 +0100
Re: Gparted MSDOS Sector Zero with WIn 7 v XP "26C.Z968" <26C.Z968@noaada.net> - 2023-01-18 00:04 -0500
Re: Gparted MSDOS Sector Zero with WIn 7 v XP "Carlos E.R." <robin_listas@es.invalid> - 2023-01-18 10:47 +0100
Re: Gparted MSDOS Sector Zero with WIn 7 v XP vjp2.at@at.BioStrategist.dot.dot.com - 2023-01-17 17:10 +0000
Re: Gparted MSDOS Sector Zero with WIn 7 v XP vjp2.at@at.BioStrategist.dot.dot.com - 2023-01-17 17:17 +0000
Re: Gparted MSDOS Sector Zero with WIn 7 v XP "26C.Z968" <26C.Z968@noaada.net> - 2023-01-18 00:15 -0500
csiph-web