Bugtraq mailing list archives

Re: Dell BIOS DoS


From: Craig Paterson <craigp () tippett com>
Date: Tue, 09 Dec 2003 12:02:31 -0800

David Brodbeck wrote:

There is no such thing as security from someone who has physical access to
the hardware.


Alright, so this is a tangent, but: that is what encryption is for. The whole basis of encryption assumes that the attacker has access to the message (your data), but that without the appropriate keys you can't usefully access it. No, this doesn't have much to do with the value or otherwise of BIOS passwords, but it's often stated that physical access renders all your data wide open, which isn't necessarily the case.

Craig.



Current thread: