• RSS
  • Twitter
  • FaceBook

Security Forums

Log in

FAQ | Usergroups | Profile | Register | RSS | Posting Guidelines | Recent Posts

[FAQ] IBM ThinkPad Unlock Supervisor Password

Users browsing this topic:0 Security Fans, 0 Stealth Security Fans
Registered Security Fans: None
Goto page Previous  1, 2, 3, 4, 5, 6, 7  Next
Post new topic   This topic is locked: you cannot edit posts or make replies.   Printer-friendly version    Networking/Security Forums Index -> Hardware // Upgrades

View previous topic :: View next topic  
Author Message
allservice
Trusted SF Member
Trusted SF Member


Joined: 24 Oct 2004
Posts: 5
Location: @your.service

Offline

PostPosted: Tue Jan 17, 2006 1:39 pm    Post subject: Reply with quote

Are you kidding, right? You cannot unlock ThinkPad drives with this program.

What do this MHD3 you mentioned? Well, it sends a Security Erase ATA command to the drive and the password to erase the drive. It was built to try a single password (probably that matches the master pwd used by UTV and is built in with the program). If the password won't match (of course this will happen, you need to know a password), the operation is aborted. It is clear for you now?

I think you are just blowing hot air here, no offense.
Back to top
View user's profile Send private message Visit poster's website
naseerak
Just Arrived
Just Arrived


Joined: 04 Jan 2006
Posts: 0


Offline

PostPosted: Thu Jan 26, 2006 6:31 pm    Post subject: t23 Reply with quote

Hi
allservice how can I locat the position of the security chip on my t23 motherboard as I searched desperately for it but could,nt find it please help me.
Back to top
View user's profile Send private message
allservice
Trusted SF Member
Trusted SF Member


Joined: 24 Oct 2004
Posts: 5
Location: @your.service

Offline

PostPosted: Thu Jan 26, 2006 6:53 pm    Post subject: Reply with quote

You have to remove the RAM cover (turn the machine upside-down). The chip is there, near the second memory socket. 24RF08 14 pin.
Back to top
View user's profile Send private message Visit poster's website
naseerak
Just Arrived
Just Arrived


Joined: 04 Jan 2006
Posts: 0


Offline

PostPosted: Fri Feb 03, 2006 8:08 pm    Post subject: Crc Reply with quote

Hi
My questions are as follows:
1. Is it safe to read the eprom without the danger of disturbing CRC with your interface.
2. what if The CRC arises can i fix it using some hex editors
3. some mechanic has desoldered the chip from my friend,s laptop T23
now i have found this chip from my local computor dealers garbage so can U provide me with a good dump of T23
I will be extremly greatfull to You.
Back to top
View user's profile Send private message
allservice
Trusted SF Member
Trusted SF Member


Joined: 24 Oct 2004
Posts: 5
Location: @your.service

Offline

PostPosted: Sat Feb 04, 2006 11:13 am    Post subject: Reply with quote

The answers:
1. Yes.
2. No.
3. Yes, but you need W24RF08.

For other questions you might have please use PM.
Thanks.
Back to top
View user's profile Send private message Visit poster's website
potshot87
Just Arrived
Just Arrived


Joined: 14 Feb 2006
Posts: 0


Offline

PostPosted: Thu Feb 16, 2006 7:50 am    Post subject: TP A31, EEPROM Location Reply with quote

Anybody knows exactly where the eeprom is located on an A31? Which part do I need to open up on the laptop?
Back to top
View user's profile Send private message
allservice
Trusted SF Member
Trusted SF Member


Joined: 24 Oct 2004
Posts: 5
Location: @your.service

Offline

PostPosted: Thu Feb 16, 2006 10:33 pm    Post subject: Reply with quote

A31 has the eeprom close to the IDE HDD connector, on the other side. You have to dismantle the TP.
Back to top
View user's profile Send private message Visit poster's website
hobcal12
Just Arrived
Just Arrived


Joined: 09 Feb 2006
Posts: 0


Offline

PostPosted: Mon Feb 20, 2006 9:21 am    Post subject: Reply with quote

I know it may sound crazy and unbelievable, but I got the idea from the following:

http://www.geek.com/news/geeknews/q22000/gee2000918002375.htm
in that page, search under: CRC1 errors Thinkpad T20 (12:46pm EST Thu Jun 02 2005)
message was posted by: “Happy Now”
the message is near the bottom of the thread.

So I did that, shorted the crc chip. Please don’t ask me which pin I shorted, because I don’t remember. I did it randomly. I did that for two days without any luck and yesterday afternoon while watching tv, I do it again for fun, after 5-10 times shorting the crc pin randomly, all the sudden, no crc error and I got my windows screen.

At one point, when I shorted the pin, I got spark. Also, sometimes I got error 0195 “security hardware tamper detected”.

I am not suggesting any of you to do this. I think I am very very very lucky. I am willing to do this because I have a new laptop as off last week. My T23 has served me well for 5 years until that 0175 crc1 error. So at that time I figure I am going to disassemble my T23 and sell it parts by parts at ebay.

Btw, it’s easy to short crc chip on the T23, because the chip is at the back, under the memory. So while shorting those pins, I can press the power button and look at the screen at the same time.

So now my laptop is working, but the HD giving me clicking sound more often, I am not sure if that’s because of what I did or not.

