adb – Accidentally wiped /system, recovery not working

I accidentally wiped /system on my Archos 101e Neon (MT8163) through fastboot. Now it can’t boot and can’t go to recovery or fastboot mode. I tried vol -, vol + and both. It’s just stuck on the first boot splash with the “Orange State: Your device has been unlocked” message. It also seems to not be detected by the PC (I’m running Linux). Any way to recover this brick?

Can my phone be securely wiped after an encryption?

I would really like to make my phone more secure. But at the same time I want to be able to wipe it any time. I’m afraid that wiping could brick the phone/makes it unusable. So is it safe to wipe the phone directly after encrypting it?

network – My Home/user directory was wiped off from the server, can secure log help finding out how was it done or at least if it is a hack?

I have a server running on AWS and a cPanel from cpanel.net;
the server is apache and the OS is centos 7
today and suddenly all my 10 websites were not responding and showing 521 error.
After a few minutes of investigation, I came to find out that on my file manager there were no folders/files at all under home/user, all 10 sites, their databases, emails, etc all were gone.
I had a snapshot with amazon so was able to retrieve a backup from the server but kept the old one for investigating.
on the secure log, I can see lots of attempts to connect but I’m not too good at understanding what is going on and how was someone able to connect and delete.
I will paste the log below so someone can help me, please.

Amazon team said that it might be a hacker or could be the Cpanel support team by mistake, but the second option doesn’t sound right as professional people wouldn’t make such a silly mistake, and also they have confirmed to me that they haven’t done it.

I had a dispute with someone who built the server and claimed to be a hacker and knows my domains and the cPanel IP address; though so not sure if that is the case.

please read this and give any hints to what was going on.
note; all logs before these ones were not there.
And I notice also, commands are executed very frequently, like up to 30 commands per one second.

here is it:

