HP accused of crippling its own BIOS password security

HP has come under fire from UK-based security company SecureTest [1] for effectively crippling the BIOS password security measure for its laptops by publishing reset data on its website. This comes against a backdrop of an increasing number of security breaches stemming from stolen laptops. Unlike desktop BIOS reset procedures that involve the shorting together of (guessable) jumpers on the motherboard, laptop BIOS resets typically involve calling up your vendor and enduring a challenge-response, or perhaps even a visit to a dealer. While relying on BIOS security is hardly absolute, the argument is that it does form one layer of an in-depth defense paradigm. Not everyone agrees though, with some putting BIOS passwords down as a "redundant" option. HP, so far, remains silent on the matter.

For more on HP's BIOS password security:
- check out this Channel Register article [2]