Questions tagged [bios]

Basic Input/Output System (BIOS) is a software that is stored on a non-volatile ROM chip on the motherboard and BIOS is the first code run by a PC when powered on.

Filter by
Sorted by
Tagged with
1
vote
1answer
91 views

Does a TPM chip simply replicate the BIOS function of checking platform integrity?

According to Wikipedia, The primary scope of TPM is to assure the integrity of a platform. In this context, "integrity" means "behave as intended", and a "platform" is ...
18
votes
2answers
9k views

Can BIOS malware be installed from OS?

Can an OS vulnerability be exploited to install BIOS/UEFI/firmware malware (such as a keylogger)? I know BIOS is a "deeper" level than the OS. I know firmware based keyloggers exist. I know they can ...
1
vote
3answers
265 views

Can a running kernel be protected by underlying rings, BIOS etc?

I mostly found examples the other way around: compromising the OS e.g. through a compromised BIOS or Intel ME. But are there known examples where stuff runs underneath the kernel and can be used to ...
1
vote
1answer
72 views

Could a workplace install a custom bios that gives them access to the system?

This might be the wrong place to ask this, and if so please point me in the right direction. Anyway, a family member works at a public institution where laptops are provided to the staff, which ...
14
votes
2answers
4k views

Write-protection at hardware level for security

It seems to me that to maximise server security, one ought - in addition to the usual security measures implemented in software - to prevent the overwriting of certain parts of the server system, such ...
1
vote
1answer
245 views

Verifying that the CRTM is read-only for the purpose of trusted computing

When using a TPM to provide integrity measurements for a system via SRTM, the trusted computing base is reduced to only the TPM and CRTM. The CRTM is a component of the BIOS (specifically the ...
2
votes
0answers
155 views

Can maliciously modified ACPI AML be executed without a reboot?

ACPI tables contain ACPI Machine Language, or AML, which is executed by an interpreter in the kernel at boot. Certain ACPI tables, such as the DSDT, are necessary to support hardware ACPI events such ...
3
votes
1answer
1k views

Investigating HP sure start triggering security warnings

The following question belongs more to the HP forums but unfortunately I am not gaining any traction there. Please move the question to another SE if its off topic for this community. Recently I've ...
0
votes
1answer
853 views

Requiring hardware key at boot-up on normal laptop

I am sure that a question like this already exists and has probably been answered. I just couldn't find any results (probably due to my inability to word my question correctly). We use laptops at ...
4
votes
2answers
3k views

Preventing DMA Attacks

I read on the Wikipedia article on DMA attacks that a misconfigured BIOS allowed for this type of attacks. I am asking whether, given the hardware I am using, DMA attacks are possible and whether I ...
5
votes
2answers
2k views

How do you know if the bios has been compromised?

To secure my PC I have setup a BIOS password, preventing any access from a live-cd. Recently I've noticed that when the BIOS asks for my password, I just have to press Enter to boot. It doesn't work ...
0
votes
1answer
293 views

badBIOS reflashing

This is not a has-badBIOS-pwn3d-me post, so don't worry about any paranoid rants. Having read a thorough analysis/debunking of the alleged evilware, I certainly understand that the technology badBIOS ...
23
votes
7answers
39k views

Detecting and removing Absolute persistence technology

Absolute persistence technology amounts to a persistent rootkit pre-installed by many device manufacturers (Acer, Asus, Dell, HP, Lenovo, Samsung, Toshiba, etc) to facilitate LoJack for laptops, and ...
1
vote
0answers
32 views

Restricting what hard drive can be used with a given machine

I have a machine running CentOS 7 with a removable hard drive. I want to restrict what hard drive can be used with the machine i.e. the machine can only be used with one disk and nothing else. I've ...
2
votes
1answer
102 views

Is it safe to download BIOS firmware from any place online?

Considering that all modern motherboards have code signature procedures in place like it is mentioned here: Is it possible for malware to be in the BIOS or in hardware? I was wondering is it safe to ...
0
votes
0answers
47 views

(When) Is it a security concern if BIOS/UEFI uses/reserves much RAM?

BIOS, UEFI and hardware's firmware ROMs are not very comforting sources for concern. On a system that I administer, a large amount of main system memory (9 of 512GB) is unavailable. Next to the ...
1
vote
2answers
140 views

Can a BIOS password along with a HDD password prevent evil maid attacks?