    (ec2-user@ip-172-31-13-2 log)$ sudo cat secure
    Feb 12 15:19:15 server polkitd(583): Loading rules from directory /etc/polkit-1/rules.d
    Feb 12 15:19:15 server polkitd(583): Loading rules from directory /usr/share/polkit-1/rules.d
    Feb 12 15:19:15 server polkitd(583): Finished loading, compiling and executing 2 rules
    Feb 12 15:19:15 server polkitd(583): Acquired the name org.freedesktop.PolicyKit1 on the system bus
    Feb 12 15:19:20 server sshd(1257): Server listening on 0.0.0.0 port 22.
    Feb 12 15:19:20 server sshd(1257): Server listening on :: port 22.
    Feb 12 15:21:22 server sshd(1998): Invalid user hduser from 111.229.235.119 port 51986
    Feb 12 15:21:22 server sshd(1998): input_userauth_request: invalid user hduser (preauth)
    Feb 12 15:21:22 server sshd(1998): Received disconnect from 111.229.235.119 port 51986:11: Bye Bye (preauth)
    Feb 12 15:21:22 server sshd(1998): Disconnected from 111.229.235.119 port 51986 (preauth)
    Feb 12 15:27:12 server polkitd(580): Loading rules from directory /etc/polkit-1/rules.d
    Feb 12 15:27:12 server polkitd(580): Loading rules from directory /usr/share/polkit-1/rules.d
    Feb 12 15:27:12 server polkitd(580): Finished loading, compiling and executing 2 rules
    Feb 12 15:27:12 server polkitd(580): Acquired the name org.freedesktop.PolicyKit1 on the system bus
    Feb 12 15:27:19 server sshd(1297): Server listening on 0.0.0.0 port 22.
    Feb 12 15:27:19 server sshd(1297): Server listening on :: port 22.
    Feb 12 15:27:29 server sshd(1833): Did not receive identification string from 87.251.64.186 port 45362
    Feb 12 15:27:30 server sshd(1835): Connection closed by 87.251.64.186 port 50330 (preauth)
    Feb 12 15:27:30 server sshd(1834): Invalid user 0101 from 87.251.64.186 port 50108
    Feb 12 15:27:30 server sshd(1834): input_userauth_request: invalid user 0101 (preauth)
    Feb 12 15:27:30 server sshd(1834): Connection closed by 87.251.64.186 port 50108 (preauth)
    Feb 12 15:29:27 server sshd(1987): Invalid user aaron from 103.37.151.84 port 49382
    Feb 12 15:29:27 server sshd(1987): input_userauth_request: invalid user aaron (preauth)
    Feb 12 15:29:27 server sshd(1987): Received disconnect from 103.37.151.84 port 49382:11: Bye Bye (preauth)
    Feb 12 15:29:27 server sshd(1987): Disconnected from 103.37.151.84 port 49382 (preauth)
    Feb 12 15:34:32 server sshd(2234): Invalid user agustina from 103.45.184.234 port 53762
    Feb 12 15:34:32 server sshd(2234): input_userauth_request: invalid user agustina (preauth)
    Feb 12 15:34:33 server sshd(2234): Received disconnect from 103.45.184.234 port 53762:11: Bye Bye (preauth)
    Feb 12 15:34:33 server sshd(2234): Disconnected from 103.45.184.234 port 53762 (preauth)
    Feb 12 15:38:50 server sshd(2578): Connection closed by 222.119.218.120 port 13597 (preauth)
    Feb 12 15:39:31 server sshd(2617): Accepted publickey for root from 222.119.218.120 port 55062 ssh2: RSA SHA256:cnhuplyGAzI1x1W2DudZZq7CN6qi1oMqTdtdi5VqnRc
    Feb 12 15:39:31 server sshd(2617): pam_unix(sshd:session): session opened for user root by (uid=0)
    Feb 12 15:39:31 server sshd(2617): pam_lastlog(sshd:session): unable to open /var/log/lastlog: No such file or directory
    Feb 12 15:39:33 server sshd(2627): lastlog_openseek: Couldn't stat /var/log/lastlog: No such file or directory
    Feb 12 15:39:33 server sshd(2627): lastlog_openseek: Couldn't stat /var/log/lastlog: No such file or directory
    Feb 12 15:41:59 server sshd(2822): Received disconnect from 123.58.213.220 port 44408:11: Bye Bye (preauth)
    Feb 12 15:41:59 server sshd(2822): Disconnected from 123.58.213.220 port 44408 (preauth)
    Feb 12 15:42:49 server sshd(2865): Did not receive identification string from 81.161.63.103 port 44104
    Feb 12 15:42:58 server sshd(2869): Connection reset by 81.161.63.103 port 43178 (preauth)
    Feb 12 15:43:01 server sshd(2867): Connection reset by 81.161.63.103 port 43168 (preauth)
    Feb 12 15:43:01 server sshd(2868): Connection reset by 81.161.63.103 port 43152 (preauth)
    Feb 12 15:43:02 server sshd(2874): Connection reset by 81.161.63.103 port 43194 (preauth)
    Feb 12 15:43:02 server sshd(2877): Accepted publickey for root from 222.119.218.120 port 16725 ssh2: RSA SHA256:cnhuplyGAzI1x1W2DudZZq7CN6qi1oMqTdtdi5VqnRc
