Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [bios]

Basic Input/Output System (BIOS) is a software that is stored on a non-volatile ROM chip on the motherboard and BIOS is the first code run by a PC when powered on.

0
votes
0answers
45 views

Phoenix/Samsung BIOS/HDD security

I have a laptop bought in 2011. I want to protect its BIOS and HDD (data is already encrypted anyway). But I have seen these vulnerabilities: After 3 incorrect tries, I see "System Disabled" with ...
94
votes
9answers
21k views

Can a virus destroy the BIOS of a modern computer?

In the late 1990s, a computer virus known as CIH began infecting some computers. Its payload, when triggered, overwrote system information and destroyed the computer's BIOS, essentially bricking ...
1
vote
4answers
143 views

Volatile memory only computer?

I was wondering, is it possible to create a fully volatile computer, with no permanent memory at all (not even in the BIOS), that will be loaded on each boot from a read only live CD? Such that in ...
0
votes
0answers
35 views

is it to possible to programmatically destroy a PC? [duplicate]

is it possible to totally destroy the PC with use of code only, if possible how? i mean like: frying the RAM frying the GPU overclocking the CPU till its dead In a TV series called MR ROBOT there ...
0
votes
1answer
142 views

badBIOS reflashing

This is not a has-badBIOS-pwn3d-me post, so don't worry about any paranoid rants. Having read a thorough analysis/debunking of the alleged evilware, I certainly understand that the technology badBIOS ...
0
votes
1answer
83 views

What bios passwords & settings are important to set on a Thinkpad X1 laptop?

I am just booting my new X1 for the first time, and went into the bios to set a bios password. I discovered a slew of security settings: Supervisor password Lock UEFI BIOS Settings (enabled/disabled) ...
1
vote
0answers
52 views

using sha256 to check for boot tampering

Consider the following machine: Dual Boots to two OSes, OS "A" and OS "B" OS "A" is trusted The bios is trusted. The root partition of OS "A" is encrypted OS "A" doesn't support secure boot OS "B" is ...
1
vote
2answers
165 views

How could malware survive hard disk drive format without residing in the firmware?

For example could it "trick" most partitioning/disk utility tools that it was successfully wiped, but with the malware still existing? Kinda similar to what would happen if you attempted to "clean" ...
0
votes
0answers
20 views

Isolating BIOS from vulnerable OS on UEFI motherboard

Suppose you have a computer with a UEFI motherboard and several OSes in a multi-boot setting. One of these OSes is vulnerable, while others are secure. The vulnerable OS becomes compromised. Does ...
0
votes
1answer
754 views

Potential UEFI malware from Virus Total .rom scan

I dumped my firmware on my Macbook with Darwin Dumper and uploaded the .rom file to Virus Total and it showed a huge amount of bad PE32 images (File detail tab), all of which seem to be detected by ...
3
votes
3answers
185 views

Is knowing the BIOS password of help in hacking a computer *remotely*?

Let's assume that a hacker knows the BIOS password of a computer, but can only connect to the computer over a network (Internet). The attacker has no physical access to the computer. Is knowing the ...
0
votes
0answers
45 views

If you buy a used hard drive or CPU, how to guarantee it doesn't have anything installed or running on it [duplicate]

Say you buy a used hard drive, or a computer (wondering about both cases, something that is just a drive for storage, and something that is an actual running chip). I am not interested in whether or ...
-1
votes
1answer
216 views

Explain how a BIOS/UEFI infection may compromise the security of the Operating System [closed]

Explain how a BIOS/UEFI infection may compromise the security of the Operating System.
2
votes
1answer
81 views

Dumping BIOS and USB bootloader

Edward Snowden suggests to have the bootloader on a USB stick to prevent evil maid attacks and to dump the BIOS, hash it and compare it everytime. Is using Tails from a USB stick means the bootloader ...
2
votes
0answers
85 views

Can maliciously modified ACPI AML be executed without a reboot?

ACPI tables contain ACPI Machine Language, or AML, which is executed by an interpreter in the kernel at boot. Certain ACPI tables, such as the DSDT, are necessary to support hardware ACPI events such ...
3
votes
1answer
150 views

Is it risky to install a theft-protection system?

I recently bought a Dell laptop and found out that Dell recommends to install a theft-protection system called LoJack. It is a system installed on the BIOS; if the laptop is stolen, it is possible to ...
1
vote
3answers
281 views

Can BIOS/UEFI change OS code?

