Questions tagged [bios]

Basic Input/Output System (BIOS) is a software that is stored on a non-volatile ROM chip on the motherboard and BIOS is the first code run by a PC when powered on.

Filter by
Sorted by
Tagged with
0 votes
1 answer
72 views

Is there any security technology/technique beside tpm/secure boot which can verify the integrity of the bios or bootloader?

For any file on your OS you can get a md5 or sha256 value and if you suspect anything you get it again and compare. I was wondering if there is any way to do the same with the bios and bootloader and ...
user avatar
0 votes
2 answers
108 views

For someone who deals with dangerous files and websites frequently what is the way to avoid getting infected by spyware/virus permanently?

For someone who deals with dangerous files and websites frequently or even for the general user what is the way to avoid getting infected by spyware/virus permanently? I am looking to buy a new laptop ...
user avatar
0 votes
1 answer
43 views

Seabios and secure boot. Coreboot payload

I'm choosing between Seabios and Tianocore as a coreboot payload. Secure boot is a UEFI feature. I haven't found any mention of it in seabios documentation. It must be not supported. Can anyone ...
user avatar
  • 11
0 votes
0 answers
11 views

What steps should I take to format my SSD to ensure that malware is removed? [migrated]

Recently, I was subject to being hacked. I tried to wipe Windows and delete the old Windows files after re-installing, but I feel a rootkit was installed and hidden from Norton scans. I randomly ...
user avatar
  • 1
0 votes
0 answers
29 views

Trusted Platform Module

So firstly I do own my computer, completely, it is connected with my outlook for bitlocker keys, and I do have full access to my administrator accounts and workstation accounts. After resetting my ...
user avatar
4 votes
1 answer
238 views

Detecting BIOS changes on PC

I've seen this question: Is it possible to determine if the BIOS has been modified between two points in time? On my Linux PC, I've made a script that checks the MD5 hash of the boot partition to ...
user avatar
  • 41
0 votes
0 answers
41 views

Protect laptop BIOS rootkit when attacker has physical access

My idea is that, what is the point of disk encryption or any other security measures if attacker uses BIOS rootkit when he has physical access to laptop. Until laptop is off it maybe protected against ...
user avatar
  • 207
10 votes
3 answers
4k views

Isn't "BIOS reset password" a security flaw?

According to this article Dell Support can help a user to gain access to data after forgetting the HDD password: Once Dell Support has provided the reset password, you enter this when prompted and ...
user avatar
  • 215
0 votes
0 answers
84 views

Remotely disable a laptop's ability to power on or charge?

If I loan out laptops to my employees to work remotely, such as Dr's, Nurses and other healthcare workers that generate sensitive information on patients, how can I remotely disable the laptop's ...
user avatar
  • 109
0 votes
0 answers
65 views

How secure is BIOS nvme sanitization/secure erase

Googleing or just casually browsing this very site one could easily encounter scary stories about malware that gets into firmware of external drives or infects the BIOS. If someone uses a few years ...
user avatar
  • 1
1 vote
1 answer
78 views

Ability of an infected UEFI bios to store data on computer

Suppose the UEFI BIOS is infected. The storage device is encrypted, there is no network access to the system, and RAM is encrypted. Is there any writable storage that an infected UEFI can write to ...
user avatar
  • 35
0 votes
0 answers
137 views

Does secure boot protect you from infected BIOS/firmware?

About secure boot, I've visited intel's website and they said: The feature defines an entirely new interface between operating system and firmware/BIOS. When enabled and fully configured, Secure Boot ...
user avatar
  • 1
0 votes
1 answer
179 views

Compromising the UEFI recovery partition

I have a Windows 10 OS, drives are encrypted with the latest version. UEFI is not encrypted, and I have recently installed a BIOS update. I wonder about the possibility of a hacker (if secure boot is ...
user avatar
  • 35
0 votes
1 answer
121 views

Can you subvert a physical system at runtime?

In case of a virtual machine it is possible to break out of the VM and gain code execution on the host. In that way you could evade any detection mechanism for malware inside the VM and maybe even on ...
user avatar
8 votes
4 answers
6k views

Can a virus infection spread from a PC to a PCB and back to a PC?

We have some equipment that is linked to PC's. These PC's acquire data from the equipment that they send to a server through an internal network. Furthermore these PC's are used to mediate ...
user avatar
  • 105
1 vote
1 answer
223 views

Does a TPM chip simply replicate the BIOS function of checking platform integrity?

According to Wikipedia, The primary scope of TPM is to assure the integrity of a platform. In this context, "integrity" means "behave as intended", and a "platform" is ...
user avatar
1 vote
1 answer
162 views

Could a workplace install a custom bios that gives them access to the system?

