Mystery Drives adventure ( #100DaysToOffload Day 16)

So once again i have missed a few day(like 4) . Partly because wow time flies and i suck at keeping a routine and also because someday i just have nothing to write. I try but some days by the time i have the time it's bed time...

Anyways onto today post. In a previous post i found 2 HDD's when cleaning my desk. Today lets see what's on them.

So first i went with the biggest

SamsungDrive

Once i plugged it in it seemed to have a hard time spinning up but once it did i ran dmesg

[12492.016974] usb 1-5: new high-speed USB device number 5 using xhci_hcd
[12492.165816] usb 1-5: New USB device found, idVendor=04fc, idProduct=0c25, bcdDevice= 1.03
[12492.165818] usb 1-5: New USB device strings: Mfr=2, Product=3, SerialNumber=1
[12492.165819] usb 1-5: Product: USB to Serial-ATA bridge
[12492.165820] usb 1-5: Manufacturer: Sunplus Technology Inc.
[12492.165821] usb 1-5: SerialNumber: SAMSUNG HMS25YJ9EZC24659      
[12492.183863] usb-storage 1-5:1.0: USB Mass Storage device detected
[12492.184046] scsi host16: usb-storage 1-5:1.0
[12493.218807] scsi 16:0:0:0: Direct-Access     SAMSUNG  HM641JI               PQ: 0 ANSI: 2
[12493.218931] sd 16:0:0:0: Attached scsi generic sg12 type 0
[12493.219551] sd 16:0:0:0: [sdj] 1250263728 512-byte logical blocks: (640 GB/596 GiB)
[12493.223065] sd 16:0:0:0: [sdj] Write Protect is off
[12493.223068] sd 16:0:0:0: [sdj] Mode Sense: 38 00 00 00
[12493.226057] sd 16:0:0:0: [sdj] No Caching mode page found
[12493.226060] sd 16:0:0:0: [sdj] Assuming drive cache: write through
[12493.271298]  sdj: sdj1 sdj2 sdj3
[12493.287066] sd 16:0:0:0: [sdj] Attached SCSI disk
[12495.078929] sd 16:0:0:0: [sdj] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=1s
[12495.078932] sd 16:0:0:0: [sdj] tag#0 Sense Key : Medium Error [current] 
[12495.078933] sd 16:0:0:0: [sdj] tag#0 Add. Sense: Unrecovered read error
[12495.078935] sd 16:0:0:0: [sdj] tag#0 CDB: Read(10) 28 00 4a 85 82 a0 00 00 08 00
[12495.078937] blk_update_request: critical medium error, dev sdj, sector 1250263712 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[12497.208218] sd 16:0:0:0: [sdj] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=2s
[12497.208221] sd 16:0:0:0: [sdj] tag#0 Sense Key : Medium Error [current] 
[12497.208222] sd 16:0:0:0: [sdj] tag#0 Add. Sense: Unrecovered read error
[12497.208225] sd 16:0:0:0: [sdj] tag#0 CDB: Read(10) 28 00 4a 85 82 a0 00 00 08 00
[12497.208227] blk_update_request: critical medium error, dev sdj, sector 1250263712 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[12497.208230] Buffer I/O error on dev sdj, logical block 156282964, async page read
[12498.162779] BTRFS: device label root devid 1 transid 264523 /dev/sdj3 scanned by udevd (10554)

Oh that does not look good. But it can see a BTRFS filesystem on it so that's a good thing. Not what i was expecting. I assumed it would have an NTFS partition. so what's on this...

