Questions tagged [bios]
Basic Input/Output System (BIOS) is a software that is stored on a non-volatile ROM chip on the motherboard and BIOS is the first code run by a PC when powered on.
143 questions
1
vote
1
answer
89
views
Are proprietary BIOS/UEFI solutions less secure than libre/open frameworks? [closed]
I have been a long-time supporter of the Coreboot Project (especially the Skulls variant).
I am currently in search of a new desktop and wanted to ask if these FLOSS BIOS solutions (such as Coreboot/...
2
votes
1
answer
110
views
Are there any motherboards / UEFI that support hardware encryption on SED?
I found that Thinkpads have hdd password support, which in terms uses some bizarre password hashing and ends up with 90 bits of entropy, which is again used as ATA security password to SED, which in ...
1
vote
0
answers
46
views
Is PUF Challenge-Response Authentication applied on every power-up event? [closed]
Are PUFs used, EVERY time we power on the computer to verify that nothing has been tampered with (by using CRP authentication)?
Which element performs this authentication? (bios, secureboot, I don't ...
2
votes
1
answer
124
views
How to update BIOS before BIOS infected Host reinfects BIOS?
I learned about the BIOS being able to be written to by malware. It reminded me I have a used laptop that performs noticeably slower than any comparable devices, so I went ahead an downloaded BIOS ...
0
votes
1
answer
170
views
How many parts of an average laptop can be compromised? and how to confirm they are not?
The majority of virus/malware is stored and persists on the hard drive, Therefore by formatting the hard drive or re-installing the operating system, the virus is removed.
However, the average laptop ...
0
votes
0
answers
569
views
Secure boot disabled for Potential BIOS compromise on Tails OS machine
I have an ASUS computer that I use strictly for booting Tails OS from a USB. A few weeks ago I went into the BIOS and noticed that secure boot was disabled.
This computer has secure boot enabled by ...
1
vote
1
answer
321
views
Why the TPM PCRs does not consider a UEFI settings change? If someone resets CMOS, it's undetected
In my laptop I've set up a bios password when I power on the laptop, and once I enter it the laptop starts my linux distro and decrypts the disk without asking any other password. To do this I've set ...
5
votes
0
answers
278
views
What is the current risk regarding hyper-threading?
We are around four years after ZombieLoad.
We had multiple Microcode and OS mitigation patches.
Is enabling hyper-threading still bad practice if firmware, microcode and OS patches for your system are ...
1
vote
1
answer
162
views
Can rootkit spread through ATA interface?
I have connected a hard disk containing bootable Windows to a system confirmed to have a rootkit and attached that disk to a couple of other systems through SATA. I'm wondering (It's kind of been ...
1
vote
2
answers
864
views
Can BIOS/UEFI malware pretend that secure boot is enabled?
As the title says, can BIOS/UEFI malware pretend that secure boot is enabled? And if so, is there any point to enabling secure boot on a device that came with it disabled (or that you previously ...
4
votes
1
answer
406
views
Would secure boot block GPU if it has modified vbios?
I think that AMD GPUs can be flashed with any modded VBIOS because the GPU doesn't check for firmware signature.
Shouldn't the secure boot be able to check signature of the AMD GPUs modded VBIOS and ...
1
vote
3
answers
719
views
Use old computer to run outward facing VPN server
I need to install a computer in a remote location, so that a specific unique user can remotely connect to it via Wireguard VPN. Performance requirements are very low, but security requirements are ...
3
votes
3
answers
879
views
What are the security implications of using an old computer with no more BIOS updates?
What are potential security implications of using older unsupported motherboards/laptops that do not get BIOS(UEFI) updates anymore, but run an up to date GNU/Linux distribution?
Do measures like ...
0
votes
1
answer
353
views
Is there any security technology/technique beside tpm/secure boot which can verify the integrity of the bios or bootloader?
For any file on your OS you can get a md5 or sha256 value and if you suspect anything you get it again and compare. I was wondering if there is any way to do the same with the bios and bootloader and ...
0
votes
2
answers
264
views
For someone who deals with dangerous files and websites frequently what is the way to avoid getting infected by spyware/virus permanently?
For someone who deals with dangerous files and websites frequently or even for the general user what is the way to avoid getting infected by spyware/virus permanently?
I am looking to buy a new laptop ...
0
votes
2
answers
1k
views
Seabios and secure boot. Coreboot payload
I'm choosing between Seabios and Tianocore as a coreboot payload.
