Basic Input/Output System (BIOS) is a software that is stored on a non-volatile ROM chip on the motherboard and BIOS is the first code run by a PC when powered on.

learn more… | top users | synonyms

0
votes
0answers
5 views

Why is my 3rd gen X1 Carbon not showing the “ThinkPad” logo when Secure Boot is disabled?

When I disabled Secure Boot, it still showed the "Lenovo" logo, not the "ThinkPad" one (the one it normally boots up in out of the box) Could BIOS malware have caused this?
1
vote
1answer
55 views

Are UEFI vulnerable to the same password bypass techniques as BIOS?

I'm trying to understand if the old school ways of bypassing a BIOS password (flip the BIOS jumper or remove the CMOS battery) still affect (some or all) modern UEFI? If not, what protections do ...
2
votes
1answer
55 views

Could a computer turn itself on if the BIOS was modified even if it was turned off by holding the power button down?

My Thinkpad might have been hacked and I know this sounds a little far-fetched, but I suspect the BIOS might have also been hacked. Would turning it off by holding the power button for a few seconds ...
3
votes
3answers
58 views

Will setting a BIOS Password Protect the TPM?

I have Windows 10 on a Dell Precision Laptop, Bitlocker Drive Encryption set up for my system drive with TPM only and I do not want 20-number long PIN, but I want a password (like I had in TrueCrypt, ...
-4
votes
1answer
82 views

My mouse sometimes move without reason. Could it be a virus persisting Ubuntu reinstalls? [closed]

I am running Ubuntu Linux and I have reinstalled the system several times but sometimes I still feel like somebody gets remote access to my computer. I'm not running any software like Team Viewer. I ...
1
vote
0answers
52 views

Can you prove that the OS loaded by your BIOS is really your OS?

Assume you are a paranoic that have a 100% open source OS with drivers etc, but you don't have an alternative to your closed source BIOS. How can you sure the BIOS didn't insert malicious code in e.g ...
0
votes
2answers
96 views

Best way to make a Linux install tamper proof

Good day, I am currently planning an environment where it comes down to the biggest security risk being to boot to another environment and tamper with the install on the disk (Older PCs with physical ...
3
votes
2answers
177 views

Preventing DMA Attacks

I read on the Wikipedia article on DMA attacks that a misconfigured BIOS allowed for this type of attacks. I am asking whether, given the hardware I am using, DMA attacks are possible and whether I ...
1
vote
2answers
240 views

How secure is a BIOS/UEFI hard drive password? [duplicate]

I'm buying some new machines and am concerned about security of the data should the machine be physically stolen. It's easy to take out the drive, image it, and read what you want. I could use file ...
6
votes
2answers
194 views

Questions regarding Rakshasa

Regarding Jonathan Brossard's Hardware Backdooring is practical talk at Def Con 20 in 2012: What does the developer mean by "The payload is booted via Networkboot"? How does the bootkit (a ...
1
vote
3answers
93 views

Unlock a computer bios?

If you or someone is to add a password to the bios of a computer and make ot so when booting the computer it prompts for the password is there a way to bypass or overide this activity?
27
votes
11answers
4k views

What is the point of using an open source and secure OS if you are running it on a machine with closed source firmware?

I'm very interested in the OpenBSD OS, as it currently seems to me to be the option that takes security more seriously than its contemporaries. But as I was reading about it, it occurred to me that ...
5
votes
3answers
376 views

What use does a BIOS/EFI password have?

I have become quite a password-obsessed individual. I password-protect my HDDs, my files, and now even the BIOS/EFI on the various systems I own. But I have discovered that if you forget your BIOS ...
27
votes
3answers
2k views

Does password-protecting a server's BIOS help in securing sensitive data?

I'm running a server of which I protected the BIOS with a password. One doesn't have to enter this password before booting, but before entering the BIOS setup. I just did this from routine. However, ...
8
votes
4answers
2k views

Is the Raspberry Pi vulnerable to injection beyond the SD Card?

I understand that it is possible for a code to be crafted for a given hardware/firmware to inject a virus that would not be removed by a wipe of the hard disk. Video card, and BIOS are examples of a ...
1
vote
3answers
208 views

how to protect my data from malware/spyware that infected my BIOS?

we all know that some countries do their best to spy on their citizens and the citizen of other countries and that countries maybe have specialized spying agencies wither they are known or not, and, ...
4
votes
3answers
2k views

Samsung SSD 850 EVO. Best way to protect personal data against thiefs

I'm wondering what is the best way to protect my personal data stored on Samsung SSD 850 EVO in Linux? I did some research and found this. To set an ATA password, simply access the BIOS, navigate ...
7
votes
3answers
129 views

Is it possible to determine if the BIOS has been modified between two points in time?

Is it possible to determine if the BIOS of a computer has been modified between two points in time from that computer while it's running ? Effectively I'd like to be able to gather the equivalent of ...
-1
votes
1answer
145 views

Can I encrypt Windows' SAM file?

i recently learned that the SAM file in Windows is easily crackable, and even if an attacker couldn't find my password, there are tools that allow password removal, account elevation and even account ...
9
votes
3answers
296 views

My Samsung SSD password is case insensitive, how does this affect Full Disk Encryption?

I have a Samsung Evo 850 SSD, the 500GB model and it's supposed to benefit from Full Disk Encryption (FDE). Once you set a HDD password in the BIOS the FDE is supposed to kick in. However, I was ...
2
votes
0answers
80 views

Open source firmware as mitigation against firmware persistent malware?

I am concerned about the threat of persistent malware entrenched in device firmware. I am not familiar with the intricacies of firmware security, so I am turning to SE for help. I recently learned of ...
5
votes
4answers
506 views

Besides MBR & BIOS, is it possible for a rootkit to stay persistant after a format of the harddrive?

If a system becomes infected and does not have any other storage units besides the one hard drive. Is it there any other way for a rootkit to stay on the system besides infecting the BIOS OR the MBR ...
2
votes
2answers
348 views

Can a BIOS or UEFI infection transfer to other storage drives without the OS presence?

I am already aware that a BIOS or UEFI malware "activate" only in the OS environment. Is it possible though that a spread mechanism be activated without the presence of the OS, so that it would infect ...
8
votes
2answers
941 views

Does the Mebromi BIOS flashing rootkit mean APTs for personal computers are here?

With the recent discovery of the Mebromi BIOS firmware virus/MBR rootkit in the wild are we now actually in the age of Advanced Persistent Threats (APT) for personal computers and does that imply ...
12
votes
2answers
10k views

Detecting and removing Absolute persistance technology

Absolute persistance technology amounts to a persistent rootkit pre-installed by many device manufacturers (Acer, Asus, Dell, HP, Lenovo, Samsung, Toshiba, etc) to facilitate LoJack for laptops, and ...
1
vote
2answers
131 views

Can virtualization protect me from an infected BIOS?

As you know, there are attacks on the firmware of BIOS and HDD. What if I used some kind of VMS, maybe VirtualBox? Will this protect me from an already infected BIOS (and by that, I mean, no one can ...
5
votes
2answers
354 views

How do you know if the bios has been compromised?

To secure my PC I have setup a BIOS password, preventing any access from a live-cd. Recently I've noticed that when the BIOS asks for my password, I just have to press Enter to boot. It doesn't work ...
2
votes
1answer
252 views

Can BIOS firmware log keyboard input? If so, is there any way to detect and prevent it?

Recently I purchased a server board made by Lenovo with a "Intel Management Engine" inside BIOS. It is said that it is able to intercept and redirect keyboard input, even if an operating system is ...
8
votes
1answer
3k views

How to check the integrity of my BIOS?

Could it be possible that a virus rewrites my BIOS with some malicious code? If so, how could I protect against it, or at least how can I check that the BIOS hasn't been modified?
8
votes
3answers
4k views

Viruses on video cards?

Steve Gibson of Security Now fame claims that viruses can attack a video card and infect it. I assume that he means it can infect the Video BIOS. However I'm skeptical. BIOSes are so numerous and ...
3
votes
2answers
206 views

Can a Vulnerability Management tool highlight BIOS and driver-level vulnerabilities?

Several known vulnerabilities affect BIOS (Reference URLs below). So my question is, are the Vulnerability Management tools (such as Nessus, NeXpose, Qualys, etc) technically capable of highlighting ...
4
votes
1answer
753 views

Lighteater - BIOS/UEFI vulnerable

I am currently a bit confused, I have read today an article about the BIOS-rootkit Lighteater made by John Loucaides and Andrew Furtaki. In their presentation 'How many million BIOSes would you like ...
3
votes
2answers
377 views

Is it possible for malware to be in the BIOS or in hardware?

