None of these will work. !bios / cmospwd / spotmau etc. Don't yet know about these modern bioses and so just return 100% gibberish; their blanking functions target the wrong addresses also.
The password info is held inside nonvolatile memory which either does not require constant power to retain the data, or else is backed up by an unidentified smt capacitor somewhere on the board (capacitor's my conjecture)
The memory used generally resides within the main peripheral controller chip and is not addressable by the 'normal' address bus used by general programs.
So, removing the cmos battery accomplishes nothing.
Reflashing the bios also does nothing more than replace the bioses running code, it does not replace the password memory within the controller chip.
One would need to identify whatever pins are used on the controller chip to access the memory, attach some form of piggyback hardware, and 'milk' the password data out of it. This would entail knowing precisely how to address the memory within the chip (pulse timings) and also exactly which addresses to read.
Then, one would need to know exactly what algorithm the bios was using to hash down from a readable password to whatever encrypted form is held in the controller chip. Then you could -possibly- write code to determine ascii strings which resulted in the same hash.
No doubt the '0000' or equivalent hash (resulting from a simple hardware clear of the password memory) has been foreseen and coded against.
Software and hardware designs to break these newer bioses will no doubt come about eventually but there's a waiting period whilst the geeks fiddle around, and this time the budding bios password cracker will need a soldering iron, pretty good electronics construction skills, and a good quality oscilloscope.
Look deeper into the subject of 'Trusted Computing' and you'll see all this is the least of the worries about the future of smalltime computer repair. Soon enough, if you're not Dell or Siemens, you'll have no hope doing anything. Personally, I'm going back to gardening :)
-reply by edfrgwerg
Comment/Reply (w/o sign-up)