bugtraq - Re: Dell BIOS DoS

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <20031210004719.GH849@wirex.com>
Date: Tue, 9 Dec 2003 16:47:19 -0800
From: Seth Arnold <sarnold@...ex.com>
To: bugtraq@...urityfocus.com
Subject: Re: Dell BIOS DoS

On Tue, Dec 09, 2003 at 08:08:31PM -0000, Ross Draper wrote:
> I agree with your points Jon, but lets be fair here, BIOS passwords do
> have a use - especially on laptops.

An oft-overlooked use for BIOS passwords is an 'auditing' mechanism;
typically, when one resets a BIOS password via magic jumpers, removing
battery, etc, there is typically no way to put the password BACK.

So, someone who disables or destroys the BIOS password still stands a
good chance of being discovered, at the least.

-- 
Outlook users: please do not put my email address in your address book.
This way, when you get infected with a virus, my address won't appear in
the From: header. Thanks.

Content of type "application/pgp-signature" skipped