Slashdot Mirror


UEFI Secure Boot and Linux: Where Things Stand

itwbennett writes "Assuming that Microsoft doesn't choose to implement Secure Boot in the ways that the Linux Foundation says would work with Linux, there 'will be no easy way to run Linux on Windows 8 PCs,' writes Steven Vaughan-Nichols. Instead, we're faced with three different, highly imperfect approaches: Approach #1: Create UEFI Secure Boot keys for your particular distribution, like Canonical is doing with Ubuntu. Approach #2: work with Microsoft's key signing service to create a Windows 8 system compatible UEFI secure boot key, like Red Hat is doing with Fedora." itwbennet finishes with: "Approach #3: Use open hardware with open source software, an approach favored by ZaReason CEO Cathy Malmrose." When you can't even use a GPLv3 licensed bootloader to boot your system, you might have a problem. Why is everyone so quick to accept the corpse of TCPA in new clothes?

521 comments

  1. Approach no. 4 - Do nothing by jkrise · · Score: 2

    Just wait for a while. System admins will find it very difficult to install Enterprise Licensed Windows licenses. MS will be forced to cave in, and provide easy mechanisms to do that for early adapters. Just use whatever technique the local PC vendor guy recommends.

    --
    If you keep throwing chairs, one day you'll break windows....
    1. Re:Approach no. 4 - Do nothing by Anonymous Coward · · Score: 1

      My guess is that UEFI will say "doh, can't find Windows 8!" and then will kick off ye olde BIOS booting sequence. Gotta to be able to install Windows XP on these boxes somehow.

    2. Re:Approach no. 4 - Do nothing by jkrise · · Score: 5, Insightful

      More than XP, I am thinking different flavours of Windows 8. System admins need to wipe off the OEM stuff and install their Enterprise License stuff on new kit. That could be a different flavour of 8 or earlier versions of the OS as well. If they can't do it, they will simply ignore Windows 8 and wait for the next version that removes the restriction of Secure Boot.

      --
      If you keep throwing chairs, one day you'll break windows....
    3. Re:Approach no. 4 - Do nothing by afidel · · Score: 5, Interesting

      WHAT?!? Secure Boot will do nothing to impede enterprise Windows users. You'll either use Windows8/2012 and have a signed boot loader or use 2008R2/7 and disable secure boot. Btw it would also do nothing to impede enterprise Linux users either, they'd either use a commercial signed distribution or build their own and have the build process install their keys into the TPM chip (trust me, enterprises already deal with crypto from internal PKI to external SSL to drive encryption).

      --
      There are 4 boxes to use in the defense of liberty: soap, ballot, jury, ammo. Use in that order. Starting now.
    4. Re:Approach no. 4 - Do nothing by nazsco · · Score: 1

      Yeah, because it departments are know for implementing the most sane and practical solutions for every problem, not the one that advertised itself as the only one available and take cto to dinner.

      Man, I'm glad that means my it dept will drop exchange soon..

    5. Re:Approach no. 4 - Do nothing by Anonymous Coward · · Score: 5, Interesting

      System admins need to wipe off the OEM stuff and install their Enterprise License stuff on new kit.

      Most corporate desktop admins are far happier if the machine can be deployed with less mucking around. Just unboxing 1200 new machines is a pain in the ass... if they also have to reimage and reconfigure each new machine (actually easier and more streamlined than unboxing these days, but nonetheless, extra time, extra money they'd rather not spend), they'll not be so joyous, and everything slows down.

      If they can't do it, they will simply ignore Windows 8 and wait for the next version

      Half right... because this, basically, is wise. The other half is they will harden what they have. Microsoft early adopters and fanbois notwithstanding, Microsoft has done nothing to increase the productivity of the office worker since XP/Server 2003/Office 2003. The pitfalls of XP are well known and huge incident databases have been built: nothing can break that doesn't have an immediate fix. Seven and even Vista is still in the early stages of figuring out all the solutions of all that can and does go wrong. I think any large or medium sized corporations still on the 2003 paradigm are fine and well under the budget expendature of those idiots that needlessly and irrationally raced to upgrade as long as they are in a rotation of reimaging every XP machine every 4-6 months... if their network infrastructure is resilient to the trouble users can get into, they may never need to upgrade these to new systems until the physical machines and their components cease to function.

    6. Re:Approach no. 4 - Do nothing by perpenso · · Score: 1

      Just wait for a while. System admins will find it very difficult to install ...

      I don't think so. I believe MS is requiring the ability to disable the secure boot in BIOS on x86.

      So just wait for a while ... and see that nothing has really changed on x86 PC hardware?

    7. Re:Approach no. 4 - Do nothing by Anonymous Coward · · Score: 1

      The license doesn't matter. The enterprise disks will be properly signed and boot securely just fine. The Arch ISO, however, is not signed by MS and will not boot securely.

      You don't enter the license key until long after you boot from the CD. I feel like you don't understand the problem at all.

    8. Re:Approach no. 4 - Do nothing by jkrise · · Score: 2

      Secure Boot will do nothing to impede enterprise Windows users.

      Most enterprises are still on XP; so Secure Boot has to be disabled or bypassed in millions of corporate desktops. If hw mfrs try to shove Windows-8 and above only PCs to the Corporate segment, nobody will buy them. Either way, I don't see Secure Boot as a viable option for PC mfrs.

      --
      If you keep throwing chairs, one day you'll break windows....
    9. Re:Approach no. 4 - Do nothing by jd2112 · · Score: 3, Interesting

      Most corporate desktop admins are far happier if the machine can be deployed with less mucking around. Just unboxing 1200 new machines is a pain in the ass... if they also have to reimage and reconfigure each new machine (actually easier and more streamlined than unboxing these days, but nonetheless, extra time, extra money they'd rather not spend), they'll not be so joyous, and everything slows down.

      If you are deploying 1200 new machines Dell or HP or whoever will most likely gladly pre-install your corporate OS image for you. There will be an additional cost for doing so but it's usually much less than having your own desktop support staff doing it.

      --
      Any insufficiently advanced magic is indistinguishable from technology.
    10. Re:Approach no. 4 - Do nothing by SuricouRaven · · Score: 2

      Unless they use third-party build tools, as my employer does. In which case those tools are going to break, at least until their vendors can go to beg Microsoft for signing.

    11. Re:Approach no. 4 - Do nothing by flyingfsck · · Score: 4, Informative

      Actually, if it is 6 or more machines, Dell doesn't even charge for doing that. You just give Dell a preloaded HDD and they use that to image all the machines on your order.

      --
      Excuse me, but please get off my Pennisetum Clandestinum, eh!
    12. Re:Approach no. 4 - Do nothing by slashmydots · · Score: 4, Interesting

      Your future prediction is unrealistic. Where there's a demand, there's a product. One of the major motherboard manufacturers will release a linux-capable board without all this locked down bullshit loaded onto it. You ever hear of these things called cell phones? The makers unlock them so damn fast when their carrier exclusivity contract runs out, it's insane. So with a limited number of boards, then Linux devs will only have a worry about a very narrow amount of drivers to support, which will be a huge improvement over the situation right now. Linux will vastly improve in performance because of it, MS will probably have multiple glitches that lock itself out of booting, viruses will infect the MBR anyway (or whatever this was allegedly supposed to prevent) and Linux will take over the world.
      I can't imagine how one word of that would be inaccurate.

    13. Re:Approach no. 4 - Do nothing by Z34107 · · Score: 3, Interesting

      Why does this keep popping up? XP won't even boot under UEFI.

      --
      DATABASE WOW WOW
    14. Re:Approach no. 4 - Do nothing by Anonymous Coward · · Score: 1

      Yes it will, moron, it's called Legacy BIOS Boot and is in pretty much UEFI.

    15. Re:Approach no. 4 - Do nothing by Billly+Gates · · Score: 4, Insightful

      People are not as productive with XP/2003 and I dispute that claim. When you have computers that take 8 minutes to be responsive to start up, or inactive for 3 hours every Tuesday due to McCrappy doing a scan limiting 1 app open at a time, can't find files in a share with 10,000 files, help desk putting out fired with rootkits and viruses all day that eats up into productivity.

      Sure your friendly beancounter accountant only looks at cost but it is always assumed workers are just as productive regardless of time and equipment.

      A modern Windows 7 environment you have instant search and can find things like Acme corp sales distribtion 2008 within seconds! The calls for malware go down in half. Your systems do not have Windows rot and get all sluggish. To boot your computers go into sleep mode and you can save millions or at least hundreds of thousands in energy costs.

      Your workers can use more functions in Office they didn't know where there either. Sorry ribbon haters but studies show otherwise and after 1 month of using it you will not want to go back. I can just use my keyboard now with Win 7/Office 2010 and hardly use the mouse as much with instant search and the using the numbering shortcuts with the ribbons. It rocks on a laptop too.

      Your workers will be spending more time working and getting things down. You really need to sell yourself better at work rather than kiss up with the cost accountants.

    16. Re:Approach no. 4 - Do nothing by Anonymous Coward · · Score: 1

      That's exactly the point. If the large enterprises can't boot up XP, they are NOT going to buy the hardware.

      If it can boot up XP, it will boot up Linux.

    17. Re:Approach no. 4 - Do nothing by Anonymous Coward · · Score: 1

      You ever hear of these things called cell phones? The makers unlock them so damn fast when their carrier exclusivity contract runs out, it's insane.

      You are confusing carrier-lock with boot-lock.

      There is not one single retail smartphone that has an open bootloader.

      The closest I know of in the entire Android space are some of the Archos tablets that offer a dual-boot option between the burned-in Android image and whatever Linux distro you put on the SD card.

    18. Re:Approach no. 4 - Do nothing by RobbieThe1st · · Score: 3, Interesting

      Nokia N900 - Commercial, retailed phone, fully open bootloader.

      But, your point still stands.

      That being said, I fully expect the "unlocked" bios-emulation mode to be around for at least 8 years, if not more - corporate needs XP support. However, the lock would actially be a /good/ thing... if we can install our own keys.
      I'm hoping for that sort of support, so corporate IT could sign particular versions of files and/or bootloaders and lock things down. Seems like a step up, there, so long as the accepted key list is editable.

    19. Re:Approach no. 4 - Do nothing by iserlohn · · Score: 1

      Corporate images are updated continously and employees/contractors come and go. When laptops gets returns to desktop support, they have to reimage it. So it will still be a massive burden for them.

    20. Re:Approach no. 4 - Do nothing by hairyfeet · · Score: 1

      Exactly, its sound and fury signifying nothing, and before anybody brings up ARM I'd point out MSFT has been flushing billions down the crapper trying to get into ARM and has exactly jack and squat for numbers, so what are you worried about? That Woot! will have WinPads in a year at touchpad prices and you won't be able to run Android on them? well duh just don't buy it then!

      A much better question is this...why in the fuck is anybody listening to SJVN anyway? He is to Linux what Thurott is to Windows, a MASSIVE troll. He writes everything with as much flamebait as he can get away with, every headline is something along the lines of "Is this the death of (insert target)" and he doesn't care if he's spreading FUD or outright bullshit as long as it brings up his pageviews.

      Seriously folks if you want to talk about this there are a bazillion articles out there about secureboot so lets not feed the troll, mmkay?

      --
      ACs don't waste your time replying, your posts are never seen by me.
    21. Re:Approach no. 4 - Do nothing by jimicus · · Score: 1

      Why do you think they couldn't do this? What's so magic about a corporate version of Windows versus an OEM one that makes this difficult?

    22. Re:Approach no. 4 - Do nothing by hairyfeet · · Score: 4, Interesting

      Damn you had it right and then you had to go and throw in the ribbon LOL!

      You are right about win 7 as I've had my business customers on it since 2010 and it took me on average 20 minutes to show them the new features and then they were off to the races. the improvements over XP are so many when I'm forced to work on an XP machine it feels like going back to Win95, its just painful. You have 64bit with great driver support so you can have the machines loaded with memory, superfetch actually puts that memory to use by having their programs preloaded into RAM and ready to go, breadcrumbs and jumplists make getting back to where you were the day before a breeze, its just a better OS.

      Now you are wrong about the ribbon, only because you are not taking into account office jocks have been using office for over a decade and know it like the back of their hand. The ribbon blows muscle memory all to shit and I've watched as people that could fly on 2K3 were brought to a screeching halt thanks to the ribbon. Sure its great if you've never used office before, but that isn't their biggest demographic is it? IMHO they should have had a switch at install that let the user choose which layout to have along with a GPO so it could be deployed across the network in whichever config the IT dept wanted.

      As for TFA, everyone is worried about this...why exactly? Its win 8, aka "LOL I iz a cell phone LOL" OS, this thing is gonna go over about as well as Michael Richards at an NAACP luncheon. if you don't want Secureboot in X86 its a simple switch away, and nobody is gonna buy WOA unless they find it on Woot! at 80% off. Just look at the numbers or lack thereof for WinPhone 7, If they crack higher than 6% on ARM I'll frankly be shocked. Finally let us not forget the EU doesn't like MSFT anyway so if they try to lock X86 they are gonna get hit with so many fines they won't know what hit them.

      --
      ACs don't waste your time replying, your posts are never seen by me.
    23. Re:Approach no. 4 - Do nothing by Kalriath · · Score: 3, Informative

      Most corporate desktop admins are far happier if the machine can be deployed with less mucking around. Just unboxing 1200 new machines is a pain in the ass... if they also have to reimage and reconfigure each new machine (actually easier and more streamlined than unboxing these days, but nonetheless, extra time, extra money they'd rather not spend), they'll not be so joyous, and everything slows down.

      This isn't even slightly true. Already every corporate re-images every desktop they get because they all come with Windows 7 and their 12 year old Line of Business apps are all certified for Windows XP only. I know for each of our 15000 or so desktops, every one of them gets attached to the network and the first thing that happens is a tech hits F12 and whacks in the provisioning admin credentials to kick off the otherwise completely zero-touch imaging process. I don't know where you get the idea that it's extra time or that configuration is necessary. Deploying Windows over the network can be done with zero intervention.

      --
      For a site about things like basic rights, Slashdot users sure do like to censor "dissent".
    24. Re:Approach no. 4 - Do nothing by Anonymous Coward · · Score: 0

      What I like most about the ribbon and Office 2010 is I can just move the cursor over someting like the heading in word and I can preview the changes without selecting it and then undoing and then going back into the maze of menus in Office 2k3. Yes, it takes time to relearn and it infurates many pro's but within a week they are just as comfortable and after a month many are more productive. I hate supporting Office 2k3 as I forgot how to do even mundane tasks as it has been awhile. No functionality is taken away and it is great if you are a visual learner liky myself. I used to have to carry a mouse everywhere when I lugged my laptop around around. Now I do not need it. I can do more things now I did not even know were there in the design features in word and publisher. It is just a pain to relearn but nothing catastrophic like METRO which takes away. It is time to move on as it makes the person whinning look bad in 2012, not office 2007/2010 anymore.

      People are worried because this has been a fear for a long time. As a former Linux user this would scare the shit out of me. Slashdot exgerates this as bios makers love to keep old settings to lower support costs as many still use XP. Windows 7 does support secureboot too and is a great argument for offices to upgrade to prevent rootkits. Really I doubt OEMs would force people to use 8 and everything dies a horrible death in a DRM appliance nightmare. Corporations make up a larger share of the market of computers as consumers focus on tablets and phones for basic internet and playing their crappy facebook games. These users do not upgrade.

      Windows 7 is a great upgrade over XP, ... but Windows 8 or 9? I do not think it will ever catch on unless programmers start releasing METRO and html 5 applets. Another plus over XP is that its paging is finally sane and doesn't peg the hell out of the hard drive even when there is plenty of ram and of course SSDs will die FAST under XP due to the lack of trim, not to mention the sata driver for XP lacks command queing. An eide drive will out perform a SATA for that reason so when the disk spins like a mofo under XP it is hit with that and the horrible paging algorithm. It is really tuned for older systems.

    25. Re:Approach no. 4 - Do nothing by Z34107 · · Score: 3, Insightful

      If you're turning off UEFI, why are you worried about secure boot?

      --
      DATABASE WOW WOW
    26. Re:Approach no. 4 - Do nothing by AmiMoJo · · Score: 1

      Even if that were true the new Secure Boot stuff is only destined for ARM based tables and some brand new PCs which don't have drivers for XP available anyway.

      If your enterprise is still stuck on XP then you need a new IT department. Most have moved to Windows 7 for all new machines.

      --
      const int one = 65536; (Silvermoon, Texture.cs)
      SJW, n: "Someone I don't like, and by the way I'm a fuckwit" - AC
    27. Re:Approach no. 4 - Do nothing by Anonymous Coward · · Score: 0

      Just wait for a while. System admins will find it very difficult to install ...

      I don't think so. I believe MS is requiring the ability to disable the secure boot in BIOS on x86.

      So just wait for a while ... and see that nothing has really changed on x86 PC hardware?

      Noooo, no no no. What MS is doing is not requiring the inability to disable the secure boot - yet. But if an OEM doesn't bother to allow it, MS isn't going to complain.

    28. Re:Approach no. 4 - Do nothing by Anonymous Coward · · Score: 0

      Just wait for a while. System admins will find it very difficult to install ...

      I don't think so. I believe MS is requiring the ability to disable the secure boot in BIOS on x86.

      So just wait for a while ... and see that nothing has really changed on x86 PC hardware?

      Noooo, no no no. What MS is doing is not requiring the inability to disable the secure boot - yet. But if an OEM doesn't bother to allow it, MS isn't going to complain.

      Beg your pardon, apparently I am behind the times; now they do require a disable option for Win8 logo, you're quite right.

      - the same AC

    29. Re:Approach no. 4 - Do nothing by peragrin · · Score: 1

      Actually part time Office users are the biggest demographic when it comes to users of Office.

      Power users are a minority. most people only use office on the side it isn't the main environment where they spend their day. Sure excel may be open most of the day so i can VIEW spreadsheets but that doesn't mean I am editing them all day long. I find the ribbon to be a big help to those who aren't power users and since the majority aren't it works out quite well.

      --
      i thought once I was found, but it was only a dream.
    30. Re:Approach no. 4 - Do nothing by jbolden · · Score: 1

      Secure boot is a hardware feature. They can't ignore Windows 8 and make it go away.

    31. Re:Approach no. 4 - Do nothing by jbolden · · Score: 1

      Now you are wrong about the ribbon, only because you are not taking into account office jocks have been using office for over a decade and know it like the back of their hand. The ribbon blows muscle memory all to shit and I've watched as people that could fly on 2K3 were brought to a screeching halt thanks to the ribbon. Sure its great if you've never used office before, but that isn't their biggest demographic is it? IMHO they should have had a switch at install that let the user choose which layout to have along with a GPO so it could be deployed across the network in whichever config the IT dept wanted.

      The old menu system wasn't fundamentally different than the ansi menus from CP/M apps that ran in 32k or ram. The only major upgrade had been: menu items that invoked setting's panes. They needed to force the switch since their intent at the time was to have people undergo the switching cost prior to them making the ribbon menus have more levels and be more context sensitive and thereby allowing for a huge increase in the feature set of office. They had to get their entire base unified on using ribbon before they started to really take advantage of ribbon.

    32. Re:Approach no. 4 - Do nothing by jbolden · · Score: 1

      How can that be? There are regulations that mandate certain controls for the radio. No one cares about the apps but the actual phone / data part is heavily regulated and OSes and carriers have to be certified. I've heard this before and I still don't buy it. Do you have any good information on what they mean by fully open bootloader?

    33. Re:Approach no. 4 - Do nothing by Anonymous Coward · · Score: 0

      WHAT?!? Secure Boot will do nothing to impede enterprise Windows users. You'll either use Windows8/2012 and have a signed boot loader or use 2008R2/7 and disable secure boot

      This whole controversy is built around the idea that having to disable secure boot does impede installation of linux (or Windows, or whatever). On the idea that, if you're installing 1000 copies of $OS, then having to go into the bios manually and disable UEFI is an undue burden. GP's claim is that someone will come up with a decent system for automating/scripting the turning off of UEFI, allowing people to go back to imaging HDs, either on the actual machine they're installing to or from some central location, making enterprise installations "easy."

    34. Re:Approach no. 4 - Do nothing by Anonymous Coward · · Score: 0

      Except that in my experience Windows 7 is slower on the same hardware versus XP, sleep mode works just fine in XP, I hardly use search because my files are organized and sensibly named (no "Untitled.doc"), and I've been using the ribbon a lot longer than 1 month and it isn't more efficient for me. The malware experience might be correct, but then I haven't seen a worm or virus on any of my machines in 4 years (and that one came from a work machine that was supposedly up-to-date). There are still things in the Windows 7 UI that I don't like and I'm probably going to switch over to Classic Shell as a replacement. Worst of all, on a grossly overpowered machine (quad-core 16GB RAM i7 with an SSD and nvidia gtx 570 graphics), with Aero turned off, I still get weird latencies in the UI. I don't know what's doing it. Graphics drivers? Windows 7 itself? But my XP machine with less powerful hardware (Core 2 and 4GB) has none of that, and it boots in ~30 seconds, comes out of sleep in about 5 or 10.

      I don't dispute that Windows 7 might be vastly more efficient for IT people maintaining the systems -- maybe that is so, because I don't do that job -- but as a user experience I don't find it any better than XP, and for Office the ribbon is frustratingly inefficient no matter how I configure it (and I've tried numerous ways). None of my co-workers like it either, and I can't figure out why anybody likes it. I acknowledge that some people do like it, and I acknowledge that (confusingly) some studies apparently show it to be more efficient, but I can't understand why Microsoft didn't deem it necessary to offer a "classic" interface for those people who don't. They obviously didn't care about their pre-existing customers much.

      The secureboot fiasco is just another reason to stay away from Windows 8 and avoid whatever other new monstrosities Microsoft has come up with, or at least wait until people have figured out how to kill those monstrosities off (e.g., Classic Shell is already being updated for Windows 8).

    35. Re:Approach no. 4 - Do nothing by rtb61 · · Score: 1

      Of course because others companies IT department should live to make M$ more money. If it ain't broke don't fix it, besides it makes for sense to cross grade to Linux than to continually be forced by M$ to spend more money with M$.

      --
      Chaos - everything, everywhere, everywhen
    36. Re:Approach no. 4 - Do nothing by Barefoot+Monkey · · Score: 0

      You can't "turn off" UEFI - it's the firmware that provides the legacy BIOS payload. If you install Windows XP you'll be adding a pre-Secure-Boot bootloader and thus need to have Secure Boot disabled. Of course, current Windows XP systems don't have Secure Boot anyway, so it's not much of a difference having it disabled.

    37. Re:Approach no. 4 - Do nothing by JabrTheHut · · Score: 0

      They needed to force the switch since their intent at the time was to have people undergo the switching cost prior to them making the ribbon menus have more levels and be more context sensitive and thereby allowing for a huge increase in the feature set of office.

      Mod parent down. This is a silly argument. There's no feature that office will introduce that depends on the ribbon. The ribbon does improve usability, by quite a lot over office 2003, but the features that are being introduced now do not and will not depend on anything so silly as not having a drop down menu.

      --
      Work like no one is watching. Dance like you've never been hurt. Make love like you don't need the money.
    38. Re:Approach no. 4 - Do nothing by Type44Q · · Score: 1

      So with a limited number of boards, then Linux devs will only have a worry about a very narrow amount of drivers to support, which will be a huge improvement over the situation right now.

      And Linux will suddenly no longer be a PC operating system but only run on proprietary, boutique stuff...

      That's some solution you've got there!

    39. Re:Approach no. 4 - Do nothing by jbolden · · Score: 1

      Of course they will they already do. The ribbon changes based on what sort of editing you are doing. The ribbon allows for more of that. That's called context sensitivity. It also allows for deeper embedding.

    40. Re:Approach no. 4 - Do nothing by mcgrew · · Score: 1

      There are at least four reasons most enterprises use Windows

      1. Excel
      2. Access (even though I hate that program)
      3. PowerPoint
      4. MS marketing
      5. Ignorance of Linux's superiority

      When I tell people there's a superior alternative to Windows they can get for free, I often hear "Is that legal??" Most non-nerds have never heard of Linux. It's not like you see ads for it on TV like you do MS and Apple ads.

    41. Re:Approach no. 4 - Do nothing by Anonymous Coward · · Score: 0

      you forgot Visual Basic and VBA.

    42. Re:Approach no. 4 - Do nothing by sco08y · · Score: 0

      Now you are wrong about the ribbon, only because you are not taking into account office jocks have been using office for over a decade and know it like the back of their hand. The ribbon blows muscle memory all to shit and I've watched as people that could fly on 2K3 were brought to a screeching halt thanks to the ribbon. Sure its great if you've never used office before, but that isn't their biggest demographic is it?

      "OMG, they moved the buttons out of a fucking menu and put them right in front of me! I'm completely lost because of my "muscle memory" or some bullshit excuse!"

      It's been 5 fucking years, how god damn long does it take you people to learn this shit? It's not rocket fucking science, it's Office, for christ's sake.

      Do we need to bring back Clippy to hold your hands and change your fucking diapers?

    43. Re:Approach no. 4 - Do nothing by cpu6502 · · Score: 1

      What about the other option of "use an open hardware with open software"? thinkpenguinpc.com sells i7 PCs with 80GB hard drives for as low as $948.

      --
      My AC stalker: " I personally agree with your posts most of the time, but that won't keep me from modding you troll"
    44. Re:Approach no. 4 - Do nothing by cpu6502 · · Score: 1

      >>>System admins need to wipe off the OEM stuff and install their Enterprise License stuff on new kit.

      What about the other option of "use open hardware with open software"? The website thinkpenguin.com sells i7 PCs with 80GB hard drives for as low as $948.

      --
      My AC stalker: " I personally agree with your posts most of the time, but that won't keep me from modding you troll"
    45. Re:Approach no. 4 - Do nothing by TheRaven64 · · Score: 1

      I thought you were joking, but it turns out that they really do charge that much for a last-generation i7, 2GB of RAM and an 80GB hard disk with integrated graphics. In contrast, Dell charges $100 less for a current-generation i7, 8GB of RAM, a 1TB hard drive an a discrete GPU with 1GB of RAM. Even Apple only charges $50 more for a Mac Mini with a quad i7, two 500GB hard disks, and 4GB of RAM, and that's with the more expensive components aimed at laptops.

      --
      I am TheRaven on Soylent News
    46. Re:Approach no. 4 - Do nothing by Anonymous Coward · · Score: 0

      You mean pay Verisign $99, because that's actually how it works?

    47. Re:Approach no. 4 - Do nothing by Anonymous Coward · · Score: 0

      I see plenty of very large companies that have to individually image drives or flash custom bios. Nothing to see here, move along.

    48. Re:Approach no. 4 - Do nothing by arth1 · · Score: 1

      Of course they will they already do. The ribbon changes based on what sort of editing you are doing. The ribbon allows for more of that.

