I wanted to protect my Laptop from common theft. What I did was that I installed an anti-theft software on my Ubuntu 14.04. The guest account is enabled so that the thief can use my laptop while I track him down. Then as a honey-pot, I installed Windows 8, set up a standard user account with no password and installed the anti-theft software on it too. Now I wan't to make sure that the thief won't reformat the drive. I set the boot order to boot from the internal SSD first, and locked the BIOS. But this is ineffective as my sony VAIO has a
Assist button which can be pressed when powered off to boot to a menu from which I can boot from a USB. On other laptops too, you can choose to boot another external device by pressing the Escape key or the function keys. How can I remove this big loop hole?
I don't want to encrypt the laptop because it does not have any sensitive information, and I want the thief to use my stolen laptop. Also can I configure my laptop to not boot if the SSD is changed, preferably only with a password?
If it could be locked down, then it would be a big leap in physical security, especially for organisations. A disgruntled employee could boot with a thumb drive, get root privilege to modify any configuration or binary files.