Bonum Certa Men Certa

System76 Gives 'Secure' Boot the Boot

Reprinted with permission from Ryan Farmer.

System76 Ditches UEFI Firmware Trash, Ships Coreboot Firmware on Linux Laptops.



I noticed today while looking around, that System76 has gotten rid of the UEFI trash on most of their products.



UEF is designed heavily around Windows and is full of bugs (here’s the list of them on my Lenovo ThinkBook 15 ITL Gen2) and promotes Microsoft’s lock-in, Security Theater Boot. I’ve had nothing but problems out of UEFI and even had to take legal action against Lenovo for abusing the customers and violating American laws with it.



Coreboot is the firmware that people deserve to have.



"Coreboot is the firmware that people deserve to have."It’s actually designed to “Just boot the computer and get the Hell out of there.”, which is what Linus Torvalds said he missed about “PC BIOS”.



It’s up to the user, really, what they want to run and so I congratulate System76 for taking strong and decisive action on behalf of their customers and recommend that people who need an x86 PC with Linux take their business to System76 as I will do next time I need a laptop.



Good behavior deserves to be rewarded!



UEFI is so bad that it should never have been released.



Lenovo should be ashamed of shipping this garbage on their computers.



Many times it doesn’t even work right on Windows.



They’re constantly patching it, and sometimes when you apply the patch it screws up Windows and your bootloader isn’t recognized, or “Bitlocker” won’t let you in unless you know your recovery key.



It’s even worse than the worst “Legacy BIOS” implementation I had ever encountered on dozens of PCs I owned over the years that it was shipped.



"You can pretty much expect ACPI issues and potentially dead hardware with UEFI, just from the operating system using its documented interfaces."The very worst problem I ever encountered on “Legacy BIOS” was an ACPI problem, but at least the computer worked and I raised Hell with the vendor and it got fixed.



You can pretty much expect ACPI issues and potentially dead hardware with UEFI, just from the operating system using its documented interfaces.



A system firmware that is well-designed should never risk being “bricked” because you loaded an OS.



UEFI implementations were poorly designed and went out without any testing.



Lots of the worst BIOS code (ACPI) was lifted straight out of Legacy BIOS, and then they went and created new disasters.



More than 10 years later, UEFI has only barely gotten better, in general.



In some ways, worse. (Depending on hardware vendor.)



Malware “in the boot path” is not an actual problem Linux users are having.



Even on the Windows side, Microsoft mostly threw “Secure Boot” in because people were using programs running before Windows started to trick the Product Activator. But those aren’t “malware”. They’re illegal, sure. (At least in the US.)



Also, why would you even run Windows for free? Eww.



But they are not threatening the user.



"Now that we have affordable alternatives to UEFI, even on the PC, don’t buy UEFI!"The only sane thing to do about UEFI “Secure Boot” is turn it off and just use the computer, but that’s in no way guaranteed to work forever. Microsoft could change the Windows license program and remove the part about the user being allowed to turn it off, and they probably will at some point.



After Ubuntu screwed me on the “Boothole” patch by incompetently updating the “dbx” ahead of other Linux vendors, rendering me unable to boot into Fedora, I reset Secure Boot on the Yoga and then turned it off.



I’ve never used “Secure Boot On” on the ThinkBook since removing Windows.



It doesn’t provide any actual security, it’s just one more thing in the way of running your PC the way you want.



And your OS vendor shouldn’t have to buy a “hall pass” from Microsoft, which is basically the way “Secure Boot” works on Linux now. The way Lenovo ships their laptops, the only way to control Secure Boot is turn it on or off. That’s pretty much it. If they let you have any control over it, it defies being documented (on purpose).



Even Theo de Raadt, the person behind OpenBSD rolls his eyes at “Secure Boot”.



It’s better to just buy a firmware that doesn’t do this to you as it certainly doesn’t solve any actual problem Linux users have.



Now that we have affordable alternatives to UEFI, even on the PC, don’t buy UEFI!



Not only is UEFI system firmware code objectively horrific now, unless we want to live in a future where Microsoft controls the PC, we should support computer makers that provide us with alternatives where Free Software will continue to be allowed. Otherwise, we will eventually run out of time and Microsoft will disallow operating system choice from the moment you press the power button.



EFI is this other Intel brain-damage (the first one being ACPI). It’s totally different from a normal BIOS, and was brought on by ia64, which never had a BIOS, of course.



[…]



Sadly, EFI people (a) think that their stinking mess is better than a BIOS and (b) are historically ia64-only, so they didn’t do that, but went the “we’ll just duplicate everything using our inferior EFI interfaces” way.

Linus Torvalds (before UEFI made it to PCs in an even worse state than it was in on ia64 and Macs)


Recent Techrights' Posts

Rewriting Things in Rust
How far would you go?
What Microsoft Reputation Laundering (With a Weaponised Law Degree) Looks Like in a Foreign Continent
You would expect this in uncivilised and primitive countries
Slopwatch: LLMs 'Write' Fake or Distorted 'News' About "Linux"
LLM slop disguised as news
 