!!!If you decided to short the crc pin, do it at your own risk!!!
Back to top
View user's profile Send private message
allservice
Trusted SF Member
Trusted SF Member


Joined: 24 Oct 2004
Posts: 5
Location: @your.service

Offline

PostPosted: Mon Feb 20, 2006 10:13 am    Post subject: Reply with quote

There are no "CRC" pins. CRC stands for Cyclic Redundancy Check which allows the BIOS to check the integrity of the eeprom data.
0175 Bad CRC1 occurs when the data is corrupt.
This error cannot be corrected by shortcutting "CRC pins", but by reprogramming the eeprom. Or maybe you are such a lucky guy...too lucky Smile
Back to top
View user's profile Send private message Visit poster's website
hobcal12
Just Arrived
Just Arrived


Joined: 09 Feb 2006
Posts: 0


Offline

PostPosted: Tue Feb 21, 2006 5:19 am    Post subject: Reply with quote

ups, sorry... i was reffering to the ATMEL chip... my T23 has 14 pins.
btw, is it possible that when i shorted the pins, i accidentally reset the atmel chip?
I couldn't agree more.. i was very very very lucky... :D :D
Back to top
View user's profile Send private message
allservice
Trusted SF Member
Trusted SF Member


Joined: 24 Oct 2004
Posts: 5
Location: @your.service

Offline

PostPosted: Tue Feb 21, 2006 8:30 am    Post subject: Reply with quote

No matter if is 14 pins or 8 pins, there are no "CRC pins". And no, you cannot "reset" the eeprom.
Back to top
View user's profile Send private message Visit poster's website
nightflyr
Just Arrived
Just Arrived


Joined: 22 Feb 2006
Posts: 0


Offline

PostPosted: Wed Feb 22, 2006 10:14 am    Post subject: IBM Thinkpad 380Z Reply with quote

First, Thank you for having this Forum. Im sure it wouldnt be fun for you but more people should know about this work. Also please let me know of anyway that I can help in this effort.

IBM Thinkpad 380Z
I am in need of the BIOS Supervisory Password for this unit.

I have a TP 380z 2635-HGU. I have located an ATMEL 842 24C01A chip 8 pins at location U37.

Is this the right chip for this TP? or should I get out my magnifing glass and look harder?

Can I use this software, for this TP, to get the Password?

Taking note of the locations of the Chip, Can I dump this chip without powering up the TP and without de-soldering it?

Thank you in advance. It is nice to see people helping others. Please let me know if I can do anything to help out. No matter the outcome of my TP I will be reading everyday to see If I can help someone else.
Back to top
View user's profile Send private message Send e-mail Yahoo Messenger
allservice
Trusted SF Member
Trusted SF Member


Joined: 24 Oct 2004
Posts: 5
Location: @your.service

Offline

PostPosted: Wed Feb 22, 2006 3:16 pm    Post subject: Reply with quote

380Z has 24c01 indeed. It's located right close to the memory socket.

This eeprom can be read with the same interfaces but not with R24RF08, this is only for 24RF08. I suggest you driven-i2cprog (schematic available with R24RF08 kit)
24C01 is a clasic 128 byte IIC eeprom that can be read with many free software like PonyProg from www.lancos.com

The procedure is the same like for 24RF08, you have to solder only 3 wires on SDA, SCL and GND. to read in system (w/o unsolder it). The laptop must be powered, of course.

See more details here

Good luck
Back to top
View user's profile Send private message Visit poster's website
hdtintin
Just Arrived
Just Arrived


Joined: 06 Apr 2006
Posts: 0


Offline

PostPosted: Thu Apr 06, 2006 2:31 am    Post subject: Thinkpad T43 Reply with quote

Bought my laptop from ebay and there's a supervisor password on it. The guy I bought it from doesn't even know about it. He said he's looking into it for me. The thing is, I can by-pass everything and actually logged into windows. I just can't use the hardwares available to the fullest. Do you know of anyway to break or reset the password?

Thanks
Back to top
View user's profile Send private message MSN Messenger
allservice
Trusted SF Member
Trusted SF Member


Joined: 24 Oct 2004
Posts: 5
Location: @your.service

Offline

PostPosted: Fri Apr 07, 2006 3:55 pm    Post subject: Reply with quote

Though question. And it's very hard to answear because there's no info about your laptop, what is it, how is it looks like Rolling Eyes
You got me.

Oh, it is a T43. Sorry, but I think you should claim your money back, the guy is a crook for sure. T43 uses PC 8394, the super IO chip to store the SVP and no way to be unlocked so easy.

Edit: T43 and R52 unlocking procedure included in IBMpass Pro already that will be available soon.


Last edited by allservice on Sun Jun 11, 2006 6:39 pm; edited 1 time in total
Back to top
View user's profile Send private message Visit poster's website
locdupr50
Just Arrived
Just Arrived


Joined: 19 Apr 2006
Posts: 0


Offline

PostPosted: Wed Apr 19, 2006 2:06 am    Post subject: R50 Reply with quote

Does anyone know if this process will work on an R50 ? I know that the R50 has the embedded security chip on it but I don't know where to look for the eeprom.
Back to top
View user's profile Send private message
Display posts from previous:   

Post new topic   This topic is locked: you cannot edit posts or make replies.   Printer-friendly version    Networking/Security Forums Index -> Hardware // Upgrades All times are GMT + 2 Hours
Goto page Previous  1, 2, 3, 4, 5, 6, 7  Next
Page 4 of 7


 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum

Looking for more Windows Networking info?

Sign up to the WindowsNetworking.com Monthly Newsletter, written by Enterprise Security MVP Deb Shinder, containing news, the hottest tips, Networking links of the month and much more. Subscribe today and don't miss a thing!
View a sample newsletter.

Become a WindowsNetworking.com member!

Discuss your Windows Networking issues with thousands of other Windows Newtorking experts. Click here to join!

Community Area

Log in | Register

Readers' Choice

Which is your preferred data recovery solution?

Follow TechGenix on Twitter