Collaborate Disseminate
I’m looking into ways of hardening a computer’s security. One of the things is the BIOS.
Does adding a password to the BIOS prevent malware from infecting it?
I have seen this article: Protecting the BIOS from malware b… Continue reading Does adding a password to BIOS prevent malware from infecting it?
I’m looking into ways of hardening a computer’s security. One of the things is the BIOS.
Does adding a password to the BIOS prevent malware from infecting it?
I have seen this article: Protecting the BIOS from malware b… Continue reading Does adding a password to BIOS prevent malware from infecting it?
When using BIOS HDD user/master ATA password to enable Class 0 security on Samsung drive how (using which encryption method) aes key is being encrypted internally?
I have been exploring data security lately and came across HDD data recovery. I now know that a format simply deletes the “pointers” to files and directories and that data is still there. The only way to completely wipe the drive is to eit… Continue reading How secure is Secure Erase option in BIOS?
It didn’t look like a home computer, but that meant it was easier to get one at work, so you could….could…heck, because you could! Continue reading IBM PC is 35 – let’s all go back to the 80s!
Assume you are a paranoic that have a 100% open source OS with drivers etc, but you don’t have an alternative to your closed source BIOS.
How can you sure the BIOS didn’t insert malicious code in e.g some programs ? You can’t… Continue reading Can you prove that the OS loaded by your BIOS is really your OS?
If someone adds a password to the bios of a computer and make it so that when booting the computer it prompts for the password, is there any way to bypass or overide that protection?
Firmware malware has been a hot topic ever since Snowden’s leaks revealed NSA’s efforts to infect BIOS firmware. However, BIOS malware is no longer something exclusive to the NSA, Lenovo’s Service Engine or Hacking Team’s UEFI rootkit&nb… Continue reading Putting the spotlight on firmware malware
Firmware malware has been a hot topic ever since Snowden’s leaks revealed NSA’s efforts to infect BIOS firmware. However, BIOS malware is no longer something exclusive to the NSA, Lenovo’s Service Engine or Hacking Team’s UEFI rootkit&nb… Continue reading Putting the spotlight on firmware malware
I’m wondering what is the best way to protect my personal data stored on Samsung SSD 850 EVO in Linux?
I did some research and found this.
To set an ATA password, simply access the BIOS, navigate to the
“Security” menu, enable “Password on boot” and set an “HDD Password.”
Administrators also have the option of setting a “Master Password,”
which can allow a lost user password (“HDD Password) to be recovered.
The “Master Password” may also be used to unlock and/or erase the
drive (depending on the settings), effectively destroying, and thus
protecting, the data but allowing the drive to be reused.
I steal your laptop. You have a password set on the hard drive. Oh
well looky here i have another PC that support this kind of hard drive
password encryption (Not all do and most desktop’s don’t support it
except for business class like the dell optiplex which is what i did
all my testing on). I go into my BIOS. I set an Admin password on my
BIOS. I turn off my PC, plug in your drive, turn it on, go into BIOS.
But you are thinking WAIT! it ask for the hard drive password before
you can even get into the BIOS! Errrr WRONG! I use MY admin password
for your hard drive and I am in my BIOS. Now i go to the hard drive
password, and change it using MY ADMIN PASSWORD AND THE CURRENT
PASSWORD, and then either set no password or changed it. I reboot, I’m
in, your files are mine.
(http://www.tomshardware.co.uk/answers/id-2813442/encryption-samsung-840-ev0-ssd.html)
In other case I can use additional OPAL software msed (https://vxlabs.com/2015/02/11/use-the-hardware-based-full-disk-encryption-your-tcg-opal-ssd-with-msed/) or use software based encryption utilities like TrueCrypt and accept all performance issues.
In other words
– is it really so easy to decrypt Samsung EVO 850 hard drive password?
– will msed usage be more secure in my case or TrueCrypt is the only solution?
Continue reading Samsung SSD 850 EVO. Best way to protect personal data against thiefs