Slashdot Mirror


More Power To The Firmware

An anonymous reader writes "In More Power To The Firmware Amit Singh talks about technical details of EFI, the next-gen BIOS replacement standard Intel, Microsoft and others are pushing. This is a very informative piece where he talks of issues with legacy BIOS, how it affects those who develop in the firmware environment and how EFI plans to solve these problems. EFI usage examples are included, including a programming example. He contrasts EFI with Open Firmware as well. IMO the second half of the article is even more interesting, where sample FORTH code is provided for displaying a window/mouse pointer GUI inside the Apple/Mac firmware! And of course, there's code for a new 'Towers of Hanoi' animation using the Mac firmware (remember Hanoimania?). Aspiring Mac Firmware Hackers could also check out the suggested projects ;-)"

226 comments

  1. I'm not a tech guru type... by Dagny+Taggert · · Score: 3, Interesting

    ...but can you imagine any sort of Windows-dependent BIOS? Is this in our future? Is it even possible? Or, worse yet, a Windows-based BIOS of some type where the OS actually IS the BIOS?

    --
    Don't be a looter...and yes, I know that it's spelled with an "A" instead of an "E".
    1. Re:I'm not a tech guru type... by Oddly_Drac · · Score: 4, Informative

      "but can you imagine any sort of Windows-dependent BIOS?"

      No. Luckily, the article didn't mention one.

      --
      Oddly Draconis
      Too cynical to live, too stubborn to die.
    2. Re:I'm not a tech guru type... by maxwell+demon · · Score: 4, Informative
      ...but can you imagine [...] a Windows-based BIOS of some type where the OS actually IS the BIOS?

      Well, given that there's LinuxBIOS ...
      --
      The Tao of math: The numbers you can count are not the real numbers.
    3. Re:I'm not a tech guru type... by garcia · · Score: 4, Interesting

      I have mentioned this plenty of times before. In order for Windows DRM to *really* work the OS has to require a BIOS that is tied directly to it.

      The only way for this to happen is for MSFT to cut deals w/the BIOS manufactorers (which they have done already w/Phoenix).

      *MOST* people are not going to care one way or the other (ie "free" hardware while paying for the software) as long as their computer runs without problems, they have no work lost because of viruses, etc.

      It's actually pretty scary when you think about it. You want to buy a piece of hardware? You are going to be buying it w/a MSFT approved DRM BIOS and their OS. Nothing else will install w/that BIOS because that would allow for software that isn't approved to be running (OS included). Take the BIOS out or flash it? None of the rest of the hardware will work either.

    4. Re:I'm not a tech guru type... by Anonymous Coward · · Score: 2, Informative

      Ans what about Amiga OS. THe OS was the BIOS. at least for A1200 and before

      just wait until the 1st BIOS virus

    5. Re:I'm not a tech guru type... by Psiren · · Score: 4, Insightful

      Then there will be a nice market for people to build non DRM machines, so that people can run their non Windows OS. I don't think it's time to panic just yet.

    6. Re:I'm not a tech guru type... by x0n · · Score: 4, Informative

      The OS is the BIOS? Either you're trolling [but given your subject disclaimer, perhaps not], or you misunderstand the concept of abstraction layers, and their ordering. The BIOS cannot be dependent on Windows, it sits beneath the OS. The OS is dependent on it. Drivers, in effect, are mini-BIOSs in themselves. They abstract out the different hardware devices to a standard windows API. The BIOS that comes with your machine abstracts out the out-of-the-box components of your motherboard among other things. Sometimes windows drivers talk to the bios, but mostly they skip it altogether.

      - Oisin

      --

      PGP KeyId: 0x08D63965
    7. Re:I'm not a tech guru type... by hal2814 · · Score: 4, Interesting

      I don't see how DRM can be solved at the BIOS level. Unless the media player and file system are completely controlled by hardware with no OS intervention, there will always be a piece of software asking "Is this file OK to play/copy?" As long as this query exists, there is an opportunity for a programmer to fake the response and play the file anyways.

    8. Re:I'm not a tech guru type... by ThisNukes4u · · Score: 1

      Thats ok. If that happens, then the free software movement will change most of its activity from being on x86 to ppc or sparc or *if it survives) alpha, which are all better to begin with in my opinion. All is not lost.

      --
      thisnukes4u.net
    9. Re:I'm not a tech guru type... by mikael · · Score: 1

      In the article, there is no mention of DRM, but they do mention that Linux would be considered as one of the possible 64-bit operating systems (Linux IA-64?).

      The mention of UGA took me by surprise, even though it's three years old, I've never heard it mentioned before.

      --
      Vintage computer adverts: http://www.vintageadbrowser.com/computers-and-software-ads
    10. Re:I'm not a tech guru type... by Mr.+Neutron · · Score: 5, Insightful
      I don't think it's time to panic just yet.

      You do realize that once this is in place, the **AA will convince Congress that only pirates, criminals, and terrorists would possibly want a computer without a "trusted" BIOS, don't you? Non-trusted hardware will go the way of Macrovision-free VCRs and Broadcast-flag-free HDTV tuners. When all of the Linux users and OS hackers raise holy hell, the response will be:

      Jack Valenti: "These people are just a fringe nitch. Why should we threaten our precious content just to cater to the whims of a few people?"

      Bill Gates: "The 'Trusted Computing Consotium' has made available [closed, blackboxed, and encrypted] APIs to the 'trusted hardware' industry spec. Why can't Linux use them just like any other OS?"

      --
      dinner: it's what's for beer
    11. Re:I'm not a tech guru type... by Tryfen · · Score: 4, Insightful
      What if the response is signed with a private key?

      eg
      Re your request 1010 @ 12:34 5/6/2004 to do XYZ - ok. HASH DSFJ$K%GDFG%%E$


      Sure, you'd possibly be able to hack it. But if your DVD player's BIOS has non-changable firmware and talks to the systme BIOS over an encrypted channel - what chance would you have?

      This is about having secure communication between everything. DVD -> Soundcard -> Speakers. All requiring authentication before they'll do anything.
      --
      If a square is really a rhombus, why aren't all triangles purple?
    12. Re:I'm not a tech guru type... by drinkypoo · · Score: 4, Interesting
      AFAIK all legacy Amiga computers (Up to the Amiga 4000) have half of the OS in ROM BIOS, allowing you to put just a bootblock and a program on a disk and still have the benefit of the basic GUI functionality. This is less goofy than it seems because AmigaDOS has a feature called "patchlists" that allows you to patch functions in an OS-supported fashion without any kludges. Well, without any kludges that aren't part of the OS anyway. This in turn is made reasonable by the utter lack of memory protection, which is not a feature in a modern operating system, it's a serious liability.

      I don't know of any BIOS-based viruses but there certainly have been some viruses which will damage your BIOS on systems which keep it in flash/eeprom.

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
    13. Re:I'm not a tech guru type... by MuMart · · Score: 1
      Hopefully the motherboard and bios manufacturers have their wits about them.

      Locking your business into MS products is asking for a quick death. MS already has a hardware and bios division cranking out XBOXes.

    14. Re:I'm not a tech guru type... by operagost · · Score: 4, Insightful

      This is why it's good that IBM is in the Linux fold. If they want to keep selling Linux servers, they'll need to support a "trusted" BIOS. In order to abide by the GPL, they will have to release the source. This will allow support across the board, even on cheap consumer DRM-enabled devices.

      --

      Gamingmuseum.com: Give your 3D accelerator a rest.
    15. Re:I'm not a tech guru type... by Anonymous Coward · · Score: 4, Insightful

      Not to mention that Intel is also a huge Linux-backer, and is basically paying Linus Torvolds' salary now days. You can be sure that any Intel-based inititive is not going to be hostile to Linux.

      (After fighting with grub's perverse view of the universe for a week, the conclusion is that better firmware can only help Linux adoption...)

    16. Re:I'm not a tech guru type... by Surt · · Score: 1

      convince was a typo for bribe, right?

      --
      "Who is the Journal of Quantum Physics going to believe?" --Stephen Hawking
    17. Re:I'm not a tech guru type... by mpe · · Score: 1

      What if the response is signed with a private key?

      Then key management becomes a big issue. Either you have keys which are fixed or you require require reliable network access for any device.

      Sure, you'd possibly be able to hack it. But if your DVD player's BIOS has non-changable firmware and talks to the systme BIOS over an encrypted channel - what chance would you have?

      You have much the same cryptoanalysis problem as the people at Station X in WWII.

      This is about having secure communication between everything. DVD -> Soundcard -> Speakers. All requiring authentication before they'll do anything.

      You don't even need to break any encryption to "pirate" content with such a system in the first place. A system is only as secure as it's weakest part.

    18. Re:I'm not a tech guru type... by Smallpond · · Score: 1

      Sounds fishy. I can't imagine Compaq caring what a customer would say on any topic. Their hardware used to be non-standard to lock out cheap competition. Now that they are part of HP, they are of course, completely customer-focused **cough**.

      Model? Link? Was this an iPaq? Why would you buy one?

    19. Re:I'm not a tech guru type... by flinxmeister · · Score: 2, Insightful

      Yeah, if non DRM machines become difficult to aquire...it'd be a shame to be relegated to a fringe niche who build our computers from kits, use obscure operating systems, share code and knowlege via informal and uncommercial channels, and generally operate in communities of geeky friends under the radar of multi-billion dollar companies.

      Sometimes going back to such things seems like a really, really good idea.

    20. Re:I'm not a tech guru type... by Anonymous Coward · · Score: 0

      He probably just deleted the configuration partition in an fdisk newb maneuver, and then got bitten by Linux's formerly crappy plug-n-play support.

      Old compaq servers used to come with a CD that booted Win95 for things like RAID configuration.

    21. Re:I'm not a tech guru type... by pilgrim23 · · Score: 3, Insightful

      All that this will mean is that the Hardware Of The Future will be built in fabs all over Asia, Africa, the Pacific, etc for non-US customers, developing inovative and new software/hardware products. Meanwhile, the Gnomes of Redmond will insure that inovation in no way enters the American equation. First the third world gets a boost in communication by not needing to amortize any legacy geer, now, if such nonsense goes forward it will boost them on the hardware front. Is Senegal going to be the new Silicon Valley?

      --
      - Minutus cantorum, minutus balorum, minutus carborata descendum pantorum.
    22. Re:I'm not a tech guru type... by Anonymous Coward · · Score: 0

      And classic Macs worked the same way, although they eventually virutalized the ROM.

    23. Re:I'm not a tech guru type... by Planesdragon · · Score: 1

      Nothing else will install w/that BIOS because that would allow for software that isn't approved to be running (OS included).

      It isn't in MS's best interest to create BIOSes that only run signed software.

      At worst, we'll have BIOSes that limit access to parts of a disk to signed only software, or have a function to allow only signed software to run.

      Allowing only signed software to run on EVERY BIOS would make software development either impossible or make it require overly expensive workstations.

    24. Re:I'm not a tech guru type... by RickHunter · · Score: 1

      Actually, you have to have some kind of secure key distribution channel or storage location. Which becomes absolutely and completely impossible as soon as the device lands in the owner's hands. Any fixed keys (or key generation program) can be extracted, any keys transmitted over the network intercepted. What they're trying to do is technically impossible, which is why they're trying to get Fritz Hollings and the other whores... Er... Representatives to legislate it as mandatory and make atteming to crack it a criminal offense.

    25. Re:I'm not a tech guru type... by dgatwood · · Score: 1
      Actually, it's perfectly possible to have mutual dependency between components in an OS environment. The VM system in Mac OS X, since it writes VM data into a file, depends on the file systems. They, in turn, depend on the unified buffer cache (UBC), which is, in turn, dependent upon the VM system.

      The obvious model would involve the BIOS having just enough drivers to do polled I/O from the hard drive to read additional drivers into memory to support basic I/O like the keyboard and the video card. I'm not saying this makes any sense, since it doesn't offer any real advantages over the current model, and would cause bad experiences if you had to rebuild your system with a clean hard drive... but that wouldn't prevent someone from doing it if they wanted to create an artificial dependency.

      --

      Check out my sci-fi/humor trilogy at PatriotsBooks.

    26. Re:I'm not a tech guru type... by perlchild · · Score: 2, Insightful

      Now, IANAL but what I read on this topic seemed to indicate that only binaries would be signed, so even if you had the source, you'd be running untrusted binaries without any capacity to get them signed. This would of course be ok for IBM, but would cancel the benefit of having the source(you can't build a working binary from it). Maybe GPL4 can say that the source you get from a developer has to "be usable to generate a working binary equivalent to the binary you receive from vendor" next time...

    27. Re:I'm not a tech guru type... by Anonymous Coward · · Score: 0

      Actually, if any company can pull off a "Fritz Chip", it's going to be Apple, not Intel or AMD.

      Unlike the PC world, Apple is a single company with complete control of the hardware, firmware, OS, and the entire boot process. Macs have never been able to run legacy OSes on new hardware. Plus they've got the motivation as the only hardware company with a direct stake in digital media sales.

      (Of course, anything Intel/MS does will be proceeded with 3 years of vaporware announcements. But with Apple, you'd never find out about it until the machines had been shipping for a while and they silently turned it on in some itunes update.)

    28. Re:I'm not a tech guru type... by Fred+Or+Alive · · Score: 1

      The same goes for Acorn[1]'s RISC OS on the Archimedes series, at least early version, I'm not really sure about 3.5 and 4, they might be reliant on stuff on a hard disk. You could also count most 8 bit micros of course, like BBC BASIC and the DFS (a DOS) on the BBC Micro were in ROM, although they weren't GUI OSes.

      [1] The A in ARM, the Acorn RISC Machine.

      --
      10 PRINT "LOOK AROUND YOU ";
      20 GOTO 10
    29. Re:I'm not a tech guru type... by Shachaf · · Score: 0

      Yes. The X-Box is a standard PC with a Win2K based BIOS.

    30. Re:I'm not a tech guru type... by Anonymous Coward · · Score: 0

      Developers (that means you) will have to be able to sign their own software, or the system would be pointless. This would be an extra command in the makefile, no biggie.

      There's many positive security applications for this that have nothing to do with the MPAA/RIAA. It will make rootkit type stuff much harder to do, for example.

    31. Re:I'm not a tech guru type... by Alsee · · Score: 4, Informative

      Developers (that means you) will have to be able to sign their own software, or the system would be pointless. This would be an extra command in the makefile, no biggie.

      You don't understand Trusted Computing. It's not about signing software. There's no need to sign at all. What happens is if you change the software at all - even a single instruction - that that software no longer works with and existing data and can no longer communicate with other programs on the internet.

      The Trust chip generates a hash of the software. The hash is linked to an encryption key. If you change the software you lose the hash and can no longer get the the decryption key at all. Nothing works anymore. Very biggie.

      -

      --
      - - You can't take something off the Internet! That's like trying to take pee out of a swimming pool.
    32. Re:I'm not a tech guru type... by Altus · · Score: 1


      If any developer can sign their own software then what is to stop Virus makers from signing their viruses?

      what is to stop the DECSS programmer from signing DECSS, what is the whole point of this trusted computer thing anyway?