This might be the wrong place to ask this, and if so please point me in the right direction. Anyway, a family member works at a public institution where laptops are provided to the staff, which ...
user avatar
1 vote
0 answers
70 views

Restricting what hard drive can be used with a given machine

I have a machine running CentOS 7 with a removable hard drive. I want to restrict what hard drive can be used with the machine i.e. the machine can only be used with one disk and nothing else. I've ...
user avatar
  • 111
2 votes
1 answer
215 views

Is it safe to download BIOS firmware from any place online?

Considering that all modern motherboards have code signature procedures in place like it is mentioned here: Is it possible for malware to be in the BIOS or in hardware? I was wondering is it safe to ...
user avatar
0 votes
0 answers
96 views

(When) Is it a security concern if BIOS/UEFI uses/reserves much RAM?

BIOS, UEFI and hardware's firmware ROMs are not very comforting sources for concern. On a system that I administer, a large amount of main system memory (9 of 512GB) is unavailable. Next to the ...
user avatar
  • 101
4 votes
1 answer
4k views

Investigating HP sure start triggering security warnings

The following question belongs more to the HP forums but unfortunately I am not gaining any traction there. Please move the question to another SE if its off topic for this community. Recently I've ...
user avatar
  • 61
1 vote
2 answers
296 views

Can a BIOS password along with a HDD password prevent evil maid attacks?

By definition evil maid attacks involve altering a device in an undetectable way. So if I lock the BIOS, set the HDD to boot first and put a HDD password will this prevent it? Access to the computer ...
user avatar
1 vote
2 answers
898 views

Is a BIOS password enough to prevent someone from hacking into my laptop if they have physical access?

Would my laptop be secure against physical access if I set up a bios password and full disk encryption ? If not then is there any way to secure your laptop from someone with physical access? How hard ...
user avatar
-1 votes
1 answer
778 views

Can I trust a used motherboard purchased from a seller in China? [duplicate]

The ASUS motherboard in an older PC I own failed. I purchased a replacement from a vendor on eBay, shipped from China (Shenzhen). Only after receiving the motherboard did it occur to me to wonder ...
user avatar
-1 votes
1 answer
131 views

How to detect software and hardware impairment? [closed]

How can I know if a pc has a backdoor in bios, and how to know if there is an hardware malicious impairment?
user avatar
  • 3
1 vote
1 answer
491 views

Can BIOS virus/malware be used to steal data?

Since a BIOS isn't connected to the internet, even if your BIOS is infected with a malware (say you used a usb to flash it but with files that wasn't from the official motherboard manufacturer's site)...
user avatar
0 votes
0 answers
463 views

How can your BIOS be infected or hacked and Can a BIOS virus be used to "steal data"? [duplicate]

I know that BIOS can get virus but it's very rare, but it seems to me it's pretty impossible or improbable for a virus to creep into your BIOS via normal computer use. Let's say I'm using windows 10, ...
user avatar
0 votes
0 answers
99 views

Is it (easily) possible to deactivate a TPM in order to update the BIOS?

My assumption is that a BIOS update, while having a TPM activated, would render the computer unusable so that I could trash it unless I can revert the changes to the BIOS. 1) Is it possible to ...
user avatar
  • 33
1 vote
1 answer
608 views

Is it safe to disable SATA ports in the BIOS to isolate the corresponding hard drives from malware?

I have three SATA hard drives that I use every day. Suppose I disable the corresponding SATA ports of these hard drives through my BIOS, add another storage device to my PC, install another instance ...
user avatar
  • 11
2 votes
0 answers
107 views

Access SATA disk disabled in BIOS

If a remote hacker or a malware gains full root/admin rights on a system, is there any way to access another SATA disk that has been hardware connected but disabled in BIOS ? I am not sure if the ...
user avatar
0 votes
1 answer
467 views

Used laptop with potential BIOS/SSD firmware malware

I bought a used laptop and I'm concerned about the integrity of the firmware on the hardware and bios. I realize these types of malware are very rare. 1) My question is that if I assume that the BIOS ...
user avatar
  • 1
1 vote
2 answers
184 views

Can you trust your computer devices to be safe to use if they have been in the hands of potential hackers? [duplicate]

Suppose you lose the bag containing your laptop along with its accessories or while travelling the police confiscate all your computer devices, can you safely use all the devices again if you format ...
user avatar
1 vote
1 answer
103 views

Can website exploit kits contain bootkits?

