Bonum Certa Men Certa

Techrights Advises UEFI Forum to Withdraw 'Secure' Boot Support

UEFI logo



Summary: Short synopsis of a long discussion with the UEFI Forum regarding 'secure' boot

We don't always speak to figures of authority in pursuit of reform, but when we do, it is rather productive (pardon the meme). OIN is a good example of this. Last year, UEFI criticism began as a 'feature' of UEFI, namely 'secure' boot, was put to use by Microsoft, which basically misused it for anticompetitive reasons, making it hard to boot GNU/Linux.



"Security was not the main outcome of UEFI 'secure' boot being put in place."The UEFI Forum got in touch with yours truly, setting up an interview for exchange of thoughts and ideas. It was productive because a consensus we reached was that 'secure' or Restricted Boot in UEFI has no purpose (or little purpose) other than to serve or facilitate business models of corporations, at the expense of customers. It is akin to DRM and TiVoization and it is hard to defend the inclusion of this antifeature, for reasons we covered here before . It was a one-hour conversation mostly with the president of the UEFI Forum, who is a technical and humble man. I politely made suggestions for UEFI, focusing on freedom aspects, and there was no lack of subjects to discuss (including patents). After an hour had lapsed we decided to call it a day (it was Friday night and I was already late to meet some friends at a local pub), but the mutual sentiment can be described as amicable. I accepted the invitation hoping it would lead to progress, not friction. The phone conference focused on questions pertaining to UEFI, with clear focus on the negative aspects, i.e. areas of improvement. In it were UEFI spokespersons Mark Doran, UEFI President, and Michael Krau, UEFI Forum’s Industry Communications Working Group (ICWG) Chair. A lady called Christine was there also, but she did not participate in the technical discussion; she had helped set it all up.

To summarise some of the key points, it was agreed that 'secure' boot only gives UEFI Forum a lot of negative publicity. Other issued were raised, but none else got the same amount of coverage, I had not prepared notes, mostly because the goal was to focus on freedom and not to deviate from that. UEFI Forum's President was understanding. He said I was asking the right questions and did acknowledge that some of my concerns were legitimate (the conversation was recorded with consent from them, but it is not for publication).

Security was not the main outcome of UEFI 'secure' boot being put in place. They agreed to some degree. That's why it was productive as a lengthy debate.

Towards the end, emanating from the conversation were the following tips and links, prepared and sent by Christine, who had also been on the conference call. She wrote:

> Thank you for taking the time to speak with us to address your questions > regarding the UEFI Forum. If you have any additional questions or need > information, please don’t hesitate to reach out to me. > > > > For your reference, I’m including a link to an abstract of the > presentation > http://www.linuxtag.org/2013/de/program/freitag-24-mai-2013.html?eventid=6 > referenced today by Mark Doran, President of the UEFI Forum, and > delivered by Matthew Garrett at the Linux Tag conference in Berlin. The > title of Garrett’s presentation is “Making UEFI Secure Boot Work for Linux.” > > > > During the call, Mark also suggested that you might want to view the > repository of information pertaining to UEFI at Tianocore.org > http://sourceforge.net/apps/mediawiki/tianocore/index.php?title=Welcome, > a community site surrounding the open source components of Intel's > implementation of UEFI. > > > > And following are links to the three Intel YouTube videos Mark > referenced about UEFI Secure Boot configuration: > > €· Part 1 http://www.youtube.com/watch?v=eAnlhkbMang - Enabling > & Disabling UEFI Secure Boot. Instructions for setting up a system with > UEFI Secure Boot to dual-boot between Microsoft* Windows* 8 & Ubuntu* > 12.10. > > €· Part 2 http://www.youtube.com/watch?v=dwlbf1VRJ60 -UEFI > dual-boot setup with Microsoft* Windows* 8. Instructions for setting up > a system with UEFI Secure Boot to dual-boot between Microsoft Windows 8 > & Ubuntu 12.10. > > €· Part 3 http://www.youtube.com/watch?v=eAnlhkbMang - UEFI > dual-boot setup with Linux* (Ubuntu* 12.10). Instructions for setting up > a system with UEFI Secure Boot to dual-boot between Microsoft* Windows* > 8 & Ubuntu* 12.10. > > > > Again, thank you for your time, and please let me know if I can provide > you with additional information.


