bugtraq - Re: Dell BIOS DoS

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <3FD62A57.1070005@tippett.com>
Date: Tue, 09 Dec 2003 12:02:31 -0800
From: Craig Paterson <craigp@...pett.com>
To: David Brodbeck <DavidB@...l.interclean.com>
Cc: "'jon schatz'" <jon@...isionbyzero.com>,
	bugtraq@...urityfocus.com
Subject: Re: Dell BIOS DoS

David Brodbeck wrote:

>There is no such thing as security from someone who has physical access to
>the hardware.
>

Alright, so this is a tangent, but: that is what encryption is for. The 
whole basis of encryption assumes that the attacker has access to the 
message (your data), but that without the appropriate keys you can't 
usefully access it. No, this doesn't have much to do with the value or 
otherwise of BIOS passwords, but it's often stated that physical access 
renders all your data wide open, which isn't necessarily the case.

Craig.