      And therein lies the problem. Instead of the user learning one interface, he has to learn a dozen different ones, and quickly adapt between them.

      Never mind that functions that can be used in multiple contexts are often shifted and appear on the ribbon where it is used the most, meaning switching contexts to get to it if you're not working in that context.
      The second most irritating thing about Outlook, for example, is how convoluted it is to enter Bcc and Reply-To addresses. The two are not even treated the same way.
      (The most irritating thing is how much screen real estate is wasted, making the most important thing - the actual e-mails or meeting requests - get only a fraction of the space on a laptop with limited resolution.)

    49. Re:Approach no. 4 - Do nothing by Anonymous Coward · · Score: 0

      When I worked in IT, we rarely installed fresh Windows images, we mostly just cloned the old image to the new machine as not to break settings for the end-user.

      We had Custom boot CDs and networks boots. Secure Boot will will have to be customizable otherwise whomever sold us computers would lose out on millions of Revenue per year. I can pretty much guarantee computers will be sold with the ability to disable secure boot or manage certs.

    50. Re:Approach no. 4 - Do nothing by slashmydots · · Score: 2

      I don't know this technology inside and out but it sounds to me like it's such a simplistic BIOS change, just programming an alternate BIOS is simple. It wouldn't be some custom $300 motherboard. I could see them tacking an extra $5-10 tops on a board like that.
      I can even cite precedent on the realism level of my assessment. A decent amount of customers want to overclock their computers. I've never, ever seen a motherboard from any manufacturer like Dell or HP or Acer that lets you overclock it. It's a custom BIOS that locks you out of those options. You'd be hard pressed to find a motherboard bought separately retail that doesn't let you overclock it. It started with just a hand full, now everyone offers it. So ASUS will be like "Oh crap, MSI released a non-EUFI secure boot board and now we lost half our customers!" and they'll make one too. Then Gigabyte will be like "oh crap, they both released one! Don't want to get left behind or we'll lost customers too!" and soon everyone can overclock their products and everyone can boot whatever they want on their products.

    51. Re:Approach no. 4 - Do nothing by DigitalLogic · · Score: 1

      I agree, see: http://en.wikipedia.org/wiki/Unified_Extensible_Firmware_Interface I am surprised no one has mentioned looking up what UEFI is in the first place. It is harmless as far as I can tell and improves the booting system.

    52. Re:Approach no. 4 - Do nothing by jd2112 · · Score: 1

      What about the other option of "use an open hardware with open software"? thinkpenguinpc.com sells i7 PCs with 80GB hard drives for as low as $948.

      Not an option for 95% or so of all corporations that have multiple business critical applications that run on Windows only. Even if that weren't the case you would probably want to install a corporate version of whatever distro IT has standardized on rather than the plain vanilla install of the Ubuntu or Fedora version of the week.

      --
      Any insufficiently advanced magic is indistinguishable from technology.
    53. Re:Approach no. 4 - Do nothing by jbolden · · Score: 1

      And therein lies the problem. Instead of the user learning one interface, he has to learn a dozen different ones, and quickly adapt between them.

      I think its an advantage not a problem. But regardless my argument with GP was that it is a huge shift from static menus. The reason I think it is an advantage is because it allows them to add so many context specific menu items that you'll never see unless you work in those contexts.

      For example there are all sorts of complexities of handling hindi or arabic glyphs (the symbol that represents a character) that don't exist in English. If you are entering text in those languages they need those menu items, I don't. Mixing right to left alphabets like hebrew or arabic with left to right create complexities, that deserves menu items. Complex bibliography handling deserves menu items when you are doing a formal bibliography. Etc....

      (The most irritating thing is how much screen real estate is wasted, making the most important thing - the actual e-mails or meeting requests - get only a fraction of the space on a laptop with limited resolution

      Well that's kinda central to the design of Outlook. If you don't like the task plane approach why use Outlook as your mail client? Google just bought a company that makes a minimal mail client (so I'm assuming they are going to bring this out). Tell me if this is more like what you would want?

      http://vimeo.com/32852176

    54. Re:Approach no. 4 - Do nothing by Anonymous Coward · · Score: 0

      with Aero turned off, I still get weird latencies in the UI. I don't know what's doing it. Graphics drivers? Windows 7 itself? But my XP machine with less powerful hardware (Core 2 and 4GB) has none of that

      Disabling Aero disables HD accel. It actually uses more electricity to disable the eye candy.

      The secureboot fiasco is just another reason to stay away from Windows 8

      1) Computer Industry wants to solve rootkits by limiting only signed binaries to boot
      2) UEFI creates Secure Boot
      3) MS decided Secure Boot is an awesome industry standard and wants to support it
      4) MS requires Secure Boot to be defaulted on if you want to sell computers with the Win8 badge, which indirectly means you need the MS cert white-listed
      5) Everyone gets mad at MS

      I wonder if the same thing would happen if RedHat decided if you want to sell computers with the RedHat Enterpise badge you had to have Secure Boot enabled by default. It's just a damn sticker.

    55. Re:Approach no. 4 - Do nothing by jd2112 · · Score: 1

      Corporate images are updated continously and employees/contractors come and go. When laptops gets returns to desktop support, they have to reimage it. So it will still be a massive burden for them.

      Where I'm from master desktop images are updated only a few times a year at most. Minor updates and patches are typically pushed down with something like System Center Configuration Manager or LANdesk. Only time the master images are updated is when there is a major change such as a service pack or a major update of a core component.

      --
      Any insufficiently advanced magic is indistinguishable from technology.
    56. Re:Approach no. 4 - Do nothing by Lokitoth · · Score: 1

      I am curious, why not use XPMode for your 12-year-old LOB application?

    57. Re:Approach no. 4 - Do nothing by RobbieThe1st · · Score: 1

      The modem/radio is a seperate chip, with it's own, locked firmware. It communicates with a userspace binary blob driver.
      It would be possible to create an open-source driver, but that still wouldn't be a problem - the modem should be able to enforce any radio restrictions and low-level protocol needed.

      Think of it this way: Your windows PC has an unlocked bootloader, yet is allowed to have a USB cellmodem attached to it. Why couldn't you do the same with your phone?

      And yes, the /cpu/ bootloader is unlocked in the N900 - you can install uboot without any hacking, and boot Ubuntu or Android natively... though they don't currently have any support for the cellmodem(so no calls).

    58. Re:Approach no. 4 - Do nothing by Anonymous Coward · · Score: 0

      If your enterprise is still stuck on XP then you need a new IT department. Most have moved to Windows 7 for all new machines.

      Most IT departments in smaller companies don't have budgets to just go out and buy all new machines for everyone. Most probably don't have budgets period, so they just have each department buy a new PC only when a current one dies. Many (most?) users are still using XP, a few hapless souls are stuck with Vista, and only a handful of users have Windows 7.

    59. Re:Approach no. 4 - Do nothing by hairyfeet · · Score: 1

      That doesn't change the fact that they should have left it to the users and thus not took a giant crap on their loyal customers.

      Of course that's become Ballmer's mantra at MSFT "Hey you bought from us for years?.../bitchslap/...well fuck off, because we're Apple now LOL!" which is why their products are crapping all over the place. Zune? Fail, Kin, Sidekick, WinPhone? Fail. They just don't bother to actually LISTEN to their users and even with office, which would have taken a single fucking GPO switch and reg entry, they give long time users the bird in favor of the "We're Apple LOL!" consumer heavy mantra.

      You mark my words, Win 8 is gonna bring it to a head. people are tired of being fucking ignored and having shit shoveled on them as Ballmer tries to remake MSFT into an ersatz Apple and people are getting sick of it. WOA won't go anywhere and will end up sold for Touchpad prices on Woot!, Win 8 machines will sit on shelves and probably take a couple of OEMs with it, people are just sick of MSFT not bothering to listen to them. Come Oct people will vote with their wallets and it'll be a big "fuck you!" to MSFT.

      And while I'm sure the new office is better for the noobs I've watched it slam the brakes on the pro users enough times to know its not worth the "features" like constantly moving context crap. Most of my customers have stuck with 2K3 and are testing or taking a look at LO, because if they are gonna have to start all over again, why stick with MSFT?

      --
      ACs don't waste your time replying, your posts are never seen by me.
    60. Re:Approach no. 4 - Do nothing by Anonymous Coward · · Score: 0

      I work for dell, you insensitive clod!

    61. Re:Approach no. 4 - Do nothing by jbolden · · Score: 1

      Oh I see. That's cool. I hope the N900 does well. I saw the video though couldn't get the demo to run properly.

    62. Re:Approach no. 4 - Do nothing by kiddygrinder · · Score: 1

      how the fuck to you stick with the ribbon for a month? after a couple weeks i just turned it off and learned keyboard shortcuts

      --
      This is a joke. I am joking. Joke joke joke.
    63. Re:Approach no. 4 - Do nothing by jbolden · · Score: 1

      Most of my customers have stuck with 2K3 and are testing or taking a look at LO, because if they are gonna have to start all over again, why stick with MSFT?

      Because Office is, if they want advanced functionality, far and away the best. What Microsoft has spent the last decade doing for Office are things like integrating the pieces of Dynamics so that Excel can be a full fledged ERP interface. A good chunk of the functionality from Oracle Financials or Peoplesoft for under 10% of the cost and far easier to use. That does Suzie the checkout girl 0. Its rather useful for the guy in the back whose stocking the warehouse. Its rather useful for the manager. But where it really triumphs over LO is for the regional manager who can rollup or roll down this functionality even if not looking at the individual sheets because of Sharepoint's integration summary giving him a good chunk of Documentum's functionality for under 10% of the cost.

      And BTW Apple doesn't have anything remotely like this. IBM does, Oracle does, SAP does. Apple no.

      Come Oct people will vote with their wallets and it'll be a big "fuck you!" to MSFT.

      I don't think so but OK assume so. And maybe come November and the whole Christmas season and then the spring. And lets say the summer after that. Lets assume that in the entire US not a single computer sells. Then what? Ballmer is going to have to show the kinds of spine that Steve Jobs had to show at multiple points in turning Apple around and make it clear to people this is the direction that the x86 platform is going in. And they can go use Linux or they get onboard, but Windows 7 is a legacy product they don't sell anymore.

      And then they look over and see a world of powerfully exciting hardware doing things that were inconceivable in 2011 costing $1k and they see used windows machines and Linux boxes doing the same stuff they've always used their systems for costing $400 and they vote with their wallets.

      When Apple shifted Final Cut Pro away from its OS9 roots to match with iMovie (essentially iMovie Pro) to make Final Cut Pro X people screamed bloody murder. Some of them switched to Adobe Premiere. Some of them are still on Final Cut Pro and used copies go for quite \a bit. But no one had doubt Apple meant it, they had the credibility. If Balmer wants to be Apple he's going to need to show spine. He's going to send a message to his customers that this is the direction the Microsoft train goes in: they can jump off, run ahead or ride in the bus to the world they presented. But the train ain't changing direction.

      And their products aren't crapping all over the place. I just saw the data on SQL server (from IBM BTW) for data warehousing. They have over 1/2 of the largest databases most companies have. That is huge progress. If your database needs under 12 CPUs I'm having a hard time seeing why you wouldn't go with them. They are continuing to disrupt Oracle, having driven them out of most OLTP they are now going after DW and BI and may end up with almost the entire corporate database market inside of 20 years. Dynamics is amazing. A place Microsoft wasn't even a player a decade ago. Outlook.com is a huge success out of the gate just this week.

      They are sucking in consumer. And Windows 8 may change that. Or they lose and leave the consumer market to someone else. But at least they don't rot slowly anymore.

    64. Re:Approach no. 4 - Do nothing by ZmeiGorynych · · Score: 1

      Sorry, I have to disagree strongly about the ribbon. I've been force-upgraded to it at work about half a year ago, and still it has me shouting obscenities and having to google how to find the most trivial functions on a daily basis, because the ordering just makes no fucking sense to me at all, whereas in O2K I could find stuff just fine, even stuff I hadn't used before.
      The only way I could make the new Word even halfway usable is by hiding the fucking ribbon, and spending half an hour or so to hunt down the dozen most used functions and putting them onto the custom bar. Still a far cry from O2K in terms of usability, but at least I can find stuff. Dunno what studies you're refrerring to, but my experience of the ribbon is nothing but pain.

    65. Re:Approach no. 4 - Do nothing by RobbieThe1st · · Score: 1

      "did" well - it's a couple of years old now.
      It's a nice machine, though, and I use it for my portable tablet needs -- Including Slashdot posting(like now).

    66. Re:Approach no. 4 - Do nothing by Billly+Gates · · Score: 1

      If you disable it you wont learn it.

      Yes, the first week was irritating but after being told of the benefits and studies from Microsoft I gave it a shot. I love the keyboard shortcuts. But to be honest I hated the menus inside office for many years nesting things. It was cluttered and ugly and to this day I have not found a single thing that I wondered ... oh shoot where is it in 2010 in many years.

      O2k takes 10x the amount of code with vba to do the same stuff and has many limitations if you reference many worksheets and word formatting is an abomination in that version. ... ok 2010 still blows goatballs but is less buggy

    67. Re:Approach no. 4 - Do nothing by Billly+Gates · · Score: 1

      Oh and the study was on slashdot a few years ago when office 2007 came out. Basically 85% of users didn't use common tasks and kept requesting features that existed in years. Microsofts experience program showed that these same users know use almost all of the functions now which is great.

    68. Re:Approach no. 4 - Do nothing by jbolden · · Score: 1

      Sorry I was thinking N9. I don't know the Nokia product lines at all. Anyway I don't bother even trying to post from my iPhone. So that says something about the keyboard.

    69. Re:Approach no. 4 - Do nothing by Billly+Gates · · Score: 1

      You are missing some drivers. Nvidia chipsets have this bug if you do use the stock OEM install. I have never seen it but I have read about it forums with similiar hardware with that 570 graphics.

      If you turn on GPU aero it will speed things up quite a bit. Your cpu is not up to the task.

    70. Re:Approach no. 4 - Do nothing by Kalriath · · Score: 1

      Because we're slower than an arctic glacier. That's only now being looked at since MS warned us that we will not be able to get XP from 2014.

      --
      For a site about things like basic rights, Slashdot users sure do like to censor "dissent".
    71. Re:Approach no. 4 - Do nothing by Anonymous Coward · · Score: 0

      All of our machines get re-imaged as soon as he box arrives. Show me a corporate IT department not doing this and I'll show you a corporate IT department not doing their job.

    72. Re:Approach no. 4 - Do nothing by Anonymous Coward · · Score: 0

      Now you are wrong about the ribbon, only because you are not taking into account office jocks have been using office for over a decade and know it like the back of their hand. The ribbon blows muscle memory all to shit and I've watched as people that could fly on 2K3 were brought to a screeching halt thanks to the ribbon.

      if that is the case, many of them never actually developed the muscle memory. 99% of the Excel keyboard shortcuts from 2003 still work in 2007, they just aren't advertised. Eg alt+d+f+f still does autofilter

    73. Re:Approach no. 4 - Do nothing by nobodie · · Score: 1

      I work for a university with 45,000 students on campus with attendant IT setup for teaching and research (R1 research institute). Everything is imaged and installed for every machine that comes on campus. I have an IT buddy (my "gnome" I call him) who keeps my fedora setup running with a virtualbox VM for Win7. He does the same thing for all the Macs in his building. It is his job.

      --
      Subversion of spatial scale luxury decoration ideas.
    74. Re:Approach no. 4 - Do nothing by ZmeiGorynych · · Score: 1

      The claim in the post I was replying to was
      > after 1 month of using it you will not want to go back
      and it was at least after 3 months of using it and hating it that I discovered the custom toolbar.

      I guess it just goes to show everybody's brain is wired differently - I usually can find stuff in o2k without thinking twice, whereas now I still very often find myself looking in vain through the fucking ribbons for the simplest stuff and ending up having to google it.

    75. Re:Approach no. 4 - Do nothing by KingBenny · · Score: 1

      i guess the wait a while will be inevitable , i havent seen one single bit of info on the dyi/oem-version for home users who like to build their own rig and update one component at a time. You can either upgrade or buy a whole new rig with w8 preinstalled ? Sounds to me like yo-ho-ho across the world, and a bottle of rum ofcourse
      The thing is, if the w8 version of directx is revised and most likely not available on windows 7, like they did it with xp and dx10 then the gaming crowd will be more or less screwed, unless everyone just forks out for a brandnew non-moddable box ? highly unlikely
      maybe it turns into a good thing for games on linux then :p

      --
      Free speech was meant to be free for all... how can anyone grow up in a nanny state ?
    76. Re:Approach no. 4 - Do nothing by lsatenstein · · Score: 1

      WHAT?!? Secure Boot will do nothing to impede enterprise Windows users. You'll either use Windows8/2012 and have a signed boot loader or use 2008R2/7 and disable secure boot. Btw it would also do nothing to impede enterprise Linux users either, they'd either use a commercial signed distribution or build their own and have the build process install their keys into the TPM chip (trust me, enterprises already deal with crypto from internal PKI to external SSL to drive encryption).

      Under UEFI, what does a VM machine need to do? Does it also need the UEFI keys? One problem noted by IBM with tpms was that the VM machine needed a VM emulation of a TPM

      --
      Leslie Satenstein Montreal Quebec Canada
    77. Re:Approach no. 4 - Do nothing by hairyfeet · · Score: 1

      But now that OO is Apache and IBM is supporting how much longer will that be the case? if anybody knows enterprise its IBM and their name still carries weight.

      and what "LOL I'm Apple!" Ballmer needs to worry about is NOT the users as much as the OEMs. you may not remember your history but once upon a time IBM was in the same place MSFT is, until they tried to buttfuck the OEMs on the MCA bus. The OEMs got together and said "Fuck you, EISA!" and left IBM to play in a corner and within 10 years IBM was out of the PC business.

      The exact same thing looks to be beginning to brew, the OEMs aren't gonna quietly go out of business because Steve Ballmer wants to be Steve Jobs, which is why you have Dell talking to Canonical and with Valve on linux supporting not only the game but could just as easily become the "one stop shop" for ALL third party proprietary apps on Linux frankly it wouldn't take much work at all for the OEMs to get together and say "fuck you!" to MSFT.

      So if Win 8 bombs, which there is a damned good chance it will, the OEMs really only have three choices. 1.- They demand and get the right to continue selling Win 7, which means Ballmer's "LOL we're Apple now!" goes down in flames, 2.- they sell a handful of Windows 8 systems while switching over to something else like Linux, or 3.-They go out of business.

      Do you REALLY think they are gonna choose #3 just to make Ballmer's delusions a reality? Do you REALLY think all those OEMs are just gonna lay everyone off and close their doors just to make Steve happy? Because if you believe that I have some magic beans you might be interested in. Jobs could pull it off because he owned the ENTIRE CHAIN, he made the hardware, the software, it was his playground and you played the game HIS way or you GTFO.

      That is the exact opposite of MSFT, if the OEMs give them the finger and dump win 8 on the back page or only put it on the cheap junk systems while pushing Linux that leaves Steve standing there with his dick in his hand and they KNOW this, so if Win 8 isn't an instant smash hit you'll either see them demanding (and getting) Win 7 which puts Steve right back where he was, or if Ballmer "shows some spine" as you put it I hope MSFT is ready to buy their own manufacturing plants and build everything themselves, from the boxes and laptops to the tablets and phones, because frankly the OEMs aren't gonna slit their own throats just to hand what's left of the market to MSFT.

      --
      ACs don't waste your time replying, your posts are never seen by me.
    78. Re:Approach no. 4 - Do nothing by Anonymous Coward · · Score: 0

      That doesn't change the fact that they should have left it to the users and thus not took a giant crap on their loyal customers.

      If everyone had your attitude we would still be stuck on command line only OSes, sacrificing progress and efficiency for the vocal minority who are too set in their ways and averse to change is just stupid.

      They just don't bother to actually LISTEN to their users and even with office, which would have taken a single fucking GPO switch and reg entry

      Oh that's all it takes for backwards compatibility?...wow!

      You mark my words, Win 8 is gonna bring it to a head. people are tired of being fucking ignored and having shit shoveled on them as Ballmer tries to remake MSFT into an ersatz Apple and people are getting sick of it. WOA won't go anywhere and will end up sold for Touchpad prices on Woot!

      The vocal minority will complain loudly about how their anecdotal evidence shows everyone agrees with them. But in the extremely unlikely circumstance that you're right, who cares? Why are you so emotionally invested in it? If Microsoft is doing so much bad stuff and they fail why do you care? When people point out the benefits of the ribbon you always chime in about how change is bad, so use something open and free where you don't have to change rather than complaining about how a closed proprietary company is moving forward rather than pandering to old people.

      And while I'm sure the new office is better for the noobs I've watched it slam the brakes on the pro users enough times to know its not worth the "features" like constantly moving context crap.

      Change is bad for people set in their ways, we know, they are the minority.

      we're Apple now

      Oh clearly that's a bad thing, look at how badly apple are failing and how incredibly well microsoft are doing! They should have just continued releasing service packs for Windows XP, flog the dead horse that was Windows Mobile and ignore the ARM platform...then they will win!

    79. Re:Approach no. 4 - Do nothing by Anonymous Coward · · Score: 0

      "LOL I'm Apple!" Ballmer
      buttfuck the OEMs
      "Fuck you, EISA!"
      "fuck you!" to MSFT.
      Ballmer's delusions
      HIS way or you GTFO.
      OEMs give them the finger
      with his dick in his hand
      slit their own throats

      You're clearly incapable of making an intelligent and objective post when you're obviously frothing at the mouth with rage, just calm down, the industry is nothing like you describe, it is not as if everyone is angry at everyone else or that people have an absolutist mentality where they will support only one thing. You most definitely have far too much of an emotional investment in this to be taken seriously.

      Nothing stops OEMs from supporting Linux and Windows (indeed many have, even though Linux usually had extremely poor sales) and people will buy whatever they like, but it's deluded to believe that people will dump Metro for Unity.

      which is why you have Dell talking to Canonical

      If people are switch from Windows 8 because they don't like Metro then they aren't going to switch to Ubuntu Unity.

    80. Re:Approach no. 4 - Do nothing by jbolden · · Score: 1

      But now that OO is Apache and IBM is supporting how much longer will that be the case? if anybody knows enterprise its IBM and their name still carries weight

      IBM's only commitment is to migrate the code from Symphony 3.0.1 (a fork of Open Office) into Apache's Open Office. There is no deep structural commitment, OO will pick up a 1/2 dozen neat features like support for up to 1m rows in spreadsheets and then IBM is done.

      . you may not remember your history but once upon a time IBM was in the same place MSFT is, until they tried to buttfuck the OEMs on the MCA bus. The OEMs got together and said "Fuck you, EISA!" and left IBM to play in a corner and within 10 years IBM was out of the PC business.

      I remember the history fine and that's not what happened. IBM no longer had a unique BIOS and saw the Microsoft, Intel, Western Digital standard. MCA was their patents though. The main advantage of MCA was the much greater throughput it allowed for over the ISA (and even later EISA) bus. PCs were developing very fast processors, the Pentium 90mhz was on the order 1/3 as fast as very high end processors costing in systems in the $100k range, and especially when mixed with the i860/i960 "printer" processors for vector coprocessor the performance was staggering. The Pentiums could address 512m at that point so memory wasn't a problem. But the hard drive performance was terrible. MCA was an attempt to address the single biggest weakness in PCs in becoming high end servers.

      The problem with MCA was that IBM's margins were insane. So for example the IBM dual 90mhz Pentium (2 CPU) was $10k. The machines at $2k-4k were 486SXes while you get a dual pentium 66 for $2k from IBM's Ambra division. For any given price point the MCA machine was so much more expensive it wasn't worth it. That's what killed IBM. As for being in the PC market IBM was an active player till 2005 and still collects fees from Lenovo and sells their stuff. IBM is out of the PC manufacturing business, the still sell PCs when needed to sell consulting deals.

      1.- They demand and get the right to continue selling Win 7, which means Ballmer's "LOL we're Apple now!" goes down in flames,

      On the corporate side there is no question Balmer is going to let them sell Win 7. On the consumer side I would assume he would as well. He might start raising the price to encourage Windows 8, but yes he has to do that likely for years.

      2.- they sell a handful of Windows 8 systems while switching over to something else like Linux,

      I don't think its going to be a handful. But I think Balmer has to be ready for dropping the low end and Linux, iOS and Android are going to be picking it up. For the OEMs Linux is the best fit. So I'd assume if Balmer is going to make the minimum price of a Win 8 box about $800 then the $300-700 PC range is going to be Windows 7 and Linux. If Windows 7 is getting in the way of Windows 8 he might have to tilt the balance more towards Linux.

      The problem is that Linux is pricey. Even assuming 100m Linux units sell per year (i.e. 1/3rd of the market) and $5b / yr for Linux R&D spread over the OEMs (all of them) for 3 years that's $50 / yr in raw costs and far more cash than the OEM's have. If they play it safe and try and recapture the whole thing in the first year $150 in raw costs for x86 machines, which works out to another $200 or so by the time the end user buys the machines. And that's going to be a bring problem over just using Windows 7.

      Conversely if they don't spend much of anything on R&D they don't move 100m units.

      3.-They go out of business.

      Some might. Remember we are talking about the least profitable customers here. Dell, HP, Lenovo could lose 100% of their consumer sales it wouldn't impact the bottom line that much, much less drive them out of business. HP is already indicating a willingness to walk away from consumer, Lenovo has never had much in consumer. Toshiba is dependent on consumer and

    81. Re:Approach no. 4 - Do nothing by afidel · · Score: 1

      I wouldn't think you'd need a virtual TPM, you should be able to pass through the device. Now, the better questions are a) how do you do so securely and b) what does that do to VM mobility? Also, remember that this is NOT a UEFI problem, it's a secure boot problem. We've had both EFI/UEFI and TPM for about a decade now, it's the combination of the two to enable secure boot that seems to get peoples knickers in a twist.

      --
      There are 4 boxes to use in the defense of liberty: soap, ballot, jury, ammo. Use in that order. Starting now.
    82. Re:Approach no. 4 - Do nothing by hazydave · · Score: 1

      The cellular baseband runs on an separate, smaller, locked-down ARM processor. Not on the application processor.

      --
      -Dave Haynie
    83. Re:Approach no. 4 - Do nothing by cynyr · · Score: 1

      Was it office 2007 that brought with it the much hated ribbon?

      Anyways, which ever version that was, was a huge step forward productivity wise for me. being able to pin macros to the "quickaction" toolbar and have them automaticlly get a keystroke assigned has done wonders.

      And at least the ribbon never really moves things around like the personalized menus.

      --
      All of the above was encrypted with a Quad ROT-13 method. Unauthorized decryption is in violation of the DMCA.
  2. Re:No one cares by lightknight · · Score: 2

    Nonsense. People care so long as there is money to be made.