      --

      "In America, first you get the sugar, then you get the power, then you get the women..." -H. Simpson

    33. Re:I'm not a tech guru type... by Alsee · · Score: 2, Interesting

      No, Trusted Computing defeats the GPL. You may have the source, but that source is useless. If you change a single line of it the program stops working. The software is no longer Trusted and it can no longer decrypt anything.

      That's one of the reasons Microsoft is so keen on Trusted Computing. It defeats the GPL.

      -

      --
      - - You can't take something off the Internet! That's like trying to take pee out of a swimming pool.
    34. Re:I'm not a tech guru type... by Alsee · · Score: 1

      Long story short, it's done with a Trust chip. That chip has your uniquely identifying private key locked inside. This chip watches the software you run. If you try to change the software *at all* then the chip denies the software the ability to decrypt the file.

      -

      --
      - - You can't take something off the Internet! That's like trying to take pee out of a swimming pool.
    35. Re:I'm not a tech guru type... by Lord+Kano · · Score: 1

      If they want to keep selling Linux servers, they'll need to support a "trusted" BIOS. In order to abide by the GPL, they will have to release the source.

      No, they won't have to release the source to their own BIOS. GPL doesn't mandate that every piece of code on a system is open. Now THAT would be a viral GPL.

      LK

      --
      "Hi. This is my friend, Jack Shit, and you don't know him." - Lord Kano
    36. Re:I'm not a tech guru type... by hal2814 · · Score: 1

      It's a shame Fritz will be retiring. I just hope that Disney & Co don't buy off a representative that is more charismatic and knowledgeable to replace him or we might really be in trouble.

    37. Re:I'm not a tech guru type... by DeathPenguin · · Score: 2, Informative

      >>just wait until the 1st BIOS virus

      There have already been several, that was one problem with using DOS.

    38. Re:I'm not a tech guru type... by DeathPenguin · · Score: 1

      LinuxBIOS can load a Linux kernel in the BIOS ROM, but it is not an OS.

    39. Re:I'm not a tech guru type... by Anonymous Coward · · Score: 0

      > The Trust chip generates a hash of the software. The hash is linked to an encryption key

      Maybe I'm stupid, but isn't this commonly known as "signing"? Anyway, there will have to be a mechinism to upload your own hashes or the system will be useless for anything but tivos and xboxes.

    40. Re:I'm not a tech guru type... by Anonymous Coward · · Score: 0

      Nothing really. However, IIRC, even though the virus/DeCSS is "signed", it still can't poke into the memory region of the DVD subsystem. Whether or not this actually works in practice is TBD.

    41. Re:I'm not a tech guru type... by RedDirt · · Score: 1

      Ah, but that's the way the world works for the development of Game Console stuff. In order to test the game, you have to buy an unlocked console that will read standard CDRs.

      I'd imagine that, in the end, that's where Microsoft would like to see the average PC end up. That way, they can raise the bar on pirates to the point that it's impossible for the average user to pirate software. It also has the "unfortunate" side-effect of locking down the complexity of what new developers can do. Sure, there's nothing stopping them from making a spiffy Excel macro, but what if they want to do something more complex? Oh, that requires the development platform - so sorry.

      After all, how many folks have the ability to use a logic analyser to figure out how to bypass the DRM built into the X-Box? *sigh*

      --
      James
    42. Re:I'm not a tech guru type... by sjames · · Score: 4, Insightful

      That's the heart of the problem. The term 'Trusted Computing' only makes sense when you look at it in an orwellian sense. It's not the owner or user that can trust the computer, it's MS and the *AA that trust it.

      If it was really worthwhile (and the name truthful), the BIOS would demand MY signature on the OS that I trust. In turn, the OS would demand MY signature on the apps that I trust. It would be reasonable in either case that I could sign a vendor's public key if I trust anything the vendor signs as well.

      Naturally, MS and the *AA don't want that, they want to hold the keys (and thus the power) over the machine even while other people pay for it.

      I am fine with them protecting their Preciousssss (erm, IP) if they want. I would suggest that they encase it in concrete and bury it at the botton of the ocean. Nobody will copy it then. If they like, I could even toss it into a volcano for them. (I seem to remember something about that in a highly successful and unencrypted book somewhere).

    43. Re:I'm not a tech guru type... by connorbd · · Score: 1

      actually, the iPaq is one of the more open platforms in the PDA world, probably slightly more so than the Palm.

      Though I agree with you about lockin -- during my brief career as a computer tech I saw the aftermath of trying to repair a minitower Presario. Almost everything about it was standard except the front panel connectors -- had to sell the customer a whole new case. Dell was even worse -- for a couple of years they were using nonstandard power connectors on their PCs, meaning things got fried if you tried to plug an ATX power connector into a Dell-modded motherboard. Basically to repair Dell systems (from about 1999 to 2002, I think, was the time frame) you have to replace the power supply as well as the motherboard.

    44. Re:I'm not a tech guru type... by Altus · · Score: 1


      seems to me that if I am able to wite a legitimate pice of software to do any job and then sign it myself then there is no protection.

      if, and Ill admit I dont entirely understand trusted computing, all stuff related to say, DVDs in this case is handled by the OS and the OS alone and all you can do is write a shell then the OS becomes the DVD player and what happes when you want to run a differnt os.

      I do belive that you can make a trusted computing system by having this level of controll but I dont think you can let people sign their own apps if thoes apps are going to be able to manipulate data. I could be wrong though... it will be intersting to see how this plays out.

      --

      "In America, first you get the sugar, then you get the power, then you get the women..." -H. Simpson

    45. Re:I'm not a tech guru type... by nicolas.e · · Score: 1

      Well I don't think so. For example, their move to Open Firmware is quite the opposite of going to DRMed BIOSes.

    46. Re:I'm not a tech guru type... by Alsee · · Score: 2, Informative

      Anyway, there will have to be a mechinism to upload your own hashes or the system will be useless for anything but tivos and xboxes.

      That's what I'm saying - there is NO way to "upload hashes". And there is no need to attach any signature to the EXE at all.

      When you run the program the Trust chip generates a hash value for the program. There is no hash attached to the program. There is no signature attached to the program. The chip generates a hash of the software on the fly, and uses that to generate or access an encryption key. Any data that program wants to read or send goes through that encryption key.

      YOU HAVE NO CONTROL over the hash.
      YOU HAVE NO CONTROL over the encryption key.

      The system does not verify that the software is has a "good" signature. It allows absolutely any software to run. The only thing it does is see if the software has changed. If the software is changed then it will still run, but it won't work. It won't be able to read any existing data and it won't be able to talk to other programs it's supposed to talk to.

      There is a whole big elaborate system built on top of this. But fundamentally it is designed to deny you control over your own computer. Trusted computing is about the owner not being trusted, instead other people can Trust that your computer will enforce rules against you, and that you will be powerless to tell your computer to do something different.

      When you run Trusted DRM music software, that software has a certain hash. That hash produces a specific encryption key. All of your DRM music files are encrypted with that key. With that key the chip then decrypts the DRM files for the player and it can play your music.

      However you are forbidden to ever know that encryption key. If you change the DRM music player in any way - perhaps some sort of change that would break the DRM protection - then the chip generates generates a different for the changes software. With a different hash you can no longer get the decryption key. So even if you broke the player's DRM system, the player can no longer read the music files.

      The RIAA can then Trust that your computer will not allow you to do anything except exactly what the RIAA decide to allow you to do. Exactly no more and no less than what the program they gave you will let you do or force you to do.

      -

      --
      - - You can't take something off the Internet! That's like trying to take pee out of a swimming pool.
    47. Re:I'm not a tech guru type... by Rich0 · · Score: 1

      Any fixed keys (or key generation program) can be extracted, any keys transmitted over the network intercepted.

      Hardly.

      You just need a smartcard-on-a-chip on the motherboard.

      At time of manufacture the PC vendor powers up the PC, and tells the PC to create a new keypair. The PC gives the public key to the vendor, and keeps the private key to itself. The vendor also gives its public key to the DRM chip.

      The results:

      1. You can't install your own BIOS since the DRM chip won't boot anything not signed by the vendor's publlc key.

      2. Media providers won't give you the decyrption key to a video stream unless your system passes a challenge response. They generate a hash based on the date and time. They tell your software to ask the DRM chip to provide it with:
      a. The supplied hash.
      b. A hash of the software itself.
      c. A hash of the OS.
      d. A hash of the BIOS.
      e. The DRM-chip serial number.
      f. A signature for a-e.
      They then verify that the signature is valid using the public key saved by the vendor when the motherboard was installed. They then see that a matches their challenge hash (no replay attacks), and that b-d are on their approved lists.

      The only way to break this system is to get the private key out of the DRM chip. The vendor wouldn't even know what it is. The DRM chip would be engineered to resist hardware-level attacks - they can be VERY difficult to hack. If a hack is developed it probably will require a lot of expensive hardware, and will yield the key for only one machine. And if the media-providers use watermarking and decrypted video makes it onto a p2p network they can trace the key that was used to an individual that bought the machine. And they can blacklist that key in the future.

      Sure, it can be broken, but at what cost? Lots of people will download a patch to crack their DRM. Very few will pay hundreds of dollars on the black market to get their chip hacked just so they can watch DVDs using linux...

    48. Re:I'm not a tech guru type... by Mr.+Neutron · · Score: 1

      They don't need to bribe anyone, because most Congressmen, and more Americans in general, are blissfully ignorant of the issues involved. The presentation before Congress would go something like this:

      Jack Valenti: We really want to provide more digital content, but we can't as long as digital devices exist that ignore copy protection. Consumers would win out big-time if they could download movies and music on-demand, for very little cost.

      Bill Gates: We in the consumer electronics industry have devised a standard, called "trusted computing," that allows for strong encryption of digital content, and provides copy protection and other anti-piracy measures. We can now make home-delivery of digital content a reality for consumers. It wouldn't affect the use of any previous digital content, and un-protected material can be used just as well as protected. But in order to get all the new cool protected content, a computer would have to conform to the "Trusted Computing" standard.

      Jack Valenti: Who would want a crippled computer? One that can't play all the cool new stuff? Obviously, the only people who possibly would even want such computers would be using them only for nefarious purposes. Therefore, the legislation we propose would outlaw the manufacture or sale of such devices. This will pave the way for a new future in which the artists, actors, directors, and everyone else can be assured that their work will be protected, and consumers can enjoy a new age of entertainment options.

      Final House Vote: 432-3
      Final Senate Vote: 98-2

      --
      dinner: it's what's for beer
    49. Re:I'm not a tech guru type... by ACPosterChild · · Score: 1

      Yeah, reminds me of the DVD authoring flag that disallows copying. It's not available on consumer DVD writers, it's there solely to protect corporate media. They talk about trust and safety, etc., but what they're talking about is not you trusting the content you use; it's about them being able to trust that their dirty cheating stealing little consumers can't share things they've bought (and, if they're lucky, consumers will have to buy multiple copies just to be able to use the content in a convenient way).

    50. Re:I'm not a tech guru type... by CoderDog · · Score: 1

      With the scores/hundreds of thousands of IT folks bored and/or looking for work, busting or rechiping a "trusted BIOS" would be an afternoon's lark, if there was sufficient motivation.

      Presently, there isn't easily available hardware to toy with and thus insufficient motivation, but give it a year or two. Heck those out of work techs built the global networks. If sufficiently annoyed, they can probably take the whole thing down in an eye-blink. I'm surprised nobody's pulled the plug already.

    51. Re:I'm not a tech guru type... by Anonymous Coward · · Score: 0

      I'm struggling to determine if you actually know what you are talking about, or if this is looney tunes paranoia. Oh well, just have to wait-n-see.

      Anyway, a slightly different story here:
      http://www.microsoft.com/technet/security/n ews/ngs cb.mspx

    52. Re:I'm not a tech guru type... by rpozz · · Score: 1

      Put your tinfoil hat away. It won't work. None of this crap will ever sell. Ask yourself the following question?

      "Who the fuck will buy a computer that stops them pirating music/films/software?"

      Also, read the presentation on how the X-Box was cracked. If you see the skill and dedication of these people, you'll see that it'll be broken wide open within a few days before public release. It only takes one single flaw, and the whole thing falls down like a house of cards.

    53. Re:I'm not a tech guru type... by mpe · · Score: 1

      Actually, you have to have some kind of secure key distribution channel or storage location. Which becomes absolutely and completely impossible as soon as the device lands in the owner's hands.

      Since the "device" is a mass market product, probably manufactured as cheaply as possible, cryptoanalysis becomes rather easier. Since you can compare the encryption of multiple devices.

      Any fixed keys (or key generation program) can be extracted, any keys transmitted over the network intercepted. What they're trying to do is technically impossible,

      Encryption is useful where several parties wish to communicate without third parties knowing what is being communicated. Though the third parties do know that that encrypted communications are going on and can obtain some metadata relating to the communicating parties. (There are other techniques, e.g. steganography which attempt to hide either the identity of the communicating parties or the existance of any communication at all.)
      With DRM the aim is to be able to send information to parties you don't trust and control what they do with it. Trying to hack encryption to do this is never going to work, since the assumption sending encrypted information is that you do trust the other party.

    54. Re:I'm not a tech guru type... by Alsee · · Score: 1

      Oh, I've already got a note file filled with various ways to attack on the system :) Reading the technical specifications to the system is most helpful, half the time they come right out and say they are doing X because of potential threat Y.

      I see pretty much two catagories of attack. You can make a hardware attack to liberate machines one by one, unfortunately this leaves 99% of the public with a locked down computer and they inadvertantly wind up supporting and further entrenching the Trust system.

      The other possibility is a software attack that, for Trusted purposes, turns the computer back into an ordinary non-Trusted machine. One of the critical features of Trusted Computing is that it is very fragile. It is designed to hair trigger "failsafe" into totally non-trusted mode if *anything* gets the least bit disrupted. It is a big complex system, and tehre are a million ways to disrupt it. Once you do that none of the Trusted crap will work at all. The good news is that all of those computers become a huge install base fighting off the encroachment of Trusted crap. Software publishers and websites and ISPs and any other company cannot really afford to make Trusted Computing mandatory if it will lock out too many potential customers.

      That sort of anti-Trust software could easily be added on to any other popular program. For example it could be added into various P2P programs. During install it could ask "Do you want to disable DRM control systems on this computer?". If the user says yes, then nuke the Trust system. Or the software could not ask and just nuke the Trust system, but that would probably be a bit evil (even if it is for a good cause). If you were going to do something nasty like that then you may as well just release a virus that runs around nuking the Trust system on every computer it hits. That's *almost* tempting, chuckle, but no, then we're no longer the "good guys". Sigh.

      Things are going to get very very messy, one way or another.

      -

      --
      - - You can't take something off the Internet! That's like trying to take pee out of a swimming pool.
    55. Re:I'm not a tech guru type... by Anonymous Coward · · Score: 0

      The BIOS on a modern (= 1980 design) PC is closed, blackboxed and may as well be encrypted, and Linux manages to use that without any problems.

    56. Re:I'm not a tech guru type... by Alsee · · Score: 1

      I'm struggling to determine if you actually know what you are talking about, or if this is looney tunes paranoia.

