07.17.12

TechBytes Episode 69: Richard Stallman on Restricted Boot (UEFI), Coreboot, GRUB, and Boot Freedom

Posted in TechBytes at 8:22 am by Dr. Roy Schestowitz

Techbytes 2012

Direct download as Ogg (0:13:28, 5.5 MB)

Summary: The first part of our interview with Richard Stallman covers Restricted Boot and related issues

I first interviewed Richard Stallman about 5 years ago. Yesterday I spoke to him about the subject of much debate in the Free software world right now. Here is a transcript of our conversation.

Dr. Roy Schestowitz: I want to know how big a threat you think the so-called “secure” boot is considered to be to the Free software movement.

Richard StallmanDr. Richard Stallman: It’s a disaster. Well, except that it’s not secure boot that’s a disaster, it’s restricted boot. Those are not the same. When it’s front of the control of the user, secure boot is a security feature. It allows the user to control what programs can run on a machine and thus prevent — you might say — unexpected malware from running. We have to distinguish the unexpected malware such as viruses from the expected malware such as Windows or Mac OS or Flash Player and so on, which are also malware; they have features that hurt the user but users know what they are installing. In any case, what secure boot does is that it causes the machine to only work with (?) programs that are signed with a certain key, your keys. And as long as the user controls which keys they are, then it’s a security feature. However, it can be chained into a set of digital handcuffs when the user doesn’t control the keys. And this [is] happening.

“We have to distinguish the unexpected malware such as viruses from the expected malware such as Windows or Mac OS…”Microsoft demands that ARM computers sold for Windows 8 be set up so that the user cannot change the keys; in other words, turn it into restricted boot. Now, this is not a security feature. This is abuse of the users. I think it ought to be illegal.

It’s a matter of control by the vendor of course, not control by the user himself

Exactly, and that’s why it’s wrong. That’s why non-free software is wrong. The users deserve to have control of their computers/

I think that not only Windows is going to be an issue in fact, if you consider the fact that even a modified kernel is going to be in a position where it’s perhaps not seen as verified for execution. Right, I’m saying, it might not only be a malicious feature in case of something like Windows running on it, it’s also for — let’s say — a user of the offered operating system but it’s free if the user wants to modify the operating system, for example…

The thing is, if the user doesn’t control the keys, then it’s a kind of shackle, and that would be true no matter what system it is. After all, why is GNU/Linux better than Windows? Not just ’cause it has a different name. The reason it’s better is because it’s freedom-respecting Free software that the users control. But if the machine has restricted boot and the users can’t control the system, then it would be just as bad as Windows. So, if the machine will only run a particular version of GNU/Linux, that is a restriction feature. And I haven’t heard anyone doing that yet with GNU/Linux, but that’s what Red Hat and Ubuntu are proposing to do things — somewhat like that — for future PCs that are shipped for Windows. But it’s not exactly that. And my reason is, the users will be able to change the keys. They will be able to boot their own modified version of the system of Fedora or Ubuntu if they want. So, what Fedora and Ubuntu were proposing doesn’t go all the way there. They’re proposing to do things to make it more convenient for users to install the standard version of those systems. But if things go as it has been announced, users will still be able to change the keys and boot their own versions. So, if all the restricted boot — but it will be something that goes sort of half-way there — it’s somewhat distasteful.

“The thing is, if the user doesn’t control the keys, then it’s a kind of shackle, and that would be true no matter what system it is.”On the other hand, with Android, which is another mostly Free operating system which contains Linux but doesn’t contain GNU, it’s quite common for the product to have something equivalent to restricted boot, and people have to struggle to figure out how they can install a modified and more free version of Android. So, the presence of the kernel Linux in a system doesn’t guarantee it’s going to be better. And I’ve heard someone say — oh, it hasn’t been checked — that a particular or kind of Android device is actually using an Intel chip with restricted boot.

One of the concerns that I think is worth raising is the fact that, as far as I know, with many of the embedded devices, especially those based on ARM, I believe it’s not even possible to get into boot menu to disable so-called “secure”…

That’s where Microsoft is really going all out, because Microsoft has ordered essentially — demanded — that those shipping ARM devices for Windows 8 make it restricted boot with no way to get around it.

Yeah, which also means of course waste of… all sorts of impacts on the environment. Any time that hardware become obsolete with the operating system itself is not being used of course…

“So it’s a very damaging thing that Microsoft is doing and so we need to look for every possible way to stop them or tweak what they’re doing.”Well, it’s worse than that. It means basically that those devices, you have to throw them out if you want to escape to the free world. And this — in the past — we were able to install, to liberate a computer by installing Free software on it instead of its user-restricting operation system, and this of course was tremendously helpful to the spread of GNU/Linux because it meant that users could move to freedom. It would be much harder if they had to buy another computer to do so. So it’s a very damaging thing that Microsoft is doing and so we need to look for every possible way to stop them or tweak what they’re doing.

