Linked by Howard Fosdick on Thu 6th Dec 2012 05:26 UTC
OSNews, Generic OSes With computers now shipping with UEFI Secure Boot enabled, users of any OS other than Windows 8 will want to know how to circumvent it. Jesse Smith of DistroWatch tells how he did it here. The Linux Foundation describes its approach here. If you want to boot an OS other than Windows 8, you'll want to figure this out before you buy that new computer.
Thread beginning with comment 544521
To view parent comment, click here.
To read all comments associated with this story, please click here.
RE[3]: Fedora Shim
by Alfman on Fri 7th Dec 2012 15:55 UTC in reply to "RE[2]: Fedora Shim"
Alfman
Member since:
2011-01-28

bornagainenguin,

Implementation bugs can be a problem. I was actually referring to how we effectively have one key (microsoft's) controlling the hardware/firmware secure features on every consumer computer from now on is an inherently poor security design. This is not something a competent standards security engineer could have signed off on unless there were ulterior motives. Of course they were working for microsoft so there you go.

I agree that finding an implementation vulnerability will be an embarrassment, but realistically what do we think will happen? I believe they'll just fix the implementation & release patches, and then continue down the same path.

Edited 2012-12-07 16:00 UTC

Reply Parent Score: 3

RE[4]: Fedora Shim
by ssokolow on Fri 7th Dec 2012 16:31 in reply to "RE[3]: Fedora Shim"
ssokolow Member since:
2010-01-21

I agree that finding an implementation vulnerability will be an embarrassment, but realistically what do we think will happen? I believe they'll just fix the implementation & release patches, and then continue down the same path.


That is, assuming they can convince the motherboard manufacturers to support things to a suitable degree.

This is basically like Android but with less thought put into how patches are going to get made and distributed for each of the gazillion different motherboard models that'll go on the market, each needing its own combination of proprietary EFI add-on modules to work.

Reply Parent Score: 2

RE[5]: Fedora Shim
by Alfman on Fri 7th Dec 2012 17:58 in reply to "RE[4]: Fedora Shim"
Alfman Member since:
2011-01-28

ssokolow,

"That is, assuming they can convince the motherboard manufacturers to support things to a suitable degree."

Haven't they already?

Reply Parent Score: 2