“Twibel” Actions Against Comedians (and Why It's a Truly Low Blow)
they try to make up in quantities for a lack of merit or quality
Linux Foundation Apparently Flirting With Slop (Marketing by LLM-Generated SPAM)
The Web is in a really bad state!
COVID-19 Sped Up Site Improvements in Techrights
A few months later we created our very own IRC network
Gemini Links 05/07/2025: Negative Questions and 'Touching Grass' (Going Outside)
Links for the day
Links 05/07/2025: Dalai Lama Succession as 90th Birthday Approaches, 40 deg C in China
Links for the day
Links 05/07/2025: Hungary and US Defecting to Russia, "Google's Hotseat Hypocrisy"
Links for the day
Gemini Links 05/07/2025: 4th of July 2025 and "Zig Roadmap 2026"
Links for the day
How to Combat the Exploitation and Abuse by Microsoft GitHub
Not to mention corruption and crimes against women
Bryan Lunduke is Actually Sending His Audience to Attack People
"[Lunduke] is actually sending his audience to attack people."
Even The Right Wing is Rejecting Bryan Lunduke
no wonder he became so irrelevant and marginal
Microsoft's MSN Helps Microsoft Spread Lies About the Layoffs' Scale (Well Over 25,000 People Laid Off This Year)
There seem to be monopolies on lies and on truth
The Death of X Has Been Greatly Exaggerated (by Compromised Media)
X.Org Server is alive and well
In 2025 Everything is "AI". Remember Blockchains?
Talk about what companies and things (services, products, software) actually do, not the labels they use
Julian Assange Has Been Free for a Year
Julian Assange and I disagreed on some things
Monopolies and Scalping
Monopolies gravitate towards price hikes
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Friday, July 04, 2025
IRC logs for Friday, July 04, 2025
Microsoft's August Layoffs Wave: "August is Confirmed for Additional Performance Based Cuts"
"August is confirmed for additional performance based cuts from the recent connects along with additional organizational cuts."
Links 04/07/2025: Google Replaces the Web With Slop, "AI Might Kill Us All"
Links for the day
Gemini Links 04/07/2025: Mindfulness and F1
Links for the day
Weeks After Microsoft Bankruptcy in Russia the Company Shuts Down in Pakistan, Too
Last month Windows' share in Pakistan fell to an all-time low
Rob Musial's June 2025 Additions of Malware in Proprietary Software
Via the GNU Web site this week
Links 04/07/2025: Microsoft's H-1B Visa Applications Show Another Crisis Unfolding, Many More Deep Cuts and Shutdowns Revealed, Complete Microsoft Exits
Links for the day
Gemini Links 04/07/2025: A Day To Remember and "Stop Killing Games"
Links for the day
Crime and Corruption at Microsoft GitHub Cannot be Covered Up by SLAPPs in Another Continent
We'll write about this for a long time to come
Slop Videos Are Disappointing Garbage, Nothing New, Just Brute Force up on Display or a Pedestal of Slop
Slop videos aren't a new thing
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Thursday, July 03, 2025
IRC logs for Thursday, July 03, 2025
The War on Local Storage (People Hosting Their Files Locally and Privately)
There's nothing wrong with controlling one's computing
What Digital Independence Means
Independence in the digital realms means abandoning platforms like GitHub, not just rejecting proprietary software
NVidia is a Bubble
they temporarily see fortunes and wrongly assume perpetuity thereof
Fedora Does Not Care About Diversity and Inclusion, It's About Optics (Corporate Image)
any notion of inclusion is superficial and misleading
Don't Buy the Excuses for Microsoft's Mass Layoffs
Back in the 90s, Microsoft bought a lot of companies to get and stay ahead
Happy Independence Day to Our American Readers
Maybe tomorrow will be a good opportunity to explain to American people - in terms of concepts, not brands - which tools respect their independence
Slopwatch: Linux Journal, Linuxsecurity, and Google News Getting Even Worse (More Slopfarms Added Which Attack Linux With Bruce-Force SPAM)
Google News is part of the same problem
Links 03/07/2025: More Cuts and Cancellations at Microsoft Revealed
Links for the day
Gemini Links 03/07/2025: Favourite Child and Launching WikiGem
Links for the day
GNU/Linux is Replacing Microsoft Windows. But We Need to Eradicate Microsoft, It's a Hub of Crime.
I have been writing about Microsoft since the 1990s when I was in school
Mystery Surrounding the PCLinuxOS Sites and PCLinuxOS Magazine
Let's hope this isn't something major
People and Companies Do Learn Some Lessons From Their Mistakes (Stubborn Ones Don't)
Brett Wilson LLP is an example of one that would rather drown in mistakes
Links 03/07/2025: 'Hey Hi' Slop Ridiculed Some More and Microsoft's Layoffs Tally for 2025 Reaches About 29,000 in Just 6 Months (Almost 5,000 Per Month)
Links for the day
Microsoft Staff Harassing Women, Strangling Women, Telling Women to Kill Themselves and Worse? Not a Problem!
Two women have left Brett Wilson LLP
The Slopfarms Are Losing the Plot (and Google is Propping Up Rogue Sites)
Google is part of the attack on the Web, on information, and on technology
New BetaNews Realises There's No Potential or Future in Slopfarms, Prior Editor Wayne Williams is Back
They realise that slop (so-called "AI") cannot replace humans
Claims That Microsoft Looks for Staff That Works More and Gets Paid Less (or Can Only Code by Grabbing Other People's Code, Under the Guise of "AI")
People can form their own opinion
Richard Stallman Was Right About Reasons Not to Use Microsoft
last updated 2017
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Wednesday, July 02, 2025
IRC logs for Wednesday, July 02, 2025
Gemini Links 03/07/2025: No to Cloudflare and Small Web July
Links for the day