➤ sudo mount /dev/sdj3 /mnt/usbtmp
marcg@thebeach:~
➤ ls /mnt/usbtmp/
.   bin   dev  home  lib64  opt   root  sbin  sys  usr
..  boot  etc  lib   mnt    proc  run   srv   tmp  var

Ok it has a linux system on it...mine?

marcg@thebeach:~
➤ ls /mnt/usbtmp/home
.  ..  marcg

Yep mine for sure

marcg@thebeach:~
➤ ls -la /mnt/usbtmp/home/marcg/
total 488
drwx------ 1 marcg users    566 Jun 30  2016  .
drwxr-xr-x 1 root  root      10 Dec 27  2015  ..
-rw------- 1 marcg users    359 Apr 15  2016  .bash_history
-rw-r--r-- 1 marcg users     21 Nov 23  2015  .bash_logout
-rw-r--r-- 1 marcg users     57 Nov 23  2015  .bash_profile
-rw-r--r-- 1 marcg users    274 Dec 27  2015  .bashrc
drwx------ 1 marcg users    266 Mar 26  2016  .cache
drwx------ 1 marcg users    330 Jun 20  2016  .config
drwxr-xr-x 1 marcg users  27412 Jul  1  2016  Desktop
-rw-r--r-- 1 marcg users     23 Dec 27  2015  .dmrc
drwxr-xr-x 1 marcg users     56 Jun 26  2016  Documents
drwxr-xr-x 1 marcg users  11810 Jun 27  2016  Downloads
-rw------- 1 marcg users     16 Dec 27  2015  .esd_auth
-rw-r--r-- 1 marcg users  18674 Feb 24  2016 'Essay- Coates.odt'
-rw-r--r-- 1 marcg users  19517 Feb 25  2016 'Essay- Thompson.odt'
drwx------ 1 marcg users      8 Dec 27  2015  .gnome
drwxr-xr-x 1 marcg users     50 Jan 18  2016  .hplip
-rw------- 1 marcg users  16030 Jun 30  2016  .ICEauthority
drwxr-xr-x 1 marcg users     16 Dec 27  2015  .linuxmint
drwxr-xr-x 1 marcg users     10 Dec 27  2015  .local
drwx------ 1 marcg users     34 Dec 27  2015  .mozilla
drwxr-xr-x 1 marcg users      0 Dec 27  2015  Music
drwxrwxr-x 1 marcg users    176 Dec 27  2015  packer-color
drwxr-xr-x 1 marcg users     32 Mar  8  2016  Pictures
drwx------ 1 marcg users     10 Dec 27  2015  .pki
drwxr-xr-x 1 marcg users      0 Dec 27  2015  Public
drwx------ 1 marcg users     54 Dec 27  2015  .ssh
drwxr-xr-x 1 marcg users      0 Dec 27  2015  Templates
drwxr-xr-x 1 marcg users      0 Dec 27  2015  Videos
-rw------- 1 marcg users     54 Jun 30  2016  .Xauthority
-rw------- 1 marcg users  25576 Jul  1  2016  .xsession-errors
-rw------- 1 marcg users 383067 Jun 30  2016  .xsession-errors.old

From 2015-2016 wow i'll have to try and dump what i can from it. I suspect that the above errors will prevent a full dump/exploration but i'll see what i can get.

Alright what's on that other drive.

HitachiDrive

mount: /mnt/usbtmp2: wrong fs type, bad option, bad superblock on /dev/sdk1, missing codepage or helper program, or other error.

Well that's not good. Oh but right i did not install/enable anything NTFS/FAT related. So after installing ntfs-3g and rebuilding my kernel with ntfs support i tried again

marcg@thebeach:~
➤ sudo mount /dev/sdj1 /mnt/usbtmp/
NTFS signature is missing.
Failed to mount '/dev/sdj1': Invalid argument
The device '/dev/sdj1' doesn't seem to have a valid NTFS.
Maybe the wrong device is used? Or the whole disk instead of a
partition (e.g. /dev/sda, not /dev/sda1)? Or the other way around?

Well not good. Gparted still reports it as unknown type. So i suspect one of two things. Either it's corrupted or it's encrypted using VeraCrypt(Or TrueCrypt) but i'm pretty sure i've seen Gparted detect those before... So for now it's content(whatever shape it's in) will remain a mystery. I may try some more to figure out what's on this bu for now...

That is all for today.

Until next time Stay Safe!!

@mgrondin@youdabomb.social