Secure boot is a UEFI feature. I haven't found any mention of it in seabios documentation. It must be not supported.
Can anyone ...
4
votes
1
answer
610
views
Detecting BIOS changes on PC
I've seen this question: Is it possible to determine if the BIOS has been modified between two points in time?
On my Linux PC, I've made a script that checks the MD5 hash of the boot partition to ...
10
votes
3
answers
5k
views
Isn't "BIOS reset password" a security flaw?
According to this article Dell Support can help a user to gain access to data after forgetting the HDD password:
Once Dell Support has provided the reset password, you enter this when prompted and ...
0
votes
0
answers
890
views
Remotely disable a laptop's ability to power on or charge?
If I loan out laptops to my employees to work remotely, such as Dr's, Nurses and other healthcare workers that generate sensitive information on patients, how can I remotely disable the laptop's ...
1
vote
1
answer
177
views
Ability of an infected UEFI bios to store data on computer
Suppose the UEFI BIOS is infected. The storage device is encrypted, there is no network access to the system, and RAM is encrypted. Is there any writable storage that an infected UEFI can write to ...
0
votes
0
answers
752
views
Does secure boot protect you from infected BIOS/firmware?
About secure boot, I've visited intel's website and they said:
The feature defines an entirely new interface between operating system and firmware/BIOS. When enabled and fully configured, Secure Boot ...
0
votes
1
answer
429
views
Compromising the UEFI recovery partition
I have a Windows 10 OS, drives are encrypted with the latest version.
UEFI is not encrypted, and I have recently installed a BIOS update.
I wonder about the possibility of a hacker (if secure boot is ...
0
votes
1
answer
185
views
Can you subvert a physical system at runtime?
In case of a virtual machine it is possible to break out of the VM and gain code execution on the host. In that way you could evade any detection mechanism for malware inside the VM and maybe even on ...
8
votes
4
answers
6k
views
Can a virus infection spread from a PC to a PCB and back to a PC?
We have some equipment that is linked to PC's. These PC's acquire data from the equipment that they send to a server through an internal network. Furthermore these PC's are used to mediate ...
1
vote
1
answer
480
views
Does a TPM chip simply replicate the BIOS function of checking platform integrity?
According to Wikipedia,
The primary scope of TPM is to assure the integrity of a platform. In this context, "integrity" means "behave as intended", and a "platform" is ...
1
vote
1
answer
1k
views
Could a workplace install a custom bios that gives them access to the system?
This might be the wrong place to ask this, and if so please point me in the right direction. Anyway, a family member works at a public institution where laptops are provided to the staff, which ...
1
vote
0
answers
106
views
Restricting what hard drive can be used with a given machine
I have a machine running CentOS 7 with a removable hard drive. I want to restrict what hard drive can be used with the machine i.e. the machine can only be used with one disk and nothing else.
I've ...
2
votes
1
answer
460
views
Is it safe to download BIOS firmware from any place online?
Considering that all modern motherboards have code signature procedures in place like it is mentioned here:
Is it possible for malware to be in the BIOS or in hardware?
I was wondering is it safe to ...
0
votes
0
answers
195
views
(When) Is it a security concern if BIOS/UEFI uses/reserves much RAM?
BIOS, UEFI and hardware's firmware ROMs are not very comforting sources for concern. On a system that I administer, a large amount of main system memory (9 of 512GB) is unavailable.
Next to the ...
4
votes
1
answer
12k
views
Investigating HP sure start triggering security warnings
The following question belongs more to the HP forums but unfortunately I am not gaining any traction there. Please move the question to another SE if its off topic for this community.
Recently I've ...
1
vote
2
answers
564
views
Can a BIOS password along with a HDD password prevent evil maid attacks?
By definition evil maid attacks involve altering a device in an undetectable way. So if I lock the BIOS, set the HDD to boot first and put a HDD password will this prevent it?
Access to the computer ...
1
vote
2
answers
3k
views
Is a BIOS password enough to prevent someone from hacking into my laptop if they have physical access?
Would my laptop be secure against physical access if I set up a bios password and full disk encryption ?
If not then is there any way to secure your laptop from someone with physical access?
How hard ...
-1
votes
1
answer
2k
views
Can I trust a used motherboard purchased from a seller in China? [duplicate]
The ASUS motherboard in an older PC I own failed. I purchased a replacement from a vendor on eBay, shipped from China (Shenzhen). Only after receiving the motherboard did it occur to me to wonder ...