      It's funny, after I wrote my last post it crossed my mind that you might wonder exactly that, lol.

      I am a programmer. I have been reading the Trusted Computing Group's own Techncical Specification Documentaion, and countless other documents. I can give a detailed explanation of exactly how almost every part of the system works. The problem is that it gets extremely technical, private encryption keys, public encryption keys, four or five layers of certificates, crypto signatures to authenticate crypto signatures of other crypto signatures, storage root keys, keys encrypted under keys encrypted under other keys, various registers building hash-chains and a system to log those chains, encryption keys bound to various registers. And a whole system for remote authentication of the system state verifying exactly what software you are running and that it has not been modified.

      If you have any technical questions, go right ahead. I can almost guarantee I can answer it.

      I generally work pretty hard to avoid all of that and put it in terms any casual computer user can understand. It's often hard to explain with a system that isn't available yet. But as a programmer I see exactly what it can do and cannot do, and the documentation it quite explicit about all of the things the owner is forbidden to do.

      For example the specs specifically require that if your Trust chip glitches/dies, that it *must* be impossible for you to recover certain kinds of data (it is complex what you can and cannot get back). If the chip dies your backups are useless. All of your music files are gone. Your installed and registered applications - gone - you need to rebuy and install them from scratch.

      Why? Because there is no way for the RIAA to Trust that your computer really did die. For all they know you're lying and pretending your chip died. If you were able to "recover" all of your stuff onto a new computer and still have it all on the supposedly dead computer then you could have two copies at the same time. That is a voilation of the TRUST system. "Trust" is not about you trusting your computer. Trust is about everyone else trusting that your computer will enforce the rules against you, that it will never permit two working copies to exist at the same time.

      The central design requirement is that the owner is forbidden to know his PrivEK and SRK keys.

      Anyway, a slightly different story here:
      http://www.microsoft.com/technet/security/news/ngs cb.mspx


      Okey dokie! Let's go over that info! It's spin-city.

      NGSCB employs a unique hardware and software design to enable new kinds of secure computing capabilities to provide enhanced data protection, privacy and system integrity.

      Sure it can protect your data and your integrity for you, but an identical system where you merely know your keys could give you the exact same protection. There is no possible way that knowing your master keys (PrivEK and SRK) can reduce your computer's ability to do protect you. Holding a printed copy of your keysin your hand does not change the computer's functionality at all. Those two keys will be a running theme here.

      What "data protection" and "integrity" here really refer to is DRM. Since you are forbidden to know your master keys you cannot decrypt your own data. Your data is protected against you. Since you don't know your master keys it is impossible for you to modify any of the software on your computer without the Trust chip exposing that "tampering" to everyone else and to any program. You computer's integrity is protected against you and your "tampering".

      a trust policy that can be dynamically created and

      --
      - - You can't take something off the Internet! That's like trying to take pee out of a swimming pool.
    57. Re:I'm not a tech guru type... by RickHunter · · Score: 1

      Unfortunately, that doesn't work quite as well as you think. Sure, you've got the smartcard on a chip. You can't get the private key out. Great. So now the important question is: what aboout the hardware that talks to the smartcard? After all, the smartcard's not omnipotent. It's got to get orders from somewhere.

      In this case, you say "They tell your software to ask the DRM chip to provide it with... b. A hash of the software itself."

      Bingo, it's already broken. This is being provided to the DRM chip by the software. All this means is that it needs a copy of the hash for some valid piece of software - any valid piece of software. And since THAT is being transmitted in the clear to our magical unhackable smartcard chip, it's trivial to nab it (in-software or in-hardware). Then, when Media Server X asks Joe Hacker's software to go check the DRM chip, Joe's software just replays the hash of the valid good software (and valid good OS, and valid good BIOS) and the DRM chip goes "oh, okay".

      Even if the DRM chip itself somehow magically generates these hashes, it's still trivial to trick if you have control of the OS software or hardware around the chip. After all, the chip has to get the data it needs to make the hash by making requests to something. So you just capture the data it gets sent in response and re-send it when it makes the requests again.

      Thus, it trivially defeated. Nice try, but this is an impossible problem to solve. The best you can do is make it so hard that most people aren't going to bother... But by that point, you've closed off a whole load of legitimate uses, which mean your product's never going to succeed unless you legislate away competition.

      (Look at the history of the PC industry - closed, "secured" systems have always fallen to open, tinker-friendly ones, because the tinker-friendly ones wind up with more stuff.)

    58. Re:I'm not a tech guru type... by RickHunter · · Score: 1

      Since the "device" is a mass market product, probably manufactured as cheaply as possible, cryptoanalysis becomes rather easier. Since you can compare the encryption of multiple devices.

      Yup. This is something a lot of people forget - even generating an individual key for each device is going to be far too time-consuming. And as soon as you have a fixed pool of keys, cracking suddenly becomes much, much easier.

      With DRM the aim is to be able to send information to parties you don't trust and control what they do with it. Trying to hack encryption to do this is never going to work, since the assumption sending encrypted information is that you do trust the other party.

      A very good point, and one I should have remembered to make in my post. Actually, it's like trying to safely send messages to someone who's a prisoner of a third party that can watch their every move with perfect accuracy. This is generally considered to be impossible.

    59. Re:I'm not a tech guru type... by Anonymous Coward · · Score: 0

      Hey, thanks for the excellent post. Hopefully somebody other than me will read it.

      (1) [Alternative CAs are] another one of those "voluntary" things that in effect makes itself mandatory. A non-compliant CA would be useless, it's users wouldn't be able to install anything or play any files

      It wouldn't let you play media files, but an "alternative" DRM subsystem could be used by a system administrator as part of a security strategy -- at least in theory. Which was my original point to begin with.

      (2) I'm still completely baffled on how Microsoft will push patches and sell OS upgrades under this system. If Joe Windows can apply a service pack, Joe Linux should be able to compile a kernel ... If not, you've got an XBox

      (although the future market for settop boxes is going to be so huge that DRM could survive there alone even if it never makes it into PCs)

      (3) Everyone's had x509 Certificate technology installed on their computers for almost 10 years now -- and it could be used to solve a lot of realworld identity problems. However, nobody uses it because it's too complex to implement.

      DRM takes this kind of complexity and magnifies it a thousand-fold. Which is why I only foresee it being implemented for Pay Media applications and not for webpages and word documents and the like.

    60. Re:I'm not a tech guru type... by Anonymous Coward · · Score: 0

      No, because Apple can extend "Open"Firmware without breaking anything.

    61. Re:I'm not a tech guru type... by karlm · · Score: 1
      or you misunderstand the concept of abstraction layers

      Or maybe the author understands abstraction layers but also understands Redmond's knack for ignoring them or getting them wrong ;-)

      Just because it's dumb doesn't mean it won't be done.

      --
      Copyright Violation:"theft, piracy"::Anti-Trust Violation:"thermonuclear price terrorism"<-Overly dramatic language.
    62. Re:I'm not a tech guru type... by Rich0 · · Score: 1

      I agree that it is possible to bypass, but I don't think it will be practical for most people to try.

      As far as hashes go - set the BIOS/DRM chip up so that the CPU powers up and executes code in the DRM chip first. The DRM will hash some address range, store the hash, and then jump to that address range (the BIOS). The BIOS will initialize, and then hash the boot sector and pass it to the DRM chip. The boot sector will has the OS kernel, pass that to the DRM chip, and then load the OS.

      If you flash in your own BIOS, you can manipulate all the hashes but the first, which will fail. The only way to beat the DRM hash of the BIOS would be to install some fancy BIOS chip which figures out why a program is accessing the BIOS and generates the appropriate data accordingly. So if the BIOS is being accessed for the purpose of hashing it, then the chip yields the normal DRMBIOS image (which of course is illegal to actually put on a 3rd party chip due to copyright - I'm guessing that your chip will be sandwhiched between the motherboard and the vendor-supplied BIOS chip so that you don't need to copy it). If the BIOS is being read for the purpose of executing it, then you run the non-DRM code which then forges OS/software hashes.

      Actually, if such a device could be fashioned it might be fairly low cost to use. However, it would have to fool the DRM chip, which could take steps to prevent this from working.

    63. Re:I'm not a tech guru type... by RickHunter · · Score: 1

      Unfortunately, all the methods you describe can still be trivially broken in software. The only way for DRM to work is to completely prevent any "unauthorized" software from running on the machine. Which means you have to limit it to a single operating system and never allow your users any kind of scripting language or compiler.

    64. Re:I'm not a tech guru type... by Rich0 · · Score: 1

      I don't think that is the case.

      If the BIOS is certified by the DRM chip and has a good hash, that means the BIOS won't let you extract digital media. If the OS is certified by the DRM chip and has a good hash, that means the OS won't let you extract digital media. You could have non-trusted apps running on the computer, as long as the OS prevents them from getting at the data in a trusted app.

      If I have a properly secured linux box I can give you a user account on it an access to a compiler and it won't help you to obtain any data that I want to keep secret. The only way you can bypass the security is by way of a bug in the OS. This is easy for the DRM-masters to prevent - provide automatic patching, and don't let unpatched OS's access secure media. After all, if you patch the OS the hash changes, so it is easy enough for them to know if you're up to date.

      Why would there be a problem with unauthorized software running on the machine? That software could not successfully spoof a trusted app, since it would not have the DRM chip vouching for it having a "good" hash. Therefore, a company employing DRM would never transmit protected content to that software.

      Think of it like identd on steroids - the OS can tell a remote site what software is running on a port, and the use of digital signatures made by the DRM chip makes it impossible to spoof without a hardware-level hack.

    65. Re:I'm not a tech guru type... by Alsee · · Score: 1

      an "alternative" DRM subsystem could be used by a system administrator as part of a security strategy -- at least in theory.

      Yes. The software you create will will get all of the security functions of Trusted Computing. You will be in total control of the system, you will be in total control of every computer that installs that software.

      But then nothing else will work. Well, old normal software will still work, but none of the new Trusted software will work, just yours.

      Absolutely any benefit you can get from Trusted Computing can be had with an identical system where you know your master key. In a coprorate enviornment the company would be the owner. The company would have total control of their machines. All software would work on the machines, not just software they wrote themselves.

      There's nothing wrong with "new hardware". There are some benefits. But the central design requirement that the owner is forbidden to know his own keys is purely malicious. There is absolutely no benefit to the owner.

      I'm still completely baffled on how Microsoft will push patches and sell OS upgrades under this system. If Joe Windows can apply a service pack, Joe Linux should be able to compile a kernel

      Linux can run on the hardware just fine. Linux can change and recompile just fine. But it cannot run any new Trusted software from anyone else. It can only run what you write for yourself. It won't be able to authenticate to any websites that ask for a certificate. And if your ISP installs Cisco's new Trusted Router then you won't be able to get internet access at all. That router verifies that you are running a Trusted system and that you are running approved software, such as a specific mandatory trusted virus scanner and trusted firewall. If not then it denies you a connection. Even if that mandatory virus scanner and mandatory firewall can run on Linux, you're still not going to be able to certify to the router. As far as the router is concerned you are either virus infected, or virus vulnerable. it therefore refuses to let you conect to the network were your infected (or vunlnerable) machine could pose a 'threat' to the network.

      They are selling that anyone is free to do whatever they want with the hardware, that the owner is in control. The lie to that is that you have two choices - either use exactly the software they give you and give them total control, or make your own system and NOTHING from anyone else works on your machine. Play by our rules, or go live alone on a desterted island with a coconut tree. Eventually you may get locked out of the internet itself.

      As for Microsoft pushing patches, that's easy. They set up the software to refuse to work unless you first connect to a cryptographically authenticated internet date/time server. Everything works for a month, a week, a day, whatever. Then the software shuts down unless it can verify the date again. You may also have to pay a monthly 'rental fee' to reactivate an application. It also checks if there are any patches. If you don't let it download the patches then it shuts down. Once you do let it patch, the old software passes off control to the new software. The old software has access to the keys and can give control of them to any software it chooses to. Only the new patched software get get the keys.

      Everyone's had x509 Certificate technology installed on their computers for almost 10 years now -- and it could be used to solve a lot of realworld identity problems. However, nobody uses it because it's too complex to implement.

      Well, they implemented it. It's in the Trusted Computing software stack. If you wanna use it it's right there for you.

      The problem is thier primary goal was to do so such that the owner of the computer is forbidden to see his key, or use his key in any way except for how the Trust system permits him to use it.

      DRM ta

      --
      - - You can't take something off the Internet! That's like trying to take pee out of a swimming pool.
  2. Stability? by ThisNukes4u · · Score: 5, Interesting

    I'm not in favor of increasing the complexity of the bios. They can barely get them stable after a few updates now, how will it be when they are doing alot more? Yeah I know that Sun Sparc's have a complicated bios, but they did it right. I don't trust Microsoft and Intel to do it right.

    --
    thisnukes4u.net
    1. Re:Stability? by Anonymous Coward · · Score: 0

      What I've kept telling people is that 64-bit computing came relatively late to the PC world. With the advent of 64-bit PCs (those based on the Itanium Processor Family, for example), a better solution to the "BIOS problem" was sought, although the x86 real mode can be emulated in IA-64.

    2. Re:Stability? by Oddly_Drac · · Score: 4, Insightful

      "I'm not in favor of increasing the complexity of the bios."

      Tough, it's happening.

      "They can barely get them stable after a few updates now, how will it be when they are doing alot more?"

      Modern BIOS is a lot more capacious that the days of the XT and AT, and it's usually really low level stuff that goes on. Given the separation between the people that do the hardware and people that have to handle the low level drivers, it's no surprise that hardware leaves the warehouse with unfinished drivers; couple to that the dizzying array of hardware that can attach to a motherboard, and you are going to have some patching. EFI look a lot more flexible in what it can do.

      "I don't trust Microsoft and Intel to do it right."

      And they speak so highly of you. Despite crappy business practices, they actually have some talented people that produce some good solid work. If you want to be paranoid, why don't you look up EFI and cross reference with DRM?

      --
      Oddly Draconis
      Too cynical to live, too stubborn to die.
    3. Re:Stability? by starseeker · · Score: 3, Insightful

      "'I don't trust Microsoft and Intel to do it right.'

      And they speak so highly of you. Despite crappy business practices, they actually have some talented people that produce some good solid work. If you want to be paranoid, why don't you look up EFI and cross reference with DRM?"

      It could be argued that the DRM tendancies of Microsoft/Intel are a reason not to trust them to do it right. As far as DRM goes, I would tend to define a BIOS with that in it as NOT doing it right.

      --
      "I object to doing things that computers can do." -- Olin Shivers, lispers.org
    4. Re:Stability? by urmensch · · Score: 1

      Actually...

      \Par`a*noi"a\, n. (Med.) A chronic form of insanity characterized by very gradual impairment of the intellect, systematized delusion, and usually by delusious of persecution or mandatory delusions producing homicidal tendency. In its mild form paranoia may consist in the well-marked crotchetiness exhibited in persons commonly called ``cranks.'' Paranoiacs usually show evidences of bodily and nervous degeneration, and many have hallucinations, esp. of sight and hearing.