Well, I wanted to ask you, one of our readers — his name is Will — is asking me if you have seen any new good hardware that can take coreboot.

I’m sorry, what?

One of my readers — a guy called Will — he has asked me if you have seen any new good hardware that can take coreboot.

“So, what we really need to do is make coreboot libre, just as we make Linux libre (which doesn’t have the blobs)…”I don’t know. Basically, I don’t keep track of hardware models. I only remember their names anymore, except for the one I use, which is, the Lemote Yeelong and it doesn’t run coreboot but it will run timar [?] in GRUB, it has a Free BIOS. When it comes it has a Free BIOS, which is why I chose it. But in terms of running coreboot, well, the machine which you run coreboot on are Intel-type machines. Now, there are a couple of… there is a problem, and that is, a lot of the Intel — and also AMD — CPUs require a microcode blob, and coreboot has these microcode blobs, which is the same kind of problem as firmware blobs in Linux. So, what we really need to do is make coreboot libre, just as we make Linux libre (which doesn’t have the blobs), keep (?) the coreboot libre (which doesn’t have the blobs) and then we need to see which processors actually run adequately without any microcode blob. And we’re looking for somebody who wants to lead this project ’cause it takes work. Now, leading this project doesn’t mean that you personally get all these kinds of hardware; oh, no, it would be asking the whole community to test things, but somebody has got to ask the community to do it, spread the word, receive the responses, put them together, and publish the list. Would (?) he like to do that? If he is really interested in having the answer to this question, maybe he’d like to help get the answer, and that would help the whole community.


More from Stallman is to be published in coming days.

We hope you will join us for future shows and consider subscribing to the show via the RSS feed. You can also visit our archives for past shows. If you have an Identi.ca account, consider subscribing to TechBytes in order to keep up to date.

As embedded (HTML5):

Keywords: UEFI Coreboot GRUB GNU FSF

Download:

Ogg Theora

Past shows in this series:

Show overview Show title
Episode 66: Tim and Roy TechBytes Episode 66: First of the Second Series
Episode 67: Tim and Roy TechBytes Episode 67: Nokia Down, Android Up
Episode 68: Roy TechBytes Episode 68: Solo With Patents, Apple Bans, and Android World Domination
Share in other sites/networks: These icons link to social bookmarking sites where readers can share and discover new web pages.
  • Reddit
  • email

This post is also available in Gemini over at:

gemini://gemini.techrights.org/2012/07/17/rms-on-uefi/

If you liked this post, consider subscribing to the RSS feed or join us now at the IRC channels.

Pages that cross-reference this one

What Else is New


  1. Breaking News: Campinos to Appear Before the Legals Affairs Committee of the European Parliament on Monday 12 April

    "Some MEPs have been briefed about ongoing governance deficits at the EPO, in particular the lack of GDPR compliance and the sell-out of "digital sovereignty" to Microsoft, but it remains to be seen whether or not they will dare to bring these issues up during the hearing."



  2. Pro-FSF Petition (“An Open Letter in Support of Richard Matthew Stallman Being Reinstated by the Free Software Foundation”) Tops 6,200 Signatures

    Monopolies and their media, along with their NGOs, have spoken and incited based on falsehoods; people now respond so the hate letter has a real crisis



  3. Links 10/4/2021: osbuild 28, KDE Frameworks 5.81.0

    Links for the day



  4. EPOLeaks on Misleading the Bundestag -- Part 12: A Worthy Successor to His Mentor?

    We examine the role of Christoph Ernst in EPO management, both in the Benoît Battistelli era and the António Campinos era (plenty to hide)



  5. USPTO for Monopolies, Keeping GNU/Linux in the Dark

    Growing evidence of gross discrimination against GNU/Linux (or Free software, even BSD/UNIX) users at the USPTO is too hard to ignore; some people out there challenge the Office over this travesty



  6. Accessibility and Availability First

    To make Techrights more widely accessible and more difficult to block/censor we've been making further changes, including self-hosting where possible



  7. Self-Hosting Videos With Free Formats and Animated Previews, Watermarks/Logos and Translucency

    We examine the power of video editing with ffmpeg, chained with command-line scripting and HTML5 features



  8. Links 10/4/2021: Linux on M1, Wine 6.6, ClamAV 0.103.2

    Links for the day



  9. Lunduke: On Mob Justice in the Tech Industry

    A new video from the former Microsofter who fears the phenomenon that’s adopted by companies like IBM



  10. IRC Proceedings: Friday, April 09, 2021

    IRC logs for Friday, April 09, 2021



  11. EPOLeaks on Misleading the Bundestag — Appendix (Benoît Battistelli's Vichy Syndrome): Georges Henri Léon Battistelli and Charles Robert Battistelli

    Local copies with evidence of or something concrete about Benoît Battistelli’s connection to unsavoury — and by today’s standards outright fascistic — politics



  12. IBM Doubles Down on Masters Being an Acceptable Word in the Context of Technology

    3 days after this post which disproves IBM's stance or shows its double standards it once again says “Masters” in its official blog (won’t that offend and alienate some people as they insist?)