    In this case, there isn't much to be made. MS & Canonical have written off the desktop market, and who knows what Apple will be doing next. As such, the lockdowns will continue while the tech sector undergoes decay, up until someone has a brilliant idea that forces the various players to reassess. Since many of them have consulted their crystal balls which say tablets and cell phones are the way of the future, this change is highly unlikely.

    --
    I am John Hurt.
  3. I care. by Anonymous Coward · · Score: 2, Insightful

    There are a lot of people who care. Unfortunately there are not enough people making purchasing decisions based on that.

    1. Re:I care. by Anonymous Coward · · Score: 0

      Isn't not making purchases FOS?

  4. no by masternerdguy · · Score: 0, Troll

    Option 3: Watch ms stock tank as they go out of businss.

    --
    To offset political mods, replace Flamebait with Insightful.
    1. Re:no by catchblue22 · · Score: 2

      I am very close to buying a laptop from a company that manufactures laptops designed to run linux. Either ZaReason or System76. I am currently using an early 2007 Macbook Pro, which has been a fairly nice machine. However I don't like the way consumer computing is going, and I feel the need to stand up for my right to run a Turing complete computing device. And $800 or so for a laptop isn't too much for me to plop down.

      --
      This and no other is the root from which a tyrant springs; when first he appears as a protector - Plato (423 to 327 BC)
  5. approach #4 by Cyko_01 · · Score: 3, Funny

    Modify ntldr to boot to grub automatically and and remove all unnecessary windows components

    1. Re:Approach #4 by lister+king+of+smeg · · Score: 1

      I wonder will that allow booting of fedora or ubuntu which are having their distros signed by Microsoft to boot on arm hardware? anyone else know i would really like to have a ubuntu tablet and that seems like a cheap way.

      --
      ---Saying gnome 3 is better than windows 8 not so much a compliment as it is damning with light praise.
    2. Re:approach #4 by epyT-R · · Score: 5, Informative

      if ntldr is modified, it won't pass the hash check and the UEFI loader won't execute it.

    3. Re:Approach #4 by ozmanjusri · · Score: 2

      Just buy an Android one next year. It looks like you'll have the best of both worlds.

      http://www.ubuntu.com/devices/android

      http://en.wikipedia.org/wiki/Ubuntu_for_Android

      http://www.youtube.com/watch?v=wzc0uMXGFBY

      --
      "I've got more toys than Teruhisa Kitahara."
    4. Re:Approach #4 by flimflammer · · Score: 1

      No kidding. Where is the issue where when you can just do this? You'd think the the general population of people who will be loading their boxes with alternate operating systems could figure this out.

    5. Re:Approach #4 by Anonymous Coward · · Score: 0

      Don't know but I'd doubt it as that would negate the whole point of not allowing secure boot to be disabled or other public keys to be installed on ARM.

    6. Re:Approach #4 by jamesh · · Score: 1

      I haven't read TFA but I assumed it was about ARM, in which case solution #4 is "buy x86". If TFA is about x86 then the author is an idiot. An article about how this could be the start of a slippery slope might be better, but unless something has changed since I last read the MS literature, disabling secure boot is an easy solution.

      And given how easy rooting an Apple phone has been, I can't imagine that rooting UEFI will be any more difficult.

    7. Re:approach #4 by Anonymous Coward · · Score: 0

      What I don't see anyone mentioning is using ntldr to boot into GRUB or LILO as one of the options. I have done it for an XP system so I don't see why you would not be able to do a similar approach for this secure boot setup. As long as the windows stuff is left intact or modified through windows, I don't see the problem. But, since no one has mentioned it as far as I have seen, there must be something that prevents this

    8. Re:Approach #4 by 0123456 · · Score: 3, Insightful

      Yes, because Microsoft would never, ever, even possibly ever imagine thinking of making it compulsory on x86.

    9. Re:approach #4 by Cyko_01 · · Score: 1

      that is exactly what I was talking about

    10. Re:approach #4 by Anonymous Coward · · Score: 0

      You can't do that on Windows on phone, so I assume you won't be able to on any other Windows on Arm install, either.

    11. Re:Approach #4 by Anonymous Coward · · Score: 1

      Which is great for x86. They require you can't disable it on ARM, though. So that's still a problem there.

    12. Re:Approach #4 by ozmanjusri · · Score: 4, Interesting

      You need to do more with a computer than just smile smugly and say "i'm runng xyz cool thing". ... Okay.. maybe *you* don't...

      Ah, my little troll is back! Nice to see you again.

      And you're right. Computers are tools, they are at their best when they're used to create cool (and mundane) things, and that's the subtle difference between smartphones and desktop computers that I think Ubuntu got right this time.

      You see my little pet, despite what many people say, phones and tablets aren't for passive consumption, that's the role of TV, books, and maybe e-readers. What Android, iOS et al excel at is to communicate and share cool things (and mundane things, but who wants to talk about those).

      The thing is, computing as a field is all about thresholds. There were text and math thresholds as CPUs/memory etc became large enough and powerful enough to run text editors, then a little faster for word processors, spreadsheets and simulators. Graphical display thresholds gave us GUIs, sound subsystem thresholds and video playback thresholds got us music and movies. There are people here who looked in awe at early Amiga/Atari demos playing two or three simultaneous animations. Desktop computer hardware stopped being a limitation to creating images, video, text, music etc in the late '90s. Phone hardware now is far past that threshold and is about to pass the capabilities of desktop computers from less than a decade ago.

      Coincidentally, a decade ago was when mainstream OS development stagnated. XP was released about then, and continues to be used in business today largely because its successors do little or nothing to improve productivity. You see where I'm going with this, cherub? We have hardware with enough power to run the content creation software and fit in our pockets. That limitation is gone. The remaining limitations are the OS and software stacks, and the peripherals - big screens, digitisers, scanners etc etc, and guess what? Ubuntu has an answer.

      We're seeing enough hints in the market from the likes of Asus, Samsung, Lenovo and even Microsoft that this is something the world's looking for. I'd say Canonical/Ubuntu is in a very good place right now.

      --
      "I've got more toys than Teruhisa Kitahara."
    13. Re:approach #4 by SuricouRaven · · Score: 3, Insightful

      Depends on the design of the new NTLDR. If they are going to the effort of having the firmware validate the loader, I'm guessing that the loader in turn will only boot a microsoft-signed kernel.

    14. Re:Approach #4 by SuricouRaven · · Score: 1

      Because some time around Windows 10, they'll make it manditory. Microsoft is a company twice convicted of anticompetative actions, with a history of ruthless business strategy. Are you really going to trust them with a 'destroy all my competitors!' button just because they promise not to push it yet?

    15. Re:approach #4 by epyT-R · · Score: 1

      not to be pedantic, but 'modify' in the context you used suggests a binary patch, which is how I interpreted your statement.. At any rate, booting is supposed to halt once the chain of trust is broken. ntldr will only boot a signed image.

    16. Re:Approach #4 by beuges · · Score: 1

      That's one of the points of requiring that ARM win8 tablets are not allowed to disable secure boot. If MS subsidizes ARM tablets to drive sales, they don't want people buying cheap tablets in order to install another OS at their (literal) expense.
      The implementation allows for the installation of other operating systems but only if they've been signed by a MS key (well, any key, but the only ones that will be installed on a win8 ARM tablet will be MS's). They'll be able to charge for that signing process, and recover their subsidy in that way.
      The other point is that since the only way to put new software on an ARM win8 tablet is via the app store, they want to ensure that intercepting the boot sequence to install an exploit that bypasses or interferes with the app store is blocked by requiring that the entire boot chain is trusted.
      Whether they get it right is yet to be seen, but those are the reasons.

    17. Re:Approach #4 by Anonymous Coward · · Score: 0

      Regardng ARM - they are worried about people buying their cheap windoze-phones and replacing windoze with android :P

      And they dont have a monopoly in phones (or even a noticable fraction of the market), so no one will care.

      It just means that the cheap windows phones will be even MORE worthless than they already are.

    18. Re:Approach #4 by TheLink · · Score: 1

      On non-ARM systems, it is required to implement the ability to disable Secure Boot via firmware setup.

      So despite Intel's efforts on getting power consumption down I guess there's not going to be a Windows phone or tablet on x86... ;)

      A Windows Server may also disable Secure Boot remotely using a strongly authenticated (preferably public-key based) out-of-band management connection, such as to a baseboard management controller or service processor.

      I'm sure some hackers will be interested in investigations the various implementations of this feature.

      --
    19. Re:Approach #4 by bhcompy · · Score: 0

      And that isn't reality today. I don't live in fear of the future. People that live in fear of the future institute rights wrecking shit like the Patriot Act and SOPA because they're afraid of what-ifs. Fuck that. Right now, that's not the case. The day it is is the day I worry about it.

    20. Re:Approach #4 by RightSaidFred99 · · Score: 0

      Oh, you mean like many other ARM device makers?

    21. Re:Approach #4 by complete+loony · · Score: 1

      And how exactly do you include simple, clear instructions for how to do that for each manufacturers bios?

      1, choose your type of motherboard

      2, print these instructions

      3, reboot computer

      4, press DEL

      ...

      That's going to make installing linux, or even just running from a live cd so much easier.

      --
      09F91102 no, 455FE104 nope, F190A1E8 uh-uh, 7A5F8A09 that's not it, C87294CE no. Ah! 452F6E403CDF10714E41DFAA257D313F.
    22. Re:approach #4 by Anonymous Coward · · Score: 0

      Yes, let's insert questionable, closed-source software into our boot chain because they don't want software in theirs.

      Please, take my car, house and roomba. I can get more.

    23. Re:Approach #4 by maxwell+demon · · Score: 1

      But at the same time they forbid it on ARM.

      --
      The Tao of math: The numbers you can count are not the real numbers.
    24. Re:Approach #4 by rdnetto · · Score: 1

      No kidding. Where is the issue where when you can just do this? You'd think the the general population of people who will be loading their boxes with alternate operating systems could figure this out.

      And what if we actually like using non-x86 architectures? ARM is becoming increasingly popular - I already have 2 different ARM devices, both running Linux. It's only a matter of time until ARM makes it's way into the desktop/server market. Even now, there's a lot of interest in running Linux (proper GNU/Linux with an X server) on tablets.

      --
      Most human behaviour can be explained in terms of identity.
    25. Re:Approach #4 by Anonymous Coward · · Score: 0

      Sorry, but this is retarded. Not even my pretty recent (though not very expensive) tower computer has enough power for a lot of common tasks such as fluid video editing. And it would be totally impossible without a full-fledged screen and keyboard and mouse (or some custom hardware which definitely is not on any consumer device).

    26. Re:Approach #4 by jbolden · · Score: 1

      Its $80 to get Microsoft to sign a kernel for you. This is not out of reach of an individual. Despite all the paranoia Microsoft seems to (at least so far) not be doing anything tricky.

    27. Re:Approach #4 by Anonymous Coward · · Score: 0

      The remaining limitations are the OS and software stacks, and the peripherals - big screens, digitisers, scanners etc etc, and guess what? Ubuntu has an answer.

      I'm typing this on the one OS I've used most in my life, but I must grudginly admit it's not improving productivity as of late. For instance, if I want to run GIMP, I have to do these steps:

      • Right click the Ubuntu icon
      • Choose applications
      • Click "Filter results"
      • Select Graphics
      • Finally, select "GIMP Image Editor"

      Also, the filter toggles categories on and off, i.e., it doesn't switch between them like Gnome does. Judging from their website, they stopped caring about "human beings" some time ago.

    28. Re:Approach #4 by aaaaaaargh! · · Score: 2

      You mean whenever I decide to compile a custom kernel I'd need to pay $80 to Microsoft to run it on a machine with SecureBoot? To run my custom kernel on my computer?

      Sorry, that doesn't sound like a good deal to me. Real secure boot would look like this:

        "You are trying to boot from a new kernel or an existing kernel has been modified. This might indicate that a virus is trying to gain access to your computer. Choose Use Previous Kernel if you are unsure about the reason for this message. Would you like to boot with this kernel and add it to the list of accepted kernels?

      Accept New Kernel / Use Previous Kernel."

    29. Re:Approach #4 by jbolden · · Score: 1

      The previous poster was asking about distribution kernels aimed at thousands of users.

      For an advanced user compiling up their kernels you would set yourself up as a signing authority in the BIOS and then sign your own kernels.

    30. Re:Approach #4 by Anonymous Coward · · Score: 0

      You need to do more with a computer than just smile smugly and say "i'm runng xyz cool thing". ... Okay.. maybe *you* don't...

      Ah, my little troll is back! Nice to see you again....You see my little pet....You see where I'm going with this, cherub?

      You're calling the other guy the troll? You see where I'm going with this, my giant slashdot asshole?

    31. Re:Approach #4 by lister+king+of+smeg · · Score: 1

      no you don't have them sign your kernel that would lead to just the problem you described you have them sign your boot loader which loads what ever kernel you chose

      --
      ---Saying gnome 3 is better than windows 8 not so much a compliment as it is damning with light praise.
    32. Re:Approach #4 by segedunum · · Score: 1

      Fuck that. Right now, that's not the case. The day it is is the day I worry about it.

      People who say retarded things like that generally say things like "Oh, I wish I had seen this coming and done something about it......"

    33. Re:Approach #4 by segedunum · · Score: 1

      A Windows Server may also disable Secure Boot remotely using a strongly authenticated (preferably public-key based) out-of-band management connection, such as to a baseboard management controller or service processor.

      Worms, meet can. This provides no benefit to users whatsoever and presents yet another security risk. Imagine malware using this to lock out legitimate software................

      Disabling Secure Boot must not be possible on ARM systems."

      Yes, because they don't control Arm as a platform, don't have any existing applications running on it that people give a shit about, don't have any existing users to piss off that would make them not upgrade and they're just absolutely terrified of low cost operating systems running on it. They're scared shitless of it. We'll look back on this period and identify this as a time when the PC platform died. Locking it down is just not a good idea, but they simply cannot resist it because they think there are so many benefits.

  6. Aproach #4 by sapgau · · Score: 4, Insightful

    Lawsuit?

    1. Re:Aproach #4 by Anonymous Coward · · Score: 0

      How did that work out for you last time?

    2. Re:Aproach #4 by Anonymous Coward · · Score: 0

      Worked in the EU

    3. Re:Aproach #4 by Midnight+Thunder · · Score: 2

      Lawsuit?

      Well that or anti-trust, since this is clearly anti-competitive.

      I can accept something like a Mac being locked down, to a certain extent, since it is Apple hardware with Apple software - though I don't believe they prevent you from installing other operating systems? Generic PC hardware not at all, since this is third party hardware, with Windows being an add-on. If Microsoft wants hardware this locked down to run Windows, then they should sell their own hardware.

      What I would like to see is being able to disable UEFI Secure boot, via the UEFI prompt. If you have physical access to a machine, and the UEFI password (if there is one), then I can't see much of a security risk that would bother anyone.

      One question, is how easy is it to identify hardware that is 'broken' like this?

      --
      Jumpstart the tartan drive.
    4. Re:Aproach #4 by Missing.Matter · · Score: 1

      What I would like to see is being able to disable UEFI Secure boot, via the UEFI prompt. If you have physical access to a machine, and the UEFI password (if there is one), then I can't see much of a security risk that would bother anyone.

      Seriously? How can you conclude secure boot is anticompetitive and then go on to demonstrate you have no idea how Microsoft is implementing this? They're doing *exactly* what you would "like to see."

      http://msdn.microsoft.com/en-US/library/windows/hardware/jj128256

      "Mandatory. Enable/Disable Secure Boot. On non-ARM systems, it is required to implement the ability to disable Secure Boot via firmware setup. A physically present user must be allowed to disable Secure Boot via firmware setup without possession of PKpriv. A Windows Server may also disable Secure Boot remotely using a strongly authenticated (preferably public-key based) out-of-band management connection, such as to a baseboard management controller or service processor. Programmatic disabling of Secure Boot either during Boot Services or after exiting EFI Boot Services MUST NOT be possible. Disabling Secure Boot must not be possible on ARM systems."

      In summary: you are guaranteed to be able to disable secure boot on your next x86 laptop or desktop purchase.

    5. Re:Aproach #4 by cerberusss · · Score: 1

      I can accept something like a Mac being locked down, to a certain extent, since it is Apple hardware with Apple software - though I don't believe they prevent you from installing other operating systems?

      It comes with Bootcamp, which you give a Windows image, and it then repartitions the disk and installs Windows. Complete with drivers for the apple hardware.

      --
      8 of 13 people found this answer helpful. Did you?
    6. Re:Aproach #4 by Midnight+Thunder · · Score: 1

      Thanks for the clarification. Apparently I wasn't doing my homework, and just followed what the mob was saying.

      --
      Jumpstart the tartan drive.
  7. Re:yes and no by FudRucker · · Score: 4, Interesting

    i prefer option 3 too, but...
    microsoft wont go out of business but they could very easily marginalize themselves to the point that they are no longer the 800 pound gorilla of the desktop PC market, and more than likely Apple and Linux will grab more userbase, i prefer old school distros like debian & slackware so apple wont be getting any of my money

    --
    Politics is Treachery, Religion is Brainwashing
  8. Restrict Government PC Purchases to Open Hardware by Anonymous Coward · · Score: 4, Interesting

    It seems like the obvious way to block this type of stuff is to pass legislation requiring government agencies to only purchase PCs that are free from such encumbrances. The state and taxpayers benefit from keeping their OS options open on new computer hardware and more importantly they represent a large enough percent of total sales to actually get a proper response from manufacturers.

  9. Secure Boot won't catch on by billcopc · · Score: 5, Insightful

    Approach #4: ignore UEFI Secure Boot. It's a blunt solution to an obscure problem. More importantly, it's such a huge pain in the ass, not just for Linux but for ALL system integrators, that anyone actually preventing the user from disabling Secure Boot will end up limiting their own marketability. Two things will happen:

    1. It will be relegated to tiny niches where security trumps usability
    2. It will be cracked

    This is not an either/or. Both things will happen. This whole fiasco is nothing but a huge waste of time for everyone involved.

    --
    -Billco, Fnarg.com
    1. Re:Secure Boot won't catch on by Dan667 · · Score: 2

      If you have physical access to the hardware it is only a matter of time before it is cracked.

    2. Re:Secure Boot won't catch on by Anonymous Coward · · Score: 0

      And you're not the only one with that access. Everyone in the world has it. By forcing it down our throats they have only sped its irrelevance.

    3. Re:Secure Boot won't catch on by Anonymous Coward · · Score: 5, Informative

      In the past, I would have agreed with you, but hardware DRM is getting pretty good:

      PS3s took almost five years to get cracked, and new PS3s are immune to any holes in them that were used by GeoHot to bust the thing open in the first place.

      Satellite TV has not seen any cracks since the patch several years back which completely fried any "master key" cards.

      The iPhone 4s is barely jailbroken with only userland available. This is with the best minds in the world working on cracking the thing.

      Most Android phones still have locked bootloaders, which nobody has yet been able to get. Newer Android phones actually have a daemon that looks for root process signatures then "bricks" the phone if found until the firmware is reflashed... and with some devices, the reflash is not available to the public.

      So, even though hardware might be in the user's physical control, it nowhere near belongs to the user.

    4. Re:Secure Boot won't catch on by Mashiki · · Score: 1

      Well the proof of concept on how to poison UEFI and inject malware on mac's already exists, someone else can post the link to BH/Defcon if they want, I'm on my phone. So, with that it won't take any time at all to break it, disable it, and smash it into itty bitty pieces. Sure they can patch it, but it won't do any good.

      Remember MS and their whole "we're updating the validation service to make it more secure" etc, etc, etc bit? Well I think it took all of about 40 minutes for that to be broken, it wasn't hard. Though legit users continue to have problems with it throwing up "your version of windows is invalid."

      --
      Om, nomnomnom...
    5. Re:Secure Boot won't catch on by FranTaylor · · Score: 5, Insightful

      We used to call them "general purpose computers"

      We dropped the "general purpose" part at some point, because it seemed redundant at the time.

      Now maybe we need to bring back this term.

      These machines you are talking about are not "general purpose" computers at all.

      It once again goes to show that the Microsoft slogan is "Where do you want to be taken today"

    6. Re:Secure Boot won't catch on by tlhIngan · · Score: 3, Insightful

      Approach #4: ignore UEFI Secure Boot. It's a blunt solution to an obscure problem. More importantly, it's such a huge pain in the ass, not just for Linux but for ALL system integrators, that anyone actually preventing the user from disabling Secure Boot will end up limiting their own marketability.

      I thought the requirement to run Windows 8 was to have a BIOS option to disable secure boot, or rather, enable legacy (BIOS) booting. So if the user wishes to run another OS, they could - disable secure boot, and the PC boots like it always has - via the old BIOS method. Of course, if you want to boot back into Windows requires flipping the option back (the files are signed and verified before loading, so it's not like running another OS will break the security - the UEFI verifies the loader, the loader verifies the kernel, the kernel verifies the drivers and Windows binaries, etc.).

      I know RedHat and Canonical were worried that the option would be well, optional, but I thought it was now required. And it will be for a little while because Windows 7 isn't ready for secure boot - it can be EFI-booted in 64-bit mode but that's experimental.

      Then there is well, Apple. Whose EFI-based firmware probably doesn't have secure boot in it and thus unable to boot Windows 8... (and probably the only provider that has an easily-accessible EFI boot - is there any other reason why there's an EFI bootloader for Linux for the past few years?)

    7. Re:Secure Boot won't catch on by Arancaytar · · Score: 3, Funny

      It once again goes to show that the Microsoft slogan is "Where do you want to be taken today"

      "Guess where we'll be taking you today."

    8. Re:Secure Boot won't catch on by Anonymous Coward · · Score: 0

      The cleaners?

    9. Re:Secure Boot won't catch on by jameshofo · · Score: 3, Informative

      This is _not_ DRM, its a security implementation to prevent malware from writing to the boot processes and preempting any possible Operating System security. It does seem a bit like we're trying to right the leaning tower of pizza with a bomb on the low side to see if it will right itself again!

      I'm sorry to be so obvious but this needs to be kept far away from the association of DRM.

      Here is a rather awesome talk about UEFI and RedHat's work on it. Basically his experience was its very buggy and there are already implementations of it out there that they aren't even going to try to patch. At some point this just seems like a way for some company to add in just one more bit of junkware/middleware that everyone has to rely on and no one has any approving control over.
      http://www.youtube.com/watch?v=V2aq5M3Q76U

      Part of the spec says that it must have a disable option, the problem creeps up with inexperienced users who may have tried Linux/Unix or whatever that would usually be available seriously reducing the spread of *nix.

      --
      Good leaders run toward problems, bad leaders hide from them.
    10. Re:Secure Boot won't catch on by catmistake · · Score: 1

      PS3s took almost five years to get cracked, and new PS3s are immune to any holes in them that were used by GeoHot to bust the thing open in the first place.

      you do realize that Geohot wasn't slaving away at jailbreaking the PS3 for 5 years, right? Likely it took him less than 5 weeks, if not 5 days.

    11. Re:Secure Boot won't catch on by Thantik · · Score: 4, Insightful

      PS3s only took about 5 months to be cracked. They were initially untouched because they provided people what they wanted: The ability to boot linux. Once the feature was taken away, it was cracked in very little time at all.

      And the new PS3s are "immune" not due to anything other than harassment of GeoHot by sony. We'll never know if this is true though, because he's barred from ever touching anything branded by Sony ever again.

      And pretty much all Android phones have the bootloaders completely bypassed with 2ndinit.

      Satellite, you've got me on, because I haven't had any interest in.

    12. Re:Secure Boot won't catch on by jimicus · · Score: 1

      I can think of three reasons to support secure boot rather than demand the user disable it without really trying:

      - Avoid getting caught with your pants down later on when "ability to disable in a configuration screen" is quietly removed from the standard/Dell accidentally release an EFI firmware without that option then refuse to issue an update.
      - Make life easier for the end user. Canonical in particular are trying to do something about the "difficult to use" reputation of Linux on the desktop; requiring the user to dig through an EFI menu system full of jargon flies in the face of this.
      - Make compliance with various security standards possible. There's already a whole bunch of these that may apply depending on industry - healthcare has some, and there's PCI-DSS for anyone who wants to accept debit/credit cards. Many auditors already demand anti virus on systems where it's totally irrelevant; what's the betting that future revisions to such standards explicitly demand secure boot or similar technologies?

    13. Re:Secure Boot won't catch on by Barlo_Mung_42 · · Score: 1

      It's not just MS though. Apple and Android are on the same train.

    14. Re:Secure Boot won't catch on by Yvanhoe · · Score: 3, Interesting

      The fact that mandatory secure boot is a windows 8 requirement for ARM architecture makes it credible to think they would like the same thing in the x86 world. The fact we even accepted in the ARM world is an incredibly sad defeat that will make us waste another 10 years to turn around.

      --
      The Wise adapts himself to the world. The Fool adapts the world to himself. Therefore, all progress depends on the Fool.
    15. Re:Secure Boot won't catch on by Anonymous Coward · · Score: 0

      Then there is well, Apple. Whose EFI-based firmware probably doesn't have secure boot in it and thus unable to boot Windows 8... (and probably the only provider that has an easily-accessible EFI boot - is there any other reason why there's an EFI bootloader for Linux for the past few years?)

      I don't know if it's already been discussed, I haven't seen mention in my perusal of this topic on Slashdot. But your post made me think about the implications for running Windows 8, and beyond, on Apple devices. Perhaps that's even a real part of the decision for MS to utilize Secure Boot. This would eliminate the ability to run Windows in a VM yes? I don't know how trivial it would be to dual boot on an Apple PC but the hardware may not support Secure Boot so any environs that required Windows, and wanted / required OSX, would need more hardware. Maybe it's a hedge of sorts? i.e. Hey I *need* Windows but only want / prefer OSX so either I can buy 2 PCs or just get a Windows box. Perhaps I'm way off. I may also be misunderstanding the Keys, maybe Apple can sell machines with Secure Boot and use MS' key? Or maybe they can pay for that feature and MS is trying to monetize Apple sales.

      Even if this is remotely close to a factor, it would be years before it had an impact with so many businesses using older versions of Windows. And if those intervening years are a boon to Linux and OSX, especially gaming for home users, it will probably be too little too late. If I'm out in left field with this, sorry for the nonsense.

    16. Re:Secure Boot won't catch on by AmiMoJo · · Score: 1

      Does Secure Boot apply to booting from CD or USB flash drive as well, or just HD? Because in that case at least people could try Linux distros in the way they currently most often do.