I know that the OS is the boss of programs (once OS is loaded). Is BIOS/UEFI the boss of the everything before OS is loaded? Can an OS be a sitting duck for any BIOS/UEFI related malware? In other ...
1
vote
1answer
265 views

Feasibility of infecting notebook BIOS with virus?

I bought my computer in 2011. From 2011 to 2015 the computer was accessible to a cousin of mine who is a developer. He doesn't work with IT security, but has more than a decade of experience ...
1
vote
1answer
114 views

Verifying that the CRTM is read-only for the purpose of trusted computing

When using a TPM to provide integrity measurements for a system via SRTM, the trusted computing base is reduced to only the TPM and CRTM. The CRTM is a component of the BIOS (specifically the ...
11
votes
2answers
5k views

Can BIOS malware be installed from OS?

Can an OS vulnerability be exploited to install BIOS/UEFI/firmware malware (such as a keylogger)? I know BIOS is a "deeper" level than the OS. I know firmware based keyloggers exist. I know they can ...
1
vote
2answers
395 views

Never believed BadBios…but do now…is there help? [closed]

After lengthy efforts to remove multiple malware issues off of 6 laptops, the strange behaviour is an accurate depiction of "badBios", something I never believed true. My current experiences have ...
4
votes
4answers
985 views

Redirect malware in BIOS or MBR can't remove it

I bought a brand new Dell Inspiron 15 7567 laptop factory sealed and new. I booted it up went through the install process and finally logged in. Opened the edge browser and went to Youtube to play ...
1
vote
2answers
139 views

Can a running kernel be protected by underlying rings, BIOS etc?

I mostly found examples the other way around: compromising the OS e.g. through a compromised BIOS or Intel ME. But are there known examples where stuff runs underneath the kernel and can be used to ...
4
votes
1answer
169 views

How would I secure my bios?

How would I fully secure my bios password/other settings from being reset/breached by pulling the battery out or by other means?
46
votes
5answers
10k views

Does adding a password to BIOS prevent malware from infecting it?

I'm looking into ways of hardening a computer's security. One of the things is the BIOS. Does adding a password to the BIOS prevent malware from infecting it? I have seen this article: Protecting ...
1
vote
3answers
4k views

How secure is Secure Erase option in BIOS?

I have been exploring data security lately and came across HDD data recovery. I now know that a format simply deletes the "pointers" to files and directories and that data is still there. The only way ...
0
votes
1answer
280 views

How to reset the BIOS without access to the motherboard? [closed]

I'm working on a pentest project (with permission of course). I'm trying to get the local hash on a computer so that I can crack it and use it as a skeleton key for other computers (all computers have ...
4
votes
1answer
858 views

How BIOS password stored internally?

Is password hashed before saving to CMOS? Which hash algorithm is used? How much storage is dedicated for passwords? What is about passwords of SSD with AES? Does BIOS save it inside drive (just ...
2
votes
1answer
117 views

What is the most secured UEFI publicly available?

It is very scary to know that spywares were installed on some largely commerciallized laptops at the BIOS level. Example: Lenovo ThinkPad spyware What UEFI would you recommand to have in order to ...
1
vote
1answer
299 views

How not to be hacked through Computrace?

Computrace can be used by hackers. I would like if someone can explain in plain language (for mere mortal) how in what circumstances Computrace can be used by hackers (Am I vulnerable always or if I ...
4
votes
2answers
2k views

Can Restarting An Infected Computer Make It Worse?

I seem to remember that rebooting a potentially infected Windows PC before removing the malware may allow it to take advantage of early boot up states that may be vulnerable if the security measures ...
2
votes
0answers
125 views

BIOS flash possible? [closed]

Not sure if it's the right forum to post this but have been modifying the BIOS of my Asus N551VW (which is a skylake laptop (I7-6700HQ) with an AMI Aptio BIOS) and I'm ready to flash it. Problem is, ...
1
vote
1answer
547 views

Are UEFI vulnerable to the same password bypass techniques as BIOS?

I'm trying to understand if the old school ways of bypassing a BIOS password (flip the BIOS jumper or remove the CMOS battery) still affect (some or all) modern UEFI? If not, what protections do ...
2
votes
1answer
90 views

Could a computer turn itself on if the BIOS was modified even if it was turned off by holding the power button down?

