I've read in some Blackberry forensics document a while ago that the SHA-1 hash of the password of a BB device is stored somewhere on the device.
1- Does someone know if that is still the case?
2- Does someone know if there is a way to retrieve this hash from the device?
Thanks.
I can't say yes or no but I have heard this too, no idea where I heard it!
I think I am correct in saying the Blackberry is known for its security. I would think even if you do find it you will need to authenticate yourself to get at it in a readable state by software means.
An interesting question however, it is a shame nobody seems to have more insight.
Please let me know what you find out!
Also very interested, please let me know if anyone hears anything else about this! Thanx
As far as I know most BB devices are locked down the point where you cannot get anything out if it is password protected. RIM wont help you with this either.
If the device has a media card you can try taking that out and imaging that but I dont think you will get call registers etc.
..and if the material on the media card is encrypted, you're also not going to have much luck…
BB prides itself on security - and does a brilliant job of it. Once you've used up the allotted amount of pw tries, it'll start wiping, after that, it'll start scrubbing - after that.. there is no previous data left.
Since my initial post, I've found out that the only thing that can be done right now with password protected Blackberrys is "chip-off" forensic.
I don't know the details, but if you remove some chips from the BB PCB and use specialized hardware and software, you can recover the data.
However, you need very specialized training and about 200K$ worth of equipment.
Does anyone know of a business with the training and equipment to accomplish this that offers a data recovery service?
Does anyone know of a business with the training and equipment to accomplish this that offers a data recovery service?
You can contact FTS (http//
Many Thanks!
Also, since you are in the US, you might want to know that they have an office in the US. I don't know where exactly, but you might find this info on their website.