0

I saw when my computer battery was low, it automaticly hibernate and when i opened it again i dont see boot device option or bios setting keys. So if we send hibernate code every shutdown or reboot, can we block usb boot hacks?

4
  • now, please answer.
    – user84277
    Nov 27, 2013 at 21:00
  • can you explain it a little bit more, I couldn’t understand what you want to know??Whats usb boot hacks??
    – Sukupa91
    Nov 28, 2013 at 17:38
  • If you just want to stop booting from USB, you should be able to disable it in BIOS.
    – Wilf
    Nov 28, 2013 at 19:23
  • @EnesKuray - In case you want to stop booting from USB, by disable it in BIOS-settings, then you need to enable BIOS-password for each login and this BIOS-password is not as secure as the one of Linux-login-display-manager ... you also could write a script to chmod 0000 /dev/usb - or to comment the usb-recognition in /etc/fstab with #. Dec 4, 2013 at 14:51

2 Answers 2

1

Are you trying to prevent someone from accessing your HDD by booting up a system from USB? If an attacker have physical access to your machine, he can always take out your HDD and do what he want. So in this case it won't help if you could disable booting from USB. This "hibernating method" is no more safer then password protecting your BIOS.

Drive encryption is the only way to prevent an attacker with physical access to your machine from accessing your files.

I see you want an answer from credible/official source, so for example look at this. It also says that the resolution is to encrypt your files/drive.

0

A simple attack vector on the protection scheme you proposed is to let the computer wake up from hibernation and then forcefully restart it. Upon next boot it will boot normally, allowing access to the BIOS settings key and USB booting.

However, in order to give a more precise answer you'll need to provide additional details. The kind of functionality you're describing is probably implemented by your computer's UEFI firmware (and not BIOS which isn't sophisticated enough). So the answer might depend on the exact UEFI firmware you have (as different vendors might implement different protections there).

1
  • it do not support it.
    – user84277
    Dec 1, 2013 at 11:41

You must log in to answer this question.