      --
      const int one = 65536; (Silvermoon, Texture.cs)
      SJW, n: "Someone I don't like, and by the way I'm a fuckwit" - AC
    17. Re:Secure Boot won't catch on by jameshofo · · Score: 1

      Good question!
      Yes... apparently according to this
      http://askubuntu.com/questions/91484/how-to-boot-ubuntu-from-efi-uefi
      (briefed from the link)
      1. Use a live CD which matches the UEFI architecture. Mostly x86-64. Boot up the live cd (instructions continue)
      2. Once the live system is running set through the terminal a root password by typing sudo passwd root
      Then log out from the default live cd user and log in as root in gui mode. Plug in the hard drive. I use a USB3 portable HDD but in most cases the hard drive is a SATA internal drive. Anyway, be sure you've BACKED UP ALL YOUR DATA, cause the process is going to wipe off everything on the drive..(instructions continue)
      3. Install the system into the hard drive "/" partition and remember to point here the bootloader (GRUB 1.99) to install to. If you've created a separete "/boot" partition, you have to choose that one for the bootloader installation.
      4. Here comes the part from the UEFIBooting guide:
      Building GRUB2 (U)EFI .(instructions continue)
      5. Open Synaptic and remove all grub packages and install just the grub-efi packages (amd64 for me) and all the necessary dependencies. Once the installation is over, run sudo update-grub in the terminal. (instructions continue)

      --
      Good leaders run toward problems, bad leaders hide from them.
    18. Re:Secure Boot won't catch on by Anonymous Coward · · Score: 0

      I thought that was true only for x86/x86_64 devices. On ARM, the requirement is that it must be turned on with no way to disable it in order to get the Windows 8 sticker. I wish I had a better source (http://www.zdnet.com/blog/open-source/microsoft-to-lock-out-other-operating-systems-from-windows-8-arm-pcs-and-devices/10132):

      "But for ARM devices, Custom Mode is prohibited: 'On an ARM system, it is forbidden to enable Custom Mode. Only Standard Mode may be enable." [sic] Nor will users have the choice to simply disable secure boot, as they will on non-ARM systems: "Disabling Secure [Boot] MUST NOT be possible on ARM systems.' [sic] Between these two requirements, any ARM device that ships with Windows 8 will never run another operating system, unless it is signed with a preloaded key or a security exploit is found that enables users to circumvent secure boot.""

      This is what the fuss is about.

    19. Re:Secure Boot won't catch on by arkhan_jg · · Score: 2

      Windows 8 doesn't require secure boot. At all. It will happily boot on a pc without it, or with it turned off. I. E. All the legacy kit out there running windows 7.

      In order to sell an x86 pc as windows 8 certified, you have to have secure boot; it has to have the Windows 8 signing key as default; and it needs to be able to be turned off. The latter matters to Microsoft because all those enterprise users doing their downgrade rights to 7 would be furious if they couldn't buy new new pcs and put older versions on.

      The legacy bios option is independent of the disabling secure boot; I have an efi board that windows 7 works with merrily.

      So Linux users can either boot efi, with secure boot disabled, which must be an available option; use legacy bios mode; use a kernel that's been signed with the Microsoft key and leave secure boot on; or put their own key in the secure boot store, if the board supports that. Big whoop.

      The setup that's much more restricted is windows 8 ARM devices; there secure boot cannot be turned off, so you can't boot anything other than windows 8 RT. Basically the same as ios and android devices. So you won't be able to install Linux on an ARM tablet, but you should be able to do so on an Intel one.

      --
      Remember kids, it's all fun and games until someone commits wholesale galactic genocide.
    20. Re:Secure Boot won't catch on by benjymouse · · Score: 2

      I thought the requirement to run Windows 8 was to have a BIOS option to disable secure boot, or rather, enable legacy (BIOS) booting.

      There is no such requirement to run Windows 8. There is a UEFI secure boot requirement if you want to put a sticker on the system saying "designed for Windows 8". There is also a requirement that the user must be able to switch off the secure boot.

      Of course, if you want to boot back into Windows requires flipping the option back (the files are signed and verified before loading, so it's not like running another OS will break the security - the UEFI verifies the loader, the loader verifies the kernel, the kernel verifies the drivers and Windows binaries, etc.).

      No, you do not need to flip the option back to boot Windows 8. If you don't flip it back you will not have the security that comes from the knowledge that the boot loader and kernel has not been tampered with, but Windows 8 will boot.

      Of course, if you want to boot back into Windows requires flipping the option back (the files are signed and verified before loading, so it's not like running another OS will break the security - the UEFI verifies the loader, the loader verifies the kernel, the kernel verifies the drivers and Windows binaries, etc.).

      That is correct. But while the signed Windows 8 boot loader may allow for another OS to be booted (as opposed to that OS being booted directly from UEFI firmware), you can expect Microsoft to impose certain restrictions on what that other OS does after receiving control of the system.

      Specifically Microsoft will want to avoid a situation where the alternative OS performs a silent minimal boot, installs a hypervisor and then boots Windows in a managed VM. This would effectively be a rootkit. So while canonical and others may be able to obtain keys which allow their OS to be booted from Windows boot loader, those keys may very well come with restrictions/requirements that the OS must itself be signed and it must be visibly different from Windows.

      I know RedHat and Canonical were worried that the option would be well, optional, but I thought it was now required. And it will be for a little while because Windows 7 isn't ready for secure boot - it can be EFI-booted in 64-bit mode but that's experimental.

      That was basically a publicity stunt from RedHat. They knew all along that Microsoft would want an "off" switch (to run Windows 7, Server 2008, Server 2008R2 etc). But they also knew that it is a difficult topic to explain and so they knowingly created controversy.

      Then there is well, Apple. Whose EFI-based firmware probably doesn't have secure boot in it and thus unable to boot Windows 8

      Again, Windows 8 will accept to boot on any system. The "secure boot requirement" is a logo requirement. It is not a technical requirement of Windows 8. All it means for Windows 8 - on the technical side - is that its binaries, modules and central configuration resides in signed cabinet files which can be verified by the UEFI firmware. Secure boot is a feature of UEFI - not of Windows 8. Windows 8 supports secure boot by being signed using a key known to the UEFI firmware.

      --
      Reading slashdot one-liner: (irm http://rss.slashdot.org/Slashdot/slashdot).rdf.item | fl title,desc*
    21. Re:Secure Boot won't catch on by PingXao · · Score: 2

      Also not cracked: DTCP which, for a good number of years, protected (and still does) the Firewire output of cable set top boxes. Firewire is falling out of favor fast, but DTCP still hasn't been cracked, and I'm pretty sure that goes for newer non-firewire implementations such as DTCP-IP.

      And don't forget HDCP which protects HDMI connections between A/V devices. The master key was leaked, not cracked. There's a huge difference there.

    22. Re:Secure Boot won't catch on by jbolden · · Score: 1

      No it isn't a huge waste of time.
      1) Secure boot loaders
      2) hardware encryption
      3) trusted computing capable kernels

      are the 3 things you need for trusted computing. Consumer media is still dicey because of piracy. And lots of business would love secure documents. That's worth a bit of a pain in the ass to them.

    23. Re:Secure Boot won't catch on by Anonymous Coward · · Score: 0

      Pisa. It's the Leaning Tower of Pisa. Pisa being the place where the leaning tower is. Pisa is in Italy and pizza is originally from Italy. But that's about it. I suggest that it's such a simple thing to get right, that you always get it right and not make a stupid mistake. Further information is on Wikipedia.

    24. Re:Secure Boot won't catch on by jedidiah · · Score: 1

      "Businesses" that want this kind of secure boot architecture to suit their narcicissm and paranoia are already the kinds of companies that have such a horrible desktop PC experience that people want to bring their own outside devices with.

      This is the kind of crap that drives people to try and abandon desktop PCs. It's certainly not what the actual users want. It does nothing to make their computing experience more pleasant or more effective.

      You want to avoid shops like that as an employee anyways.

      --
      A Pirate and a Puritan look the same on a balance sheet.
    25. Re:Secure Boot won't catch on by Anonymous Coward · · Score: 0

      It is only not DRM, if I can install my own keys in the bios and remove MS keys (or disable the whole thing).

      I will not pay for hardware which doesn't enable this.

    26. Re:Secure Boot won't catch on by jbolden · · Score: 1

      I agree with you. Once companies can effectively DRM their documents the employees will immediately begin subversion. Actual end users hate security. Companies that love security are generally unpleasant to work for.

      But I was mainly talking companies that are producing documents for others that they would like to secure. Media companies being the most obvious examples. Law firms would also find this useful.

    27. Re:Secure Boot won't catch on by Anonymous Coward · · Score: 0

      I looked it up and the hacker used a "modified Thunderbolt to Ethernet adapter", which meant physical access to the machine. On top of that, the way he did it was to use the signed drivers from the Ethernet adapter to load his code. This means Apple does not use a proper trust chain when booting the machine, as the drivers should not have loaded unsigned code.

      The only job of Secure Boot is to make sure the code it calls is signed. If the signed code has a logical flaw or bug, there is nothing Secure Boot can do about that.

    28. Re:Secure Boot won't catch on by Anonymous Coward · · Score: 0

      This would eliminate the ability to run Windows in a VM yes?

      No. Win8 will run just fine without secure boot. If the VM does not emulate Secure Boot, then no big deal.

    29. Re:Secure Boot won't catch on by mrdtr · · Score: 1

      I agree with you 100%

    30. Re:Secure Boot won't catch on by Anonymous Coward · · Score: 0

      Ps3 took 5 years not 5 months.

      People were trying that entire time (people wanted to pirate)

    31. Re:Secure Boot won't catch on by Anonymous Coward · · Score: 0

      "Guess which position we'll take with you today."

    32. Re:Secure Boot won't catch on by MrL0G1C · · Score: 1

      Of course it is 'Digital Rights Management' because it affects your *right* to *manage* your *digital* equipment, there's no two ways about it, secure boot very much affects your ability to use any software you like and to use your machine how you want to. If that's not DRM then nothing is.

      --
      Waterfox - a Firefox fork with legacy extension support, security updates and better privacy by default.
    33. Re:Secure Boot won't catch on by jameshofo · · Score: 1

      On ARM there is indications that UEFI should not be something you can disable. ARM being the "technology of the future" at least in the tablet space sets MS up to keep the hardware everyone is theoretically going to move to lockable. DRM is for the most part illegal to break, that would make it illegal to do what you want with your hardware. MS succeeds in pushing this because anyone who wants to make any money in the noncompetitive hardware market wants to ship a windows ready product, that can be explained further by the following from Wikipedia

      http://en.wikipedia.org/wiki/Unified_Extensible_Firmware_Interface#Booting
      - Microsoft will demand that computers with the "Designed for Windows 8" logo to use UEFI with secure boot (which will only allow signed software to run on the device) enabled by default.[39][40] Red Hat developer Matthew Garrett raised concerns over the requirement for secure booting to be enabled by default and Microsoft responded by saying that there was no mandate from Microsoft that prevents secure booting from being disabled in firmware or that keys could not be updated and managed.[39][40] Microsoft later reversed this position, mandating that disabling SecureBoot on ARM-based systems "MUST NOT be possible."[41]

      Thankfully due probably to Mathew Garret griping about this crap you can see the following, from the same wiki page
      As of July 30 2012, the document requires that x86 and x86-64 devices have "secure boot" enabled by default. However, it requires that the firmware include an option to disable secure boot, and also a custom secure boot mode that provides the ability to add cryptographic signatures from vendors other than Microsoft. ARM devices are required to have secure boot enabled by default, and are required not to provide either an option to disable it, nor a custom mode that allows the user to add alternate signatures.[54]

      This being a "security" option and not a DRM option at least means you wont go to jail for installing slackware...

      --
      Good leaders run toward problems, bad leaders hide from them.
    34. Re:Secure Boot won't catch on by cerberusss · · Score: 1

      It once again goes to show that the Microsoft slogan is "Where do you want to be taken today"

      For some reason, my brain translates every Microsoft slogan into "bite the pillow, I'm going in dry".

      --
      8 of 13 people found this answer helpful. Did you?
    35. Re:Secure Boot won't catch on by Anonymous Coward · · Score: 0

      Secure Boot applies to ANY way to boot your computer.

    36. Re:Secure Boot won't catch on by exomondo · · Score: 1

      We used to call them "general purpose computers"

      And the reality, as much as we might not like it, is that most people have little use for such a thing and prefer these 'devices' instead. The market was always a niche one but thankfully the solution that catered for the majority catered for this niche also, that seems to be changing.

    37. Re:Secure Boot won't catch on by exomondo · · Score: 1

      Of course it is 'Digital Rights Management' because it affects your *right* to *manage* your *digital* equipment, there's no two ways about it, secure boot very much affects your ability to use any software you like and to use your machine how you want to. If that's not DRM then nothing is.

      So are CPU manufacturers' locked clock multipliers DRM too? Are motherboard manufacturers' voltage settings DRM?

    38. Re:Secure Boot won't catch on by exomondo · · Score: 1

      The fact that mandatory secure boot is a windows 8 requirement for ARM architecture makes it credible to think they would like the same thing in the x86 world. The fact we even accepted in the ARM world is an incredibly sad defeat that will make us waste another 10 years to turn around.

      That's because ARM devices aren't viewed like general purpose PCs, they are seen much more like phones, appliances with embedded operating systems. Of course nothing stops an OEM from selling the same hardware as a Windows device and an Android device, but the Windows-branded device can only run Windows and I can't imagine Google would be overly pleased if Google-branded devices were running Windows.

  10. Another Approach by am+2k · · Score: 4, Interesting

    (Too many #4 here already, so I'll skip the numbering)

    What about clustering all Linux enthusiasts' computers together and cracking Microsoft's signing key, SETI-style? I'm not sure about the mathematics there (taking longer than the galaxy will exist, etc.), but maybe it's possible. Or maybe somebody made a mistake and the key is much weaker than it is thought at the moment (see PS3).

    1. Re:Another Approach by DaveAtFraud · · Score: 3, Interesting

      What makes anyone think that UEFI will be any more secure than anything else Microsoft releases? Actually cracking the key may take longer than the universe has been in existence but I'm betting dear Microsoft won't do any better at engineering this than anything else. There is probably an easily exploitable hole that doesn't require actually cracking the key.

      Cheers,
      Dave

      --
      They that can give up essential liberty to obtain a little temporary safety deserve neither safety nor liberty.
      Ben
    2. Re:Another Approach by Anonymous Coward · · Score: 0

      From wikipedia:

      "The Unified EFI Forum or UEFI Forum ... board of directors includes representatives from eleven "Promoter" companies: AMD, American Megatrends, Apple, Dell, HP, IBM, Insyde Software, Intel, Lenovo, Microsoft, and Phoenix Technologies."

      You were saying something?

    3. Re:Another Approach by ozmanjusri · · Score: 3, Interesting

      UEFI and Secure Boot aren't the same thing.

      --
      "I've got more toys than Teruhisa Kitahara."
    4. Re:Another Approach by DaveAtFraud · · Score: 1

      Ask yourself which of those companies has the most to gain by requiring a secure boot scheme that limits the ability of "bad guys" to root a system and just happens to cripple their primary competitor at the same time?

      Cheers,
      Dave

      --
      They that can give up essential liberty to obtain a little temporary safety deserve neither safety nor liberty.
      Ben
    5. Re:Another Approach by shentino · · Score: 1

      DMCA.

    6. Re:Another Approach by nzac · · Score: 1

      Its not DRM. Yet.
      RH or at least their secure boot team does not want it talked about as DRM and then you can start to argue the DMCA applies. Currently it's officially just a feature for the users benefit.

    7. Re:Another Approach by Kalriath · · Score: 1

      Apple?

      --
      For a site about things like basic rights, Slashdot users sure do like to censor "dissent".
    8. Re:Another Approach by Anonymous Coward · · Score: 0

      Better just to plant a mole in MS and get them to find out the key and anonymously distribute it. Hell, I'm sure people would be able to scrape up a signficant reward too: an actual use for bitcoins!

    9. Re:Another Approach by AmiMoJo · · Score: 1

      Actually the XBOX 360 is pretty secure. Okay, you can play copied games on it, but you still can't run arbitrary unsigned code. The integrity of the signing key has remained intact.

      --
      const int one = 65536; (Silvermoon, Texture.cs)
      SJW, n: "Someone I don't like, and by the way I'm a fuckwit" - AC
    10. Re:Another Approach by am+2k · · Score: 1

      The DMCA only applies when the encryption is trying to protect a copyrightable work, which is not the case here.

    11. Re:Another Approach by Anonymous Coward · · Score: 0

      The DMCA only applies when the encryption is trying to protect a copyrightable work, which is not the case here.

      Ref? Can we get a ruling? Is there a NYCountryLawyer in the house?

    12. Re:Another Approach by segedunum · · Score: 1

      They will be. There wouldn't be a problem if they weren't, but the reason why people are getting uptight about this is that it's pretty clear this won't be turned off in future versions of hardware and this will end up infecting every part of the UEFI system - including dictating what hardware you can run, excluding older hardware from being installed, locking out hardware competitor and new entrants...... You name it, they will not be able to resist locking down every part of the PC platform.

    13. Re:Another Approach by exomondo · · Score: 1

      What makes anyone think that UEFI will be any more secure than anything else Microsoft releases?

      Anything else? UEFI isn't a Microsoft product.

    14. Re:Another Approach by Anonymous Coward · · Score: 0

      That answer makes no sense. The cheapest Mac Apple sells is $599. Even if their profit on the hardware is only 10% (and it is much more than that) they're making $60 per unit. If they decide to make it hard to impossible to run other operating systems on their HW for any reason other than security, they're leaving money on the table for no good reason.

      Not to mention that Apple's primary competitor in desktop computing is Microsoft, not Linux, and Apple's policy ever since switching to x86 has been to not merely allow but explicitly support running Windows on their hardware.

      Dave's post doesn't make any sense if you use the answer he was probably fishing for (Microsoft) either. Why? Because Microsoft also does not lose many desktop sales to Linux, on the server side there's no way they could prevent vendors from selling Linux server HW, and on top of it all Secure Boot doesn't actually cripple Linux anyways.

      But tinfoil hat wearers have few bounds to their paranoia.

  11. Approach #4 by Anonymous Coward · · Score: 4, Informative

    Disable secure boot.

    From http://msdn.microsoft.com/en-US/library/windows/hardware/jj128256:

    "Mandatory. Enable/Disable Secure Boot. On non-ARM systems, it is required to implement the ability to disable Secure Boot via firmware setup. A physically present user must be allowed to disable Secure Boot via firmware setup without possession of PKpriv. A Windows Server may also disable Secure Boot remotely using a strongly authenticated (preferably public-key based) out-of-band management connection, such as to a baseboard management controller or service processor. Programmatic disabling of Secure Boot either during Boot Services or after exiting EFI Boot Services MUST NOT be possible. Disabling Secure Boot must not be possible on ARM systems."

    They made disabling secure boot required for the Windows logo on x86 (while probably worried about the threat of an antitrust investigation).

  12. This is why I hate Microsoft by theRunicBard · · Score: 4, Interesting

    They don't try to make better products, they just try to kill the competition. I see ads for their crap with cool songs, a lizard, and neat apps everywhere but the actual thing doesn't work. Even they can't work it right, as shown by several demos they have done. They seem to recognize it but instead of dealing with it, they just try to eliminate everyone else. Linux has a MUCH better programming environment than anything Microsoft can offer. Even its overall usability (I use Ubuntu) is more intuitive. So Microsoft tries this shit. It's not secure and it's not user-friendly. It's just meant to make Linux harder to install. And I can't support a company that takes this approach. Fuck them. It's a good thing their company is dying. Hopefully more OEMs see this and start offering Linux PC's, but I kind of doubt it.

    1. Re:This is why I hate Microsoft by nazsco · · Score: 1

      And safeboot won. Thanks to Ubuntu having too much money.

      Now it will be one more pain to buy new machines. Will have to scavenge model numbers know to have a correct implementation... Which will be rare.

    2. Re:This is why I hate Microsoft by sabri · · Score: 3, Interesting

      They don't try to make better products, they just try to kill the competition. I see ads for their crap with cool songs, a lizard, and neat apps everywhere but the actual thing doesn't work. Even they can't work it right, as shown by several demos they have done. They seem to recognize it but instead of dealing with it, they just try to eliminate everyone else. Linux has a MUCH better programming environment than anything Microsoft can offer. Even its overall usability (I use Ubuntu) is more intuitive. So Microsoft tries this shit. It's not secure and it's not user-friendly. It's just meant to make Linux harder to install. And I can't support a company that takes this approach. Fuck them. It's a good thing their company is dying. Hopefully more OEMs see this and start offering Linux PC's, but I kind of doubt it.

      Ok, I'm probably going to kill my karma and move from Excellent to Suspected Troll, but so be it...

      Until 5-6 years ago, I would totally agree with you. I've been a *ix advocate for years and will be for a while. However, with the introduction of Windows XP, I've switched from using *ix (more specifically Red Hat, and later on FreeBSD) on my desktop to Windows. Why? Because things just work out of the box. I was used to googling for hours and hours to find the right dependencies for a certain application I wanted, which then would be conflicting with something that I'd already installed and after being forced to use Windows by my then-employer, I quickly installed it on my PCs at home, too.

      When Asus came with their small netbooks, I bought a Linux version. Unfortunately I found it quite unusable so I installed Windows. Again. In my opinion, *ix is perfect, more than perfect in the role of a server. Apache kills IIS just by looking at it. Sendmail outperforms Exchange while picking its nose. SSH is far better than using RDP to administer your server.

      As recent as four months ago, I tried switching to Ubuntu on my corporate Windows Vista laptop. After two days of downtime, I found that I was unable to find a decent calendaring tool that would work with the companies Exchange server. No Lync support. Only partial support for Office tools. I returned my laptop to the IT department to have a new Windows image installed and within 3 hours I was back online.

      Microsoft sucks when it comes to their business practices, I fully, more than fully agree with you on that. But their products are no longer that bad as they once were.

      --
      I'm not a complete idiot... Some parts are missing.
    3. Re:This is why I hate Microsoft by Anonymous Coward · · Score: 0

      I don't believe you.

      As a forever *nix user (since 80's), I have never been able to get real work done on a windows box. It is completely worthless. Even installing cygwin only makes the experience slightly less painful than an blunt instrument to the eye.

      Sorry you used RH, RH is a pretty primitive / painful to use distro (IMO worse than all that came before it), but even still, I don't believe you.

    4. Re:This is why I hate Microsoft by Skapare · · Score: 1

      Just buy from a known Linux vendor, such as eRack.com or System76.com. I'm sure there are some others.

      --
      now we need to go OSS in diesel cars
    5. Re:This is why I hate Microsoft by theRunicBard · · Score: 1

      Really? I'm not offended or anything but my experience with Windows / Linux has been the exact same as what you said, but with the words "Linux" and "Windows" reversed. From the moment I popped that disk into my computer, everything worked. Sure, I had to look some stuff up, but Ask Ubuntu helped with that in moments, much better than msdn or general googling for Windows. What I've found is that while Windows tends to work, when it doesn't, you're screwed. Ubuntu encounters a lot of small kinks right and left but since you have access to everything with the command line, you can fix it. This may just be due to the types of problems I encounter. Each to his own I suppose.

    6. Re:This is why I hate Microsoft by Anne+Thwacks · · Score: 1
      while Windows tends to work, when it doesn't, you're screwed.

      IME, this is correct. I cant actually get any work done on a Windows machine, and most of my extended family uswes Macs or Ubuntu. If they buy a new PC, they tend to try to use Windows that comes on it while it is in waranty. However, if they get trouble, either a reformat and reinstall fixes it, or they go back to using their old machine until the waranty has expired, and then put Ubuntu on it.

      A few people MUST HAVE windows. They have a hard life.

      --
      Sent from my ASR33 using ASCII
    7. Re:This is why I hate Microsoft by sabri · · Score: 1

      I don't believe you.

      As a forever *nix user (since 80's), I have never been able to get real work done on a windows box. It is completely worthless. Even installing cygwin only makes the experience slightly less painful than an blunt instrument to the eye.

      Sorry you used RH, RH is a pretty primitive / painful to use distro (IMO worse than all that came before it), but even still, I don't believe you.

      Well, I'm trying not to make it a religious debate so whether or not you believe me is not really an issue here.

      The debate should be more about what constitutes "real work". When I was a Linux/Unix admin, that meant being able to write scripts, develop software, run tcpdump etc etc. The funny part is that when I moved from working for ISP's and started working for vendors of network equipment, I was more or less forced to use Windows as it is the corporate tool of choice for most of them.

      Trust me, I've tried. However, the incompatibilities between OpenOffice/MS Office, Outlook/Thunderbird, Visio/Dia and other software running on Windows boxes simply make it impossible for me to be productive without MS-tax. The one thing I have been able to avoid is Internet Explorer, except for my weekly time-reporting.

      --
      I'm not a complete idiot... Some parts are missing.
  13. BUT MOMMY, TIMMY WAS DOING IT TOO! by bmo · · Score: 2

    > Why is everyone so quick to accept the corpse of TCPA in new clothes?

    Only softies and people who don't know any better do. Pointing at Apple and saying they lock their phones and tablets too ignores the fact that what they do is also wrong. It's like Timmy beating up Bobby on the playground, and when you beat up Bobby, you point at Timmy and say "well, he was doing it too!"

    The rest of us want to punch people in the face for even suggesting TCPA 2.0

    --
    BMO

    1. Re:BUT MOMMY, TIMMY WAS DOING IT TOO! by Anonymous Coward · · Score: 0

      If this were to take hold though, you realize the most open computer platform might turn out to be Apple? They've been pretty helpful in allowing people to boot other OS's on their computers, going so far as to sanction Boot Camp as an official OS utility.

    2. Re:BUT MOMMY, TIMMY WAS DOING IT TOO! by Anonymous Coward · · Score: 1

      > Why is everyone so quick to accept the corpse of TCPA in new clothes?

      Only softies and people who don't know any better do. Pointing at Apple and saying they lock their phones and tablets too ignores the fact that what they do is also wrong. It's like Timmy beating up Bobby on the playground, and when you beat up Bobby, you point at Timmy and say "well, he was doing it too!"

      And what exactly is wrong with that reasoning? Bobby is a punk. He had it coming.

    3. Re:BUT MOMMY, TIMMY WAS DOING IT TOO! by Anonymous Coward · · Score: 0

      i wanna make sweet love to ya

    4. Re:BUT MOMMY, TIMMY WAS DOING IT TOO! by Anonymous Coward · · Score: 0

      > Why is everyone so quick to accept the corpse of TCPA in new clothes?

      Only softies and people who don't know any better do.

      Quite correct. And vendors are not going to lock themselves out from selling to those constituting 95% of the market. Which means that whatever it takes to get a "certified for Windows $whatever" logo, they'll deliver. Screwing the remaining 5% is a small price to pay. That is why monopolistic practices of Microsoft (like per-CPU licensing) worked in the past before the foot was put down on them by government, and there is no reason why it should not work this time round.

