MBP encrypted disk, disk password is unknown.

your advice on password ideas is wonderful, i will try my best.
a mac and enclosuer is on my list of stuff to get.
grief my friend is a human emotion, kind of like the mind encripting itself to safeguard itself.

terminal will not get mad until irritated

/dev/
code.......

When in terminal run:
Please share results

/dev/
gives 4 rows of five letter words (ptys4) example

/disk/
no file or directory

/*.*
illegal option

ls /dev/disk*.*
no such file or directory

typed *.* response= install OS X El Capitan.app: command not found

The command LS is short for list. It lists all objects

The argument /dev/ tells LS to list all objects in the /dev/ directory. Dev is where you'll find all devices connected to the computer.

All disks are connected and listed starting with disk0. Partitions are annotated with s1, s2, etc. partition 1 on disk 0 will show as disk0s1.

An asterisk is effectively a wildcard.

So ls /dev/disk* should list all objects in the dev directory that start with disk, including disk0, disk1, etc.

When issuing commands in terminal, syntax is of the utmost importance because an extra (or missing) space will confuse the command and fail.

Try

ls /dev/disk*

The only space is between ls and the /

dev/diskO dev/diskOs1 dev/diskOs2 dev/diskOs3 dev/disk1 dev/disk1s1

mount
/dev/disk1s1 on / (hfs, local)
devfs on /dev (devfs, local, nobrowse)

try:

usage: mount [-dfruvw] [-0 options] [-t external_type] special node
[-adfruvw] [-t external_type
[-dfruvw] special | node

terminal got mad so i had to encourage it

/volumes/mnt : File exists

disk1s1 : device is write locked.

it just occurred to me... there's a recovery key generated when file vault is enabled. perhaps it's been written somewhere. this can be used to reset the OS X password.
also, if you can gain access to email, see if you can enter the iCloud account.

There are professional forensic services that are offered that could bypass that encryption there are devices that can do it instantly you just have to search online for professional services offered to do it i know it will cost some but its worth it to get what you're trying to get from it.

What device can instantly defeat filevault2 encryption?

I've never heard of a device or service that can do it other than all the hoopla with the FBI trying to unlock that guy's phone.

Read:
Accounts that use an iCloud password for login do provide a way out if you forget or lose an account password, but also offers a security risk if someone obtains your iCloud account information. (During a Yosemite upgrade, you can choose this explicitly when enabled FileVault 2 by checking a box that reads “Allow my iCloud account to unlock my disk.” Oddly, Apple has no information about this option on its support site.)

The option to store your Recovery Key on Apple’s servers is secure, in that Apple apparently can only unlock the key given information you provide, exactly as it’s typed, including capitalization. It doesn’t retain enough information to unlock it independently. However, it does put the key in the hands of a party other than yourself, making it possible under the right circumstances for a government agency or ne’er-do-wells to legally or socially engineer access to your recovery key.

as code is somewhat simple, the use of it does not seem to be.
is the single user mode terminal able to access where we need to be?

apple unlocked the file vault, they said. it shows unlocked file vault
he was to private to use icloud. i did guess the iphone lock and there is no Mac listed.

this MBP is to valuable to me and it will not be leaving my hands. therefore sending it somewhere is out.

do you have a written explanation of what apple did?

i can only imagine that if file vault was unlocked, we'd be able to mount the drive in terminal.

from what i've read online, apple cannot (will not?) unlock file vault encryption.

if the laptop was equipped with a firmware lock (which most users paranoid enough to use file vault will also do), then apple can and will unlock that with proof of purchase.

will check on written apple explanation of work done. i did notice the start up chime is now on, other than that the machine looks the same.

as we have proof of purchase, apple must have unlocked the firmware.

how do i check the status of file vault?

have we tried to mount the correct drive ?

he was gifted and might have changed the path/standards. not being paranoid but rather unique in his security method.

As we celebrate another lap around our sun, remember that none of this will matter in 100 years.

however, today we live, so take notice of the gifts life has to offer and be grateful and forgiving.

Always be mindful of oneself and of others.

consider installing an ubuntu linux livecd onto a 16gb usb jump drive, and booting that.

then you could allow me to take temporary control over the internet and we could quickly and effectively determine the extent of what's currently possible.

google search "download ubuntu livecd" and see if the instructions are something you can knock out. else we can try another terminal session from the recovery console and see what we can do.

Thank you so much for giving this your time and effort.
for this my time is unlimited.
this website has given us a chance to proceed and to that end i will stay here and be grateful for the craft.
as others gain knowledge we can only hope that their intentions to hack will be honorable and positive.


-sh-3.2#

opening recovery terminal, prompted by
**** [IOBluetooth Family][SearchForTransportEventTimeoutHandler] -- Missing Bluetooth Controller Transport!

all the writing above this says things like
IOHDIXControler: NOTE: administrator is creating non-ejectable disk image
*** Single-user boot ***
root device is mounted read-only
To mount the root device as read-write:
$ /sbin/fsck -fy
$ /sbin/mount -uw /

-sh-3.2#

Instead of booting single user from recovery, simply boot with cmd-r and the recovery tools will open. Then select disk utility and select the ssd drive. Post a screenshot if you can.

Then you can close disk utility and launch the terminal from the utilities menu.

what terminal do we call this one
-bash-3.2#