bugtraq - Re: Dell BIOS DoS

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20031209225031.GA26985@neurosis.jim.sh>
Date: Tue, 9 Dec 2003 17:50:31 -0500
From: Jim Paris <jim@...n.com>
To: David Brodbeck <DavidB@...l.interclean.com>
Cc: "'jon schatz'" <jon@...isionbyzero.com>,
	bugtraq@...urityfocus.com
Subject: Re: Dell BIOS DoS

> > seriously, bios passwords are worthless.
> 
> There is no such thing as security from someone who has physical access to
> the hardware.

There are different types of physical access.  For example, many
computers at my university are publically accessible but strapped to
the table in such a way that the case cannot be removed without a key
or a lot of force.  It is trivial to reboot them and attempt to enter
BIOS, but an entirely different matter to open it up and move a jumper
or swap the hard drive.

-jim