Basic Input/Output System (BIOS) is a software that is stored on a non-volatile ROM chip on the motherboard and BIOS is the first code run by a PC when powered on.

learn more… | top users | synonyms

0
votes
1answer
45 views

Bios passwords “easy” to find

I have read that bios passwords are sometimes good--or bad, if there is a default. Places mention that these passwords are pretty much just available through google, but I can not find them. Where ...
1
vote
1answer
50 views

Live Boot Devices

Found this article on using Live Boot Devices to do sensitive tasks such as online banking. While the article discusses the benefits of avoiding a possibly compromised host OS, it doesn't mention ...
0
votes
2answers
36 views

BIOS upgrade only with PGP-signature / encrypting the whole BIOS

To successfully defend the BIOS from malicious rootkit installation or other malware that writes itself inside BIOS I wonder if these ideas are possible or even done yet: Can you program the BIOS ...
1
vote
2answers
99 views

What happens after setting up HDD password?

I am wondering what happens when I set HDD password in my laptop (Samsung with ssd). I mean a given case. I have been having working system without any password. Then one day I decide to set up HDD ...
9
votes
2answers
668 views

Detecting and removing Absolute persistance technology

Absolute persistance technology amounts to a persistent rootkit pre-installed by many device manufacturers (Acer, Asus, Dell, HP, Lenovo, Samsung, Toshiba, etc) to facilitate LoJack for laptops, and ...
1
vote
1answer
71 views

BIOS spyware query

Is it possible that somebody who has access to my laptop can flash a new version of bios which does spying too i.e. recording keylogs, url browsed, downloaded files etc and send it to remote location ...
1
vote
1answer
120 views

Is it posible to bypass BIOS password without owner knowing later on?

My laptop BIOS is password protected. Probably the password can be bypassed using some hardware and software means. But is it possible that somebody having access to laptop but not knowing the ...
2
votes
1answer
303 views

List of NSA spyware - remote bios exploits [closed]

Found this rather detailed list of the NSA's latest spyware gadgets, with several different remote bios exploits that once installed are virtually undetectable and can survive reinstall of the OS: ...
1
vote
1answer
153 views

Trusted Platform Module, daughterboard vs onboard TPM?

In many cases where a Trusted Platform Module (TPM chip) is employed, it is soldered directly onto the motherboard. Ostensibly the motherboard manufacturer is then solely responsible for integrating ...
3
votes
1answer
102 views

Can a Vulnerability Management tool highlight BIOS and driver-level vulnerabilities?

Several known vulnerabilities affect BIOS (Reference URLs below). So my question is, are the Vulnerability Management tools (such as Nessus, NeXpose, Qualys, etc) technically capable of highlighting ...
4
votes
1answer
355 views

Write-protection at hardware level for security

It seems to me that to maximise server security, one ought - in addition to the usual security measures implemented in software - to prevent the overwriting of certain parts of the server system, such ...
8
votes
1answer
352 views

Is the system bios and network card protected by the OS firewall?

My question arises from trying to understand new types of spyware that target the system bios and/or network card. Is the system bios and ethernet card both protected by an OS firewall set to deny ...
2
votes
2answers
718 views

How to protect Linux partition from access from Windows partition?

In a dual-boot environment (windows? and linux mint 15) What would be best best way to prevent access to the linux partition(s) when the system is booted into windows 7? The goal would be to ...
-1
votes
1answer
148 views

Malware persistence past a drive wipe? [duplicate]

Are there any known instances of malware persisting past a drive wipe and reinstall, through modified bios, or firmware on one of the machine components?
24
votes
3answers
1k views

Does password-protecting a server's BIOS help in securing sensitive data?

I'm running a server of which I protected the BIOS with a password. One doesn't have to enter this password before booting, but before entering the BIOS setup. I just did this from routine. However, ...
3
votes
1answer
189 views

Is this a security risk for us to lost TPM or others to access to reset BIOS ?

In the previous post Physically secure the system case it is recommended to physically protect the system. But in case stolen laptops where intruder have physical access to TPMs. What are the security ...
4
votes
1answer
656 views

Where can a virus or other malware “hide” on common PC and Mac hardware?