    5. Re:Stability? by gl4ss · · Score: 2, Insightful

      *And they speak so highly of you. Despite crappy business practices, they actually have some talented people that produce some good solid work. If you want to be paranoid, why don't you look up EFI and cross reference with DRM?*

      what does talented people have to do with trusting them to do it 'right' for our viewpoint? in fact, why do you think that they would do it 'right' when even you accept the fact that they have 'crappy business practices' which is ultimately what chooses how they'll execute it, NOT if they have talented people or not!

      --
      world was created 5 seconds before this post as it is.
    6. Re:Stability? by strictnein · · Score: 0, Offtopic
      Use italics when quoting...

      here's an example:
      <I>I am a quote</I>
      Results in:

      I am a quote


      Easy, you see?
    7. Re:Stability? by jazman_777 · · Score: 1
      what does talented people have to do with trusting them to do it 'right' for our viewpoint?

      Exactly. Talent and Virtue are not in any way connected. The worst things of history have been perpetrated by talented people.

      --
      Slashdot: Failed Car Analogies. Amateur Lawyering. Anecdote Battles.
    8. Re:Stability? by Anonymous Coward · · Score: 0

      Gawd, do I feel like a dork now.

      I've been using these things called "quotation marks" all this time.

      Thanks for clearing that up.

    9. Re:Stability? by strictnein · · Score: 1
      I know you're just trying to be a jackass, but quotation marks don't work as well in a medium like the internet were people scan much more than they do in traditional media (paper, magazine, etc). So using quotes (especially starting off with a set of double quotes) doesn't work as well. Compare this:

      "'I don't trust Microsoft and Intel to do it right.'

      And they speak so highly of you. Despite crappy business practices, they actually have some talented people that produce some good solid work. If you want to be paranoid, why don't you look up EFI and cross reference with DRM?"

      It could be argued that the DRM tendancies of Microsoft/Intel are a reason not to trust them to do it right. As far as DRM goes, I would tend to define a BIOS with that in it as NOT doing it right.

      It's very unclear where the original posters quote originally ends, where the second quote begins and ends, and where the final poster actually states something new. Compared to this:

      "I don't trust Microsoft and Intel to do it right."

      And they speak so highly of you. Despite crappy business practices, they actually have some talented people that produce some good solid work. If you want to be paranoid, why don't you look up EFI and cross reference with DRM?


      It could be argued that the DRM tendancies of Microsoft/Intel are a reason not to trust them to do it right. As far as DRM goes, I would tend to define a BIOS with that in it as NOT doing it right.


      It's much clearer which is the original quote, which is the first reply to that quote, and which is the final reply to both of the quotes.
    10. Re:Stability? by Error27 · · Score: 1

      > Tough, it's happening

      The company I work for makes servers. BIOS issues are a major headache for us. For example, we had a long email thread with a mobo vendor where they sent us a new BIOS yesterday that works with the 2.4 kernel but not with the 2.6 kernel.

      Normally motherboard manufacturers are pretty responsive about fixing BIOS bugs or adding features, but we think we could do even better ourselves.

      While we haven't sold Linux BIOS on any of our systems yet, we have donated hardware for testing and we follow their progress.

      EFI is designed for the ia64. It doesn't look like that platform is going to take off, but maybe EFI will survive on its own.

      We'll see what happens...

  3. I'd prefer an Open Bios... by cbreaker · · Score: 5, Insightful

    We don't need DRM built into the BIOS, and that's exactly what would happen if Microsoft had a say in it.

    I agree that we don't need more complexity. Let the OS handle the hardware as much as possible.

    --
    - It's not the Macs I hate. It's Digg users. -
    1. Re:I'd prefer an Open Bios... by Anonymous Coward · · Score: 0

      Complexity is a non-issue when it's broken down, which is what this is all about. These firmwares will still configure the hardware and then go on and do something else, just like today's BIOSs do. It will just be more transparent how they do it, so the extra "complexity" will actually be less error prone because of the way it is handled.

    2. Re:I'd prefer an Open Bios... by Anonymous Coward · · Score: 5, Interesting

      On the contrary, it could be interesting if the BIOS were to handle as much of the hardware as possible. Drivers could be written for the BIOS, and then that would solve our *n[ui]x problems since every operating would be accessing these routines the same way. Wouldn't something like this level the field?

    3. Re:I'd prefer an Open Bios... by Anonymous Coward · · Score: 0

      Kind of like the old fast bios screen writes setting?

    4. Re:I'd prefer an Open Bios... by drinkypoo · · Score: 2, Informative
      The complexity has to be somewhere. If the BIOS gets simpler the devices have to be more complicated to take up the slack. You can't rely on the OS handling the hardware until it boots, after all, so you have to get there somehow. The BIOS doesn't need to talk to the sound card or anything like that, because autoconfiguration of the basic parameters of devices are handled by plug and play, which is an integral part of the PCI specification (though perhaps not by that name, I've never actually read the specification.) Adapter cards and onboard peripherals get IRQs, IOports, and memory ranges from the PCI system controlled by the BIOS. But, what do you do after that? Currently in the PC world the BIOS jumps (JMPs, even) into the adapter BIOS and executes some of its code from ROM, optionally caching that ROM into "shadow" memory and executing it from there for speed, but once the OS loads the driver takes over and the BIOS isn't really used. AFAIK Linux only communicates with the BIOS at boot time, while loading assorted drivers, to find out what kind of parameters they should use, but many drivers go straight to the hardware and don't even bother with it.

      Anyone know how often Windows currently jumps into the BIOS today? However often it is, it will become moreso when DRM becomes a BIOS function...

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
    5. Re:I'd prefer an Open Bios... by DeathPenguin · · Score: 2, Interesting

      Ideally, perhaps, if Intel would GPL the whole BIOS, and I'm not talking about the table scraps they CPL'd a few weeks ago. Such routines would have to be completely open for *EVERYONE* (Not just NDA holders like Microsoft).

      Making BIOS calls for everything would also make porting code across architectures a nightmare (Even more so).

    6. Re:I'd prefer an Open Bios... by cbreaker · · Score: 2, Interesting

      Yea! Exactly. I checked out the GPL bios thing that those guys are working on at LinuxBIOS. I like they way they go about it - they let Linux (the OS, not the LinuxBIOS) handle as much as possible. Get basic functions up, and let the OS do the rest. Of course, they also have some cool features like network accessable bios, but overall it's very simple. "Let Linux do it" is their motto.

      Too bad it's only available for a limited set of motherboards.

      --
      - It's not the Macs I hate. It's Digg users. -
    7. Re:I'd prefer an Open Bios... by orlinius · · Score: 1

      Microsoft is already doing it with the XBox.

      Hidden 512 byte initial startup ROM in MCPX
      Microsoft hide startup code in the MCPX which tries to see if the BIOS is approved by Microsoft before allowing it to run - MICROSOFT ONLY

      Cryptographic signatures in the BIOS
      Microsoft attempt to use very strong cryptography to only allow a BIOS approved by Microsoft to run - MICROSOFT ONLY

      System Monitoring Device Crypto challenge
      Unless the BIOS responds soon after startup with a cryptographic sequence to the SMC, it will be reset - MICROSOFT ONLY

      RSA Encrypted hashes on Applications
      Ridiculously strong crypto on the applications (2048 bit RSA, double the keylength many banks use) means that only Microsoft programs can be run - MICROSOFT ONLY

      --

      A hungry bear does not dance!
    8. Re:I'd prefer an Open Bios... by yourmom16 · · Score: 1
      Ridiculously strong crypto on the applications (2048 bit RSA, double the keylength many banks use) means that only Microsoft programs can be run - MICROSOFT ONLY

      There is a good reason they use longer keys than banks do; They protect their data whereas the bank only needs to use it to protect your data

      --
      "We have got to make Stan understand the importance of voting, because he'll definitely vote for our guy." - South Park
  4. Ya, shure by YellowElf · · Score: 3, Funny

    We don't need no stinkin' software, firmware will do it for us.

    --
    Insert witty saying or aphorism here.
    1. Re:Ya, shure by Just+Some+Guy · · Score: 1
      You jest, but Usenet's comp.sys.amiga hierarchy used to be infested by a guy named Steve Giovanella who insisted that Amigas are at least 1000 times faster (yes, literally) than modern PCs (comparing a '94-vintage Amiga to a '01 model Athlon) because drivers were commonly in firmware instead of RAM, so they were "hardware based" instead of "software based".

      I can't explain his entire argument because, well, it didn't make a whole lot of sense even then. Google has the whole mess archived.

      I had just switched from Amigas to Unix a couple of years earlier and still like and respected my old platform of choice. Man, it was embarrassing to be associated with his ilk.

      --
      Dewey, what part of this looks like authorities should be involved?
  5. BIOS by Anonymous Coward · · Score: 0
    A BIOS out to be enough for anyone.

    ... sorry, I'll get my hat.

  6. mouse control in bios is nothing new by Anonymous Coward · · Score: 1, Informative

    i had an amd 486dx4/100 motherboard back in the mid 90s that had a full gui windowing system to configure the bios that relied on the mouse (tabs were used, too). i think it was 640x480 or something very similar.

    1. Re:mouse control in bios is nothing new by Anonymous Coward · · Score: 0

      Compaq also shipped GUI BIOSes in the Pentium era. It was still Real Mode, however.

    2. Re:mouse control in bios is nothing new by mallardtheduck · · Score: 1

      I have an old (1994) pc that has that... I think it was known as the 'WinBIOS', because it looked like Windows, not because it had any MS code in it.

  7. Retroactive bios by IamGarageGuy+2 · · Score: 3, Interesting

    Apple has been doing this since the beginning, since they control all hardware (or has to be approved by them). Having MS or Intel do it on a box that will have an immeasurable amount of peripherals by different manufacturers is only looking for problems. It may be possible but I fear it will be at the expense of creativity and thinking differently will not be an option.

    --
    Stay tuned for new sig...
    1. Re:Retroactive bios by cbiffle · · Score: 4, Insightful

      On the contrary: if they do this right, it could really help hardware compatibility.

      In the case of Sun and Apple machines, once you've got the Open Firmware driver in flash or ROM on the card, it just works. You can use it from the firmware, boot the system from it (if applicable), etc.

      Contrast with my damn PC, which can't even boot firewire or my USB key, despite having both ports on the motherboard, where the BIOS people should have been able to make them fully compatible.

      EFI has the potential to be a more modular solution (hence the E in EFI) where third-parties -- Promise, Adaptec, 3COM if they're still around -- can drop in drivers. No more relying on your mobo/BIOS manufacturer for boot-and-root support for your Megatron IV whatever, or remote console support for your Groovynet card.

      This is a Good Thing.

    2. Re:Retroactive bios by Anonymous Coward · · Score: 0

      Actually, if you'd RTFA, you'd have learned that Apple's implementation of the IEEE-1275 Standard for Boot

      is a non-proprietary, platform- (CPU and system) independent, programmable, and extensible environment for use in boot ROMs

      and that it offers open access to drivers for peripherals. So, really, Apple doesn't have to "approve" anything. Anyone with a desire to make PCI card (for example), for a Mac just needs to build it and write some OF drivers for the device.

  8. leapfrogging. by Anonymous Coward · · Score: 0

    great. so step down the drm one level. When do we get the BIOS's bios then? And then when do we get the work-around for that? And so on and so forth..i'll not be buying from Intel or Microsoft anytime soon, if ever again.

  9. Linux Kernel discussion by eddy · · Score: 5, Informative

    Here's a link to an older KT entry; "Status And Discussion Of EFI (Extensible Firmware Interface) Support"

    Explains some history, rationale and technical details.

    --
    Belief is the currency of delusion.
  10. hm by Further82 · · Score: 0, Flamebait
    I'm sure it won't be long until this thread degrades into "Bill Gates is taking over my BIOS and I won't be able to install Linux anymore!!! M$ is EVIL!!!11 Linux is t3h 1337!!11".

    However I'm sure by the time I actully press submit it will have done just that, but then again that is basicly the theme of every other thread on /.

    1. Re:hm by Anonymous Coward · · Score: 0

      And your problem with that is...?

    2. Re:hm by IamGarageGuy+2 · · Score: 4, Funny

      Now, now - that's enough of the negative thoughts. I think you should go to the M$ retraining centre for re-education right now.

      --
      Stay tuned for new sig...
    3. Re:hm by Anonymous Coward · · Score: 0

      It's TRUE!!

      Only a Microsoft shill would make fun of that possibility!

    4. Re:hm by Anonymous Coward · · Score: 0

      No, no, no! It will simply ensure that the system only runs trusted worms and viruses.

    5. Re:hm by Anonymous Coward · · Score: 0

      The other inevitability is the appearance of messages like yours bitching about the Evil Microsoft posts. Guess what? It's equally boring. Kudos to the moderator who had the sense to mark your post as Flamebait; dock a point for Redundancy as well.

      Of course, now I've extended the problem by bitching about the post bitching about the Evil Microsoft posts...

      Dude, like, what if the bitching is infinite? Whoa.

    6. Re:hm by Further82 · · Score: 1
      I was gonna add the point about complaining about the complaining about anti MS and that at least 10 people would have pointed out the inevitabilty of the course of this thread, but thats just too much typing for me.

      Slashdot isn't a court room and its just too much work to cover all my bases, unless of course all my base belong to someone else, in which case I'm screwed anyway.

      I agree bitching is infinite, and bitching about bitching is infinite^2

    7. Re:hm by Anonymous Coward · · Score: 0

      You can't square infinity, jackass.

  11. pocket pc by minus_273 · · Score: 2, Informative

    heh reminds me of a pocket pc where the Windows OS is in the ROM

    --
    The war with islam is a war on the beast
    The war on terror is a war for peace
    1. Re:pocket pc by areve · · Score: 1

      My pocket PC an iPAQ 3850 is not like this, perhaps others are, I changed my bootloader. And operating system. I've never seen any bios settings but the OS is certainly not in ROM.

    2. Re:pocket pc by minus_273 · · Score: 2, Informative

      "Sleek, expandable, and wireless-enabled, the Compaq iPAQ 3835 Pocket PC offers a powerful mobile computing tool that fits in the palm of your hand. It comes with 64 MB RAM and 32 MB ROM, a fast 206 MHz Intel StrongArm processor, and a bright LCD screen that displays 65,000 colors."
      no it is defiently in the 32mb of ROM. When you changed your OS you probably overwrote windows and put linux (im assuming thats what it is) on it.

      --
      The war with islam is a war on the beast
      The war on terror is a war for peace
    3. Re:pocket pc by Erwos · · Score: 1

      I've never heard of any PocketPC systems that had the OS in ROM.

      On a typical PocketPC PDA, the OS is typically stored in flash (which is not ROM, at all). The data, extra apps, and such are then stored in nvram. While this gives very fast load times and won't wear out the flash, you always have the risk of accidentally losing the nvram if your batteries all die. In any case, the system gives the appearance of PPC being in ROM, but it most certainly is not.

      (For the record, the original Sharp Zauruses used a similar system to the above, so this is most certainly not just an MS trick.)

      iPaqs converted to Linux (and the newer Zaurus 5600) act in a more PC-like system where the flash is your hard drive, and your RAM is, well, just RAM. Slower load times, and it beats on your flash more, but then again, you won't be losing data to a dead battery.

