this may be an old post but I cant find any newer one.
so far anyone managed to plug in an USB hub, boot from a CD/DVD and successfully imaged one without removing the SSD?
thanks.
Been doing a little reading tonight and it appears that Mac is now swapping out the screws on the Airs with proprietary “Pentalobular” screws that are similar but a bit larger bits than those used on their phones
Apple’s Diabolical Plan to Screw Your iPhone (and other Apple devices) - http//
And there is a rumor that
"Apple is now installing these screws in the devices they produce, and if a user takes their product in for a repair, Apple 'Genius Bar' tech workers will replace the user’s existing screws with Pentalobe security screws."
http//
The last thing I want to do is roll into an Apple store and ask my "bro" "Dusty" at the Genius bar if I can bogart his screw driver for five (while pantomiming an outstretched hand, indicating five minutes). His lanyard might fall off. Luckily, Ifxit now sells a Pentalobe screw driver - stock up (when they get it back in stock) MacBook Air 5-Point Pentalobe Screwdriver - http//
Those are fairly standard screwdrivers and can be ordered for a couple of bucks from a variety of vendors.
Putting pentalobes in the newer stuff is, at least, somewhat understandable but what would give them the right to change screws in an existing product owned by one of their users? This is a despicable act. If I took my Macbook in for repair and it came back with pentalobe screws I wouldn't sign the repair form and have to restrain myself from throwing the computer at them.
Those are fairly standard screwdrivers and can be ordered for a couple of bucks from a variety of vendors.
Can you provide a link? I spent some time (not a lot in fairness) looking at sites and areas where I would get Torx or other security bits and have not found the bits size or pattern of the pentagram, I mean pentalobe, that Apple is using.
Hi all,
Your right Douglas, I'm also finding it hard to source this screw driver. Ifixit are apparently indefinitely sold out.
Would be handy if someone could post a link. I'm still searching myself as we speak.
Nathan
Normally I'd go for the powered USB-hub with an external dvd-drive and a target harddrive connected. It works almost everytime with boot-CD's like Helix, Paladin and Caine.
Now I've got another Macbook Air on my desk. The USB-port is broken, the ability to boot from a remote drive doesn't work, it will NOT let me do a network acquisition with EnCase FIM and it will NOT let me do a dd over the network. It's gonna be a long day…
I've recently imaged a couple of the new Macbook Airs with the thunderbolt port. Current Helix/Paladin/Raptor distros don't seem to boot properly, and the HDD USB enclosure you can get from OWC is out of stock (
I ended up booting to the Recovery HDD and using the terminal to dd an image out to a USB HFS+ formatted HDD. It's dirty and live, but I got my image.
Since then nbCaine has been recommended, and I can confirm it does boot and see the hard drive.
Joel
Blackbag has macquisition that apparently has been tested across all the latest apple computer.
its a bit pricy though
I have used NBCaine successfully on acquiring both macbook air and pro with solid state drives.
Download it free and then dd the image to a suitably sized USB drive and let 'er rip
Many other tools including Raptor, FTK, Paladin and Helix among them, failed to capture an image completely.
NBCaine ->
/neo
nota bene I realise I am posting the same information twice but NBCaine, to whom I am not affiliated but have used Caine since v0.5, is really a great FREE product. It works very well on solid state drives so can capture those annoying netbooks and macbooks that have no CD tray and limited USB ports.
My tip would be to use a powered USB hub if there is a only a single USB port on the device but it has captured everything that RAPTOR v2.5 hasn't for me so far )
/neo edit