EditorsAbout the SiteComes vs. MicrosoftUsing This Web SiteSite ArchivesCredibility IndexOOXMLOpenDocumentPatentsNovellNews DigestSite NewsRSS

11.29.12

UEFI Apologists Versus Germany’s Government Judgment on UEFI Insecurity

Posted in Europe, GNU/Linux, Kernel, Security at 5:31 pm by Dr. Roy Schestowitz

Flag of Germany

Summary: Proponents of UEFI support, who are sometimes Mono proponents as well, may struggle to reason in favour of crippleware given the way UEFI rejects Linux and the reasons the German authorities reject UEFI

T

HE Windows franchise is collapsing (ignore the Microsoft PR machine, which we’ll address in a separate post), so Microsoft created a breed of machines that won’t boot Linux. One blogger writes:

So do not buy that new shiny computer without knowing what pitfalls you may have to overcome in order to run a free operating system. As a footnote, the Secure Boot link is from an article on the Linux Foundation’s efforts written on ZDNet’s website all about how Microsoft is delaying the keys for Linux. Hmm, just one more reason to buy new equipment from alternate retailers that put Linux first or buy used.

Bottomley and the Linux Foundation cannot say much after they sold out (Novell plays a role for both) and Michael Larabel writes:

James Bottomley wrote a new blog post this morning about why the Linux Foundation really isn’t concerned about UEFI SecureBoot on ARM hardware (smart-phones, tablets, etc) compared to the work they are doing on x86 PCs with UEFI SecureBoot support for Linux.

Last month the Linux Foundation announced their UEFI SecureBoot plans for dealing with Microsoft Windows 8 PCs. Their plans basically equated to legally obtaining a Microsoft key and signing a small pre-bootloader that in turn could chain load a predesignated boot loader that would in turn boot Linux or any other operating system without having to deal with the SecureBoot mess. The signed pre-bootloader will be available from the Linux Foundation web-site for anyone to use along with the source-code, albeit not their private key. The foundation is still working to obtain a SecureBoot key and their SecureBoot focus has just been for x86 hardware.

With Linux users wondering why the Linux Foundation isn’t diving into some SecureBoot solution for ARM, James Bottomley wrote a lengthy explanation.

We also saw some feedback from vocal UEFI apologists, who are sometimes the same people who promote Mono. Yes, promoters of Microsoft’s (and Novell’s) Mono also promote or downplay the issues with Microsoft’s UEFI demands, but we won’t be linking to them. They provoke against this site. Anyway, here is the original post that seeded this debate. It says:

The answer to this comes in several parts: firstly in the PC space, Microsoft has an effective headlock on the OEM and ODMs: no desktop PC ships without a Windows compatibility sticker (the situation is different in the server market, but this is specifically about desktop PCs). Therefore in order to continue simply booting Linux on laptops and desktops, it is a huge priority to find a solution to this problem. Secondly: in the overall mobile marketplace, which encompasses tablets and smartphones, Microsoft has a very tiny presence: somewhere between 2-5%. Linux (Android) has the majority presence: by some counts, Android is >50% in this market space with Apple a close second. Therefore, a Microsoft mandate in an industry where they have no dominance is simply not really threatening (unlike the PC space where they have complete dominance).

The German authorities have already banned UEFI for their own use/machines on the face of it. So-called ‘secure’ boot is bad for national security. The “German government issues white paper on secure boot,” writes LWN:

A press release from FSF Europe (issued November 20) welcomes a white paper from the German federal government on trusted computing and secure boot. “Another demand by the FSFE is addressed by the government’s white paper. That before purchasing a device, buyers must be informed concisely about the technical measures implemented in this device, as well as the specific usage restrictions and their consequences for the owner: ‘Trusted computing security systems must be deactivated (opt-in principle)’ when devices are delivered… And ‘Deactivation must also be possible later (opt- out function) and must not have any negative impact on the functioning of hard- and software that does not use trusted computing functions.’” The white paper is in essence a non-binding call to manufacturers, but is significant as a statement from a major national government against restrictions imposed via secure boot that may foreshadow more significant government action. The white paper is available in both English and German.

The war on UEFI should carry on until this malpractice is eradicated. It is a defect, not a feature. It gives remote control over hardware.

