I am a bit of security expert myself!
pulls out screwdriver
this post was submitted on 16 Jun 2023
48 points (100.0% liked)
Technology
37746 readers
50 users here now
A nice place to discuss rumors, happenings, innovations, and challenges in the technology sphere. We also welcome discussions on the intersections of technology and society. If it’s technological news or discussion of technology, it probably belongs here.
Remember the overriding ethos on Beehaw: Be(e) Nice. Each user you encounter here is a person, and should be treated with kindness (even if they’re wrong, or use a Linux distro you don’t like). Personal attacks will not be tolerated.
Subcommunities on Beehaw:
This community's icon was made by Aaron Schneider, under the CC-BY-NC-SA 4.0 license.
founded 2 years ago
MODERATORS
In the past they had jumpers for the same purpose.
yeah, I did that in my high school years.(80386~80486 years). The jumper reset is neat cause you can then set the school computer to boot from floppy first instead of booting from whatever source it was set to.
So, how tf you have access to MB? Well, if you are much better at computers than most teachers at school, naturally they let you "help" doing the maintenance(aka, figure out what's wrong, replace parts etc). I did those free labour so I can play some games during school hours, so that's a fair trade.
load more comments
(2 replies)
BIOS passwords have only ever been to deter unsophisticated attacks. Though this is more unsophisticated than the rest.
like just removing the battery to reset the CMOS
That hasn’t worked in a while, has it?
on DIY motherboards it still works like this
It’s a little difficult to reset the password if it’s lost otherwise.
Just Google the board reset methods from the brand(Asus/gigabyte/MSI/etc) modern board usually have more than one way to regain bios access.
Most motherboards store the password in SRAM along with all of the other BIOS settings. Removing or shorting the backup battery will clear everything.
Some motherboards store the password in non volatile memory. That's usually done in computers intended for business use. If you forget the password, you have to get a reset code from the manufacturer after proving that you are the owner of it.
It's even more trivial to remove the hard drive and read/write it directly, possibly even booting it on a separate system directly or in a virtual machine. BIOS passwords (on all x86 systems, not just Lenovo) provide very limited security benefits, but they can be sufficient for some basic security requirements.
Well right now it's more secure than a decade ago
Today a locked BIOS + strong windows password could render a stolen computer almost useless if:
-
Storage is encrypted with keys stored in the CPU tpm (default)
-
Nand is soldered
-
Secureboot is enforced strictly so only windows could boot (default)
-
Before locking the bios with a password, all booting options are disabled except internal storage
view more: next ›