08.16.19

Gemini version available ♊︎

Nothing Says ‘New’ Microsoft Like Microsoft Component Firmware Update (More Hardware Lock-in)

Posted in GNU/Linux, Hardware, IBM, Microsoft, Red Hat at 9:09 am by Dr. Roy Schestowitz

“One thing I find myself wondering about is whether we shouldn’t try and make the “ACPI” extensions somehow Windows specific.

“It seems unfortunate if we do this work and get our partners to do the work and the results is that Linux works great without having to do the work.

“Maybe there is no way to avoid this problem but it does bother me.

“Maybe we could define the APIs so that they work well with NT and not the others even if they are open.

“Or maybe we could patent something related to this.”

Bill Gates

Summary: Vicious old Microsoft is still trying to make life very hard for GNU/Linux, especially in the OEM channel/s, but we’re somehow supposed to think that “Microsoft loves Linux”

YESTERDAY we saw Red Hat’s (now IBM’s) Richard Hughes complaining about Microsoft [1], whereupon Phoronix picked that up [2] and it was then discussed in our IRC channels, Phoronix forums etc. The corporate media obviously showed no interest in it. All it can do is post “Microsoft loves Linux” images because Microsoft asks for that. To quote Richard: “All the dependency resolution should be in the metadata layer (e.g. in the .inf file) rather than being pushed down to the hardware running the old firmware.”

“All the dependency resolution should be in the metadata layer (e.g. in the .inf file) rather than being pushed down to the hardware running the old firmware.”
      –Richard Hughes
As Michael Larabel put it, “implementation has a number of issues that complicate the process and could quickly evolve into another troubling specification from Microsoft in the hardware space.”

Remember UEFI ‘secure boot’? How did that work out for security?

Microsoft certainly loves Linux with a knife in the back — hence Bill Gates' "Jihad" remark (about Intel’s support for Linux). MinceR at the #techrights IRC channel said: “you can tell something from Microsoft is _really_ _really_ shit when their sycophants at GNOME say it’s shit…”

“Nowadays Zemlin is mostly quoted by the media as saying wonderful things about Microsoft. Most GNU/Linux user just want to vomit.”It is worth remembering that Richard’s work is now supported by the Linux Foundation (since months ago when it adopted LVFS), so maybe Richard can explain to the Linux ‘genius’ Jim Zemlin (who never uses Linux) what Microsoft does here and why it is anticompetitive. We don’t suppose this will happen though. Zemlin is a 'true believer' in Microsoft and his wife managed a close partner of Microsoft when Microsoft paid the Linux Foundation. Nowadays Zemlin is mostly quoted by the media as saying wonderful things about Microsoft. Most GNU/Linux user just want to vomit. Money talks; people who love money are therefore a vulnerability. Jim Zemlin and his wife are the sorts of people whose life aspiration is to have dinner with Bill and Melinda Gates. It’s all about class and power (Harvard). A decade ago Jim Zemlin said negative things about Microsoft and now (after/since Microsoft had given him $500,000) he says Microsoft is a good company while ignoring the below among many other things, patent extortion included (it's still going on). His wife worked for a Gold Microsoft Partner at the time (as a General Manager and Global VP of a SaaS Business Unit). Her business was moving companies to something like Microsoft Azure. In his own words (Jim Zemlin’s interview with Jeremy Allison; 1m:30s), “I’m about as much [boss of Torvalds] as I am the boss of my wife…”

Related/contextual items from the news:

  1. Musings on the Microsoft Component Firmware Update (CFU) Protocol

    CFU has a bazaar pre-download phase before sending the firmware to the microcontroller so the uC can check if the firmware is required and compatible. CFU also requires devices to be able to transfer the entire new transfer mode in runtime mode. The pre-download “offer” allows the uC to check any sub-components attached (e.g. other devices attached to the SoC) and forces it to do dep resolution in case sub-components have to be updated in a specific order.

    Pushing the dep resolution down to the uC means the uC has to do all the version comparisons and also know all the logic with regard to protocol incompatibilities. You could be in a position where the uC firmware needs to be updated so that it “knows” about the new protocol restrictions, which are needed to update the uC and the things attached in the right order in a subsequent update. If we always update the uC to the latest, the probably-factory-default running version doesn’t know about the new restrictions.