      I would _imagine_ (haven't RTFA, so forgive me) that EFI would be implemented on a hard drive or a flash disk instead of in the typical BIOS chips we have today. In fact, it would be pretty cool if motherboards had support for using CF cards for EFI.

      Need to run Windows 2010? Slap in the DRM EFI card. Want to run Linux? Put in the non-DRM EFI card or the DRM EFI card, depending on your needs. It could certainly have advantages (trivial EFI upgrades), and give consumers the choices they need.

      -Erwos

      --
      Plausible conjecture should not be misrepresented as proof positive.
    4. Re:pocket pc by Slashamatic · · Score: 1

      The majority of BIOS's are actually flashed (EEPROM) rather than stored in ROM. The only place that you will find a BIOS on ROm is in something very ancient.

  12. Firmware by starseeker · · Score: 5, Insightful

    Glad to see there is attention being paid to the firmware end of things both commercially and as open source - that's one area your average geek is a little leary of toying with, due to Inoperative Hardware potential.

    What I always worry about is the non-techical end of these things. BIOS level control on what software a computer can run is a much harder obstruction to overcome than things like driver issues. I wonder if they won't use the "Next Generation" mantra to say this is the perfect time to pass legislation that requires DRM control be built into all computational devices. OpenBIOS wouldn't be of much use if DRM laws require a closed system.

    Also, if firmware gets too smart, you might get things like a DVD drive refusing to play a movie unless your operating system can guarantee it that you computer doesn't have the ability to copy content illegally.

    When you can program games in BIOS level systems, I start to get a little wary. Keep my BIOS to the minimum please - configuration options needed to handle my hardware (things like boot order, low level configuration options the OS shouldn't know about, etc.) should be all the capability needed. A BIOS should be simple, efficient, and stick precisely to its job. I've got an OS for the rest. If the new system is good for that type of work, excellent. But if the hardware starts getting too smart for its own good, then I might wind up hauling out those two Sun Ultra 1s I bought - they should run more or less forever and I'll live with slower speeds in order to stick with a consumer friendly machine.

    --
    "I object to doing things that computers can do." -- Olin Shivers, lispers.org
    1. Re:Firmware by Anonymous Coward · · Score: 1, Interesting

      > When you can program games in BIOS level systems

      Yeah, nobody's ever written a 86 real mode game. The original BIOS came with a BASIC intepreter, you know.

      Fact is that the PC BIOS is 15 years past due for replacement. Whether or not DRM is included doesn't change that -- not to mention DRM can be and has been implemented for classic real mode BIOSes.

    2. Re:Firmware by drinkypoo · · Score: 4, Interesting
      The reason you can program games in OpenFirmware is that it is versatile. In spite of its flexibility, because it is based on Forth, it is still simple and efficient.

      Ironically, your Sun Ultra 1's firmware is pretty much the same. It's OpenFirmware, and it uses a Forth interpreter to execute on-adapter code which is used until the kernel is loaded and a system-level driver can be used. This is why text displays faster in the X Window System than on Sun consoles - the console is using a video driver written in Forth and interpreting it on the fly! Hence this is true for all Sparcs back into antiquity. (I used to have a 3/260 which I later upgraded to a 4/260, that's one of the first generation of SPARC-based Sun systems.)

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
    3. Re:Firmware by 4lex · · Score: 1

      OpenBIOS wouldn't be of much use if DRM laws require a closed system.

      Maybe it won't for you... If USA's DRM laws don't aply here in Spain, I will be glad to swap a crippled BIOS by a shiny Openfirmware... if there is one that works for my computer, of course. So, I say to developers: keep coding and don't worry for local laws. I will happily buy some T-shirts, if that improves your confort, as long as you improve mine :)

      (writing this from an Openfirmware-powered Debian Sarge iBook ;)

      --
      My journal. Mainly about freedom.
    4. Re:Firmware by Alsee · · Score: 4, Interesting

      If USA's DRM laws don't aply here in Spain, I will be glad to swap a crippled BIOS by a shiny Openfirmware

      Go right ahead. They don't need laws to ram this crap down your throat.

      If you don't have a Trusted Computing compliant system then you will not be able to install any of the new Trusted software. You will not be able to use any of the new Trusted files. You will not be able to access any of the new Trusted websites. After a couple of years you may not be able to get onto the internet at all.

      Take the websites for example - it would be much like attempting to surf the web today with cookies and javascript off. Tons of websites simply spit out an error message saying there's something wrong with YOUR computer, and that YOU need to fix the problem.

      All sorts of websites already try to lock you out if you try to block ads, or if you have a pop-up blocker, or if you try to deep-link, or use javascript encryption to prevent you from copying anything, or to enforce registration. Well, websites will be able to use Trusted Computing to enforce all of that and more. If your computer is not compliant they will simply lock you out.

      The only thing that can stop Trusted Computing is if there is a massive public backlash against it.

      -

      --
      - - You can't take something off the Internet! That's like trying to take pee out of a swimming pool.
    5. Re:Firmware by 4lex · · Score: 2, Interesting

      I agree with you... but I sense the tide is changing. Can't you hear it from where you are? It's only a rumor, but you can already hear it growing louder...

      Once a government, an individual or a corporation tastes the freedom, they won't easily give up. I see a lot of new happy users of Free software in the corporate world, and I also see them in the governments, at least here in Europe. Once they pay to make a transition to Free software (gaining freedom to choose whom to make deals with, and the economic benefits of competition), I seriously doubt anybody can bring them back. If there is no one industry in the USA that wants to step in the market for "hardware for free software in Europe", either Japan or China will, or Europe will start to produce their own hardware. South America looks just the same (think of Brazil, for a great example). I can't think of the internet going all-trusted with so many content producers being trusted-free.

      On a side note, I'm not sure if US laws will be so strong as to prevent US manufacturers from producing non-DRM-crippled-hardware in foreign countries, in order to sell it to foreign countries,thus losing tons of money... will they?

      Finally, once again, I agree with you. We need a massive public backslash against Trusted Computing. My way to fight is to get as many individuals to go over Free software, Free music and Free information... and to push my government towards the same goal.

      --
      My journal. Mainly about freedom.
    6. Re:Firmware by Alsee · · Score: 1

      I hope if fails. But most people know squat about computers, and they want to know squat. They simply want the damn thing to work. They will get 'free' music downloads, and they will get 'free' disks in a cerial box, and they will go to varoius websites, and every single one of them will pop up an error message saying that there is a problem with their computer. That they need a new 'enhanced' computer. And they will run out to but a new Trusted Computing 'enhanced' computer just to get the damn free music file to work.

      Trusted Computers will "just work" with whatever you throw at it (at least as long as you're not some pesky Geek trying to change or control anything, or trying to make Fair Use or otherwise make a nusiance of yourself).

      trusted Computing is about causing normal computers to fail to work. The new files won't work. The new software can't install. The new webstites will give error messages.

      Hell, Microsoft is already hyping Trusted e-mail. You will started getting encrypted e-mail from friends and family and coworkers. And if you don't have a Trusted compliant computer then you can't read that mail. And peopel will gripe at you for having an old obsolete and incompatible computer.

      Anyone who refuses to submit to Trusted Computing will increasingly get punished in a variety of ways. It's exactly the old Mircosoft Embrace and Extend and Exterminate routine. It is a very effective tactic.

      I'm not sure if US laws will be so strong as to prevent US manufacturers from producing non-DRM-crippled-hardware in foreign countries

      There's no need. Non-DRM-crippled hardware will increasingly NOT WORK. Sure, you can run all your old games and old software, but nothing new will work with it. And it will not be able to connect to other computers. Cisco's new Network Admission Control routers refuse you a network conenction unless you are compliant. And those routers are being advertized as a good thing - that they supposedly block viruses and worms (they don't, what they can actually do is deny you an internet connection unless you are running approved anti-virus software).

      The threat is bigger than most people realize. They don't have to ban non-DRM computers, they just make them increasingly useless. They don't have to convince you to buy a Trusted Computer - they will simply have a Trust chip installed on all new motherboards as standard hardware. They don't have to force anything on anyone - websites and software publishers and content publishers and ISP's will all jump at the chance to use Trusted Computing. It gives them control over their customer's computers for any of a number of reasons. Websites want to be sure you're not using an AD blocker. Software publishers want to enforce registration and copy protection. Content publishers want to enforce DRM. They all do so voluntarily for for their own benefit.

      And activating the Trust system on your computer is completely "voluntary". You're perfectly free to opt out. Of course then nothing works.

      It's extremely insidious. Unstopable unless there is a massive public backlash. Unfortunately the public are sheep. They will be told Trusted Computing protects them and fights viruses yada yada yada.

      -

      --
      - - You can't take something off the Internet! That's like trying to take pee out of a swimming pool.
  13. EFI meet my PAL SAL by grunt107 · · Score: 1

    This would definitely help Intel and its 'Not'tanium. Then AMD would have to make something similar or pay to use the same design. I am more interested in the System Abstraction layer. Would this simplify direct access to sys devices?

    1. Re:EFI meet my PAL SAL by lachlan76 · · Score: 1

      Or, AMD could start an ad campaign with the slogan "Your PC Isn't Controlled By A Multinational Corporation. Buy AMD And Use A Computer With The Right To Run Whatever Programs And Operating Systems You Choose"

  14. Needs to be a community effort by Brain+Stew · · Score: 0, Redundant

    While I think that the current x86 BIOS methods are outdated, I do not support a leap to total OS integration, yet.

    I think that if a community effort were mounted through a system of standards, a satisfactory next-gen BIOS could be acheived.

    Of course, this raises the question of who comprises the community, businesses or enthusiasts?

    --
    "Here's a spoiler: You're will die alone."-Triumph the Insult Comic Dog
  15. Wierd sentence on Open Firmware by SuperKendall · · Score: 5, Interesting

    Let me add something that I find remarkable: I have not seen a single reference to Open Firmware in any EFI specification, presentation, whitepaper, or related document. Perhaps I did not look hard enough. This is not a criticism though. Some might argue that EFI's pathbreaking-ness is valid in the context of PCs, so it is appropriate not to mention prior similar ideas.

    I'm not quite sure what that last part means - how can you say it's not appropriate to mention when the technology is so similar? Just because it hasn't been used on PC's before is no reason not to learn from what has been used before.

    I would have liked to see more of a comparison of exactly whe EFI gives you over Open Firmware of today - I gathered it was the custom pre-boot programs and network connectivity, but I would have liked to see more examples of new things that make use of these features that you can't do in Open Firmware.

    It's funny to have a whole article about EFI then show all the cool things you can do with an advanaced BIOS by giving Open Firmware demos. Sort of like watching a Longhorn demo of transparency in UI while working on a Mac.

    --
    "There is more worth loving than we have strength to love." - Brian Jay Stanley
    1. Re:Wierd sentence on Open Firmware by Anonymous Coward · · Score: 0

      Well, the biggest difference seems to be that EFI is designed for backward compatibility with PC-BIOS, which is essential as long as people are running NetWare, OS/2, and Windows 98. Don't know how possible that would be with OpenFirmware.

      I find it funny that some people find this EFI/OF thing worthy of Zealous Advocacy(tm). Yeah, Intel invented their own firmware, big deal.

    2. Re:Wierd sentence on Open Firmware by Matthias+Wiesmann · · Score: 4, Interesting
      Actually, Apple also had to do a transition between machines without open-firmware to the one with it, so there was some backward compatibility. On the other hand, I suspect the newer macs could not boot older oses (I don't know if EFI machines would seriously boot Windows 95, and why anybody would try that...)

      The sad thing about intel doing their own stuff is that Open-firmware is here and standard. One of the most interesting ideas of having the F-code engine was to have processor independent drivers on the card. I.e you plug-in the card and it works, regardless of the fact the processor is PPC, sparc, or i686.

      One funny trivia fact about Apple's open-firmware is that the firmware understands certain file-systems (HFS+,Ext2) and executable formats (PEF,ELF). The funning thing is the firmware does not understand OS X's executable format (Mach-O) so on every OS X machine, there is an ELF format bootloader.

    3. Re:Wierd sentence on Open Firmware by Anonymous Coward · · Score: 0

      Obviously Intel is staying as far away from OpenFirmware as possible, because it is in their (anti-competitive) business interest to promote a BIOS which is tied to their proprietary instruction set, and which therefor ties the BIOS ROMs for add-in cards to their proprietary instruction set.

      If the FTC had any balls, they'd be down on this like a ton of bricks.

    4. Re:Wierd sentence on Open Firmware by Anonymous Coward · · Score: 0

      Pre-OF Macs really didn't have a "BIOS" at all, but I don't know if that made the problem harder or easier. I figure they jumped into the MacOS "ROM" file.

      Anyway, the thing has to boot DOS or it's dead on arrival, and that means some form of BIOS emulation.

      Someone else linked to a KernelTraffic thread. The official explaination is that "OpenFirmware is not compatible with ACPI". Since most PC OSes have not put a lot of effort into ACPI support, that's probably a good enough reason.

    5. Re:Wierd sentence on Open Firmware by Anonymous Coward · · Score: 1, Interesting

      Anyone can implement EFI, and that includes Apple and Sun. (Sun Admins love their OpenFirmware, but 99.99% of Mac users couldn't give a crap what software boots their system.)

      Actually, if Intel can kill "x86 Option ROMs", they'll be doing Mac users a big favor, because vendors will stop charging a huge premium for cross-platform cards.

    6. Re:Wierd sentence on Open Firmware by Fred+Or+Alive · · Score: 1

      Well, they still had a boot ROM, just it was tied specifically to Mac OS (even AUX (Apple's UNIX variant) had to boot into Mac OS before AUX itself could be loaded AFAIK). The rest of the ROM contained the toolbox, which was still around in OpenFirmware Macs until the iMac (where it moved to the Mac OS ROM file in the System Folder), although I guess some of the toolbox might still be in the ROM if OpenFirmware can bring up a window with it. (I am not an expert)

      --
      10 PRINT "LOOK AROUND YOU ";
      20 GOTO 10
    7. Re:Wierd sentence on Open Firmware by La+Fortezza · · Score: 1

      I seem to recall reading an article on /. about EFI and an Intel mentioned Open Firmware was unsuitable because it wouldn't support ACPI, er, maybe it was DRM. Tis a shame....

  16. Wow, mouse in Open Firmware by AcornWeb · · Score: 1

    Golly, the amount of time Amit seems to spend messing around with the very low levels of Open Firmware seems insane! Imagine figuring out how to get a mouse to work solely to get his 'Tower of Hanoi' program to work nicer! :-)

    Still, more power to him.

    --
    Your Windows PC is my other computer.
  17. What's the problem with "real mode"? by ahg · · Score: 0, Redundant

    640K ought to be enough for any BIOS :)

    --

    --Aaron Greenberg

    1. Re:What's the problem with "real mode"? by Anonymous Coward · · Score: 0

      Note to moderators...Learn What Redundant Means!!!