    Feb 12 15:43:03 server sshd(2877): pam_unix(sshd:session): session opened for user root by (uid=0)
    Feb 12 15:43:03 server sshd(2877): pam_lastlog(sshd:session): unable to open /var/log/lastlog: No such file or directory
    Feb 12 15:43:04 server sshd(2924): lastlog_openseek: Couldn't stat /var/log/lastlog: No such file or directory
    Feb 12 15:43:04 server sshd(2924): lastlog_openseek: Couldn't stat /var/log/lastlog: No such file or directory
    Feb 12 15:43:32 server sshd(3150): Invalid user liangyzh from 190.104.149.194 port 55456
    Feb 12 15:43:32 server sshd(3150): input_userauth_request: invalid user liangyzh (preauth)
    Feb 12 15:43:32 server sshd(3150): Received disconnect from 190.104.149.194 port 55456:11: Bye Bye (preauth)
    Feb 12 15:43:32 server sshd(3150): Disconnected from 190.104.149.194 port 55456 (preauth)
    Feb 12 15:46:00 server polkitd(583): Loading rules from directory /etc/polkit-1/rules.d
    Feb 12 15:46:00 server polkitd(583): Loading rules from directory /usr/share/polkit-1/rules.d
    Feb 12 15:46:00 server polkitd(583): Finished loading, compiling and executing 2 rules
    Feb 12 15:46:00 server polkitd(583): Acquired the name org.freedesktop.PolicyKit1 on the system bus
    Feb 12 15:46:10 server sshd(1313): Server listening on 0.0.0.0 port 22.
    Feb 12 15:46:10 server sshd(1313): Server listening on :: port 22.
    Feb 12 15:46:31 server sshd(1840): Accepted publickey for root from 222.119.218.120 port 26665 ssh2: RSA SHA256:cnhuplyGAzI1x1W2DudZZq7CN6qi1oMqTdtdi5VqnRc
    Feb 12 15:46:32 server sshd(1840): pam_unix(sshd:session): session opened for user root by (uid=0)
    Feb 12 15:46:32 server sshd(1840): pam_lastlog(sshd:session): unable to open /var/log/lastlog: No such file or directory
    Feb 12 15:46:33 server sshd(1858): lastlog_openseek: Couldn't stat /var/log/lastlog: No such file or directory
    Feb 12 15:46:33 server sshd(1858): lastlog_openseek: Couldn't stat /var/log/lastlog: No such file or directory
    Feb 12 15:49:59 server sshd(2022): Connection closed by 90.199.242.27 port 62452 (preauth)
    Feb 12 15:50:11 server sshd(2043): Connection closed by 90.199.242.27 port 62453 (preauth)
    Feb 12 15:50:31 server sshd(1840): Received disconnect from 222.119.218.120 port 26665:11: disconnected by user
    Feb 12 15:50:31 server sshd(1840): Disconnected from 222.119.218.120 port 26665
    Feb 12 15:50:31 server sshd(1840): pam_unix(sshd:session): session closed for user root
    Feb 12 15:50:45 server sshd(2096): Accepted publickey for root from 222.119.218.120 port 37066 ssh2: RSA SHA256:cnhuplyGAzI1x1W2DudZZq7CN6qi1oMqTdtdi5VqnRc
    Feb 12 15:50:45 server sshd(2096): pam_unix(sshd:session): session opened for user root by (uid=0)
    Feb 12 15:50:45 server sshd(2096): pam_lastlog(sshd:session): unable to open /var/log/lastlog: No such file or directory
    Feb 12 15:50:46 server sshd(2102): lastlog_openseek: Couldn't stat /var/log/lastlog: No such file or directory
    Feb 12 15:50:46 server sshd(2102): lastlog_openseek: Couldn't stat /var/log/lastlog: No such file or directory
    Feb 12 15:52:21 server polkitd(583): Registered Authentication Agent for unix-process:2421:38780 (system bus name :1.24 (/usr/bin/pkttyagent --notify-fd 5 --fallback), object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale en_GB.UTF-8)
    Feb 12 15:52:21 server polkitd(583): Unregistered Authentication Agent for unix-process:2421:38780 (system bus name :1.24, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale en_GB.UTF-8) (disconnected from bus)
    Feb 12 15:56:53 server sshd(2540): Received disconnect from 85.62.169.71 port 61169:11: Client disconnecting normally (preauth)
    Feb 12 15:56:53 server sshd(2540): Disconnected from 85.62.169.71 port 61169 (preauth)
    Feb 12 15:57:32 server sshd(2096): Received disconnect from 222.119.218.120 port 37066:11: disconnected by user
    Feb 12 15:57:32 server sshd(2096): Disconnected from 222.119.218.120 port 37066
    Feb 12 15:57:32 server sshd(2096): pam_unix(sshd:session): session closed for user root
    Feb 12 15:57:50 server sshd(2767): Connection closed by 222.119.218.120 port 54211 (preauth)
    Feb 12 15:58:09 server sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/passwd
    Feb 12 15:58:09 server sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