Share this post: These icons link to social bookmarking sites where readers can share and discover new web pages.
  • Digg
  • del.icio.us
  • Reddit
  • co.mments
  • DZone
  • email
  • Google Bookmarks
  • LinkedIn
  • NewsVine
  • Print
  • Technorati
  • TwitThis
  • Facebook

If you liked this post, consider subscribing to the RSS feed or join us now at the IRC channels.

Pages that cross-reference this one

3 Comments

  1. Michael said,

    November 29, 2012 at 10:26 pm

    Gravatar

    MS does not make the machines in question.

    Cai6zohp Reply:

    “MS does not make the machines in question.”

    … and obviously MS does not impose these restrictions to OEM either !

    Michael Reply:

    Is there any evidence they do? If there is then fine… but even then it would only be on machines that ship with Windows. MS cannot make demands about machines that ship with other OSs.

What Else is New


  1. Alice Continues to Smash Software Patents So Patent Lawyers, Monopolists' Lobbyists Etc. Now Attack the Supreme Court for Doing This

    Corporate lobbyists and patent lawyers are trying to put Alice in the grave, for its impact on software patents is very profound and thus far almost unstoppable



  2. How to Salvage the EPO's Reputation: Create More Boards of Appeal in Europe and Abolish the Misguided UPC Fantasy

    A critical evaluation of what goes on at the European Patent Office (EPO), which is quickly descending down (and overall degrading) to the level of Chinese systems, along with the corruption, the abuses, and the low quality of patents



  3. Court of Appeals for the Federal Circuit (CAFC) Has Just Sided With Patent Trolls

    The notorious CAFC, which manifested software patents in the United States, has just given a gift to patent trolls that typically use software patents for extortion down in Texas



  4. Analyses of the Latest Data From Lex Machina About Patent Litigation Show Some Litigation Declines

    Professor Mark Lemley's Lex Machina highlights litigation trends by collecting and analysing data related to patents and pertaining to intellectual monopolies in general; now it shows litigation droughts



  5. India is Having Another Taste of the Dangers of Western Patents, Must Learn to Reject Software Patents in the Face of Great Pressure

    The growing software giant which is India continues to face cruel and aggressive lobbying from the West, enabling the West to control India by patents that should not exist in the first place



  6. Links 29/4/2016: GNOME 3.21.1, Fairphone

    Links for the day



  7. Microsoft Says It Will Continue to Extort Companies That Distribute Linux, Using Software Patents As Usual

    Microsoft's war on Linux, a war which is waged using software patents (for revenue and/or for coercion in bundling deals), is still going on in spite of all the PR tactics from Microsoft and its paid partners



  8. Australia Might be Next to Block Software Patents If Commission's Advice is Followed

    Australian advice against software patents, which can hopefully influence Australian politicians and put an end, once and for all, to all software patents in Australia



  9. [ES] ''Si la Forma de Pensar de la EPO fuese Seguida, Guantánamo Sería Posible en Suelo Alemán.”

    La EPO está todavía bajo fuego, pero mucho de ello pasa detrás de las cortinas y envuelve abogados y/o burócratas



  10. The European Copy-Paste Office (EPO)

    This morning's example (not the first) of how the EPO uses 'social' media



  11. Links 28/4/2016: Fedora 24, EE Goes Open Source

    Links for the day



  12. Amid Referendum “the New European Unitary Patent System is Likely to Collapse Before It Started”

    The Unitary Patent Court (UPC) vision seems like it may be just one month away from its gradual death, depending on British voices amongst other key factors



  13. USTR is Trying to Shame and Bully India Into Introducing Software Patents in India

    Lobbying body of the US (corporations-led) is trying its usual dirty tactics against India's sound policy which excludes software/algorithms from patent scope



  14. No, Visual Studio is NOT Open Source and Xamarin Openwashing is NOT News

    The latest example of Microsoft openwashing, courtesy of confidants of Microsoft and those who got bamboozled by them



  15. Latest Black Duck Puff Pieces a Good Example of Bad Journalism and How Not to Report

    Why the latest "Future of Open Source Survey" -- much like its predecessors -- isn't really a survey but just another churnalism opportunity for the Microsoft-connected Black Duck, which is a proprietary parasite inside the FOSS community



