Bios Password

Hi,

I am trying to set a BIOS Password to make it more difficult for an attacker to flash the Boot sector of my pocket, but I could not figure out a way.

has anyone of you tried, and succeded? Is that feature even implemented? If not, why not?

regards

The password is already blocked in the BIOS

Will it be possible to set a BIOS password in the future?
I would like to forbid to boot from USB unless the right password is entered.

ovate wrote:Will it be possible to set a BIOS password in the future?  
I would like to forbid to boot from USB unless the right password is entered.

You can upgrade the Ubuntu BIOS


Pocket BIOS for Ubuntu 20170628
https://mega.nz/#!MN52EChD!n_pgjceHp9hXC-EO51qtUkDncpVXoY_lc1Da0LtgsgM
You must first upgrade the BIOS under Windows and then brush the ubuntu firmware.

Hi,

I did upgrade to the Ubuntu Version!
There even is some security simulation in there.

Can you please fix the possibility to bypass the bios admin password by pressing the power key for half a second?
This is just wrong.

Here is a Demonstration Video:




regards

Hans

ovate wrote:Hi,

I did upgrade to the Ubuntu Version!  
There even is some security simulation in there.

Can you please fix the possibility to bypass the bios admin password by pressing the power key for half a second?
This is just wrong.

Here is a Demonstration Video:




regards

     Hans

There is no debug command on Windows 10. You can use the dosbox tool to run debug
Enter at the command line
-o 70 10
-o 71 01
-q
You can clear the BIOS password

I don't need to clear the BIOS password. Or do you need some extra debug information?

My idea was to prevent an attacker to boot from USB to install some evil software on the device.
Setting an admin password should do the job, except if you can enter BIOS anyway
as it is the case with the pocket.

I do not intend to use the pocket for gaming. I intend to use it as a portable secure ssh terminal and most importantly
as a password database. With modern hardware and a hard wired, usable keyboard and that size the hardware is
perfect for that job.

The only downfall so far is the buggy BIOS and of course the Intel Management Engine.

So I hope we can fix at least the BIOS. I think deactivation of the Management Engine is for another topic.

regards

Hans

ovate wrote:I don't need to clear the BIOS password. Or do you need some extra debug information?

My idea was to prevent an attacker to boot from USB to install some evil software on the device.
Setting an admin password should do the job, except if you can enter BIOS anyway
as it is the case with the pocket.

I do not intend to use the pocket for gaming. I intend to use it as a portable secure ssh terminal and most importantly
as a password database. With modern hardware and a hard wired, usable keyboard and that size  the hardware is
perfect for that job.

The only downfall so far is the buggy BIOS and of course the Intel Management Engine.

So I hope we can fix at least the BIOS. I think deactivation of the Management Engine is for another topic.

regards

    Hans

If you can access Windows, you can swipe the latest version of the BIOS firmware.

GPD Pocket drivers (20170609)
https://mega.nz/#!ut9XHYjD!gl6NIFLjLFZqwiTrGoHUz72QHV5IOwkmwea-E_xupqE

Admin wrote:
If you can access Windows, you can swipe the latest version of the BIOS firmware.

GPD Pocket drivers (20170609)
https://mega.nz/#!ut9XHYjD!gl6NIFLjLFZqwiTrGoHUz72QHV5IOwkmwea-E_xupqE

That looks like the link to the Windows Driver Archive, not the BIOS.
I already am on the "latest" Ubuntu BIOS Version:

This one: https://mega.nz/#!MN52EChD!n_pgjceHp9hXC-EO51qtUkDncpVXoY_lc1Da0LtgsgM

The (newer) Windows BIOS Versions do not have the ability to set a BIOS Password, as we discovered earlier in this thread. ;-)

ovate wrote:

Admin wrote:
If you can access Windows, you can swipe the latest version of the BIOS firmware.

GPD Pocket drivers (20170609)
https://mega.nz/#!ut9XHYjD!gl6NIFLjLFZqwiTrGoHUz72QHV5IOwkmwea-E_xupqE

That  looks like the link to the Windows Driver Archive, not the BIOS.  
I already am on the "latest" Ubuntu BIOS Version:

This one: https://mega.nz/#!MN52EChD!n_pgjceHp9hXC-EO51qtUkDncpVXoY_lc1Da0LtgsgM

The (newer) Windows BIOS Versions do not have the ability to set a BIOS Password, as we discovered earlier in this thread. ;-)

It is possible that the bios password setting function is disabled.