  14. Grub replacement. by Anonymous Coward · · Score: 0

    I wouldn't mind replacing Grub with Windows 8 if it boot faster.

    1. Re:Grub replacement. by lister+king+of+smeg · · Score: 2

      um, grub is a bootloader not an operating system, and windows 8 is a operating system (the operating part is disputable) not a bootloader. the windows bootloader can't boot any operating systems other than other versions of windows. your comment does not make any since.

      --
      ---Saying gnome 3 is better than windows 8 not so much a compliment as it is damning with light praise.
    2. Re:Grub replacement. by sjames · · Score: 1

      He may be referring to loadlin, a very old 'bootloader' that booted Linux from within Windows, effectively using it as a bootloader. However, it only ran on the Dos based Windows, not the NT based versions.

    3. Re:Grub replacement. by Anonymous Coward · · Score: 0

      your comment does not make any since.

      Parsing error near EOF.

    4. Re:Grub replacement. by arth1 · · Score: 1

      the windows bootloader can't boot any operating systems other than other versions of windows.

      This is technically true, but not practically true.
      On my laptop here, I have Fedora as one of my choices in the Windows boot loader.

      It chain loads grub, much as grub would have chain loaded the Windows boot loader. Not much difference there, really.

      The benefits of using the Windows boot loader as the primary are that certain Windows tools won't complain about the MBR being wrong, and I can reinstall Windows without blowing away the Linux boot loader.

  15. Approach #99: Hyperbole by Anonymous Coward · · Score: 1

    - Buy computer
    - Disable Safe boot ( http://www.howtogeek.com/116569/htg-explains-how-windows-8s-secure-boot-feature-works-what-it-means-for-linux/ )
    - Install whatever you like and not worry about certificates or exaggerations of doom

    1. Re:Approach #99: Hyperbole by syockit · · Score: 2

      Either (a) you don't treat an ARM tablet as a computer, or (b) you didn't read the ARM part.

      --
      Democracy is for the people; you only vote once per season and we'll do the rest of the work for you don't have to.
    2. Re:Approach #99: Hyperbole by Anonymous Coward · · Score: 0

      Considering the 0% market share of Windows RT tablets, I don't think Microsoft is worried about complaints. It's Apple where you should be looking about ARM tablets and alternative OS's.

    3. Re:Approach #99: Hyperbole by Anonymous Coward · · Score: 0

      And forget dual-boot with any version of Windows above 7?

      And so - preventing any windows user to try out Linux, and thus hindering progress and adaption of Linux?

      How convenient - for Microsoft.....

    4. Re:Approach #99: Hyperbole by Anonymous Coward · · Score: 0

      On which ARM linux tablet can I install Windows 8?

    5. Re:Approach #99: Hyperbole by Anonymous Coward · · Score: 0

      You can't dual-boot into MacOS either, so why should Linux get a free pass?

      It's only inconvenient for Linux because Linux developers are riding on the tails of the same hardware. Apple builds their own hardware. And, not to be outdone, Android phone makers build Android-specific ARM hardware. Maybe the Linux distros should be talking to Samsung, ASUS, HTC, and whatever other hardware developers you want to name and ask them to start building Linux-specific hardware parts?

      Then Linux can come out into the sun and start meeting people instead of waiting for people to come to them.

    6. Re:Approach #99: Hyperbole by Alex+Belits · · Score: 0

      It's only inconvenient for Linux because Linux developers are riding on the tails of the same hardware.

      Another Microsoft astroturfer.

      Maybe the Linux distros should be talking to Samsung, ASUS, HTC, and whatever other hardware developers you want to name and ask them to start building Linux-specific hardware parts?

      1. Linux distributions do not own Linux.
      2. "Pay us so we won't sabotage your software" is not the model that anyone sane would want to encourage.
      3. Die in a fire.

      --
      Contrary to the popular belief, there indeed is no God.
    7. Re:Approach #99: Hyperbole by Anonymous Coward · · Score: 0

      Another idiot.

      2. "Pay us so we won't sabotage your software" is not the model that anyone sane would want to encourage.

      What us? Who the fuck is us? There is no us. Microsoft has a voluntary & optional program for putting MS logo on your product. They have guidlines for that. Vendors want that logo because it helps them sell their product. There is no effect on OEM pricing because of this program. You linux fags are beyond insane.

      And stop with the "poor oss developers" angle. It is a flat out lie. Billions of dollars has been poured into linux development to get it to its current state from the pathetic state it was a few decades ago. If all the big Linux based services companies can't spend some money so that a simple cryptographic key is included in the UEFI based motherboards so that THEIR CUSTOMERS can have an easy way to install THEIR PRODUCT, they they are just fucking parasites. But maggots like you are useful to them.. keep dancing you little bitch..

    8. Re:Approach #99: Hyperbole by Alex+Belits · · Score: 2

      What us? Who the fuck is us? There is no us. Microsoft has a voluntary & optional program for putting MS logo on your product.

      There is nothing "voluntary" in commerce.

      Oh, and monopoly maintenance is illegal even by US corporate-criminal-friendly standards.

      And stop with the "poor oss developers" angle. It is a flat out lie. Billions of dollars has been poured into linux development to get it to its current state from the pathetic state it was a few decades ago.

      That does not mean, everyone now has to pay for the privilege of not having a great public resource destroyed.

      If all the big Linux based services companies can't spend some money so that a simple cryptographic key is included in the UEFI based motherboards so that THEIR CUSTOMERS can have an easy way to install THEIR PRODUCT,

      The "big Linux based services companies" are not the only people affected by this. I am a Linux developer, and my ability to contribute to Linux development depends on my access to those keys. Obviously, no amount of money I (or any company that I work for) would pay to Microsoft will ever convince them to trust me with such a key, so I will never be able to do any development on locked-down ARM devices.

      they they are just fucking parasites. But maggots like you are useful to them.. keep dancing you little bitch..

      Now I want to BRING EVERYONE'S ATTENTION to the quote above. Microsoft shills claim that we, Linux developers and distributors, people who work for the benefit of everyone, are parasites because we don't pay for their masters' extortion scheme, and Microsoft's attempts to control all hardware manufacturers worldwide are somehow justified.

      This is the kind of propaganda they are going to flood the media with, and with enough effort it will work. They must be stopped, and the only way to stop them is to destroy their company. We shouldn't care what they will produce, and if any of that will ever become usable, superior or inferior to any other option. This shows their real face, their real goals, their real methods. The whole mankind is their intended victim, and they are an enemy of everyone but themselves.

      --
      Contrary to the popular belief, there indeed is no God.
    9. Re:Approach #99: Hyperbole by Anonymous Coward · · Score: 0

      That does not mean, everyone now has to pay for the privilege of not having a great public resource destroyed.

      What PUBLIC resource would that be? Which country are you in where you have some right to buy a computer which will run an OS of your choice? Why are you entitled to any such thing?

      so I will never be able to do any development on locked-down ARM devices.

      What a fucking lie. Go and buy any tablet running anrdoid. And do your "development". What development are you going to do thats ARM specific anyway? What great thing are you going to do?

        "But that other person might want to do ARM development.. therefore I can argue for him!"

      Obviously, no amount of money I (or any company that I work for) would pay to Microsoft will ever convince them to trust me with such a key, so I will never be able to do any development on locked-down ARM devices.

      Another lie. You idiot. Microsoft does not even come into this picture. I was talking about paying motherboard vendors and creating infrastructure for some linux community public key that will be used to sign bootloaders for all the distributions - if they want to. This is purely business. You idiots want to purposely lie, cheat, and mislead and cause fake confusion as usual to make it about microsoft when it has nothing to do with them. You morons don't even understand what it is you are frothing at the mouth for. And what the fuck is this "extortion" "master" crap? Stop doing drugs dude..

      http://mjg59.dreamwidth.org/12368.html

      An alternative was producing some sort of overall Linux key. It turns out that this is also difficult, since it would mean finding an entity who was willing to take responsibility for managing signing or key distribution. That means having the ability to keep the root key absolutely secure and perform adequate validation of people asking for signing. That's expensive. Like millions of dollars expensive. It would also take a lot of time to set up, and that's not really time we had. And, finally, nobody was jumping at the opportunity to volunteer. So no generic Linux key.

      In short, after earning billions of dollars from Linux based services these fucking companies cant even do this - Like I said. they are fucking parasites. Microsoft meanwhile is spending their own money so that their customers can install their product and use secure boot feature.. if they want to.

      Its amazing that you can lie so boldly when this whole secure boot has been already exposed as a non issue but linux trolls want to again and again.. make it about big bad evil microsoft vs poor oss developers.b

    10. Re:Approach #99: Hyperbole by segedunum · · Score: 1

      There is no us. Microsoft has a voluntary & optional program for putting MS logo on your product. They have guidlines for that. Vendors want that logo because it helps them sell their product. There is no effect on OEM pricing because of this program.

      ROTFL. The fact that you've felt the need to pop in that last sentence tells us that it is indeed true. Well done astroturfer.

      If all the big Linux based services companies can't spend some money so that a simple cryptographic key is included in the UEFI based motherboards so that THEIR CUSTOMERS can have an easy way to install THEIR PRODUCT, they they are just fucking parasites. But maggots like you are useful to them.. keep dancing you little bitch..

      ROTFL. Yer. We who buy our hardware and want to run what we like on it are all parasites. Alas, closing the PC as a platform is a fatal mistake and it will kill Microsoft because all they have left is to try and protect the Windows revenue stream. Everything else they've tried to do has failed, utterly and completely.

  16. Flash the BIOS by bky1701 · · Score: 4, Interesting

    We already have hacked BIOSes for far more irrelevant reasons than this. I expect it to become a common thing to just wipe secure boot from the system entirely if this is a problem.

    1. Re:Flash the BIOS by Anonymous Coward · · Score: 3, Interesting

      They are almost certainly going to be requiring signed firmware images on any Win8 Logo'd hardware so no you won't be hacking the BIOS so simply.....

      Frankly from a security standpoint what they are proposing makes sense. they aren't even receiving any money from the likes of Ubuntu or RedHat if they choose to use this system. Yeah, it might be painful and it's certainly different but it makes security sense if done right. Had some sort of international consortium come up with this and Microsoft joined in would we be so upset? Oh wait that sort of did kinda' happen....

      Will be very interesting to see how this plays out for sure!

      P.S. Anon to preserve my moderations...

    2. Re:Flash the BIOS by IKnwThePiecesFt · · Score: 1

      As posted above by an Anon, from: http://msdn.microsoft.com/en-US/library/windows/hardware/jj128256

        Mandatory. Enable/Disable Secure Boot. On non-ARM systems, it is required to implement the ability to disable Secure Boot via firmware setup. A physically present user must be allowed to disable Secure Boot via firmware setup without possession of PKpriv. A Windows Server may also disable Secure Boot remotely using a strongly authenticated (preferably public-key based) out-of-band management connection, such as to a baseboard management controller or service processor. Programmatic disabling of Secure Boot either during Boot Services or after exiting EFI Boot Services MUST NOT be possible. Disabling Secure Boot must not be possible on ARM systems.

      I don't think there's much to have "play out." Just turn it off if you don't like it.

    3. Re:Flash the BIOS by Asic+Eng · · Score: 2

      Well if you tell a potential new Linux user they have to flash the BIOS (find the right one for each motherboard) they are going to be a lot less likely to do that than when you tell them: here pop in the LiveCD.

      Similar problem when it's just about turning off secure boot - sounds dangerous right from start, and they'll probably have been warned about not turning that off when some software asks them to.

    4. Re:Flash the BIOS by maxwell+demon · · Score: 1

      Well if you tell a potential new Linux user they have to flash the BIOS (find the right one for each motherboard) they are going to be a lot less likely to do that than when you tell them: here pop in the LiveCD.

      Indeed, this would scare away not only potential new Linux users. BIOS updates have the well-known property that if something goes wrong, you cannot correct it later. It is one thing to install an operating system where you know well that if you've got problems, no matter how serious, as last resort you can always restore the old state. It is something different to do something where the worst thing that can happen is to brick your computer. Even if the probability is low, it's an additional psychological barrier.

      --
      The Tao of math: The numbers you can count are not the real numbers.
    5. Re:Flash the BIOS by jbolden · · Score: 1

      I agree with you, there is a lot of paranoia about this. There are a couple of things that are getting mixed in people's minds:

      1) A failure to understand signing authorities and how the system works. Thus often the difficulty between getting something signed and being an authority gets conflated.
      2) The FSF concerns about moving towards a world of trusted computing, what's possible vs. what is being proposed.
      3) An analogy with Apple and a failure to understand how Apple works leading to a view that Apple is more closed than it is.
      4) A general mistrust of Microsoft

    6. Re:Flash the BIOS by jbolden · · Score: 1

      The kinds of people that are going to like Linux are the sorts of people that would love screw with their BIOS. They are generally people who have been messing with settings for years prior to moving over.

      Heck it might turn out to be a selling feature that "Linux lets you take back control of your hardware"

    7. Re:Flash the BIOS by Asic+Eng · · Score: 2

      I've used Linux since kernel version 0.99pl15. I don't "love to screw" with my BIOS. I might do it, but it would annoy me.

      Anyway, the days of Slackware on sixty 3.5" floppy disks are long gone, you don't need to be a geek any more to use Linux. My wife is perfectly happy with it, so is my dad, and I find it a lot easier to support their systems than if they had Windows machines.

    8. Re:Flash the BIOS by jbolden · · Score: 1

      I agree people can easily use Linux who are not experts. OTOH those people aren't the people that choose to install Linux for themselves.

      And you have me beat. My first Linux was a 2.0 in 1995, though Unix since '88.

    9. Re:Flash the BIOS by aaaaaaargh! · · Score: 1

      The kinds of people that are going to like Linux are the sorts of people that would love screw with their BIOS.

      Wrong. My girlfriend like Ubuntu a lot and doesn't even know what a BIOS is.

    10. Re:Flash the BIOS by jbolden · · Score: 1

      And you put it on her system. And you do know what a BIOS is and you are the one supporting her. So what's the problem?

    11. Re:Flash the BIOS by segedunum · · Score: 1

      They are almost certainly going to be requiring signed firmware images on any Win8 Logo'd hardware so no you won't be hacking the BIOS so simply....

      Yep. The thing that's hilarious about this is that hardware vendors can barely get out functioning BIOS and firmware updates out that actually work. Adding cryptographic signing into that is going to be hilarious to watch.

  17. Security will not catch on by Anonymous Coward · · Score: 2

    1. It will be relegated to tiny niches where security trumps usability

    God forbid in this day of malware, server breaches, and root kits, someone should be triumphing that over usability.

    1. Re:Security will not catch on by 0123456 · · Score: 1

      God forbid in this day of malware, server breaches, and root kits, someone should be triumphing that over usability.

      Indeed. If only people would dump Windows and run Linux, we'd all be better off.

    2. Re:Security will not catch on by shentino · · Score: 1

      Same thing about trading security for freedom.

      It applies both in software and politics.

    3. Re:Security will not catch on by SuricouRaven · · Score: 2

      What security? Secure Boot protects against pre-kernel-loading rootkits - a type of malware so obscure, I've never even heard of it being used outside of proof-of-concept academic demonstrations.

    4. Re:Security will not catch on by Anonymous Coward · · Score: 0

      If I understand the concept correctly, if I install a kernel rootkit on your server, Secure boot will prevent that kernel from booting. In the old days, xdcc bots on various IRC networks were rootkitted boxes. Now-a-days these are mostly used by spammers. Secureboot will protect against this. I'm not saying it's a great solution, but it takes a common problem (in the server environment) and offers a solution that works. This solution may have some shitty side effects, but it does work in theory.

    5. Re:Security will not catch on by Anonymous Coward · · Score: 0

      Beyond that, it prevents SECURE operating systems from being installed in place of insecure ones, just because they dont happen to be "signed".

      But since someone else posted somewhere that part of the UEFI specs REQUIRE that the user by able to physically disable it, it doesnt matter.

      However, MS will use it as a marketing point and talk about how other OS's are "unrusted" because they have to disable UEFI.

    6. Re:Security will not catch on by Zontar+The+Mindless · · Score: 3, Informative
      --
      Il n'y a pas de Planet B.
    7. Re:Security will not catch on by Anonymous Coward · · Score: 0

      Secure boot is a shitty solution to the most obscure and rare security problem facing USERS. There's almost no bootloading malware at all - to the point that it's damned near irrelevant.

      What Secure Boot is... is part of the solution to the bigger vendor security problem... that YOU control your own PC not them - and that YOU can use it for other things than those they dictate to you.

      I cannot summarise it better than: if you don't have the keys, then it's not about security.

      UEFI/Secure Boot has nothing to do with security.

    8. Re:Security will not catch on by Kalriath · · Score: 0

      Nice try, but the article doesn't actually tell you anything about how the attackers got in, and admits that they still didn't know (at the time of writing). All it says is that the source code hosted on the server was not compromised. AC was commenting on the fact that something on Linux must have a vulnerability for it to have been cracked, and it can't have been just shitty insecure configuration on a server run by the people that write the damn kernel. You have failed to address his point.

      --
      For a site about things like basic rights, Slashdot users sure do like to censor "dissent".
    9. Re:Security will not catch on by AmiMoJo · · Score: 4, Informative

      That type of rootkit was common years ago and still is. Typically they target one of the low level OS components such as the SATA driver, which is loaded before any security stuff and has full access to the entire memory space.

      At first anti-virus software couldn't even detect it because the rooted OS was prevented from seeing the file in directory listings or accessing it directly. Eventually they figured out how to get around that, but still couldn't remove the file. Then they figured out how to remove the file when booted into a different OS (i.e. take the HDD out and put it in another machine) but of course that deleted the SATA driver so a XP refresh install was required. That was where I left it when I stopped working in that business.

      --
      const int one = 65536; (Silvermoon, Texture.cs)
      SJW, n: "Someone I don't like, and by the way I'm a fuckwit" - AC
    10. Re:Security will not catch on by jbolden · · Score: 1

      Or you pay $80 and get signed. The signing authorities will sign.

    11. Re:Security will not catch on by SuricouRaven · · Score: 1

      The signing authority is *MICROSOFT!* That's why Ubuntu had to go crawling to them and beg to be signed. Even if I accepted that this security measure is needed, it is still a massive conflict of interest for the signing authority to also be a major OS vendor. It'd be a lot easier to accept if the task were granted to a company with no stake in the OS market, like Intel.

    12. Re:Security will not catch on by jbolden · · Score: 3, Insightful

      They didn't have to crawl or beg, they just asked and Microsoft said yes. Microsoft was anxious to support Ubuntu since they don't want a repeat of the paranoia that surrounded Palladium.

      It'd be a lot easier to accept if the task were granted to a company with no stake in the OS market, like Intel.

      Most likely there are going to be about 6 signing authorities on the BIOS that ship. Microsoft, someone like Verisign, a few Asian ones, maybe the hardware vendors themselves (i.e. Dell signs for UEFI in Dell's and collects the check). There is no reason to believe Intel, Western Digital (which has played for open standards for decades) or someone unexpected like NVidia won't step forward. I could see IBM who is much more trusted by the Linux community doing it.

    13. Re:Security will not catch on by Anonymous Coward · · Score: 0

      The signing authority is Verisign, dick fuck. Can you please stop with the MS lies?

    14. Re:Security will not catch on by Anonymous Coward · · Score: 0

      I don't trust Intel any more than I do Microsoft. They're both ruthlessly anti-competitive, and where Intel is guilty of being so by price fixing and threatening to support the rivals of any business that aids their competitors, Microsoft is with highly restrictive exclusive contracts and collusion with OEMs. They're two arms of the same sort of body, so don't assume that they have no interest in the relationship between the number of Intel based PCs sold by OEMs and the fact that they have a high probability of being shipped with a Microsoft OS and what that means for sales, especially when they have to work together on the specifications that allow the two to work together in order to create stable and cohesive products. See every issue where the Linux kernel needs a driver patch because the hardware was designed out of spec to suit a Windows function, if you're skeptical.

    15. Re:Security will not catch on by Anonymous Coward · · Score: 0

      lol signing authorities, that is working so well in the SSL/TLS area.

    16. Re:Security will not catch on by jbolden · · Score: 1

      Ultimately if you think the OEMs, Intel and Microsoft are going to collude to keep Linux off... game over they win. Intel makes the CPU, the memory controls, quite often the graphic subsystem... They could burn Microsoft's key right into a motherboard chip, forget the easy to defeat BIOS security what if verifying the windows kernel were something the CPU checked every second?

      But. Intel was involved in Unix for x86 for decades, before there even was a Linux. They have always worked well with the Linux community. They are thrilled that Linux helped them beat Sparc. If you are concerned about Linux, Intel is a friend not an enemy.

      If you are concerned about AMD... well then Microsoft is a friend.

    17. Re:Security will not catch on by kermidge · · Score: 1

      "The signing authority is *MICROSOFT!*"

      Nope. Went to apply for a key at Microsoft and was linked to Symantec - and the signing authority was given as Verisign, if I recall a-rightly. Don't have the money right now, though.

    18. Re:Security will not catch on by Missing.Matter · · Score: 1

      No, the signing authority is *Verisign*. They're getting the money from Canonical and Redhat. They went to Microsoft because they want to use Microsoft's key, so no keys need to be added by the user to install on a Windows 8 system. They both had other options including signing with their own keys, but that would require the user to add them. This blog post from Red Hat details the different options and their shortcomings, and why signing with Microsoft's key is ultimately the best bet for the time being, namely: "it's cheaper than any realistic alternative would have been. It ensures compatibility with as wide a range of hardware as possible and it avoids Fedora having any special privileges over other Linux distributions."

    19. Re:Security will not catch on by billcopc · · Score: 1

      Which UEFI does very little to prevent. Sure, it enforces boot signing, but that does not protect you from software vulnerabilities. It only closes one small loophole that has seen more legitimate use than abuse in the last, oh, 25 years or so.

      I mean, really, the whole of UEFI is a joke. A non-solution to an imaginary problem. Classic BIOS code was considered archaic and dysfunctional, little more than a vestigial support system for the bootloader. UEFI simply moves more bloat into that pre-boot phase without actually offering any improvements that survive past the the boot hand-off.

      --
      -Billco, Fnarg.com
    20. Re:Security will not catch on by Anonymous Coward · · Score: 0

      It isn't obscure and is in fact actually really common

    21. Re:Security will not catch on by SuricouRaven · · Score: 1

      Sure, you can get Verisign to sign your bootloader... but, guess how many OEMs are going to include any key except Microsoft's as authorised? Very few, I would imagine, for the same reason that so few provide decent linux drivers. There is no reason for them to support an operating system that remains in use only by a small minority, outside of servers.

    22. Re:Security will not catch on by SuricouRaven · · Score: 1

      The de facto authority is Microsoft, because theirs is the only public key that most OEMs are going to bother to include in their firmware. Yes, a linux vendor could just go to Verisign to get their bootloader signed - but then they would have to go to every OEM, individually, and convince them to include that key as authorised. It's the same dilemma as is had with linux drivers: Outside of servers, linux is a very small player, and OEMs have little if any reason to make even minimal effort to support it.

    23. Re:Security will not catch on by MrL0G1C · · Score: 1

      "Your PC is now Stoned!"

      --
      Waterfox - a Firefox fork with legacy extension support, security updates and better privacy by default.
    24. Re:Security will not catch on by Anonymous Coward · · Score: 0

      A non-solution to an imaginary problem

      Windows is getting a fully signed trust chain, all the day down to the applications. It will be possible to EASILY remove any application because the OS can block/remove anything not signed. By default Metro apps are signed and one can sign other apps and white-list them.

      Most major games and applications are signed. It will really easy to just block all non-white-listed applications from running. At this point, the ONLY way for malware to be useful is to rootkit prior to the kernel loading. Secure Boot plugs that hole.

    25. Re:Security will not catch on by exomondo · · Score: 1

      The signing authority is *MICROSOFT!*

      Wrong, the signing authority is Verisign.

      That's why Ubuntu had to go crawling to them and beg to be signed.

      Wrong again, they had to do that because they wanted to use Microsoft's signing key instead of getting their own.

      It'd be a lot easier to accept if the task were granted to a company with no stake in the OS market, like Intel.

      It's even better than that, it's a CA and better still it's up to the individual motherboard manufacturers as to which keys they include.

    26. Re:Security will not catch on by SuricouRaven · · Score: 1

      But why did they want to use Microsoft's key? Because it's only possible to sign a bootloader with one key, no more, and Microsoft's key is the only key that you can be sure every motherboard is going to recognise. Linux is very much a niche thing on the desktop still - OEMs have no reason to bother adding ubuntu's own key to the whitelist. Much less all the hundreds of lesser distros.

    27. Re:Security will not catch on by exomondo · · Score: 1

      But why did they want to use Microsoft's key? Because it's only possible to sign a bootloader with one key, no more

      That doesn't change who the signing authority is, any distro or any person can go the actual signing authority (Verisign) to get a key and install it on any motherboard(s) they want (which, AFAIK, is what Canonical are doing), that is if they really want to use SecureBoot for some reason (they don't now). Or even go with Fedora's suggestion.

      Microsoft's key is the only key that you can be sure every motherboard is going to recognise.

      Microsoft's key will only be installed on UEFI motherboards certified for Windows 8, there is no reason Canonical couldn't supply their key to the same manufacturers that Microsoft has supplied theirs to and have it added, which is evidently what they are doing.

      Linux is very much a niche thing on the desktop still - OEMs have no reason to bother adding ubuntu's own key to the whitelist. Much less all the hundreds of lesser distros.

      If there's no market for it then obviously OEMs aren't going to bother, but it's not as though there is much involved and they then cater to all Ubuntu users. Otherwise just do as they have before and don't use SecureBoot, just like people will do when dual booting on a Mac (whether that's Windows or Linux).

    28. Re:Security will not catch on by SuricouRaven · · Score: 1

      Ubuntu, fedora and such may be able to convince *some* manufacturers to install their keys. May. Some. What about all the tiny, specialised distros though? Are we supposed to have distro-makers go to every OEM (both motherboard manufacturers and PC/laptop manufacturers) and ask them? It'd be a tremendous effort just to get HP or Dell to reply to an email from some ten-man not-for-profit team working on a niche distro. That's assuming Microsoft doesn't do any behind-the-scenes stuff to hinder the efforts too, like quietly hinting off-the-record that OEMs which allow only Microsoft's key and no others may recieve Windows OEM licences are a slightly reduced cost. This is Microsoft we're dealing with, remember - the company history is littered with examples of unfair and anticompetative business methods.

    29. Re:Security will not catch on by exomondo · · Score: 1

      Ubuntu, fedora and such may be able to convince *some* manufacturers to install their keys. May. Some. What about all the tiny, specialised distros though?

      Do they implement SecureBoot now? No. But if they do want to do it in future for whatever reason then they provide their key and the user installs it, simple.