I'm looking for a detailed list of locations that viruses can "hide" in modern hardware even after a reboot. Some things that come to mind include Boot BIOS/Firmware CPU Microcode Connected PCI ...
7
votes
3answers
399 views

Sourcing hardware that is least likely to contain backdoors

I understand that CPU silicon (for example) is scrutinized for backdoors but there are other aspects of a computer system that may "leak data" to the outside world unbeknownst to the owner regardless ...
5
votes
1answer
213 views

How does virtualisation (IaaS) protect from CPU microcode updates and firmware changes?

Is it safe to assume that it's impossible for CPU Microcode updates and firmware updates to be initiated from a guest VM? What software or hardware technologies protect my guest OS from altering or ...
2
votes
1answer
145 views

Award BIOS Security

How can I secure an Award BIOS from being flashed or attacked by a remote attacker? Are there other types of BIOS that are more secure?
4
votes
2answers
430 views

What is disk encryption worth? Threat of proprietary Bios, SMM, optionrom, TPM etc?

Supposing there is private/secret data on a machine (i.e a x86 arch) the most reasonable thing to me would be to encrypt this data, so to protect it. I understand that the purpose of ...
10
votes
2answers
4k views

Bypassing the BIOS password

Are there any reliable methods that allow an attacker to bypass a BIOS password, or alter BIOS settings without entering the password? A few ideas come to mind: The old battery trick (remove ...
4
votes
2answers
4k views

What does HP DriveLock do to your password?

While looking at various hard drive encryption methods, I discovered that HP's "DriveLock" is not quite the standard ATA security system. While I did get confirmation from HP that it does indeed use ...
3
votes
3answers
203 views

Is multi-factor authentication supported by any current bios?

Is multi-factor authentication supported by any current bios'es? Update What I want to do is to make it impossible to go into the bios setup without both a password and another factor. It would ...
6
votes
4answers
1k views

Is the Raspberry Pi vulnerable to injection beyond the SD Card?

I understand that it is possible for a code to be crafted for a given hardware/firmware to inject a virus that would not be removed by a wipe of the hard disk. Video card, and BIOS are examples of a ...
1
vote
3answers
1k views

How do I use a TPM to protect my BIOS/EFI from “remote” attacks

I have a work/gaming computer. The work side is a SSD with linux and the game side is a SSD with Win7 (all security turned off, planning to get viruses and rewipe every LAN). Only one of the drives ...
3
votes
1answer
251 views

Is booting from a freshly downloaded linux CD safe from trojans?

Let's say you're using Windows 7. For storing Bitcoin on your computer ... is downloading a fresh copy of linux (say Ubuntu), burning it into a CD, booting from it ... safe from trojans? Are there ...
8
votes
1answer
255 views

Cons of disabling live CD in bios

It has been suggested that for security reasons it's a good idea to change the boot order to prevent booting from a live CD or USB. But if you lose the passwords to unlock hard drive and bios, and you ...
6
votes
2answers
618 views

Does the Mebromi BIOS flashing rootkit mean APTs for personal computers are here?

With the recent discovery of the Mebromi BIOS firmware virus/MBR rootkit http://www.theregister.co.uk/2011/09/14/bios_rootkit_discovered/ in the wild are we now actually in the age of Advanced ...
14
votes
2answers
2k views

Tamper-proof BIOS password & settings storage with Trusted Platform Module?

In the olden days, one could trivially bypass BIOS passwords on most PCs by removing the BIOS battery and clearing the CMOS. My question is: On modern PCs equipped with a Trusted Platform Module ...
6
votes
2answers
2k views

Viruses on video cards?

Steve Gibson of Security Now fame claims that viruses can attack a video card and infect it. I assume that he means it can infect the Video BIOS. However I'm skeptical. BIOSes are so numerous and ...
7
votes
1answer
1k views

How to check the integrity of my BIOS?

Could it be possible that a virus rewrites my BIOS with some malicious code? If so, how could I protect against it, or at least how can I check that the BIOS hasn't been modified?
6
votes
4answers
1k views

Is it possible to make one processor look like another?

(aka) Is it possible to hack CPUID instruction or BIOS to make it show wrong CPU information? Yesterday, I was having a chat with computer sales guy. He is little close to me. During the conversation ...