up vote 1 down vote favorite
share [g+] share [fb]

We talking about a T500 Lenovo notebook, but take the question generally.

So: I have a BIOS password, a Windows password, a Boot password.
Does that mean my HDD is hardware encrypted and I'm safe or I should use TrueCrypt too for 100% security? (If there is a way to get around the basic Lenovo/Windows stuff, I'll encrypt it with Truecrypt, concentrate on this.)

link|improve this question
82% accept rate
I don't think hard disk would be encrypted – Sathya♦ Jan 17 '11 at 15:40
I'm trying to look around at Lenovo's / WD's website but they don't even mention encryption at hard-drive manufacturers. Is it that rare? – Shiki Jan 17 '11 at 15:43
ThinkPads do support hardware drive encryption, but those drives are an expensive option you probably don't have. – Shinrai Jan 17 '11 at 16:40
feedback

2 Answers

up vote 2 down vote accepted

The HDD is not encrypted, only password protected. The BIOS password is very hard, if not impossible to crack. An employee got fired from the data center I work at and had set a BIOS password. I tried everything I could think of to hack the password, including disconnecting the CMOS battery, brute force, and I don't remember the rest because it was about a year ago. The Windows password can easily be hacked with a tool discussed in this superuser answer. I have never had a reason to hack a boot password.

I think you would be pretty safe, but just to be on the safe side, I would use TrueCrypt or another encryption software.

link|improve this answer
AFAIK, BIOS passwords do not survive a CMOS reset (via the jumper). I'm not sure if that option exists on a Laptop. – Bobby Jan 17 '11 at 15:59
3  
Lenovo laptop's have a separate place that stores the password for the BIOS, which makes it near impossible to override. – mickburkejnr Jan 17 '11 at 16:07
You are correct @mickburkejnr, just as I described in the answer. Thank you for supporting my answer. – David Jan 17 '11 at 16:22
anytime :). I'm the proud owner of an IBM ThinkPad (built by Lenovo) so I have good experience with using them! – mickburkejnr Jan 17 '11 at 16:33
There is a way to clear the BIOS password on a ThinkPad, but yeah, clearing the CMOS won't do it. (And I'm not about to tell you how to do it, but it's not for the faint of heart anyway.) If there's a BIOS supervisor password set, there's absolutely NO WAY to clear that, period, no matter what. – Shinrai Jan 17 '11 at 16:40
feedback
up vote 2 down vote

Whole-disk encryption is generally provided either by the Operating System (i.e.: Windows BitLocker) or by third-party software such as TrueCrypt.

None of password protection methods you've described typically result in encryption of the data. In the end, if someone wants to get at the data of your machine in its current state, all they need to do is remove the hard drive and load it in a system they control.

Even in the same system, they could still use a boot disk to load their own environment on your computer. While the BIOS and boot-time passwords offer some level of protection against this, physical access to the system typically makes these measures trivial to override.

link|improve this answer
But ... I have tried to crack a HDD like that. Couldn't find any reference, bruteforcer or something. If you remove the hard-drive from the laptop and install it in a PC, it won't add it as a single NTFS drive. You have to enter the password in some way. – Shiki Jan 17 '11 at 16:44
@Shiki - It sounds like you are now talking about a different HDD, from a different configuration. It is possible that the drive you're now referencing was actually encrypted, or used some file system that the host did not recognize. Or, perhaps the drive was damaged beyond readability. – Iszi Rory or Isznti Jan 17 '11 at 20:58
The drive was in an Acer laptop, and only had a HDD password from the BIOS. It wasn't damaged, the owner could boot it anytime. Also, it had NTFS, perfectly find NTFS. It just completely locks the HDD when you input a password there. I tried googleing all-day how could I crack it but people said its even impossible if you replace the (HDD) drive mechanism. – Shiki Jan 18 '11 at 15:05
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.