I am aware that there are programs out there like lojack for laptops that get installed on the BIOS, but I’m still a little confused. When reading about lojack, it seems to me that they can’t fully located the laptop’s location until the user logs in and tries to access the internet. So I’m thinking that it’s a BIOS application so that it wouldn’t matter if the thief reformats the HD.
So my question is, does anyone have any ideas of how an internet enables BIOS application would be written. I’m not looking for full answers — just ideas or resources to get started. For example, is such a thing written in assembly? Once one such app is written, how does it get transfered to the BIOS.
Does the BIOS program itself recognize that there is an internet connection (when the thief logs on to the OS). Or upon logon, does additional processes get spawned? Are there any resources/websites that anyone can direct me too?
The BIOS program itself does not access the internet or perform any of the advertised functions. The LoJack addition to the BIOS firmware is a file copying/patching utility – at boot up it can check the harddrive for a copy of Windows and proceed to silently install/repair the LoJack service if it has been removed. The service itself includes several measures to lower it’s profile and prevent itself from being disabled (similar to how many trojans and malware run several processes that each restore the other if one is disabled or killed).
The LoJack BIOS program can’t do anything if a unsupported operating system (like Linux) is installed after the harddrive is wiped.