    2. Re:What's the problem with "real mode"? by Anonymous Coward · · Score: 0

      I'm sorry, but we're going to have to let you go.

  18. Where's the DRM? by serutan · · Score: 1

    I just skimmed through the article looking for information about the Palladium-like DRM stuff that was supposed to be embedded down to the hardware level within the next few years. I couldn't find anything. Not being a hardware/firmware person, a lot of the stuff in the article is over my head, but I expected something about DRM to shine through, if not to be the overriding theme.

    DRM has already been mentioned in a few comments in this thread (perhaps by people who didn't RTFA). But where is it???

  19. Blur the line... by mratitude · · Score: 0

    As long as the direction appears to be open standards, "blurring" the line between core hardware and the OS at this basic level isn't that dangerous a concept.

    --


    Mod me troll, if you must, I can't help it.
  20. A Graphical Config Utility for Open Firmware by CharAznable · · Score: 1

    You can do a lot of stuff in Open Firmware by changing environment variables. A good project would be to create a graphical configuration utility that lets you do just that in addition to browsing the device tree.

    --
    The perfect sig is a lot like silence, only louder
  21. Any EFI motherboards available? by jared_hanson · · Score: 4, Interesting

    So I glaned over the article, and while it mainly focused on EFI being done for IA-64, it also hinted that EFI was available for x86. Does anyone know of any reasonable priced motherboards that use this as opposed to an older BIOS? I'm looking for the hinted at x86 support, as I don't feel like buying an Itanium. Also, while we are on the subject, is this an Intel only thing or does AMD have a say in the matter?

    --
    -- Fighting mediocrity one bad post at a time.
    1. Re:Any EFI motherboards available? by Anonymous Coward · · Score: 0

      I don't know if you can get EFI on any low end boards but I do know that there have been quite a few high end Xeon systems built using EFI.

    2. Re:Any EFI motherboards available? by TWooster · · Score: 1

      Disclaimer: I work for Intel. I can't say much, NDA and all that (and being as low on the totem pole as I am, I don't have a great perspective), but basically: Yes, they're out there, yes they're in development.

      IIRC, the IBM SBX44 project supports EFI. This is a 4x Xeon blade. Check it out here:

      http://www.intel.com/design/servers/blades/order co des.htm

      Search for SBX44. It doesn't mention EFI in the feature list, but I know (and I assume I can discuss, since it's gone production) it does have an EFI shell, in addition to an AMI BIOS.

      (The bios still boots, and then can transfer to EFI, which has a shell that acts much like an operating system in and of itself. It's kind of like DOS, but with better support for USB and the like...)

      So, the answer is yes.

      Now let's just hope I don't get fired. Where's that post anonymously button?

    3. Re:Any EFI motherboards available? by PXE+Geek · · Score: 1

      Yes - Gateway just released the 610 Media Center box running EFI. Read all about it!

  22. This isn't firmware, this is an operating system by Anonymous Coward · · Score: 0

    It does hardware abstraction, draws windows, bytecode interpreters, etc.

  23. EFI is actually OS independent and quite useful by jayslambast · · Score: 5, Interesting

    I've been using EFI (on Itanium) for quite some time, and have had zero issues with it. I really like the fact there are DCHP modules that allow networking to be started without the OS running. They have ftp servers, disk drivers and you can boot your machine from a remote image using bootp services. If your OS is dead on your disk, you can restart to efi and download a previous image on to your harddisk (or remote boot/install). Heck, you can run your code without even booting the OS. Imagine dedicated distributed.net clients that run straight from EFI without the overhead of an OS.
    While I understand people have concerns that Microsoft is using this as a DRM delivery mechanism, there is nothing that is stopping Microsoft from working with Phoniex to add DRM to today's bios's. EFI (and non-legacy bios environments like openBios) make it easier for non-windows OSes to run on new Hardware. This isn't in microsoft's best interests. Microsoft wants a bios that only runs signed code (like their XBOX), so that you have to ask them nicely for a key to your equipment.

    1. Re:EFI is actually OS independent and quite useful by Anonymous Coward · · Score: 0

      > EFI (and non-legacy bios environments like openBios) make it easier for non-windows OSes to run on new Hardware.

      It would be a total nightmare.

      Vendor-supplied drivers without source are going to be BUGGY.

      They are going to be doubly buggy if they are run with a compiler that has a buggy back-end.

      And that back-end is going to be buggy if it's for some random bytecode that isn't widely used except for some silly EFI thing and is tested exclusively with just a few versions of Windows and _maybe_ occasionally on Linux.

      Face it: firmware bytecode is a total braindamage. The only thing that works is _source_code_ that can be fixed, and lacking that, we're better off with a well-defined ISA that people are used to and that has stable simple compilers.

      In other words: x86 object code is a better choice than some random new bytecode. It's a "bytecode" too, after all. And it's one that is stable and runs fast on most hardware. But as long as it's some kind of binary (and byte code is binary, don't make any mistake about it), it's going to always be broken.

      EFI is doing all the wrong things. Trying to fix BIOSes by being "more generic". It's going to be a total nightmare if you go down that path.

      What will work is:

      *

      standard hardware interfaces. Instead of working on bytecode interpreters, make the f*cking hardware definition instead, and make it SANE and PUBLIC! So that we can write drivers that work, and that come with source so that we can fix them when somebody has buggy hardware.

      DO NOT MAKE ANOTHER FRIGGING BYTECODE INTERPRETER!

      Didn't Intel learn anything from past mistakes? ACPI was supposed to be "simple". Codswallop.

      PCI works, because it had standard, and documented, hardware interfaces. The interfaces aren't well specified enough to write a PCI disk driver, of course, but they _are_ good enough to do discovery and a lot of things.

      Intel _could_ make a "PCI disk controller interface definition", and it will work. The way USB does actually work, and UHCI was actually a fair standard, even if it left _way_ too much to software.
      * Source code. LinuxBIOS works today, and is a lot more flexible than EFI will _ever_ be.
      * Compatibility. Make hardware that works with old drivers and old BIOSes. This works. The fact that Intel forgot about that with ia-64 is not an excuse to make _more_ mistakes.

      Don't screw this up. EFI is not going in the right direction.

    2. Re:EFI is actually OS independent and quite useful by throwaway18 · · Score: 1

      They shoudl be trying to reduce the number of options in the BIOS.
      I like to imagine that Intel took the chance to throw away some legacy stuff when they designed the Itanium platform. Does it still has a sector translation mode setting? I'd like to be rid of it.
      I'v had to reinstall windows due to getting that one wrong. It's a leftover from the shortsighted harddrive size limits of old.

    3. Re:EFI is actually OS independent and quite useful by jayslambast · · Score: 2, Insightful
      And that back-end is going to be buggy if it's for some random bytecode that isn't widely used except for some silly EFI thing and is tested exclusively with just a few versions of Windows and _maybe_ occasionally on Linux.
      bytecode has one significant advantage, it allows pci cards that store option roms the ability to run on multiple architectures. There are quite a few Mac people that aren't too happy they have to wait for the latest geforce card to be released on their machine, cuz the option ROM only has x86 code stored in it. Being able to plug the same grafix/io card into multiple machines with different arch (x86, PARisc, IA64, Sparc, power4, m6800....) without reburning the option rom can enable hardware developers the ability to sell their cards to as many people as possible. Granted arch-specific drivers will be needed per OS, but at least you don't have to buy a special version of the card to use it.

      * Source code. LinuxBIOS works today, and is a lot more flexible than EFI will _ever_ be.
      Not to be a troll, but just cuz you can say it doesn't mean its true. Only history will be able to say that. Many of your comments are valid, but a balance needs to be made by supporting legacy vs. enabling hw and sw makers the freedom to innovate. I agree its annoying trying to get something to work when you didn't have any involvement in the design, but creating a hardware interface that meets everyone's needs (usb, grafix, lan, fibrechannel) might be worse than dealing with the problem. Hell, I'd love it if ieee standard came out that required everyone to either be little endian or big endian, but the hw world can't even decide on that. Can you expect them to come up with a standard interface for accessing devices.
    4. Re:EFI is actually OS independent and quite useful by jayslambast · · Score: 1

      btw, who ever posted that replay was cutting and pasting Linus' response to EFI. No wonder it was an anonymous post. To see where the plagirism came from, check out.. http://www.kerneltraffic.org/kernel-traffic/kt2003 0910_231.html#7 I'll hold off cutting and pasting Intel's response to Linus' statement.

    5. Re:EFI is actually OS independent and quite useful by Anonymous Coward · · Score: 0

      > btw, who ever posted that replay was cutting and pasting Linus' response to EFI. No wonder it was an anonymous post. To see where the plagirism came from, check out..

      This was not plagiarism, as it was not wrongly attributed.

      It was a social engineering experiment that got me answers like "Not to be a troll, but just cuz you can say it doesn't mean its true", which are really funny. Answers would have been different if I had used a real name. Or if I had attributed it. Or placed in a different context.

      Attribution should not change the pertinence of the information.

      Or should it ?

    6. Re:EFI is actually OS independent and quite useful by lachlan76 · · Score: 1

      there is nothing that is stopping Microsoft from working with Phoniex to add DRM to today's bios's

      And then their software won't work on any other computers, and people won't like it. I have been working with computers since I was about 5, and in all the time I have used the x86 architecture, beginning with the P-55C 166Mhz, I have *NEVER* seen a computer that doesn't have an Award BIOS. Not at any of the computers at my primary or high school, not on any of my friends' computers, not on any of my 5 computers. It's like a tools company saying that any power tools they make from now on will need to use 450v 3-Phase Power, which 3-Phase distributors will quietly switch over to, breaking any existing equipment, and expecting people to pay more for a product which needs different equipment to run, when 240v 50Hz power is perfectly alright, and competitors offer a product which is cheaper, and can run on existing hardware. I don't see an advantage in forcing people to change hardware from a very common type, in which you have power over the computer, to a minority which controls you.

      In Soviet Russia, You put unwanted DRM Software into Microsoft's computers.

  24. EFI is the firmware that says "NIH" by RAMMS+EIN · · Score: 4, Interesting

    The author mentions that EFI is somehow better than Open Firmware, but I fail to see how. It all sounds like Intel decided to go their own way again (just like their Itanium had to be different and incompatible with any (RISC or CISC) CPU out there).

    Why, for sanity's sake, can these companies never adopt a perfectly good standard, but do they always have to give everyone headaches by rolling their own? If Open Firmware has some deficiencies, surely they can be fixed with some incremental improvements?

    The Intel Architecture is evolving...from the primitive, kludgy, underperforming, el cheapo to the overhyped, overheating, overexpensive and incompatible. Even IBM (Connector Conspiracy) and Apple (Think Different) are more open and standards-oriented these days.

    --
    Please correct me if I got my facts wrong.
    1. Re:EFI is the firmware that says "NIH" by trudyscousin · · Score: 1

      "Why, for sanity's sake, can these companies never adopt a perfectly good standard, but do they always have to give everyone headaches by rolling their own?"

      I dunno. Maybe they're trying to avoid each others' patents? Maybe they're too parsimonious to pay each other licensing fees? Or maybe they're simply trying to evolve the standards?

      --
      Those who can, do. Those who can't, write technology blogs.
    2. Re:EFI is the firmware that says "NIH" by Alsee · · Score: 1

      The author mentions that EFI is somehow better than Open Firmware, but I fail to see how.

      It's filled with yummy DRM goodness!

      -

      --
      - - You can't take something off the Internet! That's like trying to take pee out of a swimming pool.
    3. Re:EFI is the firmware that says "NIH" by Anonymous Coward · · Score: 0

      Why, for sanity's sake, can these companies never adopt a perfectly good standard, but do they always have to give everyone headaches by rolling their own? If Open Firmware has some deficiencies, surely they can be fixed with some incremental improvements?

      Yeah! That's as stupid as having two GUI libraries, two windowing systems, two desktop environments, four internet browsers, three package distribution formats, and a kajillion distributions of your operating system!

      Oh, wait...

    4. Re:EFI is the firmware that says "NIH" by RAMMS+EIN · · Score: 1

      Well, you have a point, sort of.

      Different language bindings (and thus, necessarily, different) APIs are good. Languages all have different niches. But different, inconsistent, uncooperating GUI toolkits and desktop environments that all need their own set of libraries to implement the same functionality? Yikes!

      Multiple distributions is also good, but not if they are all trying to do the same thing in the same way. It's good to have a distro that Just Works (Debian), one that tries to imitate Windows (Lindows), one that boots and works from CD (KNOPPIX), one that pretends it's a BSD (Gentoo). But why are there several (RedHat, Mandrake, SuSE, ...) that try to be everything to everyone?!

      Package formats: I am still angry that RedHat decided that .deb wasn't good enough for them and developed their own, incompatible format that they changed incompatibly several times and is only recently getting the great package management tools that Debian developed. If they had just adopted .deb, everyone using the GNU system could have had access to a large collection of excellent quality packages. Shame!

      As for browsers, I don't think there is a lot of senseless duplication there. There are basically two open-source engines, one being Gecko (Mozilla Navigator, Firefox, Camino, ...) and KHTML (Konqueror, Safari, ABrowse). Gecko is the more complete and feature-rich one, whereas KHTML is speedier.

      --
      Please correct me if I got my facts wrong.
    5. Re:EFI is the firmware that says "NIH" by Chainsaw · · Score: 1

      -No, it's pronounced... Ni!
      -Nnnnnu!
      -No, ni!

      (sorry, just can't resist a Monty Python reference)

      --
      War is one of the most horrible things a human can be exposed to. And one of the worlds largest industries.
    6. Re:EFI is the firmware that says "NIH" by RAMMS+EIN · · Score: 1

      You got my joke. :-)

      --
      Please correct me if I got my facts wrong.
  25. Intel versus Planet Earth by Alan+Cox · · Score: 4, Funny

    I found the assertion that 64bit PC's don't use the BIOS rather amusing. Evidently bits of Intel still haven't managed to bring themselves to admit the existance of Athlon64 just yet.

    1. Re:Intel versus Planet Earth by Fred+Or+Alive · · Score: 2, Interesting

      The article doesn't actually mention Athlon 64's at all. Although AFAIK they're designed so they can use the old PC BIOS system (and everything else x86) rather than needing a new BIOS (etc.). Perhaps a sentence on how AMD took an x86 compatible approach to designing a 64 bit system meant that they (can and do) use the old BIOS system instead of something new would've been a useful addition.

      --
      10 PRINT "LOOK AROUND YOU ";
      20 GOTO 10
    2. Re:Intel versus Planet Earth by Anonymous Coward · · Score: 0

      Well, AMD would probably rather have people not know they ship their high-end server systems with some crappy Award BIOS from 1982.

    3. Re:Intel versus Planet Earth by lachlan76 · · Score: 2, Interesting

      Evidently bits of Intel still haven't managed to bring themselves to admit the existance of Athlon64 just yet.

      The joke I read was "I can see the technician suggesting that Intel uses gorilla/human hybrids to crowbar a Xeon into a Socket-478 package".

      And that, ladies and gentlemen is how the P4EE came about.