    Feb 12 15:58:09 server sudo: pam_unix(sudo:session): session closed for user root
    Feb 12 15:58:09 server sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/passwd
    Feb 12 15:58:09 server sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
    Feb 12 15:58:09 server sudo: pam_unix(sudo:session): session closed for user root
    Feb 12 15:58:09 server sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /root/.wp-toolkit-identifier
    Feb 12 15:58:09 server sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
    Feb 12 15:58:09 server sudo: pam_unix(sudo:session): session closed for user root
    Feb 12 15:58:10 server sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
    Feb 12 15:58:10 server sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
    Feb 12 15:58:10 server sudo: pam_unix(sudo:session): session closed for user root
    Feb 12 15:58:10 server sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
    Feb 12 15:58:10 server sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
    Feb 12 15:58:11 server sudo: pam_unix(sudo:session): session closed for user root
    Feb 12 15:58:11 server sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=staffdir feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=subdomains feature-8=webprotect feature-9=wp-toolkit feature-10=wp-toolkit-deluxe --output=json
    Feb 12 15:58:11 server sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
    Feb 12 15:58:11 server sudo: pam_unix(sudo:session): session closed for user root
    Feb 12 15:59:08 server sshd(2822): Accepted publickey for root from 222.119.218.120 port 23199 ssh2: RSA SHA256:cnhuplyGAzI1x1W2DudZZq7CN6qi1oMqTdtdi5VqnRc
    Feb 12 15:59:08 server sshd(2822): pam_unix(sshd:session): session opened for user root by (uid=0)
    Feb 12 15:59:08 server sshd(2822): pam_lastlog(sshd:session): unable to open /var/log/lastlog: No such file or directory
    Feb 12 15:59:10 server sshd(2828): lastlog_openseek: Couldn't stat /var/log/lastlog: No such file or directory
    Feb 12 15:59:10 server sshd(2828): lastlog_openseek: Couldn't stat /var/log/lastlog: No such file or directory
    Feb 12 15:59:50 server sshd(2876): Accepted publickey for root from 184.94.197.2 port 63442 ssh2: RSA SHA256:ktvoarqhiUkvbQXOEOshtQttY4RN52fOmbxzT1c9U3E
    Feb 12 15:59:50 server sshd(2876): pam_unix(sshd:session): session opened for user root by (uid=0)
    Feb 12 15:59:50 server sshd(2876): pam_lastlog(sshd:session): unable to open /var/log/lastlog: No such file or directory
    Feb 12 15:59:50 server sshd(2881): lastlog_openseek: Couldn't stat /var/log/lastlog: No such file or directory
    Feb 12 15:59:50 server sshd(2881): lastlog_openseek: Couldn't stat /var/log/lastlog: No such file or directory
    Feb 12 15:59:56 server useradd(2936): new group: name=cptktywhllsifolm, GID=1006
    Feb 12 15:59:56 server useradd(2936): new user: name=cptktywhllsifolm, UID=1004, GID=1006, home=/home/cptktywhllsifolm, shell=/bin/bash
    Feb 12 16:00:39 server sshd(3256): Invalid user support from 178.128.152.209 port 45928
    Feb 12 16:00:39 server sshd(3256): input_userauth_request: invalid user support (preauth)
    Feb 12 16:00:39 server sshd(3256): Received disconnect from 178.128.152.209 port 45928:11: Bye Bye (preauth)
    Feb 12 16:00:39 server sshd(3256): Disconnected from 178.128.152.209 port 45928 (preauth)
    Feb 12 16:00:40 server sshd(3258): Received disconnect from 178.128.152.209 port 45988:11: Bye Bye (preauth)
    Feb 12 16:00:40 server sshd(3258): Disconnected from 178.128.152.209 port 45988 (preauth)
    Feb 12 16:00:40 server sshd(3261): Received disconnect from 178.128.152.209 port 46018:11: Bye Bye (preauth)
    Feb 12 16:00:40 server sshd(3261): Disconnected from 178.128.152.209 port 46018 (preauth)
    Feb 12 16:00:41 server sshd(3263): Invalid user usuario from 178.128.152.209 port 46058
    Feb 12 16:00:41 server sshd(3263): input_userauth_request: invalid user usuario (preauth)
    Feb 12 16:00:41 server sshd(3263): Received disconnect from 178.128.152.209 port 46058:11: Bye Bye (preauth)
    Feb 12 16:00:41 server sshd(3263): Disconnected from 178.128.152.209 port 46058 (preauth)
    Feb 12 16:00:42 server sshd(3266): Invalid user ubnt from 178.128.152.209 port 46090
