2 ms·
So, if I understand correctly, it allows to bypass BIOS password? Are there people relying on those? I may understand it's a bit more secure on a laptop, but on
by oelmekki 9y ago
So, if I understand correctly, it allows to bypass BIOS password? Are there people relying on those? I may understand it's a bit more secure on a laptop, but on a desktop you just have to remove BIOS battery to reset the password, anyway. Better encrypt disks and rely on OS authentication (plus, it's easier to do for non experts).
EDIT: on second reading, I realize the real problem of the thing is to allow for remote control, provided one can access machine ports.
- ekianjo 9y ago> Are there people relying on those? Having a BIOS password was already one of the mitigation for the Intel AMT-related security issue discovered not too long ago.
- als0 9y agoDoes a modern laptop still depend on CMOS battery for anything other than an RTC? I thought all BIOS variables today are stored on SPI flash.
- omgtehlion 9y agoIf you have access to the battery then you have access to the flash chip as well. Using a right clamp (sop8 usually) you can reflash the thing in a matter of seconds (I did).