EditorsAbout the SiteComes vs. MicrosoftUsing This Web SiteSite ArchivesCredibility IndexOOXMLOpenDocumentPatentsNovellNews DigestSite NewsRSS


UEFI Apologists Versus Germany’s Government Judgment on UEFI Insecurity

Posted in Europe, GNU/Linux, Kernel, Security at 5:31 pm by Dr. Roy Schestowitz

Flag of Germany

Summary: Proponents of UEFI support, who are sometimes Mono proponents as well, may struggle to reason in favour of crippleware given the way UEFI rejects Linux and the reasons the German authorities reject UEFI


HE Windows franchise is collapsing (ignore the Microsoft PR machine, which we’ll address in a separate post), so Microsoft created a breed of machines that won’t boot Linux. One blogger writes:

So do not buy that new shiny computer without knowing what pitfalls you may have to overcome in order to run a free operating system. As a footnote, the Secure Boot link is from an article on the Linux Foundation’s efforts written on ZDNet’s website all about how Microsoft is delaying the keys for Linux. Hmm, just one more reason to buy new equipment from alternate retailers that put Linux first or buy used.

Bottomley and the Linux Foundation cannot say much after they sold out (Novell plays a role for both) and Michael Larabel writes:

James Bottomley wrote a new blog post this morning about why the Linux Foundation really isn’t concerned about UEFI SecureBoot on ARM hardware (smart-phones, tablets, etc) compared to the work they are doing on x86 PCs with UEFI SecureBoot support for Linux.

Last month the Linux Foundation announced their UEFI SecureBoot plans for dealing with Microsoft Windows 8 PCs. Their plans basically equated to legally obtaining a Microsoft key and signing a small pre-bootloader that in turn could chain load a predesignated boot loader that would in turn boot Linux or any other operating system without having to deal with the SecureBoot mess. The signed pre-bootloader will be available from the Linux Foundation web-site for anyone to use along with the source-code, albeit not their private key. The foundation is still working to obtain a SecureBoot key and their SecureBoot focus has just been for x86 hardware.

With Linux users wondering why the Linux Foundation isn’t diving into some SecureBoot solution for ARM, James Bottomley wrote a lengthy explanation.

We also saw some feedback from vocal UEFI apologists, who are sometimes the same people who promote Mono. Yes, promoters of Microsoft’s (and Novell’s) Mono also promote or downplay the issues with Microsoft’s UEFI demands, but we won’t be linking to them. They provoke against this site. Anyway, here is the original post that seeded this debate. It says:

The answer to this comes in several parts: firstly in the PC space, Microsoft has an effective headlock on the OEM and ODMs: no desktop PC ships without a Windows compatibility sticker (the situation is different in the server market, but this is specifically about desktop PCs). Therefore in order to continue simply booting Linux on laptops and desktops, it is a huge priority to find a solution to this problem. Secondly: in the overall mobile marketplace, which encompasses tablets and smartphones, Microsoft has a very tiny presence: somewhere between 2-5%. Linux (Android) has the majority presence: by some counts, Android is >50% in this market space with Apple a close second. Therefore, a Microsoft mandate in an industry where they have no dominance is simply not really threatening (unlike the PC space where they have complete dominance).

The German authorities have already banned UEFI for their own use/machines on the face of it. So-called ‘secure’ boot is bad for national security. The “German government issues white paper on secure boot,” writes LWN:

A press release from FSF Europe (issued November 20) welcomes a white paper from the German federal government on trusted computing and secure boot. “Another demand by the FSFE is addressed by the government’s white paper. That before purchasing a device, buyers must be informed concisely about the technical measures implemented in this device, as well as the specific usage restrictions and their consequences for the owner: ‘Trusted computing security systems must be deactivated (opt-in principle)’ when devices are delivered… And ‘Deactivation must also be possible later (opt- out function) and must not have any negative impact on the functioning of hard- and software that does not use trusted computing functions.’” The white paper is in essence a non-binding call to manufacturers, but is significant as a statement from a major national government against restrictions imposed via secure boot that may foreshadow more significant government action. The white paper is available in both English and German.

The war on UEFI should carry on until this malpractice is eradicated. It is a defect, not a feature. It gives remote control over hardware.