By definition evil maid attacks involve altering a device in an undetectable way. So if I lock the BIOS, set the HDD to boot first and put a HDD password will this prevent it? Access to the computer ...
0
votes
0answers
21 views

Are 2FA options available when booting into your laptop? [duplicate]

Are there any 2FA methods that can be used when accessing the BIOS or booting into your Hard Drive? If not now then what about the future?
1
vote
2answers
314 views

Is a BIOS password enough to prevent someone from hacking into my laptop if they have physical access?

Would my laptop be secure against physical access if I set up a bios password and full disk encryption ? If not then is there any way to secure your laptop from someone with physical access? How hard ...
-1
votes
1answer
433 views

Can I trust a used motherboard purchased from a seller in China? [duplicate]

The ASUS motherboard in an older PC I own failed. I purchased a replacement from a vendor on eBay, shipped from China (Shenzhen). Only after receiving the motherboard did it occur to me to wonder ...
2
votes
1answer
397 views

BIOS password hash

Is it possible to find the BIOS password hash in a BIOS dump and decrypt it? For instance, a person could use flashrom Live CD to dump the BIOS with flashrom -r but how would you find the BIOS ...
-1
votes
1answer
74 views

How to detect software and hardware impairment? [closed]

How can I know if a pc has a backdoor in bios, and how to know if there is an hardware malicious impairment?
6
votes
3answers
2k views

Trusted Platform Module, daughterboard vs onboard TPM?

In many cases where a Trusted Platform Module (TPM chip) is employed, it is soldered directly onto the motherboard. Ostensibly the motherboard manufacturer is then solely responsible for integrating ...
9
votes
4answers
6k views

Viruses on video cards?

Steve Gibson of Security Now fame claims that viruses can attack a video card and infect it. I assume that he means it can infect the Video BIOS. However I'm skeptical. BIOSes are so numerous and ...
0
votes
1answer
206 views

Can BIOS virus/malware be used to steal data?

Since a BIOS isn't connected to the internet, even if your BIOS is infected with a malware (say you used a usb to flash it but with files that wasn't from the official motherboard manufacturer's site)...
0
votes
0answers
182 views

How can your BIOS be infected or hacked and Can a BIOS virus be used to “steal data”? [duplicate]

I know that BIOS can get virus but it's very rare, but it seems to me it's pretty impossible or improbable for a virus to creep into your BIOS via normal computer use. Let's say I'm using windows 10, ...
6
votes
3answers
1k views

Unlock a computer bios?

If someone adds a password to the bios of a computer and make it so that when booting the computer it prompts for the password, is there any way to bypass or overide that protection?
1
vote
1answer
442 views

Is it safe to disable SATA ports in the BIOS to isolate the corresponding hard drives from malware?

I have three SATA hard drives that I use every day. Suppose I disable the corresponding SATA ports of these hard drives through my BIOS, add another storage device to my PC, install another instance ...
0
votes
0answers
44 views

Is it (easily) possible to deactivate a TPM in order to update the BIOS?

My assumption is that a BIOS update, while having a TPM activated, would render the computer unusable so that I could trash it unless I can revert the changes to the BIOS. 1) Is it possible to ...
2
votes
0answers
56 views

Access SATA disk disabled in BIOS

If a remote hacker or a malware gains full root/admin rights on a system, is there any way to access another SATA disk that has been hardware connected but disabled in BIOS ? I am not sure if the ...
0
votes
1answer
250 views

Used laptop with potential BIOS/SSD firmware malware

I bought a used laptop and I'm concerned about the integrity of the firmware on the hardware and bios. I realize these types of malware are very rare. 1) My question is that if I assume that the BIOS ...
1
vote
2answers
117 views

Can you trust your computer devices to be safe to use if they have been in the hands of potential hackers? [duplicate]

Suppose you lose the bag containing your laptop along with its accessories or while travelling the police confiscate all your computer devices, can you safely use all the devices again if you format ...
6
votes
3answers
9k views

How do I use a TPM to protect my BIOS/EFI from “remote” attacks

I have a work/gaming computer. The work side is a SSD with linux and the game side is a SSD with Win7 (all security turned off, planning to get viruses and rewipe every LAN). Only one of the drives ...
1
vote
1answer
60 views

Can website exploit kits contain bootkits?