  26. PC's like the xbox by Stevyn · · Score: 2, Informative

    I hope this doesn't mean that PCs will be sold like Xboxes. I don't want to have to intall a mod chip on my laptop to run linux. I like the idea of the BIOS having more function and power, but I want it to do more than just prevent code from being executed. This should definately be an open standard otherwise Microsoft or Intel will have too much control. It's one thing to boot into windows and have that muck up your computer, but it's different when microsoft code is running on a linux box.

    Since microsoft doesn't seem to like to innovate anymore, I wonder why they are pushing for this. Linux has shown that you don't need security at the hardware level to prevent viruses from taking down your computer.

    So far I don't see many benefits the user will notice and enjoy. I'm not trying to spread DRM FUD because this article doesn't talk about it, I'm just asking why Microsoft cares so much to push this.

    1. Re:PC's like the xbox by Anonymous Coward · · Score: 0

      I used to work on Itanium systems at HP and we were using EFI to boot linux up on them. The PNNL Itanium Cluster (number 5 on top 500 list) is using EFI and linux so I suspect the US government will be pretty pissed off if this happens.

      Hopefully relationships with big linux vendors like HP, Dell or IBM might help to keep EFI open and compatible with a variety of OSes.

      I *THINK* HP had EFI booting up HP-UX and VMS on Itanium as well so this means it needs to do more than just linux and windows.

  27. hmm Innovatyion 10 years late? by linuxislandsucks · · Score: 1, Informative

    You mean after ten years of proven success in both SUN AND APPLE SYSTEMS Intel finally gets PCI religon?

    That is right folsk intle is finally enacting the last part of the PCI psec.. should we jump and cheer for it after ten years of foot dragging?

    --
    Don't Tread on OpenSource
  28. Open Source Firmware? by RAMMS+EIN · · Score: 2, Interesting

    There are various system emulators that need ROM images to boot the virtual system. I have been wondering about open source projects to provide these images, unencumbered by copyright restrictions, trade secrets, what have you.

    I am into operating system development, and I would like to play around with architectures that I don't have real hardware of. It can't be too hard to write a firmware implementation if the code for the emulator is already available.

    If you are aware of any such projects that are not mentioned here, please post. Ones that I know of are OpenBIOS, FreeBIOS, and LinuxBIOS, which are also mentioned in the article, with links.

    --
    Please correct me if I got my facts wrong.
  29. Mac Firmware by Anonymous+Writer · · Score: 4, Interesting

    It would be fun to see someone port one of those Apple ][ emulators to this thing, so you can actually boot a Mac into an Applesoft programming mode, just like in the old Apple ]['s. If it can handle a simple GUI like in the article, or if it could handle an implementation of System 1, I'm sure an Apple ][ emulation would be no problem.

    From what I gather in the article, any of these Forth programs have to be loaded off of the hard drive in order to be executed. I didn't really understand if they could be stored in non-volatile memory, and if the computer could be configured to run them when it is turned on. I don't know how much space there is for non-volatile memory, but it would be interesting to be able to write a really basic OS that runs off of it without having to read from the hard drive at all.

    I suppose it's possible since you can update the firmware, but does Apple keep information about how to program the firmware proprietary, or is it open for people to tinker with?

    1. Re:Mac Firmware by Graff · · Score: 2, Informative
      I suppose it's possible since you can update the firmware, but does Apple keep information about how to program the firmware proprietary, or is it open for people to tinker with?

      Apple provides plenty of information and links to information on the Apple Open Firmware Home Page. They even have a good sense of humor. The machine that the site is running on is located at "bananajr6000.apple.com"!
  30. For a moment I thought it read... by ctrlaltdestroy · · Score: 1

    "In More Power To The Firmware Agent Smith talks about..."

  31. Why is that moded FlameBait? by Bill,+Shooter+of+Bul · · Score: 1

    Its anti-flamebait. There are far too many people on /. that think that way. I call them "Stupid".

    PS. Now this post, on the other hand, will also probley be modded down. Thats a good thing. I think That getting modded down every now and then is a good thing. If everyone agrees with what you are saying, then you must not be saying anything important.

    PS PS I think its clear to me that slashdot's moderation system is a failure. The signal to noise ratio is far too low. The insightful comments aren't, the average poster has the maturity level of a 13 year old, ect, gripe, ect. I don't know how much longer I'll be here.

    --
    Well.. maybe. Or Maybe not. But Definitely not sort of.
  32. sounds like Apple by NineNine · · Score: 0, Troll

    Kinda' like what Apple has been doing for 20 years... You run their software on their hardware, and that's it. No software will readily run on their hardware, and their software won't run on other hardware. Not so scary.

    1. Re:sounds like Apple by GiMP · · Score: 1

      Linux won't run on Apple's hardware?

      MacOS won't run on other PPC systems? I guess it won't run on non-PPC systems either?

      I suppose I won't even ask about Darwin.

    2. Re:sounds like Apple by NineNine · · Score: 1

      Oh, there will always be hacks, I have no doubt about it. I've got my PS2 modded, and it does all kinds of things it wasn't designed for. But as far as buying something over the counter, out of the box? Again, it's the same thing that Apple has been doing for many, many years, and they're beyond popular with their legions of fanatics. Again, the hacks are cute, but nothing that you want to rely on if you're say, paying your bills with said computer. But lock-in, schmock-in. As soon as this happens, there might even be a manufacturer making Linux-friendly motherboards (if there's enough volume to support it).

    3. Re:sounds like Apple by connorbd · · Score: 1

      Terrasoft is an authorized Apple reseller, and the hooks are there to boot pretty much anything you want on a New World Mac (basically everything since the original iMac). Reason: the 32-bit New World architecture is essentially Apple's implementation of CHRP, the compromise platform that was created by Apple and IBM when Mac cloning still had promise. Apple has no reason to change that -- they know that their hardware offers benefits to third-party OS developers.

      And there are Linux-friendly PPC motherboards -- the Pegasos and a couple others marketed mostly to the Amiga enthusiast crowd -- but they're very, very expensive. To the casual LinuxPPC user, a copy of YellowDog and an $800 eMac is still the best entry-level choice.

  33. AIOS? by apachetoolbox · · Score: 1

    It wouldn't be very Basic if it had DRM on it.

  34. FORTH? I was hoping for PL/I by sparkywonderchicken · · Score: 0

    Why not make plug and play operating systems on rom chips?

  35. If BIOS is Going to be an OS, Then I Choose Linux! by LuxuryYacht · · Score: 2, Insightful

    What's happening here with EFI is that the BIOS has now grown to become an OS. If all you want BIOS to do is init the hardware and then jump to an OS then that's all the BIOS should be, just some init code to set up memory, chipset registers and cache so that it can jump to an OS for all the rest. But if you want the BIOS to do a whole lot more than just call it an OS and use an OS with lots of support with drivers already written.
    And for this BIOS that's really acting and grown to be an OS, I choose Linux!

    More at : http://www.linuxbios.org/

    --
    Quidquid latine dictum sit altum viditur
  36. Para para para noia by copponex · · Score: 3, Insightful

    The one thing people always forget is that, in truth, Microsoft/Adobe/Autodesk need people to have pirated versions of their software. Have you ever noticed how quickly major pieces of software are cracked after release? My guess is that they unofficially provide people with information to make this possible.

    If everyone absolutely and without an option had to pay for their version of Office/Autocad/Photoshop, free software would become ten times more popular in no time at all. Right now, software companies can keep their prices artificially high for the businesses that have to pay for it, and keep the "installed user base" artifically high without having to provide tech support.

    It's sort of the same thing with laws in the States. If every law was enforced every time, then people would be pissed and they would go away. Instead, laws that aren't enforced 100% of the time can be used against people the government doesn't like.

    If DRM ever hits 100% of the market, prices will go down because people will refuse to pay.

    1. Re:Para para para noia by Mr.+Neutron · · Score: 3, Informative

      Just because DRM is there doesn't mean software will be DRM-protected. And just because software vendors aren't DRMing their products doesn't mean TPTB won't impose DRM on all electronic components.

      It's like Macrovision. About 90% of commercial VHS tapes are not Macrovisioned. But 100% of VCRs are Macrovision-compliant by law. Sure, you can purchase deMacrovision boxes for legal use, but most people aren't going to go through the trouble. The same thing will happen with computer hardware. All computer components manufactured for sale in the US will be "trusted." The enterprising and resourceful geek will get all of his components direct from Asia and either run Linux or a dusty old copy of XP/Longhorn, but for all practical purposes, DRM will be everywhere. It may not be taken advantage of by everyone, but it will be everywhere.

      --
      dinner: it's what's for beer
    2. Re:Para para para noia by Fulcrum+of+Evil · · Score: 2, Insightful

      Have you ever noticed how quickly major pieces of software are cracked after release? My guess is that they unofficially provide people with information to make this possible.

      Some of those cracked copies are used by legitimate customers to get around onerous copy-protection code.

      --
      "We returned the General to El Salvador, or maybe Guatemala, it's difficult to tell from 10,000 feet"
    3. Re:Para para para noia by pegr · · Score: 0, Troll

      100% of VCRs are Macrovision-compliant by law.

      Nope... No such requirement.

    4. Re:Para para para noia by Mr.+Neutron · · Score: 1
      Nope... No such requirement.

      Yes there is. It's in the DMCA:
      http://www.bizjournals.com/sanjose/stories/1998/ 12/07/story7.html
      http://cse.stanford.edu/class/cs201/projects-99- 00/dmca-2k/macrovision.html

      "On April 26, 2002, under section 1201k of the Digital Millenium Copyright Act, no analog video recording devices may be manufactured that do not contain Automatic Gain Control circuitry."
      --
      dinner: it's what's for beer
    5. Re:Para para para noia by pegr · · Score: 1

      Nope... No such requirement.
      Yes there is. It's in the DMCA:
      http://www.bizjournals.com/sanjose/stories/ 1998/ 12/07/story7.html
      http://cse.stanford.edu/class/c s201/projects-99- 00/dmca-2k/macrovision.html

      "On April 26, 2002, under section 1201k of the Digital Millenium Copyright Act, no analog video recording devices may be manufactured that do not contain Automatic Gain Control circuitry."


      I stand corrected... Didn't realize DMCA had provisions for analog copy protection, specifically, Macrovision (though not referenced by name... it's patented, so who else could it be).

    6. Re:Para para para noia by Everlasting+God · · Score: 1

      Macrovision is indeed an exploit of simple-minded AGCs, but is absolutely not itself automatic gain control. Macrovision is analagous to audio cd copy protection that prevents playback in computers by including intentional errors that confuse the error correction hardware/software. It wouldn't be difficult to design a more intelligent AGC that wouldn't be affected by the Macrovision signal, (if nothing else just put a black burst regenerator ahead of it, same as external de-Macrovision boxes do) it just isn't worth the extra money to most consumers or manufacturers.

  37. Pre-boot vulnerabilities by delcielo · · Score: 1

    How long before we start seeing poorly written pre-boot applications causing vulnerabilities?

    For instance, with efi's networking capabilities, I can imagine hackers letting efi grab that 1 dhcp address that the user has allocated, and reporting it back to them. While the user spends time on tech support trying to figure out why ipconfig doesn't show anything, the hacker is rooting around their disk through efi.

    That may be far-fetched; but from the concepts offered in the article, it sounds feasible.

    Would any firmware-saavy slashdotter give us a hint as to how likely that scenario is?

    --
    Hot Damn! It's the Soggy Bottom Boys!
    1. Re:Pre-boot vulnerabilities by ratboy666 · · Score: 2, Interesting

      Boot time vulns...

      Yup, its an attack vector. Real Story: A major vendor of network bandwidth wanted to remotely bring up router boxes... using dhcp etc. And remotely boot those boxes. Over the internet.

      So, here is the attack vector:

      Hacker intercepts communication, capturing digitally signed OS that boots the router box. Now, this is useless, because all the hacker can do is wait for the box to reloaded, and then feed it the same OS image.

      Imagine, though, that a little time has gone by. Now, some vulns are known in that particular core. Now, when the router box is rebooted, the hacker can put BACK the vulnerable OS, and rehack.

      So, each download image must be secured against the box, to avoid replay attacks. Yes, this was brought up up the review of the "load OS over the internet" project.

      Of course, all names have been filed off, to protect.... well, whoever.

      Of course no mass market data producer is going to re-crypt data for each individual. That would mean that the OS/CONTENT would have to be re-encrypted after registration, *or* every retail copy would be different, *or* there would be no retail copies (only pre-installed).

      Ratboy.

      --
      Just another "Cubible(sic) Joe" 2 17 3061
  38. As any Apple //e user knows by Gothmolly · · Score: 2, Informative

    CALL -151

    --
    I want to delete my account but Slashdot doesn't allow it.
  39. Rom Based OS != BIOS by nurb432 · · Score: 3, Informative

    While the OS may have been in ROM, Like the Atari ST's, that doesnt make it the actual BIOS.

    By its very definition, the BIOS is a much lower level block of code. the true hardware abstraction layer, that the OS rides on top of..

    Sure its also in a ROM of some sort, perhaps even the same chips.. but that still doesnt really make a ROM based OS a 'BIOS'..

    --
    ---- Booth was a patriot ----
  40. EFI brings back bad memories. by klevin · · Score: 1

    Back in the day, when I was a co-op student employee, I spent some time testing Linux drivers on Itanium systems. EFI was about as intuitive as a worm eaten apple (no docs, just a "hey, you're good at figuring things out, test this"). Plus, it kept forgetting changes to its configuration. Eventually, I became familiar with its obtuse ways, but it never exactly brought a smile to my face when I saw the EFI prompt.

    That said, the PC BIOS should have been put out of its misery years ago. I'm just not sure EFI's really going to make developer's & users/admin's live that much easier.

  41. 1980 IBM PC BIOS source listing rocked by wombatmobile · · Score: 4, Insightful

    Let us not forget that IBM published the assembly language source code listing for the original PC BIOS in full beginning in 1980.

    This "openness" allowed and enabled the first generation of PC developers to see and understand what was going on at the firmware level - literally an open book and manna from heaven for the times.

    This was not quite the precursor of today's open source movement though since IBM never granted permission to copy or use the code, but 1 billion PC compatibles later it is easy to see that IBM's approach unlocked at least one aspect of the value of openness.

    Dan Bricklin comments thoughtfully about the PC BIOS in his blog. Search for "purple".

  42. Hardware DRM's role by acb · · Score: 2, Insightful

    Controlling access to copyrighted media is not the DRM BIOS's direct role; its role is to ensure that the operating system that boots can be trusted to do so.

    Right now, a secure trusted music player may ensure that the copyrighted media it plays never ends up in the wrong hands (i.e., the user's); however, there's nothing (in theory) stopping the no-good thieving user from replacing the audio device driver with one which makes a copy of the unencrypted sample stream elsewhere. If the OS requires drivers to be signed, then the OS can be hacked; they can boot from a hacked kernel which doesn't enforce this requirement.

    This is where the DRM BIOS comes in; under it, all bootup code would have to be digitally signed. Any code that's signed would, in theory, continue the chain and not load any other code which is untrusted in a privileged capacity. Only once the black iron sandbox is built does any potentially untrustworthy code get loaded, where it can't do anything untoward.