  18. Wait wait... by Mathias616 · · Score: 2

    People are going to use Windows 8?

    1. Re:Wait wait... by Anonymous Coward · · Score: 0

      My Windows programer friend is thinking this is the best thing since sliced bread he can write his code once and it will work on anything... I just laughed and said what about XP users and Window 7 users you know the majority of users.

    2. Re:Wait wait... by epyT-R · · Score: 1, Funny

      I will. it's an awesome operating system... since I spend 95% of my time in the start menu I'm glad they made it full screen and interactive.. it's like a video game!

    3. Re:Wait wait... by pipatron · · Score: 1

      My Windows programer friend is thinking this is the best thing since sliced bread he can write his code once and it will work on anything.

      Like Java...

      --
      c++; /* this makes c bigger but returns the old value */
    4. Re:Wait wait... by Darinbob · · Score: 1

      No, but people will eventually be purchasing new computers. Presumably these computers will be "Windows 8 Ready" and include UEFI, probably with windows 8 preinstalled.

    5. Re:Wait wait... by Stormwatch · · Score: 1

      People will buy computers with Windows 8, yes. Then they will ask, "What the hell is with this crazy system? I can't use this piece of shit!" And their nerd friends will promptly disable UEFI and hopefully help them move to Linux, or at least run a pirated copy of Windows 7. Seriously, 8 is borderline unusable.

    6. Re:Wait wait... by Anonymous Coward · · Score: 0

      If a simple UI change confuses you and you are unable to understand basic point and click semantics, you should probably move on to something else.. like gardening.

    7. Re:Wait wait... by stretch0611 · · Score: 1

      People are going to use Windows 8?

      Yes they will.

      I am an anti-Microsoft person. People will use Windows 8, I guarantee it.

      Vista was a flop. Many people and corporations avoided it like the plague. It has already been replaced by Windows 7. All microsoft fanbois have already dropped Vista for 7, and all new computers come with 7 installed, not Vista. Yet to this day Vista is used by almost as many people that use Macs, and more than triple the people that use Linux. (according to this site: http://www.w3counter.com/globalstats.php , YMMV based on your favorite stat site.) While the stats can be second guessed, the fact is that this hated OS is still in use by a significant number of people. This proves that there are a lot of people that either like vista, don't care about their options, or are not even aware that options to change even exist.

      There will be people who will refuse to upgrade. There will be people who will install a different OS whether that is Linux or an older version of Windows (with the assumption it is possible.) There will be people that switch to Macs. However, most consumers will not have any clue and buy Windows 8 because they are clueless in regards to the options and they will buy whatever the salesrep is selling, and eventually they will be selling Windows 8. This alone will sell Windows 8.

      Many people, especially those prone to the manipulates of sales and market, will simply get Windows 8, and even ask for it, for no reason other than, "Well its the latest, and that must mean the greatest, so why would I ever want something else."

      And of course, some people will truly like it and want it...

      So yes, People will use Windows 8. Guaranteed.

      --
      Looking for a job?
      Want your resume written professionally?
      DON'T USE TUNAREZ!!!
    8. Re:Wait wait... by Anonymous Coward · · Score: 0

      Did you miss the part where he said it would work?

  19. I'm confused by sayfawa · · Score: 1

    I thought this would only be a problem for people who are afraid to muck around in their bios. The situation is that even tech-savy users can't turn this shit off?

    --
    Free the Quark 3 from asymptotic confinement! Bring your charm! Don't get down! All colours and flavours welcome!
    1. Re:I'm confused by 0123456 · · Score: 1

      I thought this would only be a problem for people who are afraid to muck around in their bios. The situation is that even tech-savy users can't turn this shit off?

      1. That makes life painful for non-techies who want to install Linux and can currently just boot from a CD or USB installer with no BIOS changes.
      2. As soon as Microsoft can demand that this be made compulsory, they will.

      Oh, sorry, I forgot 'the slippery slope is a logical fallacy', so Microsoft couldn't possibly ever do that.

    2. Re:I'm confused by Anonymous Coward · · Score: 0

      No.

  20. Approach #4 by Anonymous Coward · · Score: 0

    Enter cmos setup and disable secure boot. Virtually all retail channel boards will have this option, and a good number of OEM systems will too. Most OEMs sell systems of one type or another that run Linux. Geez, Steven is such a drama queen.

  21. Re:yes and no by hazem · · Score: 1, Insightful

    The problem is the whole "Desktop PC" market is becoming marginalized. Mobile devices are where a majority of computing dollars are going (in the consumer world).

    Computers used to be huge and had a whole room dedicated to merely running them. Desktops revolutionized that, but the computer still lived in a specific room and you had to go to that room to do your computing (office or wherever).

    The whole idea of going to a specific room to do your computer is going away; at least for average people. Microsoft will be marginalized if it tries to stay in that market, regardless of what it does there.

    As an anecdote, my best friend and I both bought the same model of laptop computer a few years ago. I finally had to buy a new one and asked her if she wanted me to try to upgrade her old one (I'm much more of a power-user than she is). She said "sure", but that it really didn't matter that much because she doesn't use her computer much any more because she does everything on her phone now.

    I love Linux and have been using it for years, but grabbing up more userbase in the desktop market won't account for much.

  22. #1b: an Open UEFI Foundation for ALL DISTROS by flankenstein · · Score: 1
    > "Approach #1: Create UEFI Secure Boot keys for your particular distribution, like Canonical is doing with Ubuntu."

    : : : : : :

    Approach #1B:
    Instead of limiting it to your distro, let ALL distros share a central Secure Boot key infrastructure. Set up an open foundation to manage it.

    1. Re: #1b: an Open UEFI Foundation for ALL DISTROS by nyet · · Score: 2

      And what if I want to run my own bootloader and kernel, on a machine I own?

    2. Re: #1b: an Open UEFI Foundation for ALL DISTROS by vux984 · · Score: 2

      Then install your own key or disable secure boot. What else could you possibly expect to do? Secureboot isn't an issue for anyone running their own bootloader and kernel.

    3. Re: #1b: an Open UEFI Foundation for ALL DISTROS by danversj · · Score: 1

      And what if my distro happens to be a trojan?

    4. Re: #1b: an Open UEFI Foundation for ALL DISTROS by flankenstein · · Score: 1

      "And what if my distro happens to be a trojan?"

      No worse than without UEFI. The point is to bypass the UEFI restrictions, and rely on existing methods of trust -- like reputation and hashsum verification -- instead. Today, if I install a well known distro like Debian or Ubuntu or Fedora, I have a pretty reasonable belief that they're not trying to slip me a trojan. But it could happen.

      With UEFI, there's still no guarantee that a distro won't contain a trojan. And with an all-distro UEFI-bypass key, there's still no guarantee. But in both cases, I can still reasonably believe that a well known distro isn't trying to slip me a trojan.

      The point of an all-distro UEFI-bypass key is simply to avoid making the user turn off UEFI in the BIOS. So we would sacrifice the purported benefits of UEFI (anti-trojan), but we would still have exactly the same freedoms and risks that we have today without UEFI.

      The Open UEFI foundation could state this clearly, so nobody has the illusion that UEFI is protecting against trojans, for the distros using the bypass key.

  23. something better happen by Anonymous Coward · · Score: 0

    I hope some solution arises, because detaching open source from the PC pipeline, that is, only being
    able to run Linux and other open source operating systems on special hardware, will make it much more
    expensive, as well as preventing reuse for Microsoft-obsoleted hardware.

  24. They have it backwards by Anonymous Coward · · Score: 0

    Microsoft should be the one following the lead of the linux/bsd distros for what bootloader should be standard. Microsoft is the the os of hacker choice, the worse with security and the slowest one to update. Why should the more secure systems have to implement what Microsoft thinks should be implemented? it's not like they have the most impressive track record when it comes to security and speed of patching breeches.

    Besides, really if someone has physical access to your machines anyways you are pretty much ... well for lack of any better term... you're fucked!.

  25. Approach 4 by Anonymous Coward · · Score: 0

    dump windows fully

  26. Re:yes and no by ozmanjusri · · Score: 3, Informative

    Mobile devices are where a majority of computing dollars are going (in the consumer world).

    I think it may be where it's going soon in the corporate world too, especially with BYOD. If so, Ubuntu may be on to something with their Ububtu for Android kit.

    It lets you run your phone/tablet as a portable device, then as a full desktop OS once it's docked with a monitor, mouse and other external peripherals. In the video, they're even showing it running Citrix for some legacy applications.

    http://www.ubuntu.com/devices/android

    http://en.wikipedia.org/wiki/Ubuntu_for_Android

    http://www.youtube.com/watch?v=wzc0uMXGFBY

    --
    "I've got more toys than Teruhisa Kitahara."
  27. Chrome OS Method by GeXX · · Score: 1

    How about manufactures do what chromebooks do and have a switch that flips between secure boot & standard, best of both worlds..

  28. Just so true by Anonymous Coward · · Score: 0

    I know Cathy Malmrose, and she is what I would consider a friend - we met and shared a couple of meals at the Linux Collaboration Summit 2 years ago, and again in Chicago at the Flourish open source conference at the University of Illinois Chicago campus last year. Her comments on this issue are spot on. Allowing MS to dictate the terms under which people can use their personal computers is, in my opinion, an egregious violation of our rights, and MUST be resisted at all levels - personal, corporate, and legal.

  29. Re:He's right you know... by Anonymous Coward · · Score: 1

    The average user thinks the damn PC can only do what they double click on the desktop and has to call tech support when they put the printer on a different USB port. It's not that it's unusable. It's that typically you need someone from IT to get the damn thing into a state where all they have to do is click the icon. With most Windows boxes, they get the PC pre-imaged with all the apps and drivers they want installed and are lost if it's anything otherwise.

    Now, for intermediate users, yeah, linux sucks. I just worked for two hours trying to connect to a frigging router because the static IP configuration is so goddamn fragmented in Linux Mint. Is it really so hard to create a xwindows bin that edits /etc/network/interfaces and re-runs init.d/network restart after a change is confirmed? I would just vi the conf in bash, but when I did the thing started pulling a static IP network config from somewhere else, then something kept deleting routes. The supplied GUI apps, don't even show the current configuration, much less any new ones entered. WTF?

  30. Re:Approach no. 4 File complaint to D.O.J. by Anonymous Coward · · Score: 5, Insightful

    If this is not an example of Microsoft's monopolistic practices i don't know what is.

  31. News: Microsoft abuses major rival by Anonymous Coward · · Score: 0

    For many years they have been doing everything, legal or otherwise, to stop people from using other OS's.

    This is one of the reasons they are loathed by people all over the world. Also, they are working with hardware manufactorers to make it so other companies have to pay microsoft to work on a basic hardware level.

  32. EU vs monopolistic behaviour? by Richard_J_N · · Score: 5, Interesting

    Seems to me that this is a very serious violation of the spirit of the antitrust rulings when MS killed netscape. Why aren't our consumer protection agencies stepping in to forbid MS from doing this?

    1. Re:EU vs monopolistic behaviour? by IntlHarvester · · Score: 1

      Here's a relevant story:

      A long time ago, IBM held a monopoly in large-scale corporate computers. The US Department of Justice figured this out and forced them to sign a consent decree in order to curb their anticompetitive behavior.

      After about 10 years microprocessors came along, and Apple, Commodore, Compaq, Radio Shack, etc were selling tens of millions of little computers. Thanks to the consent degree, IBM couldn't stop anyone from cloning their designs and "IBM Compatible" was a big selling point. IBM promptly took these sales figures down to the DOJ and convinced them they should be released from the consent degree. It certainly helped that President Reagan didn't think much of anti-trust laws.

      The first thing IBM did after the consent degree was gone was release a fabulous new line of PCs featuring a proprietary bus that required a secret licensing deal to access. It almost worked, and would have if it wasn't for that darned megalomanic Bill Gates. So IBM just snuffed out their mainframe competitors instead, and they still hold a monopoly in that segment until today.

      OK, what does this have to do with today? Well Microsoft can point to those 100M iPads and Android tablets and make a reasonable argument they no longer have a "PC" monopoly. Oh, also Ballmer was working the IBM account the whole time the above story happened.

      --
      Business. Numbers. Money. People. Computer World.
    2. Re:EU vs monopolistic behaviour? by Anonymous Coward · · Score: 0

      Why hasn't everyone screamed bloody murder?
      Linux OS chances of becoming mainstreet are finally
      fading. Red Hat and Canonical are looking, if not
      cowardly, then even worse - like they want
      to _cash in_ .. like FreeBSD guy says.

    3. Re:EU vs monopolistic behaviour? by RightSaidFred99 · · Score: 0

      Only it isn't. Microsoft is not preventing anyone from doing anything on devices other than ARM. They have nothing approaching a monopoly on ARM devices and other ARM device vendors also lock down the boot loader.

    4. Re:EU vs monopolistic behaviour? by Anonymous Coward · · Score: 0

      You just went full retard. Never go full retard.

    5. Re:EU vs monopolistic behaviour? by jimicus · · Score: 2

      Most regulators can only operate reactively. Even if you issue a complaint today there's a lot of hoops to jump through before anyone can even get Microsoft in a courtoom:

      - Someone has to release a Windows 8 PC with secure boot. That hasn't happened yet.
      - The hoops necessary to disable secure boot need to be sufficiently complicated that its demonstrably a problem. This won't be apparent for some time after we see a serious number of Secure a lot PCs shipping.
      - organisations with some influence (not individuals) need to prepare and submit a complaint. This will take another few months.
      - A regulator needs to be persuaded that these things are somehow a problem. Government bodies aren't known for acting fast; they may not even investigate for some time after receiving the complaint, never mind take action.

      Bottom line: you're talking 2 years before anyone is even in a position to take action. The action itself could take another couple of years before sanctions are applied. Plenty long enough to do serious damage.

    6. Re:EU vs monopolistic behaviour? by Anonymous Coward · · Score: 0

      Microsoft makes campaign contributions.

  33. Won't Win8 compatible be enough? by Anonymous Coward · · Score: 0

    I know some OEMs (e.g. motherboard manufacturers) are already advertising Win8 "compatbility". Why do we have to assume that OEMs would die to be Win8 "certified" rather than merely being "compatible"? From what I've read about Win8, it appears the OS should be installable even on machines running only plain old BIOS. Or is Microsoft so stupid as to prevent Win8 from installing in virtual machines. If so, what's the point of Microsoft contributing copious amounts of code to the Linux kernel?

    Anon because I'm too lazy to log in.

    1. Re:Won't Win8 compatible be enough? by shentino · · Score: 1

      In many cases they only contributed because the GPL bit them in the ass.

      If they voluntarily complied it would mean more.

    2. Re:Won't Win8 compatible be enough? by colinrichardday · · Score: 1

      My understanding is that they want Linux running within Windows, not so much the other way around.

      http://www.microsoft.com/en-us/server-cloud/hyper-v-server/default.aspx

    3. Re:Won't Win8 compatible be enough? by jbolden · · Score: 1

      AC is right. They want both ways. But obviously their hypervisor only runs with Linux. Its VMWare or Xen or... that handle it if you are running Linux as the dominant system.

      Now of course their real favorite is Windows underneath running Windows images.

    4. Re:Won't Win8 compatible be enough? by segedunum · · Score: 1

      Or is Microsoft so stupid as to prevent Win8 from installing in virtual machines. If so, what's the point of Microsoft contributing copious amounts of code to the Linux kernel?

      Anon because I'm too lazy to log in.

      They want to control the environment that Windows runs in and better control when you have to upgrade. They do not want you upgrading your hardware and continuing to run the same version of Windows you do now as many people are doing with VMware and Linux as the hypervisor. Microsoft have always been mighty uncomfortable with virtualisation.

  34. Just sign your bootloader... by Rich0 · · Score: 2

    The MS specs require any MS-certified firmware to allow the user to load their own keys. So, if you want to install linux, just generate your own keypair, use it to sign any OSes you want to boot, and install it as a trusted key in your firmware.

    Viola, you can still use secure boot, and you can boot whatever you want, and as a bonus not even MS can install something on your hard drive and have it be bootable.

    Or you can just disable secure boot.

    Distros should just make it easy for users to sign their bootloaders. This should be easy for distros that have the user manually install grub/etc. Or the distro could just supply a pre-signed bootloader and a key for the user to load into their firmware.

    1. Re:Just sign your bootloader... by FranTaylor · · Score: 2

      You say "just" for things that require a second computer

      Not so easy for the teenager who is mowing lawns and raking leaves to buy a computer to learn programming.

      Now these kids are locked out of the Linux experience because they don't have the resources to "just do" the stuff you find so trivial.

    2. Re:Just sign your bootloader... by Missing.Matter · · Score: 1

      Now these kids are locked out of the Linux experience because they don't have the resources to "just do" the stuff you find so trivial.

      "Just" turning off secure boot involves a trip to UEFI settings and flipping a switch.

      Or they could "just" install Ubuntu or Fedora, who have taken care of this whole situation already. Chances are someone installing Linux for the first time is going to go with Ubuntu.

      Or the kid mowing lawns and raking leaves could "just" buy one of the billion used computers in the world with a BIOS and use that instead of a brand new system.

      Or if the kid wants brand new, he could "just" buy a brand new motherboard with a BIOS. Those aren't going away.

    3. Re:Just sign your bootloader... by IKnwThePiecesFt · · Score: 1

      Except they can just turn off SecureBoot

      As posted above, from: http://msdn.microsoft.com/en-US/library/windows/hardware/jj128256

        Mandatory. Enable/Disable Secure Boot. On non-ARM systems, it is required to implement the ability to disable Secure Boot via firmware setup. A physically present user must be allowed to disable Secure Boot via firmware setup without possession of PKpriv. A Windows Server may also disable Secure Boot remotely using a strongly authenticated (preferably public-key based) out-of-band management connection, such as to a baseboard management controller or service processor. Programmatic disabling of Secure Boot either during Boot Services or after exiting EFI Boot Services MUST NOT be possible. Disabling Secure Boot must not be possible on ARM systems.

      Do your research before you condemn, please.

    4. Re:Just sign your bootloader... by Anonymous Coward · · Score: 0

      So?
      Are you saying it is good when Microsoft demands you spring trough hoops to just boot another OS?

      Really?

      Congratulations - you just passed the first stage of "locking out any OS in the near future" plans of Microsoft without even complaining.
      You are now fully programmed to attack anyone that wants freedom of choice..

    5. Re:Just sign your bootloader... by Anonymous Coward · · Score: 0

      "Viola" means "raped". Try "voila".

    6. Re:Just sign your bootloader... by aztracker1 · · Score: 1

      Except they can just turn off SecureBoot

      As posted above, from: http://msdn.microsoft.com/en-US/library/windows/hardware/jj128256

      Disabling Secure Boot must not be possible on ARM systems.

      Do your research before you condemn, please.

      Personally, *I* want to be able to change the firmware on a widely released ARM platform...

      --
      Michael J. Ryan - tracker1.info
    7. Re:Just sign your bootloader... by Fred+Ferrigno · · Score: 1

      Programmatic disabling of Secure Boot either during Boot Services or after exiting EFI Boot Services MUST NOT be possible.

      So there's no way a distro can "make it easy for users to sign their bootloaders." You have to walk users through modifying their system via printed instructions or another computer because the system is down. And it's all going to be slightly different for different manufacturers, models, and versions. That pretty much guarantees some percentage of users will brick their systems. You can call them morons if you want, but that doesn't stop it from being a problem for support.

    8. Re:Just sign your bootloader... by Anonymous Coward · · Score: 0

      That's a nice emotional, hypothetical you've created there.

      Why is a teenage with no money buying brand new hardware and not getting some cheap used stuff that's perfectly fine for programming?

      Why doesn't he use Ubuntu or Fedora who have already done the work for him?

      Maybe he has a friend who has on since 86% of households with children have a computer in them.

      Or you could just disable Secure Boot

    9. Re:Just sign your bootloader... by Rich0 · · Score: 1

      You can disable secure boot until it is working. Also, I"m not sure if secure boot will apply to CDs or not, but if not then you can do all the install work from the CD (you need to boot off of SOMETHING to install Linux, right?).

    10. Re:Just sign your bootloader... by IKnwThePiecesFt · · Score: 1

      Well, duh. The whole idea of Secure Boot is to prevent malware from compromising your boot loader. How? By preventing software from interfering.

      Honestly, anyone loading Linux themselves should be more than capable of going into the UEFI setup and flipping it to off. If they're not, then god help them when they try to actually install Linux (and find drivers, etc).

    11. Re:Just sign your bootloader... by IKnwThePiecesFt · · Score: 1

      While that's legitimate, this is unfortunately become par for the course with nearly all ARM platforms it seems (See: Android phones with locked boot loaders, iOS devices, etc)

    12. Re:Just sign your bootloader... by shutdown+-p+now · · Score: 1

      Personally, *I* want to be able to change the firmware on a widely released ARM platform

      You'd have to to ask Apple about that.

    13. Re:Just sign your bootloader... by rastos1 · · Score: 1

      Honestly, anyone loading Linux themselves should be more than capable of going into the UEFI setup and flipping it to off

      What a crap argument. So you say that currently Linux isn't for Joe Sixpack and therefore it is OK to keep it that way? No. We want the Linux to be available for everyone!

    14. Re:Just sign your bootloader... by Rich0 · · Score: 1

      That pretty much guarantees some percentage of users will brick their systems.

      Uh, how exactly is changing a firmware setting going to brick a system? You don't need to reflash the firmware to change the boot key, and per the spec the firmware has to have a factory reset function that restores all settings including keys to the shipped settings.

      The sort of user who couldn't turn off secure boot in their firmware probably couldn't reinstall Windows if they got frustrated with Unity or whatever anyway... :) If you want to target these users you need to ship the PCs pre-configured.

    15. Re:Just sign your bootloader... by Rich0 · · Score: 1

      Honestly, anyone loading Linux themselves should be more than capable of going into the UEFI setup and flipping it to off

      What a crap argument. So you say that currently Linux isn't for Joe Sixpack and therefore it is OK to keep it that way? No. We want the Linux to be available for everyone!

      Personally, I'd rather my bootloader be secure against malware than for Linux to be available for everyone. The former is quite achievable with UEFI, and the latter is nebulous at best. Plus attempts to do the latter have steadily tended to make Linux less usable for me. It isn't like I'm the one getting paid for every PC that Ubuntu or whatever gets installed on - my only possible benefit is if some of those users contribute back, and I doubt I'll get much of that from folks who can't reconfigure their firmware.

  35. Does it matter? by Anonymous Coward · · Score: 0

    Won't this be hacked the day it comes out?

  36. Re:He's right you know... by FranTaylor · · Score: 1

    tell that to all those people using android phones and nook e-readers

    my nook tablet isn't fragmented, it's in one piece and it runs all kinds of android stuff just fine despite being a mongrel oddity with zero market share

    ubuntu is way easier to install and set up than windows

    the only reason windows is "easy" is because it's already installed when you bought the computer

  37. Re:Restrict Government PC Purchases to Open Hardwa by Anonymous Coward · · Score: 0

    You realize that governments want locked and signed bootloaders for their systems, right?

  38. Yes. Anecdotal evidence warning: by aussersterne · · Score: 2

    Both my wife and my sister have very nice laptops ca. 2009-2010. I used to do an ongoing and significant amount of Windows tech support for both of them.

    Nothing in about 2 years. What they have in common: both have iPhones.

    I don't live with my sister, so I don't know whether this is absolutely true in her case, but my wife hasn't even opened her laptop in months. I regularly see her using her iPhone for web browsing, Facebook, email, etc. (As in, for several hours a day.) And I have recently done iPhone-related tech support for both (sister: how to upgrade iOS 4 -> iOS 5 to install an app that she needed; wife: replace an iPhone battery that she basically wore out).

    I do know that my sister is active on Facebook and she does communicate with me via email, so I'm making the assumption that she and my wife followed basically the same path: get an iPhone and never really use the computer again.

    --
    STOP . AMERICA . NOW
    1. Re:Yes. Anecdotal evidence warning: by Anonymous Coward · · Score: 0

      That's because your wife is a drooling vegetable. Most people need to type moderate to lengthy amounts of text on a regular basis and therefore require a keyboard.

    2. Re:Yes. Anecdotal evidence warning: by Anonymous Coward · · Score: 0

      If his wife is a drooling vegetable, then so are most wives as well as 90% of the population.
      Or maybe computers in general and desktop usage in particular are simply not really important, and people have actual lifes to get on with?

      You and me being power users doesn't mean that the vast majority of the population cares about all that "techy stuff". They want to socialize, share a joke or two and get information conveniently (we call it lazily, but that might be elitism).
      After talking to my neighbours and wider circle of friends, this is the conclusion I've come to - and I assume lots of us "techies" will if they bothered.
      And I often ask myself if it might be misplaced to attack their attitude?

      Also, popular opinion in my social circle is that the "mild inconvenience" of typing a longer text on a tablet is vastly offset by all the other advantages it brings. Most tech players seem to agree with that, seeing how everyone pushes for tablets.

      Oh and just to repeat the sad real life fact: for most, computers and computing are simply not personally important... because they want to communicate with their friends, they don't care whether it's called Facebook and what it really does as long as all their pals are on it. We might look down on them for that or shake our heads in disbelief, but did you seriously just judge and insult someones beloved wife, on the basis of knowing a tiny amount of trivial facts about her?

    3. Re:Yes. Anecdotal evidence warning: by VortexCortex · · Score: 1

      What you call a drooling vegetable, I call a self lubricating sex toy.

  39. It's freedom, not price that matters. by Anonymous Coward · · Score: 4, Informative

    If you purchase something purely based on price you are one stupid user. Freedom matters and just because the majority don't understand the issue doesn't mean it doesn't mean the lack of freedom isn't harming them.

    The lack of freedom causes so many problems. It prevents competition, it prevents compatibility, it prevents upgradability, it makes common applications obsensely and abusively exspensive.

    Now I'm not saying you shouldn't pay the developers. You should contribute. For most people payment is how one contributes. While selling free software may not work terribly well for developers due to the lack of understanding of what free software is and is not contributory models work fairly well if done right. So do agrements between companies supporting free software like ThinkPenguin and Trisquel. Or Google and distributions/web applications. There are other agrements as well. Such as CDs and merchandise. All of these have value and can and do fund free software development.

    1. Re:It's freedom, not price that matters. by the_leander · · Score: 1

      If you purchase something purely based on price you are one stupid user. Freedom matters and just because the majority don't understand the issue doesn't mean it doesn't mean the lack of freedom isn't harming them.

      The lack of freedom causes so many problems. It prevents competition, it prevents compatibility, it prevents upgradability, it makes common applications obsensely and abusively exspensive.

      Which is all fine and dandy up until you take into account the fact that many peoples budgets simply won't allow for much more than getting lower cost kit that offers the best bang for their buck.

