01.13.12

Gemini version available ♊︎

Microsoft Fanatics Were Wrong, Linux Indeed Attacked by UEFI (Updatedx2)

Posted in Microsoft at 7:41 pm by Dr. Roy Schestowitz

Ed Bott

Summary: More information about UEFI leaves no doubt about Microsoft’s intentions to sabotage and cheat

IN OUR previous posts about UEFI (aka “secure” boot) [1, 2, 3] we showed that Microsoft was still a corrupt company looking to break the rules to make money. Aaron Williamson from the SFLC writes the article “Microsoft confirms UEFI fears, locks down ARM devices”:

At the beginning of December, we warned the Copyright Office that operating system vendors would use UEFI secure boot anticompetitively, by colluding with hardware partners to exclude alternative operating systems. As Glyn Moody points out, Microsoft has wasted no time in revising its Windows Hardware Certification Requirements to effectively ban most alternative operating systems on ARM-based devices that ship with Windows 8.

The Certification Requirements define (on page 116) a “custom” secure boot mode, in which a physically present user can add signatures for alternative operating systems to the system’s signature database, allowing the system to boot those operating systems. But for ARM devices, Custom Mode is prohibited: “On an ARM system, it is forbidden to enable Custom Mode. Only Standard Mode may be enable.” [sic] Nor will users have the choice to simply disable secure boot, as they will on non-ARM systems: “Disabling Secure [Boot] MUST NOT be possible on ARM systems.” [sic] Between these two requirements, any ARM device that ships with Windows 8 will never run another operating system, unless it is signed with a preloaded key or a security exploit is found that enables users to circumvent secure boot.

Glyn Moody adds:

In December 2011, Microsoft published a document entitled “Windows Hardware Certification Requirements” for client and server systems. As the introduction explains:

This release to web (RTW) document contains the Windows Hardware Certification requirements for Windows 8 Certified Systems. These requirements are Microsoft’s guidelines for designing systems which successfully meet Windows performance, quality, and feature criteria, to assure the optimum Windows 8 computing experience. Successfully following this guidance will allow a partner to receive certification for their system.

On page 116 of this document, there are some details about the circumstances under which Secure Boot can be disabled:

MANDATORY: Enable/Disable Secure Boot. On non-ARM systems, it is required to implement the ability to disable Secure Boot via firmware setup. A physically present user must be allowed to disable Secure Boot via firmware setup without possession of Pkpriv. Programmatic disabling of Secure Boot either during Boot Services or after exiting EFI Boot Services MUST NOT be possible. Disabling Secure MUST NOT be possible on ARM systems.

This confirms that it is indeed possible to disable Secure Boot – but only on non-ARM systems (i.e. traditional PCs.) In other words, it would appear that Microsoft is still locking out GNU/Linux from installation on ARM-based Windows 8 machines.

So this leaves me confused. The document was published some time after Microsoft’s post where it states “Microsoft does not mandate or control the settings on PC firmware that control or enable secured boot from any operating system other than Windows”, and yet it seems to contradict it. So what’s going here? Was Microsoft’s blog statement only about non-ARM systems, as the new documentation suggests? And if so, why the discrimination? And finally, is ARM really happy to see Microsoft apparently locking out GNU/Linux from its systems in this way? Let’s hope Microsoft can clarify this situation as it did on the previous occasion.

This leaves no room for excuses. Microsoft’s bribed systematic liars/spinners, such as Ed Bott, were just trying to keep regulators away. It’s time to nail down Microsoft for interfering with fair competition in more than a single way. Just because Microsoft is imploding or collapsing does not entitle it/give it a right to sabotage competitors. This harms everyone.

Update: SJVN weighs in shortly afterwards:

Microsoft and its vendor friends said that there’s no Windows 8 plot to lock other operating systems from Windows 8 devices, but now we know Microsoft was not telling the whole truth.

