Bonum Certa Men Certa

Ubuntu Acknowledges UEFI Mistake by Taking FSF Advice

Mono the Trojan
Source: "Mono, the Trojan" (reused with permission)



Summary: Canonical decides to keep GRUB and stand up closer to the FSF

C

anonical had a bout of arrogance recently. Its founder Mark Shuttleworth labelled people who disagree on a technical and ethical matter "trolls". This is not a new tactic from Ubuntu's corporate backer; Mono and UEFI -- not just Amazon -- led to it. The so-called 'peanut gallery' just happens to be people capable of thought and not an Apple-esque herd mentality. So when we criticised Ubuntu's approach to UEFI we were just not blindly accepting what Ubuntu eventually came to reject because "Ubuntu to Use Signed GRUB2 Bootloader for Secure Boot", says the Ubuntu herd (OMGUbuntu folks).

Here are some related reports:



UEFI is being tackled in multiple ways now, depending on who takes action. Red Hat's staff sites mention this too. MJG speaks of bootkits and concludes: "So this isn't really a story about a surprising vulnerability. It's a story about someone taking the logical step of implementing a bootkit on top of UEFI, which is what everyone should have been expecting all along. Computers that are configured to run arbitrary code will run arbitrary code, and if that arbitrary code happens to modify your kernel so your credit card details are automatically posted to pastebin, well, that's a plausible outcome."

Vista 8 already causes issues for GNU/Linux users. Here is a new example: "Yesterday, Megatotoro and I helped a colleague who wanted to dual boot her recently bought desktop PC. She wanted us to install Mageia 2 and we were confident because it is a process that we have done several times already.

"However, when we hit the key to get into the BIOS... Surprise! We were greeted by UEFI instead."

UEFI further complicated dual-booting, yet nobody filed an antitrust complaint. Steven J. Vaughan-Nichols writes to explain the role the FSF is playing: "Windows 8 PCs will come with Microsoft's UEFI (Unified Extensible Firmware Interface) Secure Boot. This “feature” will make it much harder to boot Linux or other operating systems. Canonical, Ubuntu Linux's parent company, is going to take a new approach to address this problem.

"Canonical and the FSF have talked their disagreement out and, continues Melamut, "the FSF has stated clearly that Grub 2 with Secure Boot does not pose a risk of key disclosure in such circumstances. We have also confirmed that view with our OEM partners, and have introduced variations to the Ubuntu Certification program and QA scripts for pre-installs to ensure that security and user choice are maintained on Ubuntu machines. Therefore, we have decided that Grub 2 is the best choice for a bootloader, and will use only Grub m,2 in Ubuntu 12.10 and 12.04.2 by default."

"In a statement, John Sullivan, Executive Director of the FSF, added, “We are pleased with Canonical’s decision to stick with Grub 2. We know that the challenges raised when trying to support true user security without harming user freedom—Secure Boot vs. Restricted Boot—are new for everyone distributing free software. This is the situation for which GPLv3 was written, and after helpful conversations with Canonical, we are confident the license does its job well, ensuring users can modify their systems without putting distributors in untenable positions.”"

Debian followed the FSF's footsteps right from the start. Canonical needed some pressure. It's not "trolling" against Canonical. The FSF believes that UEFI should be illegal.

Comments

Recent Techrights' Posts

The Solicitors Regulation Authority (SRA) Has a Policy on Racism and Sexism
In then future we'll show the misogyny and racial slurs
The 50-Pound Note Experiment and the "War on Cash"
Britain is actually seeing a rebound in cash payments, and it's not a temporary phenomenon
 
Links 22/09/2025: More American 'Censorship' (Retaliation for Journalism), Cheeto "Might Be Losing His Race Against Time"
Links for the day
The Blob Slop
Give me more words, give me some text
Slopwatch: Blaming the Victims for Microsoft's Failures and Plagiarising Phoronix
That's what Google has been reduced to: slop and slopfarms
Links 22/09/2025: Breaches, Windows TCO, and Arrests
Links for the day
Gemini Links 22/09/2025: Rabbit Hole and DeGoogling Fairphone
Links for the day
Links 22/09/2025: Russian War Planes Invade NATO Airspace While Dihydroxyacetone Man Escalates Attack on Free Speech Because of Critics
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Sunday, September 21, 2025
IRC logs for Sunday, September 21, 2025
Links 21/09/2025: "Hey Hi" (Hype) Under Fire, Fakes Identified; Tesla Burns Family
Links for the day
Google's Software is Malware and Malware in Mobile Devices
Originally posted by Rob Musial
Links 20/09/2025: Hegemony Coming to a Close, Luigi Mangione Ruled Not Terrorist
Links for the day
Gemini Links 21/09/2025: "Charlie Kirk Was a Hateful Piece of Shit" and Slop Code Attempted by Microsofter
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Saturday, September 20, 2025
IRC logs for Saturday, September 20, 2025
Gemini Links 20/09/2025: Snowy Photos and utism is a Spectrum
Links for the day
Microsoft-Sponsored Xenophobia and Nationalism
IBM is very similar in this regard
Vintage is Sometimes Better
Why can't we get back to "simple" if (or where) "simple" means better?
Climate Breakdown Means We'll be Publishing More, Not Less
Press freedom will be a common, recurring theme
Our 5-Year Geminispace Anniversary is Coming Up
I still remember when Gemini Protocol was quite new
It's Right to Point Out Violence From the Right
Violence is a recurring theme
Tentative Summary of Things to Publish in Project 2030
I'll still be in my forties by then
Web Browsers That "Do Hey Hi" (AI)
State-of-the-art plagiarism or "autocomplete on steroids" (not coined by us, nevertheless a nice description) don't have much/any prospect
Links 20/09/2025: Hardware Projects in View, Some Independent Publishers About Russia Prosper After Cheeto Cuts Funding
Links for the day
Gemini Links 20/09/2025: Options and TV Time Machine
Links for the day
Links 20/09/2025: Retrocomputer, Antique Phone Experience, and More
Links for the day
Links 20/09/2025: Internet Shutdowns, Media Censorship, and Climate Worries
Links for the day
About 700 New Gemini Capsules in 13 Months (or 54 Per Month)
4.8K would represent a 20% increase
Rust People: Drain the Swap, You're Holding It Wrong
Does Rust make sense?
Techrights the Name Turns 15
About 6 weeks from now we turn 19
Microsoft is Running Out of Time and Floating Fake Figures, Fake Projects, Fake Narratives, Fake Excuses
Also, a lot of Microsoft's "revenue" claims are circular financing (i.e. Microsoft buying from itself, which means Ponzi-like fraud)
Slopwatch: LinuxSecurity, linuxconfig.org, and Plagiarised Phoronix
Many articles out there are nowadays fake
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Friday, September 19, 2025
IRC logs for Friday, September 19, 2025
Gemini Links 20/09/2025: Navigating the Pressures of Modern Life and SpellBinding Accidentally Wrote Another Gemini Server
Links for the day