Can a website exploit kit theoretically contain a bootkit (it flashes your UEFI/BIOS)?
0
votes
1answer
94 views

Should i update the BIOS

I was reading about BIOS vulnerabilities and rootkits that have flashed malicious code to the BIOS in order to maintain access after a factory reset/operating system install or a hard drive ...
2
votes
1answer
525 views

BeagleBoneBlack, TPM and uBoot

I'm using BBB in my project. I need to prevent any changes to the software running on it. I've been reading about uBoot and TPM. But if I understand everything correctly, this can't be implemented ...
0
votes
0answers
46 views

Multi-Boot & BIOS Attack Vector Risks For Bitcoin Wallet Storage

I'm trying to emulate a cold storage computer for crypto assets with a multi-boot computer. If I have multi-OS boots & the 'cold storage' boot is never connected to the internet when it is booted,...
97
votes
9answers
30k views

Can a virus destroy the BIOS of a modern computer?

In the late 1990s, a computer virus known as CIH began infecting some computers. Its payload, when triggered, overwrote system information and destroyed the computer's BIOS, essentially bricking ...
8
votes
5answers
3k views

Besides MBR & BIOS, is it possible for a rootkit to stay persistent after a format of the hard drive?

If a system becomes infected and does not have any other storage units besides the one hard drive. Is it there any other way for a rootkit to stay on the system besides infecting the BIOS OR the MBR ...
1
vote
4answers
183 views

Volatile memory only computer?

I was wondering, is it possible to create a fully volatile computer, with no permanent memory at all (not even in the BIOS), that will be loaded on each boot from a read only live CD? Such that in ...
1
vote
3answers
1k views

BIOS upgrade only with PGP-signature / encrypting the whole BIOS

To successfully defend the BIOS from malicious rootkit installation or other malware that writes itself inside BIOS I wonder if these ideas are possible or even done yet: Can you program the BIOS ...
46
votes
4answers
11k views

Does adding a password to BIOS prevent malware from infecting it?

I'm looking into ways of hardening a computer's security. One of the things is the BIOS. Does adding a password to the BIOS prevent malware from infecting it? I have seen this article: Protecting ...
9
votes
2answers
1k views

Does the Mebromi BIOS flashing rootkit mean APTs for personal computers are here?

With the recent discovery of the Mebromi BIOS firmware virus/MBR rootkit in the wild are we now actually in the age of Advanced Persistent Threats (APT) for personal computers and does that imply ...
0
votes
1answer
619 views

What bios passwords & settings are important to set on a Thinkpad X1 laptop?

I am just booting my new X1 for the first time, and went into the bios to set a bios password. I discovered a slew of security settings: Supervisor password Lock UEFI BIOS Settings (enabled/disabled) ...
3
votes
3answers
313 views

Is knowing the BIOS password of help in hacking a computer *remotely*?

Let's assume that a hacker knows the BIOS password of a computer, but can only connect to the computer over a network (Internet). The attacker has no physical access to the computer. Is knowing the ...
1
vote
0answers
110 views

using sha256 to check for boot tampering

Consider the following machine: Dual Boots to two OSes, OS "A" and OS "B" OS "A" is trusted The bios is trusted. The root partition of OS "A" is encrypted OS "A" doesn't support secure boot OS "B" is ...
1
vote
2answers
956 views

How could malware survive hard disk drive format without residing in the firmware?

For example could it "trick" most partitioning/disk utility tools that it was successfully wiped, but with the malware still existing? Kinda similar to what would happen if you attempted to "clean" ...
3
votes
1answer
158 views

Is it risky to install a theft-protection system?

I recently bought a Dell laptop and found out that Dell recommends to install a theft-protection system called LoJack. It is a system installed on the BIOS; if the laptop is stolen, it is possible to ...
0
votes
1answer
1k views

Potential UEFI malware from Virus Total .rom scan

I dumped my firmware on my Macbook with Darwin Dumper and uploaded the .rom file to Virus Total and it showed a huge amount of bad PE32 images (File detail tab), all of which seem to be detected by ...
3
votes
3answers
9k views

How secure is Secure Erase option in BIOS?

I have been exploring data security lately and came across HDD data recovery. I now know that a format simply deletes the "pointers" to files and directories and that data is still there. The only way ...