      Dismissing people as stupid for not paying over what the can reasonably afford on what is essentially a luxury item says more about you then it does them.

      --
      regards, the_leander
    2. Re:It's freedom, not price that matters. by eugene+ts+wong · · Score: 1

      The lack of freedom causes so many problems. It prevents competition, it prevents compatibility, it prevents upgradability, it makes common applications obsensely and abusively exspensive.

      And that is meaningless to a lot of users, because Linux makes no commitment to support old hardware. Neither does Microsoft, but then again, at least, when you buy Microsoft preinstalled, which is a normal thing for most people, the hardware works. That is not necessarily true for the normal use of Linux.

      Apples, and oranges, right? I know, but the thing is, for a lot of people Linux isn't preinstalled, and there are hardware problems, with no support in sight.

  40. Oracle is in on this by FranTaylor · · Score: 1

    Did you hear Oracle's latest pronouncement that they really don't care about x86 at all, they are much more interested in SPARC?

    Maybe this is because they know that Microsoft is making it hard for Solaris to run on x86 also.

    If they abandon the platform and move exclusively to SPARC then they don't have to worry about Microsoft any more.

    1. Re:Oracle is in on this by Anonymous Coward · · Score: 0

      So will they port/move OEL to Sparc?

    2. Re:Oracle is in on this by Asic+Eng · · Score: 1

      There is really no need to move away from x86 just for this - if they want to build their own hardware they can build their own BIOS, too.

  41. Federal requirement by Anonymous Coward · · Score: 0

    It's actually a federal requirement. But everyone is hush hush about it in public because its under some kind of 'national security' order; it's a pretty open secret among those of us working on PC firmware.

    1. Re:Federal requirement by bmo · · Score: 0

      Citation needed.
      --
      BMO

  42. Mixed messages from Microsoft by FranTaylor · · Score: 1

    Windows 8 gives the distinct impression that the desktop is just not so important to Microsoft any more

    and yet they double down on their paranoia about competition on the desktop!

    Really! They could care less about the desktop and they don't want anyone else to be there either! So weird.

  43. what's the value to the user? by FranTaylor · · Score: 2

    Forgotten in all of this is that there is no actual value added for the user in all this.

    When it's all said and done, from the user's point of view, it's a step backward in usability and utility without providing ANY extra security for the user's data.

    Think about it: for an actual boot-sector virus to work, it have to break into your computer already. Well since it's already broken in, why does it need the boot sector? It can just break back in using the same mechanism it used in the first place. Secure boot gets you no extra security.

    Notice that Windows had to mandate this, is there any clamor from the user base for computers that are more difficult to use?

    1. Re:what's the value to the user? by Anonymous Coward · · Score: 1

      Cryptographic trust chain for executables all the way back to the firmware. Malware can't load since it's not signed.

      That is clear value to the end user, the administrator, and society in general.

    2. Re:what's the value to the user? by Anonymous Coward · · Score: 0

      From most users point of view there is absolutely no value to any security. Strong passwords are hard to remember, not running as administrator means having to escalate things sometimes, installing security hotfixes often requires restarting the computer!

      Now obviously the assumption is that most users never fix anything, but you'll have to get past that. Sometimes it's entirely possible for a user to take an interest, or possibly have a family member who stops by for the weekend, and patch security holes. There is no automatic assumption that if they were compromised because their child installed Super Robo Buddy (with boot virus) that he would have just reinstalled Super Robo Buddy the next day anyway.

      For the vast, vast, vast majority of users this will have absolutely no effect, positive or negative. I don't support the system, but stop trying to make it sound like the sky is falling and the people are marching on Versailles.

  44. Are people illiterate? by Anonymous Coward · · Score: 0

    #1 Being able to disable SecureBoot is mandatory on x86 = good. Its like having your cake and eating it. Signed bootloader so you know its secure and being able to do what you want.....perfect

    #2 Windows 8 is perfectly fine, it gets stuff done, improves on 7 and is easier to use....our testsers find going from xp to 8 easier then seven osx, i especially like the new start menu, only thing missing is that the start key brings you to desktop when in the start menu.

    #3 tge hlockdown is on windowsRT eg tablets, i dont see anyone being able to put android on the ipad/phone or saying that you should be able to run ios on the galaxy tab. No one is thinking of suing rim to get android on the playbook.

    #4 The surface pro looks SWEET, we convinced our high management to wait for Win8 tablets to replace thier macbook airs as we have great trouble meeting the demands. Basicly they want the win7 integration in our Windows Environment with the OSX gui. They call us the most (why the fuck is it impossible to access a hidden share on mac????). Im happy that they look pleased with their win8 dual boot

  45. Re:No one cares by Heretic2 · · Score: 1

    If I use Macs and Linux servers... Should I care?

  46. Re:ROFL at you by Anonymous Coward · · Score: 0

    Read this, and this, and maybe learn a little something The Who taught us about bosses a long time ago.

  47. Windows 8 is not going enterprise and OEM's by Joe_Dragon · · Score: 4, Insightful

    Windows 8 is not going enterprise and OEM's need to not lock out XP / Windows 7 as they will lose the enterprise market if they do so.

    the MB makers likely will not want to go windows 8 only.

    1. Re:Windows 8 is not going enterprise and OEM's by Billly+Gates · · Score: 1

      Windows 7 SP 1 Supports SecureBoot fine. I am not saying I endorse secureboot per say, but you can at least put Windows 7 on these machines and OEMs would be retarded to cancel out XP (the most popular OS in the world) as well as Windows 7. It wont die.

      If they could do something dumbshit retarded like that they would loose customers FAST. Corporate customers will make up a greater volume of desktop and laptop marketshare as consumers start switching to tablets and phones for the internet and their crappy facebook games. For proof I had a computer that I bought in 2006 that still had OS/2 pallete snooping for crying out loud! All 7 users were happy about that too.

      Vesa options will still in the bios as well as ps/2 emulation settings for USB which by 2006 no one used in 7 years. Bios emulation will be supported for a very long time as corporate marketshare of computers pick up and the big boys will keep buying extended support for XP until at least 2019. Same is true with Windows 7, but Win 7 with SP 1 will boot up fine with it locked.

      Linux users may hate it but corporations would love to get rid of rootkits forever. It is appealing to these users.

    2. Re:Windows 8 is not going enterprise and OEM's by Forty+Two+Tenfold · · Score: 0

      per say

      If you don't know the meaning or the correct spelling, don't use the expression because, contrary to your goal, it makes you look stupid.

      --
      Upward mobility is a slippery slope - the higher you climb the more you show your ass.
    3. Re:Windows 8 is not going enterprise and OEM's by demonlapin · · Score: 1

      Unlike your other pedant, I'm going to point out that the correct term is per se, a Latin expression. If nobody has ever taught them to you explicitly, you might wish to look up a list of common Latin abbreviations and sayings, as they are often subtly (and sometimes not so subtly) misused in English and you're probably screwing up more than one of them.

    4. Re:Windows 8 is not going enterprise and OEM's by neokushan · · Score: 1

      Yes, absolutely you should look up this list and memorise every single facet of it! Otherwise, you're just a horrible human being or something.

      Seriously though, correcting people is just fine on the internet but there's ways to do it without being a dick.

      --
      +1 IDisagreeSoHeMustBeATrollOrAnAstroturferOrAShill
    5. Re:Windows 8 is not going enterprise and OEM's by Anonymous Coward · · Score: 0

      If they could do something dumbshit retarded like that they would loose customers FAST.

      How quickly could they tighten customers?

    6. Re:Windows 8 is not going enterprise and OEM's by Joe_Dragon · · Score: 1

      As quick as they get TOP sales only people to do it.

  48. also Enterprise use lot's differnt pre boot tools by Joe_Dragon · · Score: 1

    also Enterprise use lot's of differnt pre boot tools.

    Any where from 3rd party disk encryption tools to NON MS deploying tools.

  49. It means one thing for me by future+assassin · · Score: 1

    I got money burning in my pocket for a laptop/motherboard with out secure boot. I this means my i7 system is the last system I buy so be it. I don't play games so I'm ok with old hardware for getting online. Hell I still use PS 7.

    --
    by TheSpoom (715771) Uncaring Linux user here. I have nothing to add to this but please continue. *munches popcorn*
  50. Re:He's right you know... by DJ+Particle · · Score: 2

    I've installed Ubuntu and Mint for a variety of end users -- from football jocks to the elderly to the moderately PC-illiterate. The only time any of them ran into an issue was when they wanted to run Windows software, and even then, I was able to give them a Linux equivalent, and they were fine.

    So anyone who says Linux is not "average user" ready, you're just plain wrong. My tech support record flies in the face of that.

  51. We will win.. by Anonymous Coward · · Score: 0

    This is going to be a tough one but liberty and individual freedom will prevail

  52. Is EVERYONE on Slashdot COMPLETELY RETARDED? by Anonymous Coward · · Score: 0

    1) Power on system
    2) Press whatever key gets you into UEFI setup
    3) Navigate to "Disable Secure Boot" setting
    4) Enable setting
    5) Boot to whatever the Hell you want to (other than Windows 8)
    6)... (something causes you to completely lose your mind)
    7) Turn Secure Boot back on
    8) Install and boot to Windows 8

    1. Re:Is EVERYONE on Slashdot COMPLETELY RETARDED? by Skapare · · Score: 1

      This only works on x86. You forgot about ARM.

      --
      now we need to go OSS in diesel cars
    2. Re:Is EVERYONE on Slashdot COMPLETELY RETARDED? by colinrichardday · · Score: 1

      Will the ARM machines have a "Disable Secure Boot" setting?

    3. Re:Is EVERYONE on Slashdot COMPLETELY RETARDED? by Anonymous Coward · · Score: 1

      Why do you want to buy a Windows Logo ARM system to not run Windows?

      All of this is just Windows Logo requirements. Buy the non-Windows ARM hardware.

      Hack the firmware. Do what you want with the system. Microsoft isn't going to send the Sony-hit-squad after you if you take WindowsRT off your tablet. They just won't let the vendor ship it that way with Windows Logo.

    4. Re:Is EVERYONE on Slashdot COMPLETELY RETARDED? by Anonymous Coward · · Score: 0

      I didn't forget ARM. It's not worth enough consideration to forget.

    5. Re:Is EVERYONE on Slashdot COMPLETELY RETARDED? by colinrichardday · · Score: 1

      And who is producing non-Windows ARM hardware?

      Also, I have bought x86 and x64 hardware with Windows Logoes on it (I'm on such a laptop right now), so why wouldn't I do it with ARM?

    6. Re:Is EVERYONE on Slashdot COMPLETELY RETARDED? by Anonymous Coward · · Score: 0

      Because it doesn't support the OS you want to run on it?

      If the hardware vendor isn't selling the product you want, then complain to them.

      I tried to install Windows 7 on my Droid 4, but it wasn't supported. I've now started a letter-writing campaign to force Motorola to support Windows 7 on Droid 4.

    7. Re:Is EVERYONE on Slashdot COMPLETELY RETARDED? by Z34107 · · Score: 1

      And who is producing non-Windows ARM hardware?

      iOS and Android devices have been around forever. I don't think you can even buy Windows ARM hardware yet.

      Besides, why would you purposefully seek out a Windows sticker if you don't want Windows? I bet you'd flip your shit if your Cheerios box had Cheerios in it.

      --
      DATABASE WOW WOW
    8. Re:Is EVERYONE on Slashdot COMPLETELY RETARDED? by colinrichardday · · Score: 1

      I don't seek out Windows stickers, but a large amount of hardware in stores has it. I prefer not to order hardware.

    9. Re:Is EVERYONE on Slashdot COMPLETELY RETARDED? by cas2000 · · Score: 1

      9) lose the grub boot menu that allows you to dual boot
      10) think about the hassle of replacing the MBR every time you want to boot a different OS and give up in disgust.

  53. Re:yes and no by DarwinSurvivor · · Score: 3, Insightful

    There are a few things people forget when they compare sales numbers of desktops vs mobile devices.

    A) Most houses have 1 or 2 desktops (shared by the family), but most people have their own smartphone or laptop (since they take it with them to work/school/etc).
    B) Desktops tend not to be replaced as often, partially due to them being more powerful/dollar in the first place, and partly because they are SO MUCH easier to upgrade.
    C) Desktops cost a LOT less (unless you get a screaming gaming rig) than any other computing device out there, so comparing the *amount* people spend on desktops vs mobiles is pointless.
    D) A lot of people that build gaming machines (and even some that don't), build there computers 1 piece at a time, and thus don't get counted as "PC Sales", almost NOBODY does this with laptops, cellphones or tablets.

    Mobile devices may be on the rise, but I doubt desktops will dissapear any time soon, at least not until they stop being half the price of a less powerfull laptop!

    Unrelated Note: Why won't slashdot's comment boxes resize horizontally in Firefox?

  54. Sue by Anonymous Coward · · Score: 0

    Just sue microsoft... It's all so ridiculous. Does anyone really doubt this crap will hold up in court?

  55. Hey software and hardware vendors.... by Anonymous Coward · · Score: 0, Insightful

    Pay real close attention here. Because i'm getting tired of your antics thinking you own my stuff.

    This is my hardware. my software.
    NO! I DID NOT LICENSE ANYTHING FROM YOU! I BOUGHT IT! IT'S MINE! WHEN IT BREAKS IT'S MY PROBLEM! NOT YOURS!

    So long as it's my money that paid for it... It WILL do what *I* want when *I* want.
    NOT what you want. I don't give a fuck what you think i should or should not be running.
    I don't give a fuck about your digital rights and fake ass media security.

    My hardware and software WILL do as i demand or i'll crack, root, wipe, edit, rip, modify, pirate, hack, replace, and or break your hardware / software, whatever it takes.

    Unless you're going to fork over money to use your products. You can fuck right off.

    Better wise up assholes. It's about time for alot of people to buy new hardware again.
    We can break your companys. You need us way more than we need you and your 'security'.

    So take your uefi/tpm and cram it right up your ass guys. Securely.

    1. Re:Hey software and hardware vendors.... by Anonymous Coward · · Score: 0

      Pay real close attention here. Because i'm getting tired of your antics thinking you own my stuff.

      This is my hardware. my software.
      NO! I DID NOT LICENSE ANYTHING FROM YOU! I BOUGHT IT! IT'S MINE! WHEN IT BREAKS IT'S MY PROBLEM! NOT YOURS!

      So long as it's my money that paid for it... It WILL do what *I* want when *I* want.
      NOT what you want. I don't give a fuck what you think i should or should not be running.
      I don't give a fuck about your digital rights and fake ass media security.

      My hardware and software WILL do as i demand or i'll crack, root, wipe, edit, rip, modify, pirate, hack, replace, and or break your hardware / software, whatever it takes.

      Unless you're going to fork over money to use your products. You can fuck right off.

      Better wise up assholes. It's about time for alot of people to buy new hardware again.
      We can break your companys. You need us way more than we need you and your 'security'.

      So take your uefi/tpm and cram it right up your ass guys. Securely.

      Dear Derptard,

      Please learn to read.

      http://msdn.microsoft.com/en-US/library/windows/hardware/jj128256

      "Mandatory. Enable/Disable Secure Boot. On non-ARM systems, it is required to implement the ability to disable Secure Boot via firmware setup. A physically present user must be allowed to disable Secure Boot via firmware setup without possession of PKpriv. A Windows Server may also disable Secure Boot remotely using a strongly authenticated (preferably public-key based) out-of-band management connection, such as to a baseboard management controller or service processor. Programmatic disabling of Secure Boot either during Boot Services or after exiting EFI Boot Services MUST NOT be possible. Disabling Secure Boot must not be possible on ARM systems."

      You want an ARM system without secure boot? Then, peel off the Windows Logo, and hack the firmware. Just don't expect full vendor support after you do it.

  56. Re:yes and no by cavreader · · Score: 1

    Your regular non-tech consumer doesn't give a shit about secure boot or even the shortcomings of the OS that developers like too pick apart when trying to prove their point that MS sucks.. Consumers want a PC to work out of the box that can run their existing apps. A vast majority of large businesses have no intention of making a wholesale change from Windows to another OS in the application space because they have too much time and money invested in their custom business applications that would need to be changed to work in another OS environment. Changing to another OS would require all their developers, system admins, and users to be retrained. And even if their program some how operated the same I have worked with several medium and large businesses who were talked into going to another OS only to find out that their existing development staff and users lacked the skill set to support such a drastic change. I had several request to re-architect applications I built that targeted the Windows environment which I did Ior 6 clients and 5 of them came back and asked me for the Windows applications. And while everyone seems to want to vilify Microsoft for the secure boot or othe control mechanisms what is thier opinion on the locked down Apple platform?. And please forget about things such as Wine, Mono, or any other applications that will allow Windows programs to almost work properly. User retraining would also have to be factored in when moving to another OS platform. None of these type of systems provide total functionality available in Windows. Individuals and small companies with limited custom application libraries can pull off the change in OS but they are in the minority. And while MS may be curently playing catchup in the phone and pad platforms they are making headway but it will not show up overnight. They are a large company with an large user base and it is hard for a company of that size to change directions on a whim. Apple almost folded as a company back in the early 90's they could not take advantage of commodity hardware which resulted in their products being more expensive than the Windows products. They lost the business sector with this strategy and practically handed MS the business orientated market. This in turn meant that the business users learned how to use Windows and they purchased Windows for personal us because that was what they were familiar with. Regardless of what I wrote here I am not some MS shill. I consider my technology agnostic and choose the technology that best fits the situation but from a career perspective someone with experience with Windows will not have a hard time finding employment. Just checkout the biggest tech job sites and compare the number of Windows development job opportunities against the opportunities offered up for non-MS solutions. If you are a professional developer or administrator making a decent living trumps any technology evangelism.

  57. Eventually it will be outlawed ... by Skapare · · Score: 1

    ... in some country. Then there will be ARM devices around that can boot whatever you want. Said country will get rich re-exporting more useful hardware back to the world.

    --
    now we need to go OSS in diesel cars
  58. Re:yes and no by flyingfsck · · Score: 2

    Long ago, towards the end of the last century, desktop computers were BYOD and Visicalc was the killer app. That was the extinction event of the dinosaurs. Now, with new smaller BYODs, the desktop computer is precariously balanced on the edge of its extinction event.

    --
    Excuse me, but please get off my Pennisetum Clandestinum, eh!
  59. real work by ArchieBunker · · Score: 1

    Your version of real work is different from mine. I use programs like Autocad, Solidworks, and Altium to do my job and they all run without issue on Windows XP or 7. Yeah windows is a different environment and you're not willing to admit that.

    --
    Only the State obtains its revenue by coercion. - Murray Rothbard
  60. I for one by Anonymous Coward · · Score: 0

    I for one reject this crap. I will be buying motherboards in the near future, and will be running Linux on them. I *INSIST* that I can install Linux on it. This secure boot crap is just a way of cutting everyone else out of the market. I'm disgusted that the US government isn't calling them on this. They got off easy in 2001, and should have been broken apart then. The judge fucked up, probably on purpose. Since I am likely to be buying a lot of hardware, anyone who gets stupid about secure boot "blah blah we don't support Linux blah blah" will 1) lose a lot of business 2) could face litigation of some kind. There are a lot of servers out there that run Linux (hello Facebook, Amazon, Ebay, Twitter, Google, YouTube, NetFlix, etc), and muttering "we don't support" means a loss of hundreds of millions of dollars.

  61. Re:yes and no by slashmydots · · Score: 1

    Hey, speaking of Apple, weren't they the ones that locked everyone's OSes out of their hardware and locked their hardware out of everyone else's OSes for like a decade? They're still around and nobody seemed to have a problem with them doing that, which pisses me off.

  62. Re:yes and no by Anonymous Coward · · Score: 0

    Line

    breaks

    are

    your

    friends.

  63. Option 4 by Arancaytar · · Score: 1

    Avoid buying anything that has Windows installed on it. I already do that for aesthetic reasons; now that it's not just a matter of reformatting I have even more reason to.

  64. Re:yes and no by Anonymous Coward · · Score: 0

    ...
    [adult swim]

    Oops! I meant:
    Burma Shave

  65. Re:He's right you know... by chromas · · Score: 1

    has to call tech support when they put the printer on a different USB port.

    In my experience with XP, changing USB ports often means reinstalling the driver (or at least pointing Windows to where you already installed it). Printer drivers are horrible; I'm pretty sure most of the developers ride the short bus to work.

  66. Re:He's right you know... by Zontar+The+Mindless · · Score: 5, Informative

    Ever install Vista or Win7?

    Yes. I bought this laptop I'm using a couple of months ago. It dual-boots Win7 and openSUSE 12.1, both of which I installed myself.

    Boot the disk, answer a couple of questions, the installer does the rest...

    First question: Does it have all your device drivers?

    essentially imaging the system to a clean install for a computer that doesn't have Windows installed.

    With none of those applications you go on about.

    Linux in orders of magnitude more difficult to install...

    With apologies to any equines who may be in the audience, that's complete and utter horseshit. To quote your own fine self, installing a modern Linux distro is a case of "Boot the disk, answer a couple of questions, the installer does the rest".

    ...not to mention all the 0.x unfinished apps for supposed Windows app substitutes.

    What Windows apps? You mean the apps *for* Windows that don't actually *come* with Windows that you have to find (and possibly *buy*) and install separately? As opposed to the hundreds (thousands?) of perfectly usable apps available in any halfway respectable Linux distro that you can load as part of the OS installation?

    BTW, the installation of Windows 7 Pro and about a dozen applications which had to be obtained and installed separately (following the OS installation) took almost exactly *twice* as long as as the openSUSE installation, which provided *everything* I need for both personal and work use with just 2 exceptions--Skype, and a proprietary app we use at work.

    Oh, and let's not forget cost: the Windows 7 Pro OEM DVD (English) ran me about 1350 SEK (call it US$200); the blank CD on which I burned the Linux network installer was about a dollar and a half (~10 SEK).

    TL;DR: Windows took twice as much time to install, cost me 200 times as much money, and provided about 10% of the software.

    So... You are badly misinformed, deluded, or just plain lying. I'd say it's a bit of all 3.

    What is it with you guys, anyway, that you find Linux so threatening that you have to resort to spewing garbage like this about it?

    --
    Il n'y a pas de Planet B.
  67. Re:No one cares by HJED · · Score: 1

    Very good question, probably not for Mac servers as they are made by Apple, but surely some generic servers would be effected? (posting to undo moderation)

    --
    null
  68. Re:He's right you know... by HJED · · Score: 2

    You can either use the gnome/KDE settings or /etc/network/interfaces if you use both it tends to stuff up your system, also the network init.d script is obsolete and it says so when you run it.

    --
    null
  69. Re:yes and no by Nitewing98 · · Score: 2

    Why does this piss you off? And is it the locking out of other OS's from Apple's hardware, or the fact that no one seemed to care, that's upset you?

    When Apple licensed the Mac OS back in the 90's it hurt what little business Apple did have. Apple is, and has always been, a system provider, meaning hardware+software. While selling the Mac OS to run on non-Mac hardware has been tossed around for years, it will never happen since Apple wouldn't sell enough copies to stay in business by selling hardware that can be replaced with a cheap PC.

    If you want to run a non-Apple OS on a Mac, that's been possible since 2006.

    --

    Nitewing '98

    Everything works...in theory.

  70. No more compiling our own kernel? by Anonymous Coward · · Score: 0

    This affects gentoo, freebsd, arch, everyone.

    I'm not Redhat, or Canonical, so I can't boot my machine without workarounds?

  71. Vista and 7 have one major productivity feature by abigsmurf · · Score: 1

    One feature I can think of off the top of my head is the search functionality of Vita and 7. This is a massive timesaver, especially compared to the painfully slow, limited one in XP. Finding a file/program/email in 20 seconds rather than 10 minutes is a big productivity boost.

    1. Re:Vista and 7 have one major productivity feature by redback · · Score: 2

      Except for the fact that it never works.

      When I still had an XP machine here, I would use it to search my main machine over the network, because it was faster and actually found things.

      Now I use an app called Everything.

    2. Re:Vista and 7 have one major productivity feature by abigsmurf · · Score: 1

      I've never had a problem with windows 7 search, it's always worked fine. Have you turned off aggressive indexing and not added any folders to the index?

    3. Re:Vista and 7 have one major productivity feature by JabrTheHut · · Score: 1

      I've never had a problem with windows 7 search, it's always worked fine. Have you turned off aggressive indexing and not added any folders to the index?

      These are prerequisites for it working?

      --
      Work like no one is watching. Dance like you've never been hurt. Make love like you don't need the money.
    4. Re:Vista and 7 have one major productivity feature by mcgrew · · Score: 1

      You guys keep hyping W7's search, but I find it to be almost useless. In XP you had a lot more choices of how to search, the new search won't even let you hunt for a document by some of the wording in its text.

      Are you guys part of MS's marketing department, or am I just doing it wrong?

    5. Re:Vista and 7 have one major productivity feature by aaron552 · · Score: 1

      the new search won't even let you hunt for a document by some of the wording in its text.

      It does for me? I'm not sure what you're doing wrong, but I know that it definitely brings up documents with the search phrase in them, although they appear to be lower priority than file or directory names that match.

      --
      I had a sig once. It was lost in the great storm of '09.
    6. Re:Vista and 7 have one major productivity feature by Anonymous Coward · · Score: 0

      Yea, it just finds everything in "my documlents" or the library. That helps oh so much when you have 5 drives. The alternative is to let it index all of your files and transimit that to MS.

    7. Re:Vista and 7 have one major productivity feature by abigsmurf · · Score: 1

      Those would be the prerequisites for it to stop working...

    8. Re:Vista and 7 have one major productivity feature by Anonymous Coward · · Score: 0

      Absolutely love everything. Though our imaging set up is pretty awesome.

    9. Re:Vista and 7 have one major productivity feature by Carewolf · · Score: 1

      I thought it was just me, I have tried several time, but have so far never been able to find anything with Windows 7 either. What is wrong with it?

    10. Re:Vista and 7 have one major productivity feature by zugmeister · · Score: 1

      On the local machine it works fine, but if you're not using a windows server and searching a network share that isn't synched for offline use it fails. This is because it queries the Windows indexing service on the remote server. Should you be running a SMB share off a Linux box or OSX Server, you're pretty much out of luck. If anyone reading this has found a workaround for this, please do share!

    11. Re:Vista and 7 have one major productivity feature by Carewolf · · Score: 1

      I can't even search local files. Searching for words I know the files in current directory contains, and the search will come up completely empty. All that pops up is a hint that I can enable indexing to make the search faster, but since the search is more than fast enough, just completely fucking broken, I don't think indexing will help. Making it actually search would help.

    12. Re:Vista and 7 have one major productivity feature by Billly+Gates · · Score: 1

      First off you need to grab your MCSE Windows server book and whack your IT admin over the head with it.

