Words from fallingstuff

Back a while back I posted up a brief run down on an Asus Chromebook that happened to be in a stack of “broken” laptops I purchased. When I received it, the Chromebook had a cracked screen and was locked by the previous owner. As I was still new to the idea of a Chromebook (and did not want to try and hack into the thing) I went looking for some kind of option to wipe out the already existing stuff without needing a user password; sort of like the reset function in Windows. To my relief (and surprise) this reset existed as a function called “Powerwash” … a fancy name for a Factory Reset.

For this post I am not going to dive into the how-to of the process; the Chromebook I have is fairly old, the OS is no longer supported, and how-to is not the purpose of what I am testing here. As a reference or if someone those curious, the documentation is located here. The real reason for writing this was really just to see how much if a wash actually removed all the personal data off the machine.

The original plan was originally concocted back just after I finished up the course on using Autopsy forensics software back in around 2019 (see what I meant about backlog piling up …). Autopsy does not have a way .. natively .. to gather info from Chromebook – the machine runs completely off soldered on storage, so off to find another way to grab the info. A quick search later and I stumbled onto Magnet Forensics, it was free and looked simple enough to do what I was needing.

Basically, following the instructions would put the machine into a “recovery state” then this tool, housed on a USB drive, would come in and grab up all the data and drop it onto a part of USB that could be read from another computer. Simple enough. I browsed a few sites, downloaded a few files, and edited a few things on the Chromebook then followed the steps in the documentation. The trickiest part was getting the Chromebook into recovery mode, done by a key combination that has to be pressed at just the right time. After running the tool the first time, I ran the powerwash recovery on the Chromebook and then ran the recovery tool again, using a second USB drive.

Once I copied off the recovered data, it was pretty obvious that data was cleaned in the process seeing as the file with data (pre-clean) was 411MB and after clean was 7KB. Seeing this difference I thought I would just expand these compressed files and compare the results .. no need to go much father than a folder comparison.

So, nothing more to say .. Powerwash cleaned up the user data .. at least enough that the casual buyer would not be able to get data off the machine if someone were to sell it later.

I am at my local thrift store not long ago and was walking down in the electronics section when I notice this silver box sitting on the shelf. Now I recognize the shape of this box, looks a lot like the size and dimensions of an external hard drive. Now, I am the curious type and could not pass up the opportunity to see what might have been left behind, also for about $5.00 including the power supply – I can think of worse ways to spend a curious weekend.

Getting the drive home I break out the USB write blocker and Kali laptop – way nerdy, yes… but just in case there might be something ugly living on the drive… I get everything connected, hit the switch on the box and the lights come on, good sign, but I do not see the drive showing up on the laptop. Ok, so maybe the write blocker is causing an issue and keeping the drive from showing up. I remove the blocker and connect the silver box directly and .. nope. I can see the enclosure if I run an lsusb command (to list USB devices), but anywhere else.

So then (while not a good idea) I decide I will take the chance and plug the box into a windows computer. Again, nothing – I can hear the USB being detected but the drive will not connect. Checking disk management I see the drive!

When I try to initialize it … Fail.

Grabbing a screwdriver I pop the enclosure open and pull the hard drive out. Connecting it up with a hard drive dock and the Kali machine and … the drive is there … Twice or, 2 partitions. One partition is blank, the other has someone’s downloaded audio books – complete with the torrent files from the download.

The mystery of the silver box is solved! A portable hard drive that someone was using for downloading audio books. The trouble with reading the drive in the enclosure turned out to be components failing in the enclosure (probably why it ended up at a thrift store) but a working SATA hard drive – I am not not much of a fan of the audio book titles, so the drive got a good cleaning before a final destination in the parts bin.

Back in 2011 Google announced this interesting compute device, a Chromebook, basically a laptop that ran Chrome and Chrome alone. Out of the gate, I thought this was the most pointless idea I had heard of and, at the time, I thought I was justified in that thought. I mean, this was a device with a low power Atom processor who’s purpose was to go on web pages … Com’on, that is what I have a browser on my computer for.

Fast forward a few years and something interesting happened, Android apps on Chrome OS. Now, I am still not drinking the Kool-Aid here, but that device that was could just look at web pages can now use mobile apps, now that might be useful. Turns out a laptop that is just a browser can actually be useful.

I had one of these little Asus C300M appear in a batch of “broken” machines that I purchased to repair and sell. At the time I did not even consider taking pictures of the damage – the battery was removed and the screen cracked. Of course … the previous owner left their account on it *ugh*.

While I am not going to be ditching my laptop anytime soon, this is an opportunity that I could not pass up and see if I was right way back when these hit the market. The machine was simple to fix, as everything is on a single main board, with memory and storage soldered to the board as expected. A couple of (pricey) replacement parts and quick reset to factory settings later and I have a Chromebook (Pre-Android).

Being essentially a laptop Chrome browser, the first place to start the test drive is definitely web pages. The desktop itself has a task bar at the bottom with the rest of the apps opening up in a menu more Android style. The cool part that I appreciated is that Chrome extensions are supported, meaning that if you have something like an ad blocker or password manager, they are likely to be available on the Chrome book (even one as old as this).

Ok, so the web thing works, that is a good start but what about email? There is a Gmail icon, how does that work? Not quite the way I had hoped, but not terribly bad either.

So the machine does web, not completely useless and the user experience is more or less seamless. Click on and icon and it does something and simply, just opens. This left me with really only a question of files – what of downloads, PDF’s, Google drive, pictures!

This is far from a comprehensive review of a Chromebook, this particular type (the Pre-Android version) is getting older and is not receiving updates anymore. Getting a chance to actually try out this device changed my mind about it being completely pointless… I mean it is still a browser based laptop and I do not plan of giving up my laptop any time soon, but as a device for just casual web surfing or having reference materials on while working on some project – without the fear of damaging an expensive machine should something happen to it – not a bad idea.