    Feb 12 16:00:42 server sshd(3266): input_userauth_request: invalid user ubnt (preauth)
    Feb 12 16:00:42 server sshd(3266): Received disconnect from 178.128.152.209 port 46090:11: Bye Bye (preauth)
    Feb 12 16:00:42 server sshd(3266): Disconnected from 178.128.152.209 port 46090 (preauth)
    Feb 12 16:00:42 server sshd(3269): Invalid user debian from 178.128.152.209 port 46104
    Feb 12 16:00:42 server sshd(3269): input_userauth_request: invalid user debian (preauth)
    Feb 12 16:00:42 server sshd(3269): Received disconnect from 178.128.152.209 port 46104:11: Bye Bye (preauth)
    Feb 12 16:00:42 server sshd(3269): Disconnected from 178.128.152.209 port 46104 (preauth)
    Feb 12 16:00:43 server sshd(3271): Invalid user test from 178.128.152.209 port 46132
    Feb 12 16:00:43 server sshd(3271): input_userauth_request: invalid user test (preauth)
    Feb 12 16:00:43 server sshd(3271): Received disconnect from 178.128.152.209 port 46132:11: Bye Bye (preauth)
    Feb 12 16:00:43 server sshd(3271): Disconnected from 178.128.152.209 port 46132 (preauth)
    Feb 12 16:00:44 server sshd(3274): Invalid user usuario from 178.128.152.209 port 46156
    Feb 12 16:00:44 server sshd(3274): input_userauth_request: invalid user usuario (preauth)
    Feb 12 16:00:44 server sshd(3274): Received disconnect from 178.128.152.209 port 46156:11: Bye Bye (preauth)
    Feb 12 16:00:44 server sshd(3274): Disconnected from 178.128.152.209 port 46156 (preauth)
    Feb 12 16:00:45 server sshd(3278): Received disconnect from 178.128.152.209 port 46170:11: Bye Bye (preauth)
    Feb 12 16:00:45 server sshd(3278): Disconnected from 178.128.152.209 port 46170 (preauth)
    Feb 12 16:00:45 server sshd(3281): Invalid user user from 178.128.152.209 port 46200
    Feb 12 16:00:45 server sshd(3281): input_userauth_request: invalid user user (preauth)
    Feb 12 16:00:45 server sshd(3281): Received disconnect from 178.128.152.209 port 46200:11: Bye Bye (preauth)
    Feb 12 16:00:45 server sshd(3281): Disconnected from 178.128.152.209 port 46200 (preauth)
    Feb 12 16:02:10 server polkitd(583): Registered Authentication Agent for unix-process:3665:97728 (system bus name :1.48 (/usr/bin/pkttyagent --notify-fd 5 --fallback), object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale en_GB.UTF-8)
    Feb 12 16:02:10 server polkitd(583): Unregistered Authentication Agent for unix-process:3665:97728 (system bus name :1.48, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale en_GB.UTF-8) (disconnected from bus)
    Feb 12 16:02:17 server polkitd(583): Registered Authentication Agent for unix-process:3711:98441 (system bus name :1.49 (/usr/bin/pkttyagent --notify-fd 5 --fallback), object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale en_GB.UTF-8)
    Feb 12 16:02:17 server polkitd(583): Unregistered Authentication Agent for unix-process:3711:98441 (system bus name :1.49, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale en_GB.UTF-8) (disconnected from bus)
    Feb 12 16:02:26 server polkitd(583): Registered Authentication Agent for unix-process:3725:99300 (system bus name :1.50 (/usr/bin/pkttyagent --notify-fd 5 --fallback), object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale en_GB.UTF-8)
    Feb 12 16:02:51 server polkitd(556): Loading rules from directory /etc/polkit-1/rules.d
    Feb 12 16:02:51 server polkitd(556): Loading rules from directory /usr/share/polkit-1/rules.d
    Feb 12 16:02:51 server polkitd(556): Finished loading, compiling and executing 2 rules
    Feb 12 16:02:51 server polkitd(556): Acquired the name org.freedesktop.PolicyKit1 on the system bus
    Feb 12 16:02:56 server sshd(1208): Server listening on 0.0.0.0 port 22.
    Feb 12 16:02:56 server sshd(1208): Server listening on :: port 22.
    Feb 12 16:04:58 server sshd(1703): Connection closed by 184.94.197.2 port 52823 (preauth)
    Feb 12 16:09:29 server sshd(1749): Connection closed by 184.94.197.2 port 33422 (preauth)
    Feb 12 16:14:43 server sshd(1812): Invalid user ubuntu from 51.254.63.223 port 33866
    Feb 12 16:14:43 server sshd(1812): input_userauth_request: invalid user ubuntu (preauth)
    Feb 12 16:14:43 server sshd(1812): Received disconnect from 51.254.63.223 port 33866:11: Bye Bye (preauth)
    Feb 12 16:14:43 server sshd(1812): Disconnected from 51.254.63.223 port 33866 (preauth)