  16. If EPO “Form of Thinking Were to be Followed, Guantanamo on German Soil Would be Possible.”

    The EPO is still under fire, but a lot of it happens behind the scenes and involves lawyers and/or bureaucrats



  17. Links 28/4/2016: Tomb Raider for GNU/Linux, Proxmox VE 4.2

    Links for the day



  18. [ES] La Departura de la Readidad de la EPO Y Su Entrada en la Esféra Industrial China de Propaganda

    La deceptiva trampa del maximálism de patentes, donde se asume que artficialmente aumentando el número de patentes otorgadas traerá el resultado esperado



  19. [ES] Una Fársa de Sistema: ¿Cómo la SIPO, USPTO, y cada vez más la EPO se Convierten en Llenado de Patentes (No Se Requiere Propia Examinación)

    Una crítica al decline en la calidad de patentes en algunas de las más grandes oficinas de patentes del mundo, donde aspiración parece ser neo-liberal en el sentido económico



  20. [ES] Microsoft ‘Asalto con Todo’ Contra Android, Java, y GNU/Linux, Usando la Clásica E.E.E. Táctica de Nuevo

    Otro recordatorio de la realidad que Microsoft está muy activo en el frente E.E.E., not no sólo contra GNU/Linux pero también Android y Java



  21. [ES] Más Rumores y Llamadas Acerca de Prospectos de Microsoft Vaya a Comprar Canonical (Ubuntu con todo y Zapatos)

    Teniendo en cuenta los últimos movimientos de Canonical, algunos expertos piensan que es posible que Shuttleworth elija el dinero a Microsoft sobre principios sino también inste para que esto ocurra



  22. Links 27/4/2016: A Lot About OpenStack, Vivaldi 1.1 Released

    Links for the day



  23. A Farce of a System: How SIPO, USPTO, and Increasingly the EPO Too Turn Into Filing Systems (No Proper Examination/Filtering Required)

    A critique of the declining quality of patents in some of the world's biggest patent offices, where the aspiration seems to be neo-liberal in the economic sense



  24. Microsoft's 'Full Assault' on Android, Java, and GNU/Linux, Using Classic E.E.E. Tactics Again

    Another reminder of the fact that Microsoft is very active on the E.E.E. front, not just against GNU/Linux but also Android and Java



  25. More Rumours and Calls Surrounding Prospects of Microsoft Buying Canonical (Ubuntu and More)

    Taking some of Canonical's recent moves into account, some pundits not only think it's possible for Shuttleworth to choose Microsoft money over principles but also urge for this to happen



  26. [ES] El Nuevo Impulso Finánciado por Microsoft Para Reforzar las Patentes de Software en los EE.UU., Apoyado por los Sospechosos Usuales (La Sagrada Familia) Mientras que Microsoft Cada Vez Más Lucha Como Compañíá Productiva

    Una mirada al esfuérzo de trae una resurgencia de las patentes de software en los Estados Unidos (con un clarísimo rol de Microsoft en él) y la fundación/conf ianza de Microsoften las patentes de software como arma contr Linux/Android porque las ganancias de Windows se están secando y el Windows Phone está al borde del colápso



  27. Links 26/4/2016: Firefox 46.0, Thunderbird's Stewardship

    Links for the day



  28. Links 25/4/2016: Kodi 16.1, OpenStack Summit

    Links for the day



  29. New Microsoft-Funded Push to Make Software Patents Stronger in the US, Backed by the Usual Suspects as Microsoft Increasingly Struggles as a Producing Company

    A look at the effort to bring about a software patents resurgence to the US (with clear Microsoft role in it) and Microsoft's reliance on software patents as a weapon against Linux/Android because Windows profits dry up and Windows Phone is on the verge of collapse



  30. Patents Roundup: Marijuana Patents, Patent Satellites, Patent Trolls, Wars, and Merchants (Notably Lawyers)

    Various strands of news about patents, focused on issues raised in the latter half of last week


CoPilotCo

RSS 64x64RSS Feed: subscribe to the RSS feed for regular updates

Home iconSite Wiki: You can improve this site by helping the extension of the site's content

Home iconSite Home: Background about the site and some key features in the front page

Chat iconIRC Channel: Come and chat with us in real time

CoPilotCo

Recent Posts