• unix_joe@lemmy.sdf.org
      link
      fedilink
      arrow-up
      2
      ·
      1 year ago

      IBM ThinkPads could be reset if you beamed a certain radio frequency directly at the BIOS chip. It was documented in the user guide as a feature if you were ever locked out, or the system was no longer booting. It’s been 20 years but I doubt that feature ever went away.

      • JohannesOliver@beehaw.org
        link
        fedilink
        arrow-up
        1
        ·
        1 year ago

        For a while vendors tried to lock down the BIOS pretty hard. Dell might still, I remember having to call and get assistance when a password was forgotten and they had to generate a backdoor key of some sort. Maybe that is less of a thing now that Bitlocker is widely used on corporate laptops and it is sensitive to tampering.

  • bouncing@partizle.com
    link
    fedilink
    arrow-up
    3
    ·
    1 year ago

    BIOS passwords have only ever been to deter unsophisticated attacks. Though this is more unsophisticated than the rest.

        • cmnybo@discuss.tchncs.de
          link
          fedilink
          arrow-up
          2
          ·
          1 year ago

          Most motherboards store the password in SRAM along with all of the other BIOS settings. Removing or shorting the backup battery will clear everything.

          Some motherboards store the password in non volatile memory. That’s usually done in computers intended for business use. If you forget the password, you have to get a reset code from the manufacturer after proving that you are the owner of it.

  • Zaytalion@partizle.com
    link
    fedilink
    arrow-up
    1
    ·
    1 year ago

    It’s even more trivial to remove the hard drive and read/write it directly, possibly even booting it on a separate system directly or in a virtual machine. BIOS passwords (on all x86 systems, not just Lenovo) provide very limited security benefits, but they can be sufficient for some basic security requirements.

    • Moonrise2473@feddit.itOP
      link
      fedilink
      arrow-up
      0
      ·
      1 year ago

      Well right now it’s more secure than a decade ago

      Today a locked BIOS + strong windows password could render a stolen computer almost useless if:

      1. Storage is encrypted with keys stored in the CPU tpm (default)

      2. Nand is soldered

      3. Secureboot is enforced strictly so only windows could boot (default)

      4. Before locking the bios with a password, all booting options are disabled except internal storage