Extract Camera Roll from iTunes backup I had to restore a friend's iPod because they forget their passcode and they lost their camera roll. I can't restore FROM a backup, as the backup has the forgotten passcode on it.

Anyways, on my Mac I looked under ~/library/application support/MobileSync/Backup to find some hashed folder with a  boatload of hashed files and a couple .plist's saying it was indeed a backup.

My question is- I am sure these photos are in this folder hashed somewhere.. how can I get them out?

Thanks :)
There are third-party applications such as iBackupViewer and iPhone Backup Extractor that will read those backup files. 

Also, if by any chance Photostream was turned on, those photos are on somebody's Mac, hiding in

~/Library/Application Support/iLifeAssetManagement/assets/sub