[32763] in bugtraq
Re: Dell BIOS DoS
daemon@ATHENA.MIT.EDU (Craig Paterson)
Tue Dec 9 20:10:50 2003
Message-ID: <3FD62A57.1070005@tippett.com>
Date: Tue, 09 Dec 2003 12:02:31 -0800
From: Craig Paterson <craigp@tippett.com>
MIME-Version: 1.0
To: David Brodbeck <DavidB@mail.interclean.com>
Cc: "'jon schatz'" <jon@divisionbyzero.com>, bugtraq@securityfocus.com
In-Reply-To: <C823AC1DB499D511BB7C00B0D0F0574C5843FB@serverdell2200.interclean.com>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
David Brodbeck wrote:
>There is no such thing as security from someone who has physical access to
>the hardware.
>
Alright, so this is a tangent, but: that is what encryption is for. The
whole basis of encryption assumes that the attacker has access to the
message (your data), but that without the appropriate keys you can't
usefully access it. No, this doesn't have much to do with the value or
otherwise of BIOS passwords, but it's often stated that physical access
renders all your data wide open, which isn't necessarily the case.
Craig.
