I have a laptop bought in 2011. I want to protect its BIOS and HDD (data is already encrypted anyway). But I have seen these vulnerabilities:
- After 3 incorrect tries, I see "System Disabled" with code. If I use this code on some website, my password is displayed in unencrypted form. This works for Supervisor password (user password can be easily removed with it) and for HDD master password, which disables user password when entered.
- If I set maximum security level for HDD, BIOS rejects any user passwords. I was forced to insert HDD after BIOS loading, then boot from live CD and remove the password.
Is it any secure? Do these passwords make any sense?