    Incidentally, this may be compatible with the GPL. Linux could still be distributed with source code you could look at; just that if you compiled your own kernel, it wouldn't boot on your machine (at least not on the bare metal).

  43. Re:If BIOS is Going to be an OS, Then I Choose Lin by DeathPenguin · · Score: 1

    You hit it more or less in your second sentence. LinuxBIOS is not an OS in a BIOS. It's a minimal BIOS that can bootstrap a system and load a Linux kernel stored in the firmware. This is good because, as you pointed out, there are already tons of drivers and stuff for Linux, and Linux can handle things like initializing hard disks and NICs. It can then load the OS.

    LinuxBIOS fits more in the description you gave in your second sentence.

  44. Reverse Engineering a DRM BIOS by bshroyer · · Score: 1

    How long do you really think it would take to reverse engineer a BIOS?

    If Microsoft were to be successful in implementing deals with the BIOS makers to require their "trusted" BIOS, the whole system would be dependent on some sort authentication call. It seems to me it would be trivial to discover those calls, and hard-code the "trusted" response into the open BIOS. If it's a true hash calculation on the revised BIOS, that makes it trickier, but finding the right "extra bits" to come up with the same hash would be an interesting distributed computing problem.

    It's axiomatic that any software designed to limit freedom of information will be circumvented sooner rather than later. This one just seems particularly easy.

    --
    The cure for cancer is coming: Reovirus
  45. Not Feature Complete by jazman_777 · · Score: 1

    Until you can do email from within it.

    --
    Slashdot: Failed Car Analogies. Amateur Lawyering. Anecdote Battles.
    1. Re:Not Feature Complete by PXE+Geek · · Score: 1

      Well, EFI comes with its own network drivers, and there are sample TCPIP stacks. I've heard of simple web browsers that have been ported over, so I don't see why you couldn't log on to your favourite webmail service using it...

  46. Re:Rom Based OS != BIOS by drinkypoo · · Score: 1

    The full operating system is not in ROM. Basic system drivers and windowing code is, as well as the kernel, but it's not the whole shebang. The AmigaDOS ROMs lie somewhere in between OS and BIOS.

    --
    "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
  47. Give Amit a break. by twitter · · Score: 1
    I would have liked to see more of a comparison of exactly what EFI gives you over Open Firmware ... It's funny to have a whole article about EFI then show all the cool things you can do with an advanced BIOS by giving Open Firmware demos.

    The page does a nice job furfilling it's stated purpose, but suffers from a lack of segregation that might be confusing. The author cited example for EFI in Part I. He could have put those links into a separate section in part II. This is a minor formatting problem and I'm happy that the resource has been created.

    "Part I: The Firmware Scene." gives you what it promises. If you look through the headings you will see, Legacy Pains, EFI, Open Firmware and Others. Wow, that's a lot to cover.

    "Part II: GUI Widgets In Open Firmware", also gives you what it says it does, though it looks like it does not follow because it only talks about Open Firmware. Amit could have made it into examples and put his EFI link in as the EFI example and talked about it a little.

    Overall, Amit has created a nice resource. He gives objective descriptions without much opinion. I would not have bothered to mention closed source and I can only imagine how much trouble it is to keep informed about things that the developing companies want to hide details of.

    --

    Friends don't help friends install M$ junk.

  48. Re:HOW DOES THIS BASH MICRO$LOTH OR WORSHIP APPLE? by Anonymous Coward · · Score: 0

    It worships Apple by showing the power of the OpenFirmware system in Macs. RTFA b4 tr0|ling, U L@/\/\3R.

  49. Is This Revelant? by Dave419 · · Score: 1

    Wont this new standard die in a few years once we get those instant-on PCs using integrated silicon and nanotechnology?

    --
    ~ there are 10 types of people in this world, those that can read binary and those that can't
  50. That shell is atrocious by alehmann · · Score: 2, Insightful

    Backslashes? DOS-style dir listings? UGH, I thought the idea was to remove obsolescence.

    Also, this is even worse than ACPI from a needless complexity standpoint.

  51. Re:Rom Based OS != BIOS by amigan940 · · Score: 1

    And, do note that BIOSes are a PC only thing. The Amiga "BIOS" was actually some code on a small (64k IIRC) ROM chip that did hardware self-tests and loaded Exec from the 256k ROM chips (which also had intuition.library and some other libraries and device drivers). Then, the bootblock was loaded and Exec ran the system startup scripts.

    --
    dd if=/dev/zero of=`df / | awk '/^\/dev/ {print $1}' | sed 's/s[0-9][a-z]//'` count=1 bs=512 && shutdown -r now
  52. Wasn't saying it was bad by SuperKendall · · Score: 1

    I didn't think it was bad at all, I thought it was a great reference - it's just that he teased me by showing me different aspects of two different worlds that look very similar, without giving me much common ground to tie the two together!

    Basically, I'm just hoping for a part three that concludes the whole thing with a comparison.

    --
    "There is more worth loving than we have strength to love." - Brian Jay Stanley
  53. Electronic fuel injection by heroine · · Score: 1

    As you know, EFI is really old technology.

    The Intel incarnation of EFI is a trophy for outsourcing proponents. Instead of implementing BIOSes, they develop standards for BIOSes. Would Intel be drafting standards if the work done by IIRC was still done in Santa Clara? Probably never.

    We should start thinking of standards as commodities rather than intellectual property. The standard will be the product just as noodle salad is to a restaurant.

    Distribution channels who want to sell a board can then buy firmware from a single implementor, say a contractor in India, without the need to have their own specialized programming team. They will sell the board under the name of its standard.

    Then after a few years the standard will become obsolete. Just like a gadget, the standard will be phased out for the next evolution. Instead of single implementors making their own leaps, we'll have groups of distribution channels making leaps, each selling slight variations of the same product, the standard.

  54. BIOS is more then PC by nurb432 · · Score: 1

    Perhaps the classic concept of a BIOS is a PC thing, but other machines have an equivalent, such as SUN and apple...

    Some have more features, such as a tty console, but they are the same concept..

    Really any well designed machine would have the hardware abstracted away from the OS.. Unless you start talking embedded devices, where space is at a premium..

    --
    ---- Booth was a patriot ----
    1. Re:BIOS is more then PC by drinkypoo · · Score: 1

      Really any well designed machine would have the hardware abstracted away from the OS.

      You and Tanenbaum should get together...

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
  55. EFI can't boot from tape by Hanul · · Score: 3, Insightful

    That is soooo lame. If I have a recovery tape, which is common practice under HP-UX, I can't recover from it, unless I use a very uncomfortable 2-step procedure (booting from CD and then proceeding from tape). HP-UX is one of Itanium's "native" OSes, but EFI is somewhat of a step back in some parts compared to HP's Boot Console Handler.

    1. Re:EFI can't boot from tape by HydroPhonic · · Score: 1

      Not familiar with HP-UX, but...
      Are you suggesting that the Boot Console Handler in question couldn't be implemented in the EFI??

  56. Gas stations and BIOS by gone.fishing · · Score: 2, Interesting

    I get a certain kind of comfort when I pull in to the gas station and see a really old car using the same gas pump as me. In the auto industry there have been many changes in the past hundred years but a 1913 Model T can still buy and use the same gas as my car can.

    BIOS is a sort of standard that assures compatibility. When we drift away from that standard, we start losing a very core basic value - the kind of thing that stops us from "filling up at the pump" so to speak.

    I want my BIOS. Other things can change but I want my BIOS because I feel better knowing that some things stay the same.

    1. Re:Gas stations and BIOS by norkakn · · Score: 1

      your car uses leaded gas?

    2. Re:Gas stations and BIOS by gone.fishing · · Score: 1

      No, but a 1913 Model "T" can and does run on unleaded. Leaded gas is no longer sold in the U.S.A.

    3. Re:Gas stations and BIOS by norkakn · · Score: 1

      leaded gas is sold in the US

      There is a large car show in the town I grew up and a lot of those require it.

      The pump is larger, so it won't fit in an unleaded gas tank

    4. Re:Gas stations and BIOS by norkakn · · Score: 1

      You are right about the Model T using unleaded though, but that was just because leaded gas wasn't invented yet

    5. Re:Gas stations and BIOS by gone.fishing · · Score: 1

      Perhaps there are some places where leaded is available but frankly, I haven't seen one in years here in Minneapolis. There are more than 10,000 pre- '64 cars here for back to the '50's weekend this weekend and almost all of them are filling up and running on unleaded.

      Some car stores sell an aditive that older car owners use but most tell me that they have had no problems using it. This was also my experience, I've had several older cars myself.

    6. Re:Gas stations and BIOS by gone.fishing · · Score: 1

      I did some research (I Googled the question: "Is leaded gasoline sold in the United States?"). The answer I got was that it was last sold in the United States in 1996. See http://www.omegamotors.com/enjoy/gasoline/gasoline _13.html or Google it yourself if you wish. ALL gasoline powered cars in the United States run on unleaded because Leaded is simply not available.

  57. Nope by Anonymous Coward · · Score: 2, Informative

    The Amiga is kind-of unique. The OS _is_ the BIOS, as well as everything else.

    Turn the Amiga on, the 680x0 reset vector runs. Through board logic, the Kickstart ROM is mapped to 0x00000000 as well as its usual location, and the lowest points of the ROM point out the jump address for the reset vector. The 68000 goes there, it's the INIT code of exec.library. Exec performs a self test on the board logic, the memory and the custom chips. It then searches for expansion cards (creates expansion.library), attached disk drives (trackdisk.device) and HDs (scsi.device (regardless of whether you have an IDE or SCSI hardware interface)), PCMCIA card disks (carddisk.device), etc.

    The graphics.library writes direct to Amiga hardware. The audio.device, in ROM, writes direct to Amiga hardware. potgo.resource, cia[a|b].resource, misc.resource, disk.resource, etc, are all arbitration mechanisms for custom chip registers. Sure, dos.library can load filesystems from disk once it's initialised by a HD or disk standard bootblock, but the basic 6 Amiga filesystems are in ROM. intuition.library and its high level BOOPSI stuff like loadable gadgets, images, datatypes are built on top of layers.library, which is built on top of hardware-hitting graphics.library.

    So there is tight integration between the hardware and the OS. There's no low-level code offering a hardware independent API to AmigaOS... that's AmigaOS itself. You can't put another OS there without adding in half of what AmigaOS did, in order to maintain the Amiga hardware. There's a lot of stuff that came after the Amiga designs (such as MMUs), and there's no official OS interface to it. They're not initialised by the OS. Random application programs fought over them with no OS supervision.

  58. Eeergh ... by Second_Derivative · · Score: 1

    ... this reminds me of a quote by Descartes:

    "Perfection is achieved not when there is nothing left to add, but when there is nothing left to take away."

    A BIOS where there's nothing left to take away hauls the OS into memory, maybe sets up pmode and jumps into it. Granted there might be some issues with stuff like ATA/SATA/SCSI/USB/Firewire/Ethernet/InsertNewStand ardHere but a well defined x86 "OS image loading capability interface" or something can handle that. EFI bytecode only makes sense when you have a large number of architectures using EFI in the first place. Considering the snobbishness and NIH syndrome rampant everywhere I somehow doubt that's going to happen.

  59. NO ROM BASIC by telemonster · · Score: 2, Funny

    I vote they put GW Basic back into the BIOS ROM.

    Or maybe useful utilities like Sun and other workstation vendors have.

    Or maybe more than 15 FUCKING IRQS! Like Macs have.

    Is it me, or is everyone else just better all around? The only thing going for PC's is the junk is so cheap.

    --
    Southeastern Virginia REPRESENT!
  60. use of GUIDs by Anonymous Coward · · Score: 0

    >>EFI defines GUID Partition Table (GPT), a new partitioning scheme that must be supported by EFI firmware. GPT uses globally unique identifiers to tag partitions. It is used by the 64-bit version of Windows, and offers several advantages over the legacy MBR-based partitioning scheme:

    Why does the partitions have to have a GUID? Is this to be able to identify a computer uniquely to trace hackers, etc?

  61. Not exactly by Markos · · Score: 1

    Most of these old bios's actually loaded their setup program off a hidden 10-20mb partition on the hard drive, not running off some rom on the motherboard.

    1. Re:Not exactly by cheekyboy · · Score: 1

      Wow, must have been magic to work when NO HD was plugged into the MB dufus!

      Back in late 80s' it was trivial in college to write a VGA mode GUI using pixel plots/line draws in assem in under 4k of code. Just because you have a 3d looking rectangle with a title bar, and 8x8 pixel icon with blitted objects and mouse control (via serial wow thats so hard) all in 16colors or 256, doesnt mean it takes 100meg of code like windows. Look at QNX on a disk!! or the old Apple System 6.x on a floppy, you can do a hell of alot with good code in 1meg of assembly (or well written C). Like wise a gui in ascii mode is just as easy, so it can all be done via a layer with switchable modes.

      Now if all hardware used XML as communications instead of hex codes in registers, that would be easy to write 'drivers' for em. Even if all elements were 4chars long its trivial to decode xml in hardware logic. Just a little more effort than hex codes, and you dont need no 4meg DLL/OBJ C++ API either :-)

      Where bandwidth is an issue you could have a binary mode hexcode commands too if required, so no need to complain that everything will be slowassed in xml.

      if first char is a greater than symbol, do xml, else if MSB high, ie 0x80, then use hex interpreter.

      Now get cracking you firmware hackers.

      --
      Liberty freedom are no1, not dicks in suits.
    2. Re:Not exactly by Markos · · Score: 1

      The motherboard still had a very basic bios, the more advanced gui bios was contained on the hard drive partition. This was the case on many compaq machines.

  62. EFI test on Itanium2 by freeduke · · Score: 1

    I have played with EFI on some Itanium2 computers. It is a cool technology, because it allows you to conduct the way your computer is booting, adding your own scripts, you can even use python for that. But there are some disturbing points: these scripts are supposed to reside on your hard drive in a FAT16 formated partition, and the native EFI scripting language looks like windows style "autoexec.bat" scripting... So may be funny, but it would be far more better, and less intrusive for hard drive, to have linux bios instead.

  63. FORTH coolness by EmbeddedJanitor · · Score: 1
    Some very nice things about forth....

    A forth interpreter + compiler + editor can live in less than 20k of memory. This provides a lot of extra flexibility in how one does things like: handle BIOS extentions (juust write em in forth and they can run on any CPU architecture - not just x86), write service tools, disk drive low-level formatters,....

    Forth is more compact than machine code. This might not seem relevant in multi-megabyte machines, but it does make it a lot easy/cheaper to add small code snippets to hardware devices.

    You can modify the behaviour of the Forth compiler itself, on the fly. This makes it very handy for expressing various structures that are often difficult to express in "static" languages like C and asm.

    It gives older programmers an excuse to break out the flared pants again!

    --
    Engineering is the art of compromise.
  64. MOD THIS UP! by Anonymous Coward · · Score: 0

    Great comment!

  65. who modded parent as insightful? by capt.mellow · · Score: 1

    Mod the parent down pls, it's a sad day in /. when a person gets an 'insightful' rating for griping about the aesthetics of a firmware shell.