Journalist Glyn Moody dug around Microsoft’s Windows Hardware Certification Requirements for Windows 8 client and server systems and found on page 116 that will Windows 8 Secure Boot can be disabled: on Intel systems, “Disabling Secure [Boot] must not be possible on ARM systems.”

Update #2: Microsoft now receives the Slashdot treatment. As one person put it: “Oh boy, the lawyers must be rubbing their hands over this. The flaw in Microsoft’s aim of course is that next to no one wants a Microsoft mobile gadget.”

Share in other sites/networks: These icons link to social bookmarking sites where readers can share and discover new web pages.
  • Reddit
  • email

Decor ᶃ Gemini Space

Below is a Web proxy. We recommend getting a Gemini client/browser.

Black/white/grey bullet button This post is also available in Gemini over at this address (requires a Gemini client/browser to open).

Decor ✐ Cross-references

Black/white/grey bullet button Pages that cross-reference this one, if any exist, are listed below or will be listed below over time.

Decor ▢ Respond and Discuss

Black/white/grey bullet button If you liked this post, consider subscribing to the RSS feed or join us now at the IRC channels.

4 Comments

  1. Michael said,

    January 13, 2012 at 8:23 pm

    Gravatar

    Wait… are you a supporter of free and fair competition now? Does that mean you are going to speak out against Google/Samsung for not playing fair and plagiarizing Apple?

    Wait… no, you are not.

    I wish you could be consistent.

  2. Mikko said,

    January 18, 2012 at 8:25 am

    Gravatar

    Michael is a troll and a member of apple invented everything in technology and everybody else are just stealing from apple

    Michael Reply:

    That is silly. Why troll me and not try to refute my claims?

    Remember, the evidence that Samsung plagiarized Apple is rock solid:

    http://i.imgur.com/TmUj2.jpg
    http://goo.gl/S2AJR
    http://goo.gl/bWDs6
    http://goo.gl/NjrfV

    If you have a reasoned counter, something more than just empty denial, I am open to reading it.

    But you do not – hence the reason you leave the topic behind to call me names and make up stories about me and my views.

  3. mrkennie said,

    January 18, 2012 at 12:16 pm

    Gravatar

    I wondered when this would happen and probably will be allowed to happen just like MSXML became an ISO standard and SOPA will be passed. Rich Corporations run the US. Democracy? What is that again?

DecorWhat Else is New


  1. Links 06/02/2023: Sparky 6.6 and IPFire 2.27 – Core Update 173

    Links for the day



  2. Taking Back Control or Seizing Autonomy Over the News Cycle (Informing People, Culling the Marketing)





  3. Reality Versus Fiction: EPO Insiders Versus EPO Web Site and UPC 'Churnalists'

    The "official" sources of the European Patent Office (EPO), as well as the sedated "media" that the EPO is bribing for further bias, cannot tell the truth about this very large institution; for proper examination of Europe's largest patent office one must pursue the interpretation by longtime veterans and insiders, who are increasingly upset and abused (they're being pressured to grant patents in violation of the charter of the EPO)



  4. Links 06/02/2023: Linux 6.2 RC7 and Fatal Earthquake

    Links for the day



  5. IRC Proceedings: Sunday, February 05, 2023

    IRC logs for Sunday, February 05, 2023



  6. Links 05/02/2023: Wayland in Bookworm and xvidtune 1.0.4

    Links for the day



  7. Links 05/02/2023: Pakistan Blocks Wikipedia, Musharraf Dies

    Links for the day



  8. IRC Proceedings: Saturday, February 04, 2023

    IRC logs for Saturday, February 04, 2023



  9. Links 04/02/2023: FOSDEM Happening and Ken Thompson in SoCal Linux Expo

    Links for the day



  10. 2023 is the Year Taxpayers' Money Goes to War and Energy Subsidies, Not Tech

    Now that a lot of powerful and omnipresent ‘tech’ (spying and policing) companies are rotting away we have golden opportunities to bring about positive change and maybe even recruit technical people for good causes