Please help.

filesystem – Plugged USB stick into Macbook and all data was wiped

I plugged a 32GB usb stick into a 2019 macbook pro and all data was automatically and immediately removed. OSX shows no data on the stick. There used to be data on the stick.

I went back to my linux box and checked. Sure enough, OSX had done something to the filesystem so it was empty and then it created the normal hidden files (.fseventsd, .Spotlight-V100).

On linux, I started a file recovery tool to get my data back and that worked fine but I lost the file names.

What I’d like to know is wtf did OSX do to my drive and how to reverse it? This also happened once before a long time ago with a 1TB ntfs external hdd that I forgot about so I’m sure this is a common problem.

Here is the flashdrive filsystem info after OSX changed it:

sudo file -s /dev/sdh /dev/sdh: DOS/MBR boot sector MS-MBR XP english at offset 0x12c “Invalid partition table” at offset 0x144 “Error loading operating system” at offset 0x163 “Missing operating system”, disk signature 0x6f55f075; partition 1 : ID=0xc, start-CHS (0x0,63,1), end-CHS (0x270,96,1), startsector 8064, 60559488 sectors
FAT32

Before, it was probably something like this (different usb flashdrive):

sudo file -s /dev/sdi
/dev/sdi: DOS/MBR boot sector; partition 1 : ID=0xb, start-CHS (0x3ff,254,63), end-CHS
(0x3ff,254,63), startsector 2, 121065982 sectors, extended partition table (last)
FAT32 (LBA)

Looks like the filesystems are slightly different now.

Can any Linux people tell me if there is a simple fsck command I can run to just repair the filesystem on the stick (and get the file names/dir structure back)? I know all the data is still there after running a recovery util. I’m not too familiar with filesystem implementation details.

rom flashing – What does it mean if Data partition wiped out?