Share this post: These icons link to social bookmarking sites where readers can share and discover new web pages.
  • Digg
  • del.icio.us
  • Reddit
  • co.mments
  • DZone
  • email
  • Google Bookmarks
  • LinkedIn
  • NewsVine
  • Print
  • Technorati
  • TwitThis
  • Facebook

If you liked this post, consider subscribing to the RSS feed or join us now at the IRC channels.

Pages that cross-reference this one


  1. Michael said,

    November 29, 2012 at 10:26 pm


    MS does not make the machines in question.

    Cai6zohp Reply:

    “MS does not make the machines in question.”

    … and obviously MS does not impose these restrictions to OEM either !

    Michael Reply:

    Is there any evidence they do? If there is then fine… but even then it would only be on machines that ship with Windows. MS cannot make demands about machines that ship with other OSs.

What Else is New

  1. Staff of the EPO Under Siege Ahead of Tomorrow's Demonstration in Munich

    The smaller demonstration in The Hague is estimated to have had about 400 participants, but the big protest will take place tomorrow in Munich and it is already being forcibly removed out of EPO buildings, allegedly for 'security reasons' because of VP4 (Željko Topić)

  2. EPO Management Lobbies for the Unitary Patent (UPC) and Uses This to Advance Software Patents in Europe

    A short notice regarding the EPO's verboten involvement in European politics and European policy-making; comparing the situation in Europe (with the EPO) to that of India, where highly discreet and notoriously intensive lobbying by foreign corporations led to the apparently-irrevocable phasing in of software patents, to the detriment of locals

  3. Confirmed: Benoît Battistelli is Crushing the Enlarged Board of Appeal (EBoA)

    New information surfaces regarding communication between the Administrative Council (AC) and Mr. Battistelli, who wishes to crush anyone whom he views (or is merely perceived) as a threat to his totalitarian reign

  4. Patent Trolls Roundup: MPHJ, Kyle Bass, Acacia, Intellectual Ventures, Unwired Planet, Core Wireless, Vringo, and Unified Patents

    An outline of recent developments in the US and even in Europe, focused entirely on patent trolls, patent parasites, and actions against them

  5. EPO Staff is Happy, Says EPO Propaganda Still in the Making

    The Benoît Battistelli-led institution is so misguided so as to actually expect people to believe that EPO staff feels happy, despite increased awareness of staff suicides, protests, lawsuits, etc.

  6. EPO Management is Running Out of Time as More Media Remarks on Its Abuses

    The terrible policies and the atrocious behaviour of the EPO's management is gradually becoming too widespread an issue, leading to a lot more media coverage and with it public scrutiny

  7. Links 12/10/2015: Linux 4.3 RC5, Parsix GNU/Linux 8.0 Reviewed

    Links for the day

  8. Microsoft Still Rigging and Gaming Statistics by Taking Over or Registering Dead/Inactive/Parked Domains by the Millions

    Microsoft continues to game Netcraft's figures and graphs by amassing effectively dead domains, making itself (and IIS/Windows) look a lot bigger when it fact Microsoft only perishes on the Web, having long ago lost the game to GNU/Linux with Free/libre software on top of it (notably a L.A.M.P. stack)

  9. Benoît Battistelli's Group of 'Loyals' Crushes Not Only the Independent Boards But Also 'Unwanted' Directorates-General

    Having 'infiltrated' most key positions at the EPO, Benoît Battistelli now ejects everything that remains potential threat to his unquestionable total domination

  10. Many New Losses for Software Patents in the US, Courtesy of Alice Case/§101

    The United States' supposed leadership in software patenting grinds to a halt as more software patents simply die in the courtrooms and patent lawyers try hard to overcome this new debacle of theirs, usually by misleading current and prospective clients

  11. Leaked: EPO Prioritises Work for Large Foreign Corporations, Discrimination Not Accidental But Centrally Planned

    Canon, Philips, Microsoft, Qualcomm, BASF, Bayer, Samsung, Huawei, Siemens, Ericsson and Fujitsu receive V.I.P. treatment from the EPO, despite most of them not even being European

  12. Links 11/10/2015: Kate/KDevelop Sprint, Blender 2.76

    Links for the day

  13. European Pirate Party MEP Julia Reda Says TPP Will Bring Software Patents to Europe and Other Continents/Countries

    The Wikileaks "TPP Leak," says Julia Reda, suggests that, based on the patentable subject matter section, signatories must add software patents