-1
votes
1
answer
201
views
How to detect software and hardware impairment? [closed]
How can I know if a pc has a backdoor in bios, and how to know if there is an hardware malicious impairment?
1
vote
1
answer
1k
views
Can BIOS virus/malware be used to steal data?
Since a BIOS isn't connected to the internet, even if your BIOS is infected with a malware (say you used a usb to flash it but with files that wasn't from the official motherboard manufacturer's site)...
0
votes
0
answers
502
views
How can your BIOS be infected or hacked and Can a BIOS virus be used to "steal data"? [duplicate]
I know that BIOS can get virus but it's very rare, but it seems to me it's pretty impossible or improbable for a virus to creep into your BIOS via normal computer use.
Let's say I'm using windows 10, ...
0
votes
0
answers
144
views
Is it (easily) possible to deactivate a TPM in order to update the BIOS?
My assumption is that a BIOS update, while having a TPM activated, would render the computer unusable so that I could trash it unless I can revert the changes to the BIOS.
1) Is it possible to ...
1
vote
1
answer
980
views
Is it safe to disable SATA ports in the BIOS to isolate the corresponding hard drives from malware?
I have three SATA hard drives that I use every day. Suppose I disable the corresponding SATA ports of these hard drives through my BIOS, add another storage device to my PC, install another instance ...
2
votes
0
answers
178
views
Access SATA disk disabled in BIOS
If a remote hacker or a malware gains full root/admin rights on a system, is there any way to access another SATA disk that has been hardware connected but disabled in BIOS ?
I am not sure if the ...
0
votes
1
answer
1k
views
Used laptop with potential BIOS/SSD firmware malware
I bought a used laptop and I'm concerned about the integrity of the firmware on the hardware and bios. I realize these types of malware are very rare.
1) My question is that if I assume that the BIOS ...
1
vote
2
answers
244
views
Can you trust your computer devices to be safe to use if they have been in the hands of potential hackers? [duplicate]
Suppose you lose the bag containing your laptop along with its accessories or while travelling the police confiscate all your computer devices, can you safely use all the devices again if you format ...
1
vote
1
answer
143
views
Can website exploit kits contain bootkits?
Can a website exploit kit theoretically contain a bootkit (it flashes your UEFI/BIOS)?
0
votes
1
answer
247
views
Should i update the BIOS
I was reading about BIOS vulnerabilities and rootkits that have flashed malicious code to the BIOS in order to maintain access after a factory reset/operating system install or a hard drive ...
2
votes
2
answers
2k
views
BIOS password hash
Is it possible to find the BIOS password hash in a BIOS dump and decrypt it?
For instance, a person could use flashrom Live CD to dump the BIOS with flashrom -r but how would you find the BIOS ...
2
votes
1
answer
2k
views
BeagleBoneBlack, TPM and uBoot
I'm using BBB in my project. I need to prevent any changes to the software running on it. I've been reading about uBoot and TPM. But if I understand everything correctly, this can't be implemented ...
1
vote
1
answer
2k
views
Requiring hardware key at boot-up on normal laptop
I am sure that a question like this already exists and has probably been answered. I just couldn't find any results (probably due to my inability to word my question correctly).
We use laptops at ...
0
votes
0
answers
118
views
Multi-Boot & BIOS Attack Vector Risks For Bitcoin Wallet Storage
I'm trying to emulate a cold storage computer for crypto assets with a multi-boot computer.
If I have multi-OS boots & the 'cold storage' boot is never connected to the internet when it is booted,...
99
votes
9
answers
39k
views
Can a virus destroy the BIOS of a modern computer?
In the late 1990s, a computer virus known as CIH began infecting some computers. Its payload, when triggered, overwrote system information and destroyed the computer's BIOS, essentially bricking ...
1
vote
4
answers
316
views
Volatile memory only computer?
I was wondering, is it possible to create a fully volatile computer, with no permanent memory at all (not even in the BIOS), that will be loaded on each boot from a read only live CD?
Such that in ...
1
vote
2
answers
498
views
badBIOS reflashing
This is not a has-badBIOS-pwn3d-me post, so don't worry about any paranoid rants.
Having read a thorough analysis/debunking of the alleged evilware, I certainly understand that the technology badBIOS ...