Acer/Insyde systems store BIOS passsword as cleartext

~ hucktech

If you have an Acer, ask them when they are going to patch this! If you know of a patch for this, please leave a Comment (see left).

 

Published by hucktech

One thought on “Acer/Insyde systems store BIOS passsword as cleartext”

  1. Patching the algorithm will be too hard without sources, but this region can be read-protected by PR2/PR3, which normally aren’t used and available. You have to patch PchInitDxe driver to not set FLOCKDN bit too early (you can’t change PRs if it’s already set), and write a driver to enable read-protection on ExitBS event.
    I will present a fix for it together with other fixes during my ZeroNights 2015 talk, then all the slides, sources, patches and images will be available on GitHub.

    Like

    Reply

Leave a comment