  13. Hate Letter Against Richard Matthew Stallman (RMS) Backfired So Spectacularly That Signers Asked to Revoke Their Own Signatures and the List Was Then Frozen Permanently (Updated)

    "An open letter in support of Richard Matthew Stallman being reinstated by the Free Software Foundation" tops 6,100 signatures (graph generated just moments ago)



  14. EPOLeaks on Misleading the Bundestag -- Part 11: The BMJV's Tweedledee: Dr Christoph Ernst

    The right-hand man of António Campinos plays a role similar to that of Herr Lutz before him



  15. Links 9/4/2021: Tanglet 1.6.0 and HPVM 1.0

    Links for the day



  16. The Libel Against Richard Stallman Did Not Age Well

    Almost 2 years down the line libel about the founder of the FSF remains online, uncorrected (in sites funded by Microsoft and IBM)



  17. The Letter in Support of the FSF and Richard Stallman is Backed by the International Community, Not American Monopolies and Nationalistic Elements

    Free software is for everybody to use, internationally, it is not the asset of a bunch of current and old monopolists (connected to the US military) that also control the media; the nature of the signatures says that out loud



  18. Gemini Over IPFS (Decentralised Web, Accessed Over Gemini Protocol)

    The Gemini protocol (gemini://) can already be used to fetch (at the back end) and present objects from a P2P-like network; we're currently exploring practical use cases and possibilities



  19. News Sites That Talk About Patents Have Become Shameless Self-Promotion 'Plugs' by Law Firms (and Sometimes Outright 'Spam' for Litigation)

    The sources of news about patent affairs have dried up; sites that actually used to investigate and report facts have since then shut down or defected to the Public Relations/marketing industry



  20. Links 9/4/2021: Kubernetes 1.21 and FFmpeg 4.4 Released

    Links for the day



  21. IRC Proceedings: Thursday, April 08, 2021

    IRC logs for Thursday, April 08, 2021



  22. [Meme] Self-styled Judges

    To suit a recurring theme at the EPO we hereby present Roland Lutz, a self-styled judge



  23. EPOLeaks on Misleading the Bundestag -- Part 10: A Faithful Lapdog Despised and Reviled by EPO Staff

    "In any event, the "Nazi" jibes directed against Lutz seem to have triggered Battistelli who decided to take revenge on his perceived enemies inside the EPO by smearing them as “Nazis”."



  24. Links 8/4/2021: GnuPG 2.3.0, Xen 4.15, Xfdashboard 0.9.2

    Links for the day



  25. The Hate Letter Which Backfired

    The FSF is more closely aligned with its founder's vision, his antagonists have left or are leaving, and that old hate letter turned out to be a loud minority (made to appear louder by biased media) emboldened by a gish gallop of lies



  26. IRC Proceedings: Wednesday, April 07, 2021

    IRC logs for Wednesday, April 07, 2021



  27. IBM: We Can Say It... You Cannot

    Blog posts such as this new one help show the hypocrisy or the double standards of IBM, looking to control speech while attacking people's (software) freedom/civil liberties and profiting from atomic bombs



  28. The Collapse of Microsoft Windows

    Although the corporate media keeps insisting that Microsoft is doing well, government (or military) bailouts keep the company afloat while its desperate attempts to remain relevant (as the common carrier languishes) merit a debate



  29. Links 8/4/2021: Mesa 21.0.2, GNU Releases, and Stable Kernels

    Links for the day



  30. Petition in Support of FSF's Decision to Put Its Founder in the Board Doubles Size of Hate Letter Propped Up by Corporate Media (Partly Funded by Monopolies)

    You cannot fool the population for eternity and there's a reflexive response to a campaign of misinformation, as the graph above shows; notice it keeps growing and growing, albeit not the defamatory one from the (Google-funded) Mozilla- and Red Hat-connected Luis Villa, who put in the GNONE Foundation Microsoft people


RSS 64x64RSS Feed: subscribe to the RSS feed for regular updates

Home iconSite Wiki: You can improve this site by helping the extension of the site's content

Home iconSite Home: Background about the site and some key features in the front page

Chat iconIRC Channel: Come and chat with us in real time

Recent Posts