Stack Exchange Network


Stack Exchange network consists of 176 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Accidentally wiped internal storage on Nexus 10 via TWRP now I can’t turn on my tablet

I wanted to use TWRP to install an Android image but when I was deleting the already existing Android image files, I accidentally pressed “Internal Storage” and now when I try to operate my tablet, it does not turn on and when I put it on charge, it only gives me the battery charging icon. I also can’t access bootloader.

dual boot – Shared HDD completely wiped after booting to Windows

I have a Ubuntu 20.04/Windows 10 setup. Both OS’es boot from – and store application settings etc in – their own partition on my SSD, while most of my personal data is stored on a separate HDD (physically inside the laptop casing, but for all intents and purposes an external hard drive).

I almost never use Windows. Today, I opened it to test something for what (I think) was the first time since I bought the computer 6 months ago. In Windows, I found I could not access any files on the shared HDD – it was listed as empty, and the ‘Properties’ tab confirmed that all its space was free. I did not do anything else to the directory in Windows.

Concerned, I booted back into Ubuntu, and found that there too the HDD was blank (it contained only an empty recycle bin and a ‘System Volume Information’ directory). I unmounted and remounted, ran ntfsffix, tried mounting other partitions… but everything came up empty. Curiously, gparted did list that the HDD had about 170 GB in use (which sounds about right for what I know should be on there). But this still gave me no way to actually access the files.

I am now restoring from an external backup with Duplicati, so all my files should be alright, but I am very concerned. How could this possibly have happened? How can I keep it from happening again if I ever need to use Windows again?

time machine – I recovered keychain files from a half wiped drive. Now nothing happens when I try to add them to my keychain app. What can I do?

I wanted to downgrade from Big Sur Beta because of some bugs in apps. I followed the first few steps found on the Apple support website.

I got up to Step 4; Reformat and partition your startup disk.

I began the process of reformatting and I remembered my Time Machine is password protected and the password is found in my keychain!

I panicked and turned the Mac off to cancel the process.

Now it won’t boot, it just gets stuck at the loading screen. I have tried booting into safe mode and recovery mode and nothing seems to work. It even throws an error when I try and boot into internet recovery mode.

So I have used a second external device as a bootable drive to access the Mac and have managed to recover what looks like the keychain files. However when I try and add them to the Keychain Access app nothing happens.

Any ideas? I’m assuming something may be wrong with the file I’ve recovered. Is there way to decrypt the files? Or recover my hard drive?

TLDR: I recovered some keychain files from a Mac I (half) wiped. When I try to add them to the Keychain Access app nothing happens. I need the passwords in the keychain to unlock my time machine.

boot – Rufus accidently used on a hard disk, now a whole raid box ha sbeen wiped

Help please, possible a question for Akeo, author of rufus.
I thought I was using Rufus to format a usb, i did something horribly wrong and now a whole ICY BOX raid box (configured as raid 5 internally with 4 disks) has been wiped off of hundreds of folders and thousands of files. This box is seen as one external HD through USB. Now the box has been split into 2 drives

  1. a small 494 kb disk with EFI folder and readme.txt
  2. a second drive of 8TB with the boot, efi, sources etc folders and basic boot files (10 in all) and nothing else. PC indicates 8Tb of 8Tb free.

Please what do I do? Initial scan from EaseUS indiactes none of the structure even after a deep scan.
Many thanks for your help.

windows – disc wiped to provide mores storage

OK I am using windows 7 and have two hard drive discs: Basic 0 and Basic 1 plus a Recovery partition. “0”contained all old “c” drive info after converting to windows 7. I do not have enough volume on my new “D” drive for more than one backup. So i searched out how to use Basic 0 to store at least one back up at a time. I collapsed the old D into the old C. All needed info was copied from Basic 0 to Basic 1 both C and D drives. then i wiped Drive C on Basic 0.
Now windows tells me that i cannot copy anything to Basic 0 C unless the drive is formatted. I am unable to do this.I still have a Healthy (Recovery partition ) On Basic 0. The old C is now classified as RAW instead of NTFS and it is “Healthy (system, Active, primary partition)
is there anything I can do to make that RAW file useable as storage?