Is it possible for malware to be written in the BIOS section and loaded on every fresh Windows Install? If it is possible, can this affect Linux (Ubuntu and others) operating systems as well?
1
vote
2answers
113 views

Why aren't there large-scale attacks on BIOS and UEFI

I was reading the new and I came across this article . I have not spent lots of time reading the paper the article referred to but I pretty much agree with the fact that people rarely update their ...
1
vote
0answers
168 views

How to identify if BIOS is infected? [closed]

How to identify if BIOS is infected with malware? Is there a way to extract content of a BIOS chip?
4
votes
1answer
385 views

Does malware which infects the BIOS/ Firmware always need 'root' access to do so?

There are very few hardened Operating Systems who restrict or totally disable Terminal 'root' access for the user. Would this feature prevent persistent BIOS rootkits from writing into BIOS or ...
1
vote
2answers
68 views

secure notebook options [closed]

How can I secure my notebook with highly sensitive information stored in a spreadsheet. I am keeping the following options in mind: Password protect & encrypt BIOS Full disk encryption Password ...
1
vote
3answers
4k views

How do I use a TPM to protect my BIOS/EFI from “remote” attacks

I have a work/gaming computer. The work side is a SSD with linux and the game side is a SSD with Win7 (all security turned off, planning to get viruses and rewipe every LAN). Only one of the drives ...
1
vote
2answers
1k views

Protecting the BIOS from malware [closed]

The BIOS operates at a lower level than the OS, so antivirus software cannot scan it. Is there any other security software that we should use to protect the BIOS?
1
vote
2answers
761 views

Trusted Platform Module, daughterboard vs onboard TPM?

In many cases where a Trusted Platform Module (TPM chip) is employed, it is soldered directly onto the motherboard. Ostensibly the motherboard manufacturer is then solely responsible for integrating ...
0
votes
4answers
110 views

post-disk-wipe computer security

I have a standard Dell or Asus-motherboard based computer. it is a hard-disk or RAM. it was hacked remotely. I suspect that they were sophisticated. I am happy to reformat the disk and/or throw it ...
6
votes
1answer
180 views

Realistic: Exploiting a computer on BIOS/ hardware level in less than an hour? (Infinite preparation time)

I wonder how hard it it to infect a laptop or netbook in 60 minutes or less in a way the victim cannot easily clean their machine by wiping hard disk drives. Let's assume the following: The ...
11
votes
3answers
590 views

Sourcing hardware that is least likely to contain backdoors

I understand that CPU silicon (for example) is scrutinized for backdoors but there are other aspects of a computer system that may "leak data" to the outside world unbeknownst to the owner regardless ...
4
votes
2answers
653 views

What is disk encryption worth? Threat of proprietary Bios, SMM, optionrom, TPM etc?

Supposing there is private/secret data on a machine (i.e a x86 arch) the most reasonable thing to me would be to encrypt this data, so to protect it. I understand that the purpose of secured,safe,...
1
vote
1answer
93 views

Live Boot Devices

Found this article on using Live Boot Devices to do sensitive tasks such as online banking. While the article discusses the benefits of avoiding a possibly compromised host OS, it doesn't mention ...
6
votes
1answer
4k views

What happened with badBios [duplicate]

Maybe some of you remember that in November 2013 the respected researcher Dragos Ruiu claimed that he was infected by some super advanced virus that no one ever heard of before. Experts agreed that ...
15
votes
2answers
10k views

Bypassing the BIOS password

Are there any reliable methods that allow an attacker to bypass a BIOS password, or alter BIOS settings without entering the password? A few ideas come to mind: The old battery trick (remove ...
0
votes
1answer
91 views

Bios passwords “easy” to find

I have read that bios passwords are sometimes good--or bad, if there is a default. Places mention that these passwords are pretty much just available through google, but I can not find them. Where ...
2
votes
2answers
318 views

What happens after setting up HDD password?

I am wondering what happens when I set HDD password in my laptop (Samsung with ssd). I mean a given case. I have been having working system without any password. Then one day I decide to set up HDD ...
0
votes
2answers
581 views

BIOS upgrade only with PGP-signature / encrypting the whole BIOS

To successfully defend the BIOS from malicious rootkit installation or other malware that writes itself inside BIOS I wonder if these ideas are possible or even done yet: Can you program the BIOS ...