    The other issue with this is that the peripheral is unaware of the other devices in the system, so for instance couldn’t only install a new firmware version for only new builds of Windows for example. Something that we support in fwupd is being able to restrict the peripheral device firmware to a specific SMBIOS CHID or a system firmware vendor, which lets vendors solve the “same hardware in different chassis, with custom firmware” problem. I don’t see how that could be possible using CFU unless I misunderstand the new .inf features. All the dependency resolution should be in the metadata layer (e.g. in the .inf file) rather than being pushed down to the hardware running the old firmware.

  2. Microsoft’s Component Firmware Update Is Their Latest Short-Sighted Spec

    Microsoft’s newest specification is the “Component Firmware Update” that they envision as a standard for OEMs/IHVs to be able to handle device firmware/microcode updating in a robust and secure manner. While nice in theory, the actual implementation has a number of issues that complicate the process and could quickly evolve into another troubling specification from Microsoft in the hardware space.

    Red Hat’s Richard Hughes who is the lead developer on Fwupd and LVFS for firmware updating on Linux has written a lengthy blog post with his thoughts after studying the specification. Now that vendors have begun asking him about CFU, he’s getting his opinions out there now and there are issues with the specification. Ultimately though if there is enough interest/adoption, he could support Component Firmware Update via Fwupd but he certainly isn’t eager to do so.

Share in other sites/networks: These icons link to social bookmarking sites where readers can share and discover new web pages.
  • Reddit
  • email

Decor ᶃ Gemini Space

Below is a Web proxy. We recommend getting a Gemini client/browser.

Black/white/grey bullet button This post is also available in Gemini over at this address (requires a Gemini client/browser to open).

Decor ✐ Cross-references

Black/white/grey bullet button Pages that cross-reference this one, if any exist, are listed below or will be listed below over time.

Decor ▢ Respond and Discuss

Black/white/grey bullet button If you liked this post, consider subscribing to the RSS feed or join us now at the IRC channels.

DecorWhat Else is New


  1. Links 01/04/2023: Red Hat Turning 30

    Links for the day



  2. Links 31/03/2023: Mozilla Turns 25 and OpenMandriva 23.03

    Links for the day



  3. IRC Proceedings: Friday, March 31, 2023

    IRC logs for Friday, March 31, 2023



  4. Linus Tech (Illiteracy) Tips, LTT, Buys Phoronix Media

    Phoronix Media is being acquired by a larger company; the site will not change though



  5. Decided to Quit Debian and Use WSL Instead (Best of Both Worlds)

    Today starts a journey to a “better” experience, which lets Microsoft audit the kernel and leverage telemetry to improve my Debian experience



  6. Microsoft Has Laid Off Lennart Poettering and Hired Elon Musk

    Poettering gets rehired by IBM; IBM and Microsoft announce merger, putting Poettering back into his former position



  7. Links 31/03/2023: Ruby 3.2.2 and Linux Lite 6.4

    Links for the day



  8. Links 31/03/2023: Devices and Games, Mostly Leftovers

    Links for the day



  9. IRC Proceedings: Thursday, March 30, 2023

    IRC logs for Thursday, March 30, 2023



  10. Links 31/03/2023: Ubuntu 23.04 Beta, Donald Trump Indicted, and Finland’s NATO Bid Progresses

    Links for the day



  11. Translating the Lies of António Campinos (EPO)

    António Campinos has read a lousy script full of holes and some of the more notorious EPO talking points; we respond below



  12. [Meme] Too Many Fake European Patents? So Start Fake European Courts for Patents.