Can a website exploit kit theoretically contain a bootkit (it flashes your UEFI/BIOS)?
user avatar
0 votes
1 answer
160 views

Should i update the BIOS

I was reading about BIOS vulnerabilities and rootkits that have flashed malicious code to the BIOS in order to maintain access after a factory reset/operating system install or a hard drive ...
user avatar
  • 29
2 votes
2 answers
697 views

BIOS password hash

Is it possible to find the BIOS password hash in a BIOS dump and decrypt it? For instance, a person could use flashrom Live CD to dump the BIOS with flashrom -r but how would you find the BIOS ...
user avatar
2 votes
1 answer
907 views

BeagleBoneBlack, TPM and uBoot

I'm using BBB in my project. I need to prevent any changes to the software running on it. I've been reading about uBoot and TPM. But if I understand everything correctly, this can't be implemented ...
user avatar
1 vote
1 answer
1k views

Requiring hardware key at boot-up on normal laptop

I am sure that a question like this already exists and has probably been answered. I just couldn't find any results (probably due to my inability to word my question correctly). We use laptops at ...
user avatar
  • 11
0 votes
0 answers
87 views

Multi-Boot & BIOS Attack Vector Risks For Bitcoin Wallet Storage

I'm trying to emulate a cold storage computer for crypto assets with a multi-boot computer. If I have multi-OS boots & the 'cold storage' boot is never connected to the internet when it is booted,...
user avatar
  • 121
98 votes
9 answers
34k views

Can a virus destroy the BIOS of a modern computer?

In the late 1990s, a computer virus known as CIH began infecting some computers. Its payload, when triggered, overwrote system information and destroyed the computer's BIOS, essentially bricking ...
user avatar
  • 791
1 vote
4 answers
227 views

Volatile memory only computer?

I was wondering, is it possible to create a fully volatile computer, with no permanent memory at all (not even in the BIOS), that will be loaded on each boot from a read only live CD? Such that in ...
user avatar
0 votes
1 answer
357 views

badBIOS reflashing

This is not a has-badBIOS-pwn3d-me post, so don't worry about any paranoid rants. Having read a thorough analysis/debunking of the alleged evilware, I certainly understand that the technology badBIOS ...
user avatar
0 votes
1 answer
922 views

What bios passwords & settings are important to set on a Thinkpad X1 laptop?

I am just booting my new X1 for the first time, and went into the bios to set a bios password. I discovered a slew of security settings: Supervisor password Lock UEFI BIOS Settings (enabled/disabled) ...
user avatar
  • 1,116
1 vote
0 answers
170 views

using sha256 to check for boot tampering

Consider the following machine: Dual Boots to two OSes, OS "A" and OS "B" OS "A" is trusted The bios is trusted. The root partition of OS "A" is encrypted OS "A" doesn't support secure boot OS "B" is ...
user avatar
  • 111
1 vote
2 answers
1k views

How could malware survive hard disk drive format without residing in the firmware?

For example could it "trick" most partitioning/disk utility tools that it was successfully wiped, but with the malware still existing? Kinda similar to what would happen if you attempted to "clean" ...
user avatar
  • 11
0 votes
1 answer
1k views

Potential UEFI malware from Virus Total .rom scan

I dumped my firmware on my Macbook with Darwin Dumper and uploaded the .rom file to Virus Total and it showed a huge amount of bad PE32 images (File detail tab), all of which seem to be detected by ...
user avatar
  • 11
3 votes
3 answers
414 views

Is knowing the BIOS password of help in hacking a computer *remotely*?

Let's assume that a hacker knows the BIOS password of a computer, but can only connect to the computer over a network (Internet). The attacker has no physical access to the computer. Is knowing the ...
user avatar
0 votes
0 answers
61 views

If you buy a used hard drive or CPU, how to guarantee it doesn't have anything installed or running on it [duplicate]

Say you buy a used hard drive, or a computer (wondering about both cases, something that is just a drive for storage, and something that is an actual running chip). I am not interested in whether or ...
user avatar
  • 568
-1 votes
1 answer
435 views

Explain how a BIOS/UEFI infection may compromise the security of the Operating System [closed]

Explain how a BIOS/UEFI infection may compromise the security of the Operating System.
user avatar
2 votes
1 answer
202 views

Dumping BIOS and USB bootloader

Edward Snowden suggests to have the bootloader on a USB stick to prevent evil maid attacks and to dump the BIOS, hash it and compare it everytime. Is using Tails from a USB stick means the bootloader ...
user avatar
  • 21
2 votes
0 answers
262 views

Can maliciously modified ACPI AML be executed without a reboot?

ACPI tables contain ACPI Machine Language, or AML, which is executed by an interpreter in the kernel at boot. Certain ACPI tables, such as the DSDT, are necessary to support hardware ACPI events such ...
user avatar
  • 64.1k