$10 programmer unlocks BIOS-locked ThinkPads and saves them from e-waste

[JJenson]

Locked business laptops could be rescued from the scrap heap with a cheap tool. Tom's Hardware reports on a YouTube tutorial by Hileeq that uses an inexpensive CH341A programmer, NeoProgrammer software and a second PC to clear supervisor passwords on ThinkPads with Intel 4th to 8th generation processors

The method reads the SPI flash chip, flashes a patched BIOS that clears the supervisor password stored in the Embedded Controller, and then restores the original BIOS. It only works on those older Intel models

The technique builds on a free 2020 bypass by Knucklegrumble posted on Badcaps, and an earlier paid key generator. Mark Juvan analysed the approach for a master's thesis at Radboud University

According to Juvan, the root cause is that Lenovo's EmulatedEepromDxe driver lets the EEPROM region holding the password be read and overwritten. The motivation is that ex fleet laptops whose companies never removed the passwords sell cheaply on eBay and often end up scrapped

Saving working laptops from landfill is a worthwhile goal, especially older ThinkPads with excellent keyboards and repairability. Companies retiring fleets should remove BIOS passwords before disposal so this is not needed. The research also shows why firmware security deserves attention

Have you ever bought an ex business laptop? And should companies be required to unlock devices before selling them?

$10 programmer saves BIOS-locked Lenovo ThinkPads from the dump - exploit bypasses supervisor passwords to save 4th- to 8th-gen Intel models from e-wastewww.tomshardware.com