Commands to do this were already known, but after 2009-2010 they changed the firmware to lock down DIR and module access once an ATA password is set, even if you issue a SuperON command. Proprietary hardware solutions held alternative commands which worked in spite of the lock. Now they're free.

WD ROYL SuperOn: 0x45 0x0B 0x00 0x44 0x57 0xA0 0x80 (Send Data) SMART WRITE LOG to read Module 02: 0xD6 0x01 0xBE 0x4F 0xC2 0xA0 0xB0 and send 0B 00 04 00 02 as the buffer (Read Data) SMART READ LOG to read Module 02: 0xD5 0x01 0xBF 0x4F 0xC2 0xA0 0xB0 (Repeat to get more of it)