    António Campinos, who sent EPO money to Belarus, insists that the EPO is doing well; nothing could be further from the truth and EPO corruption is actively threatening the EU (or its legitimacy)



  13. Thomas Magenheim-Hörmann in RedaktionsNetzwerk Deutschland About Declining Quality and Declining Validity of European Patents (for EPO and Illegal Kangaroo Courts)

    Companies are not celebrating the “production line” culture fostered by EPO management, which is neither qualified for the job nor wants to adhere to the law (it's intentionally inflating a bubble)



  14. Links 30/03/2023: HowTos and Political News

    Links for the day



  15. Links 30/03/2023: LibreOffice 7.5.2 and Linux 6.2.9

    Links for the day



  16. Links 30/03/2023: WordPress 6.2 “Dolphy” and OpenMandriva ROME 23.03

    Links for the day



  17. Sirius is Britain’s Most Respected and Best Established Open Source Business, According to Sirius Itself, So Why Defraud the Staff?

    Following today's part about the crimes of Sirius ‘Open Source’ another video seemed to be well overdue (those installments used to be daily); the video above explains to relevance to Techrights and how workers feel about being cheated by a company that presents itself as “Open Source” even to some of the highest and most prestigious public institutions in the UK



  18. IRC Proceedings: Wednesday, March 29, 2023

    IRC logs for Wednesday, March 29, 2023



  19. [Meme] Waiting for Standard Life to Deal With Pension Fraud

    The crimes of Sirius ‘Open Source’ were concealed with the authoritative name of Standard Life, combined with official papers from Standard Life itself; why does Standard Life drag its heels when questioned about this matter since the start of this year?



  20. Former Staff of Sirius Open Source Responds to Revelations About the Company's Crimes

    Crimes committed by the company that I left months ago are coming to light; today we share some reactions from other former staff (without naming anybody)



  21. Among Users in the World's Largest Population, Microsoft is the 1%

    A sobering look at India shows that Microsoft lost control of the country (Windows slipped to 16% market share while GNU/Linux grew a lot; Bing is minuscule; Edge fell to 1.01% and now approaches “decimal point” territories)



  22. In One City Alone Microsoft Fired Almost 3,000 Workers This Year (We're Still in March)

    You can tell a company isn’t doing well when amid mass layoffs it pays endless money to the media — not to actual workers — in order for this media to go crazy over buzzwords, chaffbots, and other vapourware (as if the company is a market leader and has a future for shareholders to look forward to, even if claims are exaggerated and there’s no business model)



  23. Links 29/03/2023: InfluxDB FDW 2.0.0 and Erosion of Human Rights

    Links for the day



  24. Links 29/03/2023: Parted 3.5.28 and Blender 3.5

    Links for the day



  25. Links 29/03/2023: New Finnix and EasyOS Kirkstone 5.2

    Links for the day



  26. IRC Proceedings: Tuesday, March 28, 2023

    IRC logs for Tuesday, March 28, 2023



  27. [Meme] Fraud Seems Standard to Standard Life

    Sirius ‘Open Source’ has embezzled and defrauded staff; now it is being protected (delaying and stonewalling tactics) by those who helped facilitate the robbery



  28. 3 Months to Progress Pension Fraud Investigations in the United Kingdom

    Based on our experiences and findings, one simply cannot rely on pension providers to take fraud seriously (we’ve been working as a group on this); all they want is the money and risk does not seem to bother them, even when there’s an actual crime associated with pension-related activities



  29. 36,000 Soon

    Techrights is still growing; in WordPress alone (not the entire site) we’re fast approaching 36,000 posts; in Gemini it’s almost 45,500 pages and our IRC community turns 15 soon



  30. Contrary to What Bribed (by Microsoft) Media Keeps Saying, Bing is in a Freefall and Bing Staff is Being Laid Off (No, Chatbots Are Not Search and Do Not Substitute Web Pages!)

    Chatbots/chaffbot media noise (chaff) needs to be disregarded; Microsoft has no solid search strategy, just lots and lots of layoffs that never end this year (Microsoft distracts shareholders with chaffbot hype/vapourware each time a wave of layoffs starts, giving financial incentives for publishers to not even mention these; right now it’s GitHub again, with NDAs signed to hide that it is happening)


RSS 64x64RSS Feed: subscribe to the RSS feed for regular updates

Home iconSite Wiki: You can improve this site by helping the extension of the site's content

Home iconSite Home: Background about the site and some key features in the front page

Chat iconIRC Channel: Come and chat with us in real time

Recent Posts