My Thinkpad might have been hacked and I know this sounds a little far-fetched, but I suspect the BIOS might have also been hacked. Would turning it off by holding the power button for a few seconds ...
-5
votes
1answer
238 views

My mouse sometimes move without reason. Could it be a virus persisting Ubuntu reinstalls? [closed]

I am running Ubuntu Linux and I have reinstalled the system several times but sometimes I still feel like somebody gets remote access to my computer. I'm not running any software like Team Viewer. I ...
4
votes
3answers
3k views

Will setting a BIOS Password Protect the TPM?

I have Windows 10 on a Dell Precision Laptop, Bitlocker Drive Encryption set up for my system drive with TPM only and I do not want 20-number long PIN, but I want a password (like I had in TrueCrypt, ...
5
votes
1answer
187 views

Can you prove that the OS loaded by your BIOS is really your OS?

Assume you are a paranoic that have a 100% open source OS with drivers etc, but you don't have an alternative to your closed source BIOS. How can you sure the BIOS didn't insert malicious code in e.g ...
0
votes
2answers
811 views

Best way to make a Linux install tamper proof

Good day, I am currently planning an environment where it comes down to the biggest security risk being to boot to another environment and tamper with the install on the disk (Older PCs with physical ...
3
votes
3answers
749 views

Unlock a computer bios?

If you or someone is to add a password to the bios of a computer and make ot so when booting the computer it prompts for the password is there a way to bypass or overide this activity?
4
votes
2answers
10k views

How secure is a BIOS/UEFI hard drive password? [duplicate]

I'm buying some new machines and am concerned about security of the data should the machine be physically stolen. It's easy to take out the drive, image it, and read what you want. I could use file ...
29
votes
11answers
5k views

What is the point of using an open source and secure OS if you are running it on a machine with closed source firmware?

I'm very interested in the OpenBSD OS, as it currently seems to me to be the option that takes security more seriously than its contemporaries. But as I was reading about it, it occurred to me that ...
8
votes
2answers
15k views

Samsung SSD 850 EVO. Best way to protect personal data against thiefs

I'm wondering what is the best way to protect my personal data stored on Samsung SSD 850 EVO in Linux? I did some research and found this. To set an ATA password, simply access the BIOS, navigate ...
9
votes
3answers
721 views

Is it possible to determine if the BIOS has been modified between two points in time?

Is it possible to determine if the BIOS of a computer has been modified between two points in time from that computer while it's running ? Effectively I'd like to be able to gather the equivalent of ...
-1
votes
1answer
854 views

Can I encrypt Windows' SAM file?

i recently learned that the SAM file in Windows is easily crackable, and even if an attacker couldn't find my password, there are tools that allow password removal, account elevation and even account ...
4
votes
3answers
276 views

Open source firmware as mitigation against firmware persistent malware?

I am concerned about the threat of persistent malware entrenched in device firmware. I am not familiar with the intricacies of firmware security, so I am turning to SE for help. I recently learned of ...
11
votes
4answers
716 views

My Samsung SSD password is case insensitive, how does this affect Full Disk Encryption?

I have a Samsung Evo 850 SSD, the 500GB model and it's supposed to benefit from Full Disk Encryption (FDE). Once you set a HDD password in the BIOS the FDE is supposed to kick in. However, I was ...
2
votes
2answers
981 views

Can a BIOS or UEFI infection transfer to other storage drives without the OS presence?

I am already aware that a BIOS or UEFI malware "activate" only in the OS environment. Is it possible though that a spread mechanism be activated without the presence of the OS, so that it would infect ...
5
votes
2answers
1k views

How do you know if the bios has been compromised?

To secure my PC I have setup a BIOS password, preventing any access from a live-cd. Recently I've noticed that when the BIOS asks for my password, I just have to press Enter to boot. It doesn't work ...
3
votes
1answer
388 views

Can BIOS firmware log keyboard input? If so, is there any way to detect and prevent it?

Recently I purchased a server board made by Lenovo with a "Intel Management Engine" inside BIOS. It is said that it is able to intercept and redirect keyboard input, even if an operating system is ...
1
vote
3answers
378 views

how to protect my data from malware/spyware that infected my BIOS?

we all know that some countries do their best to spy on their citizens and the citizen of other countries and that countries maybe have specialized spying agencies wither they are known or not, and, ...