  14. Don't Look at Linux For Sexism, Look at Microsoft (Although Microsoft Hides the Newest Lawsuits)

    A look at the broader scale of discrimination against women and how widespread a phenomenon it is inside Microsoft, the arch rival of Linux

  15. Links 10/10/2015: IBM's Linux-based LC Family, KDE Frameworks 5.15

    Links for the day

  16. Benoît Battistelli's Office Accused of Institutional Harassment Against EPO Staff in New Letter to the Administrative Council, Calling for External Investigation

    A probe by an external and independent entity is sought with the aim of looking into systematic harassment against EPO employees who simply 'dare' to point out gross violations by their managers; staff protests at EPO headquarters in the Netherlands and Germany are scheduled

  17. Responses to Software Patents in India Though Guidelines for Examination of Computer Related Inventions

    India's famous skills, which revolve around software services and software development, are under attack by new laws which strive to grant foreign corporations de facto monopolies on software, even inside India

  18. Mobile Linux (e.g. Android) Still a Victim of Software Patents, No Peace in Sight

    A look at recent developments in the fight against mobile Linux (notably Android these days) and whoever is behind the patent attacks (not always as obvious as people are led to believe)

  19. Bad News for the EPO's Judicial Independence and Due Process in Next Week's Administrative Council (AC) Meeting

    A quick update about what's expected to happen next week when the Administrative Council holds a two-day meeting

  20. More Back Doors Found in Microsoft's Entrapments (Proprietary Software)

    Security flaws and even blatantly obvious loopholes for surveillance are identified in several of Microsoft's so-called 'products', which turn users (and their data) into the real product (to be sold to private companies or shared with spies)

  21. NASA Gives Back What It Took Away in the Form of Patent Monopolies for Private Gain

    Criticism of NASA's habit of clinging onto patents when it is actually the public which pays for everything

  22. The Coup D'état of Benoît Battistelli Follows an Imperialist Model, Threatens Opposition and Dissent

    SUEPO, the staff union, and boards that are independent from the EPO are both under attack and are constantly threatened by Benoît Battistelli and his goons

  23. Links 8/10/2015: Manjaro Linux Releases, Linksys WRT1900ACS, FOSS at NHS

    Links for the day

  24. Links 8/10/2015: KDE Plasma 5.4.2 Released, Linux Drama Queens

    Links for the day

  25. EPO Staff to Disrupt Administrative Council Meeting With Public Demonstration That Raises Awareness of Abuses

    The perception of collusion between the Administrative Council (AC) and the European Patent Office (EPO) leads to staff actions demanding investigation of illegal Board of Appeal (BoA) suspension/s (among many other things)

  26. OIN Turns 10, IDG Floods the Web With Puff Pieces That 'Normalise' Software Patents

    The Open Invention Network (OIN) commissions or helps produce puff pieces in the corporate media because it has an anniversary and corporate interests to push forth (including the idea that software patents can coexist with Linux)

  27. Hypocrite Forks the Linux Kernel Because of Cultural Characteristics That He Himself is Guilty of

    Forking of Linux is misleadingly reported in the media because of a couple of very loud people, who are not even quitting their jobs

  28. Željko Topić Attacks EPO Staff for 'Daring' to Legally Challenge the EPO's Management Over Its Gross Abuses in Europe

    Benoît Battistelli's right-hand man, Željko Topić, is under the false impression that yet more threats against staff of the EPO will help contain the crisis rather than further inflame it

  29. Media Reports Based on New Patents Suggest That Microsoft Continues to Attack Google and Android/Linux, Trying to Tax and Delete Android

    Reports and patent applications serve to show that Microsoft not only tries to infiltrate ("embrace") Android to put its apps there ("extend") but ultimately to delete ("extinguish") Android

  30. Commenters Provide Possible Explanations for Mr Van der Eijk Being on Unlimited Sick Leave

    Rumours are swirling around Wim Van der Eijk's absence, suggesting that he too may be a victim of Benoît Battistelli's iron fist


RSS 64x64RSS Feed: subscribe to the RSS feed for regular updates

Home iconSite Wiki: You can improve this site by helping the extension of the site's content

Home iconSite Home: Background about the site and some key features in the front page

Chat iconIRC Channel: Come and chat with us in real time


Recent Posts