To go along with 'secure' boot is to help endorse what sure has become a threat to booting freedom, not just to choice. The conference did not alter my mind in any way on this topic. The key point, as was made abundantly clear to them, is that 'secure' boot does a major disservice to UEFI by giving it bad reputation -- an inevitability when a convicted monopolist like Microsoft perturbs UEFI for non-technical reasons.

Comments

Recent Techrights' Posts

[Meme] One Person, Singular Pronoun
Abusing people into abusing the English language is very poor diplomacy
New Article From Richard Stallman Explains Why He Says He and She for Unknown Person (Not 'They')
"Nowadays I use gender-neutral singular pronouns for a person whose gender I don't know"
 
Gemini Not Deflated Yet (Soon Turning 5!)
Gemini numbers still moving up, the protocol will turn five next summer
Links 30/11/2023: Belated End of Henry Kissinger and 'Popular Science' Shuts Online Magazine
Links for the day
Site Priorities and Upcoming Improvements
pages are served very fast
Ending Software Patents in Recent Years (Software Freedom Fighters MIA)
not a resolved issue
IRC Proceedings: Wednesday, November 29, 2023
IRC logs for Wednesday, November 29, 2023
Over at Tux Machines...
GNU/Linux news
Links 30/11/2023: Rushing Patent Cases With Shorter Trial Scheme (STS), Sanctions Not Working
Links for the day
Links 30/11/2023: Google Purging Many Accounts and Content (to Save Money), Finland Fully Seals Border With Russia
Links for the day
Lookout, It's Outlook
Outlook is all about the sharing!
Updated A Month Ago: Richard Stallman on Software Patents as Obstacles to Software Development
very recent update
The 'Smart' Attack on Power Grid Neutrality (or the Wet Dream of Tiered Pricing for Power, Essentially Punishing Poorer Households for Exercising Freedom Like Richer Households)
The dishonest marketing people tell us the age of disservice and discrimination is all about "smart" and "Hey Hi" (AI) as in algorithms akin to traffic-shaping in the context of network neutrality
Links 29/11/2023: VMware Layoffs and Too Many Microsofters Going Inside Google
Links for the day
Is BlueMail a Client of ZDNet Now?
Let's examine what BlueMail does to promote itself
Just What LINUX.COM Needed After Over a Month of Inactivity: SPAM SPAM SPAM (Linux Brand as a Spamfarm)
It's not even about Linux
Microsoft “Discriminated Based on Sexuality”
Relevant, as they love lecturing us on "diversity" and "inclusion"...
IRC Proceedings: Tuesday, November 28, 2023
IRC logs for Tuesday, November 28, 2023
Media Cannot Tell the Difference Between Microsoft and Iran
a platform with back doors
Links 28/11/2023: New Zealand's Big Tobacco Pivot and Google Mass-Deleting Accounts
Links for the day
Justice is Still the Main Goal
The skulduggery seems to implicate not only Microsoft
OpenBSD Says That Even on Linux, Wayland Still Has a Number of Rough Edges (But IBM Wants to Make X Extinct)
IBM tries to impose unready software on users
[Teaser] Next Week's Part in the Series About Anti-Free Software Militants
an effort to 'cancel' us and spy on us
Over at Tux Machines...
GNU/Linux news
Permacomputing
This work is licensed under a Creative Commons Attribution 4.0 International License
Professor Eben Moglen on How Social Control Media Metabolises Humans and Constraints Freedom of Thought
Nothing of value would be lost if all these data-harvesting giants (profiling people) vanished overnight
IRC Proceedings: Monday, November 27, 2023
IRC logs for Monday, November 27, 2023
When Microsoft Blocks Your Access to Free Software
"Linux is a cancer that attaches itself in an intellectual property sense to everything it touches." [Chicago Sun-Times]
Techrights Statement on 'Cancel Culture' Going Out of Control
relates to a discussion we had in IRC last night
Stuff People Write About Linux
revisionist pieces
Links 28/11/2023: Rosy Crow 1.4.3 and Google Drive Data Loss
Links for the day