  11. Getting Back to Productive Computer Systems Would Benefit Public Health and Not Just Boost Productivity

    “Smartphoneshame” (shaming an unhealthy culture of obsession with “apps”) would potentially bring about a better, more sociable society with fewer mental health crises and higher productivity levels



  12. Links 04/02/2023: This Week in KDE and Many More Tech Layoffs

    Links for the day



  13. Dotcom Boom and Bust, Round 2

    The age of technology giants/monopolies devouring everything or military-funded (i.e. taxpayers-subsidised) surveillance/censorship tentacles, in effect privatised eyes of the state, may be ending; the United States can barely sustain that anymore and raising the debt ceiling won't solve that (buying time isn't the solution)



  14. Society Would Benefit From a Smartphoneshame Movement

    In a society plagued by blackmail, surveillance and frivolous lawsuits it is important to reconsider the notion of “smart” phone ownership; these devices give potentially authoritarian companies and governments far too much power over people (in the EU they want to introduce new legislation that would, in effect, ban Free software if it enables true privacy)



  15. IRC Proceedings: Friday, February 03, 2023

    IRC logs for Friday, February 03, 2023



  16. IRC Proceedings: Thursday, February 02, 2023

    IRC logs for Thursday, February 02, 2023



  17. Links 03/02/2023: Proton 7.0-6 Released, ScummVM 2.7 Testing

    Links for the day



  18. Links 03/02/2023: OpenSSH 9.2 and OBS Studio 29.0.1

    Links for the day



  19. Links 03/02/2023: GNU C Library 2.37

    Links for the day



  20. Sirius Finished

    Yesterday I was sent a letter approving my resignation from Sirius ‘Open Source’, two months after I had already announced that I was resigning with immediate effect; they sent an identical letter to my wife (this time, unlike before, they remembered to also change the names!!)



  21. The Collapse of Sirius in a Nutshell: How to Identify the Symptoms and Decide When to Leave

    Sirius is finished, but it's important to share the lessons learned with other people; there might be other "pretenders" out there and they need to be abandoned



  22. Links 03/02/2023: WINE 8.1 and RapidDisk 9.0.0

    Links for the day



  23. Links 02/02/2023: KDE Gear 22.12.2 and LibreOffice 7.5

    Links for the day



  24. Linux News or Marketing Platform?

    Ads everywhere: Phoronix puts them at the top, bottom, navigation bar, left, and right just to read some Microsoft junk (puff pieces about something that nobody other than Microsoft even uses); in addition there are pop-ups asking for consent to send visitors’ data to hundreds of data brokers



  25. Daily Links at Techrights Turn 15, Time to Give Them an Upgrade

    This year we have several 15-year anniversaries; one of them is Daily Links (it turned 15 earlier this week) and we've been working to improve these batches of links, making them a lot more extensive and somewhat better structured/clustered



  26. Back to Focusing on Unified Patent Court (UPC) Crimes and Illegal Patent Agenda, Including the EPO's

    The EPO's (European Patent Office, Europe's second-largest institution) violations of constitutions, laws and so on merit more coverage, seeing that what's left of the "media" not only fails to cover scandalous things but is actively cheering for criminals (in exchange for money)



  27. European Patent Office Staff Votes in Favour of Freedom of Association (97% of Voters in Support)

    The Central Staff Committee (CSC) at the EPO makes a strong case for António Campinos to stop breaking and law and actually start obeying court orders (he’s no better than Benoît Battistelli and he uses worse language already)



  28. Links 02/02/2023: Glibc 2.37 and Go 1.20

    Links for the day



  29. IRC Proceedings: Wednesday, February 01, 2023

    IRC logs for Wednesday, February 01, 2023



  30. Links 01/02/2023: Security Problems, Unrest, and More

    Links for the day


RSS 64x64RSS Feed: subscribe to the RSS feed for regular updates

Home iconSite Wiki: You can improve this site by helping the extension of the site's content

Home iconSite Home: Background about the site and some key features in the front page

Chat iconIRC Channel: Come and chat with us in real time

Recent Posts