On 6/4/20 1:36 AM, John M. Harris Jr wrote:
On Wednesday, June 3, 2020 9:05:22 PM MST Chris Murphy wrote:
> UEFI Secure Boot doesn't prevent you from gaining access to firmware
> setup. It can cause some options in firmware setup to become
> unavailable, e.g. compatibility support modules for presenting a
> legacy BIOS. I'm skeptical that pin shorts permit you to gain access
> to such things - but if so, it's clearly a vulnerability that should
> be reported.
This is by design. Generally, there's a marking on the silkscreen with
something like "PWD" or "PASSWD" to mark it.
I seem to remember
reading that resetting the firmware away from secure
modes also wipes the secure TPM storage, so that you effectively wipe
the machine to factory-fresh state.