Ethical Hacking Training at InfoSec Institute

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Computer Forensics Computer-Forensics
[Top] [All Lists]

Re: 5.25 Inch Disk Data Recovery

Subject: Re: 5.25 Inch Disk Data Recovery
Date: Thu, 26 Aug 2004 09:39:52 -0700 (PDT)
Probably the best thing to do is find someone who has
an apple II and a copy of "Nibbles Away" or some
similar tool which can read the raw data.

Apple's 13- and 16-sector formats were based upon some
creative engineering. For example, while many drives
used an optical sensor to read the hole(s) marking
sector 0 (or each sector, on a "hard sector" disk),
apple did it in software, by spinning up the spindle
motor and waiting for a stable waveform to appear in
the read electronics.

Apple used a single-sided, 13- or 16-sector format
with 40 data tracks. The (Shugart?) drives were
capable of 80 tracks, at least in the stepper
electronics, but the  first-generation heads could not
reliably write 80 tracks. (some interesting copy
protection and data-hiding techniques involved moving
the head servo through software)

There was a company that made a plug-in card for the
original IBM PC, allowing it to emulate an Apple II+.
I installed one of them for someone and (IIRC, this is
going back like 20 years) it had a piggyback
controller which allowed the PC to run apple software
and read apple disks. All I remember is cussing a lot
about the nightmarish tangle of ribbon cables.

I don't think the PC Bios would provide the right
hooks to read the data without modified controller
hardware, so best bet, find an apple II in someone's
attic. :-) Bonus points if there's a DOS 3.3 manual
around with the RWTS reference in it.




--- sety martin <wearing_a_greyhat@yahoo.com> wrote:

Hi all,

I would appreciate any help in trying to resolve a
problem I am having.

I am trying to recover data from some 5.25 inch
disks.
 They came off an older Apple system. (Apple 2?).

I have tried using dd, Ghost, Encase, FTK, Winhex
and
Norton Utilites to view/image these diskettes
without
any success.

It is not clear to me if there is still valid data
on
these disks.  My experience has shown me that data
on
a 5.25 inch can get corrupted over time.  Does
anyone
know if the tools above could successfully read
these
disks?  I am using a 1.2 Mb drive.  If these tools
can't do the job, does anyone know of a definitive
way
to get at this data using an x86 or Sun system?

Thanks all,

Sety


              
_______________________________
Do you Yahoo!?
Win 1 of 4,000 free domain names from Yahoo! Enter
now.
http://promotions.yahoo.com/goldrush


-----------------------------------------------------------------
This list is provided by the SecurityFocus ARIS
analyzer service.
For more information on this free incident handling,
management 
and tracking system please see:
http://aris.securityfocus.com




-----------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

<Prev in Thread] Current Thread [Next in Thread>