      He forgot to install Windows Search 4.0 on your file server assuming its Windows Server 2003. Also turning on offline mode will backup and force partial re-indexing too if he doesnt want to do that. Windows 2k3 does not support the indexing Vista and later use because it is ancient.

    13. Re:Vista and 7 have one major productivity feature by Billly+Gates · · Score: 1

      Your admin didn't setup your shares right during the upgrade. He needs to install Windows Search 4.0 on the older server 2k3. The indexing it does is not compatible with Vista winfs style sql searching that Windows 7 uses internally.

      Or upgrade to Windows server 2008 or 2012 and it will do it just fine too.

    14. Re:Vista and 7 have one major productivity feature by badkarmadayaccount · · Score: 1

      Desktop search on KDE takes 5 to 8 and indexes PDFs. :P

      --
      I know tobacco is bad for you, so I smoke weed with crack.
  72. Question of trust by Wowsers · · Score: 1

    This is a question of trust. Remember how Intel released in one of their Pentium line of processors that deliberately leaked the processor ID. Oh sure, you could switch it off in the BIOS, but users DIDN'T trust that, and sales did not go well until the next processor.

    Now you're willing to trust Microsoft with an "off switch" to their competition killing lock-out "secure boot" loader. More fool you.

    And where are the alternate BIOS manufactureres? About time to shove Phoenix and the rest up their secure behinds.

    --
    Take Nobody's Word For It.
  73. Re:yes and no by hazem · · Score: 2

    You make some good points. However consider your "retraining" statement, then look at Windows 8 vs Windows XP. I work at a Fortune 100, and they still deploy new machines downgraded to Windows XP. They're just starting to use Windows 7 and that's because it breaks a lot of things to make that change. Moving from XP to 7, and from Office 2003 to Office 2010 requires massive retraining - so Microsoft no longer has an advantage in saying "you won't have to retrain".

    The funny thing about Apple having lost the business sector, it's edging its way back in. In half the meetings I go, people are asking how they can see this or that on their iPads. Our IT department has no choice but to support it.

    One strategy to overcome the problem of investment in custom applications is virtualization. WINE may suck for a lot of apps, but full virtualziation works great and many "old school" apps can be delivered via citrix. Once you do that, then everyone with their shiny new ipads can still run all the old software they had before. In fact I manage an app that's delivered this way. As long as they have an OS that the citrix client runs on, then they can use the app I manage (Access 2007 on SQL 2008).

    So while more and more of the business users are using iPads or whatevers, more and more apps are being run through systems like citrix or being refactored as web apps.

    Now, as a "hacker" I generally like desktops because of all the things you can do with them. But even so, my last 3 "computers" have been laptops/netbooks. But then what do you call the NAS I installed? It runs Linux (or BSD) and is essentially a special-purpose computer. And the media device for getting Netflix and streaming media off my NAS is is just another special-purpose computer. As I'm starting a graduate science program, I am already thinking about how my next "large computer" will be something I will build myself and install in the garage - and I'll access it remotely with my laptop, netbook, or even phone.

    The desktop will still be around for a while, but it's a market that will continue to decline. For their computing needs people (and businesses) will be turning more and more to mobile devices and purpose-built computers. Businesses will also have server class machines.

    Think about what most people do on computers and there's no longer a need to be chained to a desk in the back room to do those things.

    Microsoft will be around even longer than the desktop and you'll still have a job. Indeed while I don't agree with their past business practices I still use some of their products. In fact I have Windows XP running in a virtual computer as I type, so that I can run Office 2007 to do the things that require that. It doesn't even matter what my host OS (it happens to be Linux) because those kinds of details will be come less and less relevant.

    However it seems clear to me the that the desktop as a common way of doing computing, is on the way out. It had a good run. I just hope kids in 10 years have a way to experiment with building and modifying their own computing power like I did.

  74. Re:yes and no by Hognoxious · · Score: 1

    Long ago, towards the end of the last century, desktop computers were BYOD

    No they weren't. Stop talking utter rubbish.

    --
    Confucius say, "Find worm in apple - bad. Find half a worm - worse."
  75. Re:Flash the BIOS.. Muhaha do I have a surprise 4U by Anonymous Coward · · Score: 1

    there is a small 64k static ram and 64k rom built into the cpu chip which also houses the tpm. the core accesses onchip rom and ram on an onchip data bus, none of the activity on the built-in rom and ram are signalled on any chip external lines. At reset the rom is mapped to x'4..0000'-x'4000...ffff', the ram is mapped to x'4100..0000'-x'4100..ffff' and the cpu begins to execute at location x'4000..0000'. The code in the rom expects a 8m flash to be present on the external data bus at x'5000..0000'-x'5000-3fffff' external memory.

    There is an internal onchip flash called the security configuration flash. this flash contains the cpu serial number and a cpu specific symmetric key KCPU,a bit -a 32 bit checksumSVALID, a fuse bit SPERSONALIZE, a symmetric key KJTAG and a bit SMODE and a Public Key SEXTROM. If SPERSONALIZE=1, proprietary JTAG commands allow loading of the secure configuration flash. The on chip rom verifies the checksum of the secure flash area. if the checksum is incorrect the rom code halts. The secure flash can still be loaded through secure JTAG provided SPERSONALIZE still =1. If not the chip is now junk.

    if the secure flash area verifies the onchip rom then uses the KCPU key to verify authenticity to the tpm and the tpm verifies its authenticity to the onchip rom code using KCPU. The tpm is on the cpu chip reachable through onchip cpu address bus. its registers are mapped to x'ffffffff00000000'-x'fffffffff000000ff'. it can access the cpu static ram and uses a mailbox scheme to retrieve and return cmd operands. the login consists of a symmetric challenge response using the cpu key. This cpu key is also programmed into the tpm at personalization time via secure JTAG. The secure JTAG cmds to program the tpm tap use a symmetric key KFACTORY to authenticate that was burned onto the tpm at the factory. this key is specific to a certain chip batch only.
    if login to the tpm failed and SMODE=1 the onchip boot rom halts.

    If SMODE=1 the code in the boot rom now inspects the first 32 bits of the external flash at x'5000..0000' to find an offset to the signature area on the extrom. then a MD5 hash sum is calculated over x'5000-0004'-begin of signature. then the MD5 hash is compared with the mD5 hash in thr signature area. if the hashes do not match the onchip tom halts. if the hash compare then the hash public key signature is verified with the public key SEXTROM. if the signature is incorrect then the on chip rom code halts.

    if the signature is correct the extrom code initializes the external memory sdram controller, does other chipset inits and then branches to a firmware environment.
    this can be UEFI. the Firmware environment FE if configured to enforce can verify the signature of the first boot loader code it loads over multiple paths, such as disk, usb or network. the external code loaded must be signed by an approved key stored in the verified tpm. If the signature is incorrect FE will not branch to its entry code. if it is correct FE turns control over to the external code while providing API facilities for callbacks from that code. This code will now load the operating system kernel into memory along with other binary objects it might require and verify the public key signature of these components. if one of the signatures is incorrect the code will return control back to the FE. if it is correct, the FE branches to the kernel and the kernel initializes. fE notifies the kernel over parameters that it is in enforcing mode. if the kernel loads additional binaries it chcks the signature of these components with a public key that is compiled into the kernel. if a component has an incorrect signature it is not loaded. Application images are also verified using public keys by the kernel proor to execution.

    the dram interface on the cpu chip encrypts and decrypts 64 bit 32 bit 16 and 8 bit accesses to the dram with a symmetric key KMEM when reading or writing to the external dram. KMEM is random and cleared on reset on all components. This key KMEM is also known to other truste

  76. Re:yes and no by RobbieThe1st · · Score: 2

    Mod parent up. Of /course/ Desktop sales are on the decline - a P4 is "usable" still, and a C2D is a perfectly good main system.
    With computers lasting for a number of years, and there being no reason to upgrade...

    Of course, mobile devices may be on the rise, but it's sort of a "comlimentary" device, not a replacement. Sure, some can use it to fully replace their desktop, but those are the people who could be switched to a shiny Linux distro as well.

  77. Re:Restrict Government PC Purchases to Open Hardwa by stretch0611 · · Score: 1

    It seems like the obvious way to block this type of stuff is to pass legislation requiring government agencies to only purchase PCs that are free from such encumbrances.

    Unfortunately, in this climate of Democracy to the highest bidder, Microsoft can still buy the best lobbyists/politicians compared to any other OS vendor.
    So if any law gets created/passed, I would expect it to favor the false god of "security" instead of openness.

    --
    Looking for a job?
    Want your resume written professionally?
    DON'T USE TUNAREZ!!!
  78. Re:Approach no. 4 File complaint to D.O.J. by Spiked_Three · · Score: 3, Insightful

    haha. Apple has made that frivolous. What jury (be it a judge or real jury) would find Microsoft has a monopoly these days? Apple keeps reminding us how they are the number one now.

    Oh and btw, doesn't Apple also restrict what boots and how? to make sure you ONLY buy Apple hardware? Yep, MS keeps 90% of the market, can and WILL dictate to the OEMs how to build their machines, and there is nothing anyone can do about it, thanks to Apple's efforts.

    And top it off, MS is getting more into the hardware market, and controlling the software sales channels, they want to be just like Apple. I can't wait to see how it comes out. My guess is both MS and Apple will end up being losers, and guess what, linux will still be a loser also. Something new will come along, dictated by ATT and the Olympic comittee, and the 99% will still be whining about how the 1% controls everything. Nothing will change.

    --
    slashdot troll = you make a compelling argument I do not like the implications of.
  79. no such requirement by Anonymous Coward · · Score: 0

    For x86 there's no requirement to ban a user-modifiable option for secure boot, but tnere's no ban on it, no requirement to have the option there.

  80. Re:yes and no by johnw · · Score: 1

    Long ago, towards the end of the last century, desktop computers were BYOD

    No they weren't. Stop talking utter rubbish.

    I presume then that you weren't there at the time? Desktop computers when they first appeared were indeed a kind of BYOD, although obviously people didn't actually carry them around with them. What did happen though was individual departments/individuals made a business case to buy their own PCs, and then suddenly could do what they wanted, rather than what the high priests of the computer room told them they could do. It led to chaos in many cases, but it also greatly empowered end users (and stripped the high priests of much of their power). Obviously there was then a follow on as all the PCs were brought under computer control, but to deny that PCs were BYOD is just silly.

  81. Re:yes and no by Kalriath · · Score: 1

    No it isn't. In all my time I never saw such a thing. Either there was an IT department that set up the PCs with what passed for lockdown in Windows 3.11 for Workgroups, or everything ran on an NT 4 Terminal Server.

    --
    For a site about things like basic rights, Slashdot users sure do like to censor "dissent".
  82. Re:He's right you know... by Mitreya · · Score: 1

    TL;DR: Windows took twice as much time to install, cost me 200 times as much money, and provided about 10% of the software.

    I always get modded as troll here, but understand that experience with Linux really, really varies. I will avoid discussion about cost/software, but Linux may easily fail to install depending on your hardware
    Last time I needed to install Linux on a desktop, it took 3 different distros (settling on OpenSUSE, actually), before I could get it to work. The first two distros hit a wall somewhere along the install process and could not be finished.
    And, according to my research, default installation of OpenSUSE (with whatever window manager system that is included) cannot properly support two-monitor desktop (at least that's how far I got trying to get 2 monitors to work so far - it doesn't work and I have seen many others complain about it)
    Linux can be surprisingly frustrating.

  83. Re:He's right you know... by Anonymous Coward · · Score: 0

    This is subjective at this point and highly dependent on hardware. My AMD hardware (mostly my old laptop) is not as linux friendly. I had an older intel one that worked great with linux and installed ubuntu better than XP. It really does vary.

    Windows 7 in my experience works so much better out of the box unless it is a very new piece of hardware and you have the original 2009 discs and not the Win 7 sp1. I gave up with Linux on my laptop as Fedora is the only distro that is stable on it. No other one runs and I have tried numerous drivers and the best I could do is compile it myself due to some apis and libraries that are not compatible with newest kernels. I hate broadcom. Fedora backported it and thanks Redhat for that.

    Anyway I do not like having computers turned into drm appliances and this nightmare I have been afraid for a decade now. A user shouldn't have to go to shese extremes to play with Linux, but sadly I assume most just do not care. Windows 7 supports secureboot and secureboot is great to keep rootkits out. I just wish MS didn't have the keys and there was some way like over a wifi/lan a server from a reputable openbody could upload the keys to the machine regardless of the OS kind of like secureDNS? Hmm doesn't sound like a bad idea but scary as hell if a hacker cracks it.

  84. Re:yes and no by aix+tom · · Score: 1

    Which proves you weren't there at the time, youngster, since the phenomenon took place *before* Win 3.11.

    I witnessed (and did) some of it at the very end of it. For example, in 1986 my on, personal C64 was the first computer that ever was inside my school.

    Then in 1988 it was the first computer ever in the company I started my apprenticeship, where I took it to draw electrical circuit diagrams in a more productive way than with copier / pencil / tip-ex.

    At the start of the 1990 it was basically over in any companies I worked for.

  85. Re:yes and no by johnw · · Score: 1

    Just because you're too young to remember it doesn't mean it didn't happen young padawan. We're talking about a time long before anything like NT4 (or even any kind of NT) existed.

    Typically the PCs in question ran DOS, with first Visicalc and then Lotus 1-2-3 as the killer app which had to run (which, incidentally, is what tied the market in to MS-DOS).

  86. Re:yes and no by Znork · · Score: 1

    I saw the same thing with departments buying their own equipment, both in a 100k+ employee corporation and in university departments. The timeframe would have been approximately 1985-1995.

  87. Re:yes and no by grahammm · · Score: 1

    Yet while tablets, smartphones etc have made the actual computing devices smaller, monitors for desktop computers have got bigger. Systems such as the Commodore PET and the original MAC had very small screens. Not too long ago, 14" or 15" monitors were standard, now 20+" are common.

  88. Approach 4: by l3v1 · · Score: 1

    Approach 4: Lobby for manufacturers to include the capability - wether software or hardware (jumpers man, they are good for everything :) - of disabling secure boot if the user wants to. Actually approaches 1 & 2 re crazy stupid, Approach 3 is unrealistic, so the above Approach 4 should be the one and only. We'd all be better off this way I tell ya.

    --
    I am putting myself to the fullest possible use, which is all I can think that any conscious entity can ever hope to do.
    1. Re:Approach 4: by shutdown+-p+now · · Score: 1

      On x86, you don't need to lobby anyone, since such capacity is already there - it's part of hardware requirements for Windows 8 hardware certification (you know, that "Designed for Windows" sticker).

      On ARM, on the other hand, those same hardware requirements mandate that secure boot cannot be disabled.

  89. Re:No one cares by Johann+Lau · · Score: 1

    Microsoft isn't going to lock out anything, so stop spreading the FUD.

    Microsofts sole goal is "A PC in every house, running Windows." Their tactics match their Nazi goal. How's that for FUD? Fuck you.

  90. Option #X: Buy Win8 laptop, return it the next day by gaiageek · · Score: 1

    I see this as a method of protest that will send a clear message to the PC makers and Microsoft:

    1. Buy a new Windows 8 laptop from a reseller who doesn't charge a restocking fee.
    2. Open the box (at least). If you feel like it, try installing X flavor of Linux (except Ubuntu, apparently).
    3. Return it the next day. Reason for return: can't install X flavor of Linux. If the customer service person happens to be savvy enough to say "You just need to disable Secure Boot", say you bought the laptop because it included that feature, because you heard it improved security. If you have to disable it, you no longer want it, and you'll keep using your old laptop.

    If enough manufacturers are seeing this reason for return and losing money because of it, you can be sure they'll start bitching to Microsoft.

  91. How is this going to work with VMs? by gooneybird · · Score: 1

    I run multiple virtual machines with multple OS's. Windows and *Nix variants. How is this going to work (or not work) with secure boot?

    1. Re:How is this going to work with VMs? by amorsen · · Score: 1

      Virtual machines will work just fine. Untrusted guest operating systems won't be able to get complete hardware access, but you rarely give virtual machines complete hardware access anyway because that compromises the hypervisor.

      That is in fact one solution nobody has proposed yet: Get a minimal hypervisor signed and run everything as guest. It would break the binary blob graphics drivers unless you put those in the hypervisor, but Fedora can't run those in Secure Boot mode anyway (since they won't be signed with the right key).

      --
      Finally! A year of moderation! Ready for 2019?
  92. approach3 works for me by cedarhillbilly · · Score: 1

    I'm using a System 76 laptop for about 4 months now. I like the choices of hardware options. Here's the downsides. I had a rocky ordering experience: Billing address and shipping addresses were different and 'broke' their system so it took a phone call to fix the problem. Then I had to reinstall the operating system to fine tune Ubuntu; Not a biggie since I normally make my own install on any new box. Since then it runs like a clock. Laptop (Lemur is the model) is light, fast, has a nice touch...everything I wanted and no MS TAX. check them out at https://www.system76.com/ Maybe if there's more demand for open hardware...more people will build it.

  93. Re:No one cares by Johann+Lau · · Score: 1

    That's not paranoia, that's literacy plus attention span. Also, you're mistaking stupidity for manlyness. But hey, make the best of what you got, right? Right.

  94. Re:Restrict Government PC Purchases to Open Hardwa by eugene+ts+wong · · Score: 1

    Microsoft doesn't have access to politicians from all governments, do they? That isn't just a rhetorical question. I really want to know.

    I figure that if at least a few small governments could PCs that are free from such encumbrances, then it will still help the worldwide community.

  95. Re:No one cares by jbolden · · Score: 2

    Well first off most people capable of a server install will be capable of disabling UEFI or self signing so my inclination is no. Right now this is mainly being pushed as a desktop feature. On the other hand once implemented there is no reason that it couldn't be a server feature. Servers are always going to be more diverse hardware and server installs always more complex so people who make server class hardware are likely to offer better instructions for over riding.

    I honestly think the Linux desktop people are too worried here.

  96. Re:He's right you know... by cp.tar · · Score: 2

    Linux is completely unusable to the average computer user, so I dont think there is much loss here. Suffering from the same fragmentation as Android and lack of support for so many software companies. No one wants to find stupid workaround back-ass-wards ways to just get they're damn computer working.

    Feeding the troll, I know, but still.

    Last week I attempted to rescue my friend’s laptop. Some sort of low-end Lenovo. Not even a factory reset made it recognize its own battery, play sound without distortion, or work without staggering for 20 seconds every few minutes. She needs Windows for work, so she set off to buy a new laptop.
    I loaded Bodhi Linux on the faulty laptop just to see if the problem was in Windows and related software, or if it was in fact in hardware (as the laptop had worked normally prior to the instant where all of the above problems occurred). Lo and behold, everything works in Linux. And even though Enlightenment is not the most user-friendly of desktop environments, she took to it immediately. She’s amazed with its looks, its speed, and its reliability. And it is now her secondary machine, and not a paperweight.

    There are a few details that could and should be polished, but unless you need Windows-specific software, you’ll do just fine with Linux.

    --
    Ignore this signature. By order.
  97. Re:No one cares by Johann+Lau · · Score: 2

    I've got nothing? You mean like the thing that you didn't address, but keep throwing fits about, "A PC in every home, running Windows?" You're like a little kid who thinks it cannot be seen because it has the eyes covered -- just because you are unable or unwilling to, you know, catch up, doesn't mean I don't know what I know.

    It just means it's STILL waiting there to be addressed by you, if you could just stop crying for a second :D

  98. Re:Approach no. 4 File complaint to D.O.J. by jbolden · · Score: 4, Informative

    First off Apple's share of the desktop market in the USA is 8-12% which is about where it was when Microsoft was considered a monopoly. Microsoft's defense at this point might be the existence of a tablet market where they have no presence. But even if one does include tablets Windows still far outsells iOS and OSX combined. Apple targets profitable customers not marketshare.

    As for Apple restricting boot. No they don't. In fact they produce and support a multi-platform bootloader for their computers: http://www.apple.com/support/bootcamp/
    They also work with parallels and VMware to help people load virtual images of windows.
    Apple doesn't mind in the slightest if you buy their hardware and then run someone else's OS on it.

    On their iOS devices, iTunes allows you to put any BIOS image in you want.

  99. Re:No one cares by Anonymous Coward · · Score: 0

    There is nothing to address. The burden of proof is on you and the person who posited the original belief. There is zero evidence that future PCs are going to be Microsoft locked. Oh, and as I recall, you were the one who started up with the insults.

    Their tactics match their Nazi goal. How's that for FUD? Fuck you.

    Remember that, asshole?

    Until you have something, I'll let you get back to chasing flying saucers.

  100. Re:yes and no by jbolden · · Score: 1

    I agree with your analogy but your history is a bit screwed up.

    Visicalc was popular with the late 70s era machines, CP/M and AppleDOS. It had made it over to PC's (PCDOS later MSDOS) but was underpowered. In 1983 Lotus came out with Lotus 1-2-3 and took the spreadsheet market. Lotus had banked heavily on DOS32 (running DOS apps in 32 bit mode) being the dominant speadsheet and had treated their Windows product as secondary. So during the transition to Windows Lotus fell behind Excel though their suite, the AmiPro suite, was excellent by the later Windows 3.1 days. Excel also beat Lotus on price.

    While PCs had come into mid and large business in limited capacity the switch for the average corporate worker happened during the Windows for Workgroups days. By that point there was no visicalc at all.

  101. Re:No one cares by samkass · · Score: 1

    The interesting part of this question is that Windows 7 runs just fine on a Mac, but I don't see Apple climbing in bed with Microsoft to put someone else's security on the Mac boot loader. So will Macs be able to boot Windows 8?

    --
    E pluribus unum
  102. Re:yes and no by jbolden · · Score: 1

    GP, johnw, is absolutely right.

    In the times of WoW and before it generally wasn't an IT department that set them up. IT controlled the mainframe or the mini. They didn't have responsibility for other office equipment like typewriters or photocopiers. PCs were classified with other office equipment when they first showed up for most companies. IT started getting involved once people realized that PCs were fundamentally different than terminals in that the corporate data was on them and functionality was migrating off the mainframes entirely.

  103. Re:yes and no by jbolden · · Score: 1

    It comes down to what you want to measure:

    1) Total size of the market. In which case most of those factors are irrelevant. As an aside the average phone lasts 11.5 months. What drives the difference in replacement cycle is much higher breakage for smartphones.

    2) Size of the software market.
    3) Relative rate of growth of the different markets.
    4) Time spent using the device.
    5) % of the population that owns or regularly uses a device.

    As for gaming rigs, they aren't enough of a market at this point to be a huge influence. In a few years they may be.

  104. Why it's accepted by ilsaloving · · Score: 1

    I can tell you exactly why, and it's two reasons:
    1. There's been a steady appliance-ification of computers for years now.
    2. Consumers just don't care enough to take proper care of their own computers.

    Both MacOS and Windows are getting more locked down, to reduce the possible attack surface. Recent examples are Gatekeeper on OSX and now the this secure boot mechanism on Windows 8. This will just continue for one simple reason: It must.

      As much as I hate this sort of thing, I just can't see an alternative. At this point it's unquestionably clear that average joe computer user cannot/will not practise safe hex, so the only other option is to take control away from them.

    I am personally very tired of seeing million strong botnets surfacing every few months, filling my inbox with spam and doing other unscrupulous things. All because people can't be bothered to use that modicum of critical thinking skills necessary to avoid trouble.

    As long as it's possible to manually disable the locks they put in, for those of us who know what we're doing, I support this endeavour. If that option ever goes away... I'll reconsider my position then. (And for the nitpickers, I'm not counting tablets in this. They are appliances that happen to have computer-like qualities.)

    My own parents barely know how to press the power button on their computers, but I've at least taught them to be paranoid, and if they see something they consider suspicious, they call me.

    1. Re:Why it's accepted by cheros · · Score: 1

      So your approach to preventing botnets is to handcuff every computer user :)

      MS forcing UEFI only has marginal effect on security if they do not change the design of the architecture on top, which is where the real problem lies. Users want to install their gadgets, toolbars, icon themes and other crap you have to wade through when you try to fix a system, and there is no way to prevent that because it uses EXACTLY the same process as installing a useful program does.

      Ergo, the absolute only thing UEFI will do is make your life harder to go non-Microsoft. Amusingly, it also kills off all the sales they have made to people who like Apple's hardware more, but cannot shake free from the MS software shackles.

      Oh, and if you *are* playing the UEFI game (which may snap back the gaze of anti-trust regulators on Microsoft pretty fast) you will probably also suffer its failure. Because it will get in the way of using a device as sure as Microsoft's attempts to implement DRM have..

      --
      Insert .sig here. Send no money now. Owner may sue, contents will settle. Batteries not included.
    2. Re:Why it's accepted by ilsaloving · · Score: 1

      I'm not sure I'm getting your point.

      MS only forces secure UEFI on the tablets. Personal computers are supposed to have it switched on by default but can be disabled again. And I have heard nothing to indicate that Windows 8 will refuse to boot on a computer that does not have this enabled. The windows 8 release preview works perfectly well in the virtual machine I tried it on, for example. The only thing keeping Windows 8 from booting on apple hardware is the driver support.

      Further, at no point did anyone ever say that UEFI was some kind of magical security silver bullet. It is just one tool among many. All I'm saying is that I'm not surprised that these tools are being put in place. I predict eventually people *won't* be able to install their free screensavers and comet cursors unless they do very specific things. For example on the Mac you have to explicitly and knowingly configure Gatekeeper to allow non-signed apps to run.

      And anti-trust regulators arn't going to do squat because Microsoft isn't restricting anything. They arn't preventing you from installing another OS on the machine. Either choose an OS that has signed keys like Fedora or Ubuntu, or go into the BIOS settings and shut off SUEFI. The only possible issue would be with tablets, and Microsoft (as of now) has virtually 0 market share in that. Not to mention that almost all tablet manufacturers have locked down their tablets similarly.

    3. Re:Why it's accepted by cheros · · Score: 1

      Serves me right for not reading in more detail - but if it can be disabled, why are Linux distros worried at all? Kill it, never enable it, a bit like the Trusted Computer idea, remember that one? I still have machines with never-in-their-life-enabled TPMs.

      As for Surface - I personally don't see the niche, especially since the OEMs won't hesitate to bring out their own, competing platforms since Microsoft has excluded them from the Surface party. And it doesn't take much thinking to guess what platform they will try.

      Originally I did not consider Linux viable enough to compete with Surface as usability seemed to be as much an afterthought on Linux as security was on Windows (I've been using Linux since Slackware came on floppies so it's not like I haven't seen many attempts). However, Steam working on Linux gaming unexpectedly changed that game (sorry) from the consumer side, and I have as yet no feeling yet as to how that will turn out.

      At least it won't be boring..

      --
      Insert .sig here. Send no money now. Owner may sue, contents will settle. Batteries not included.
    4. Re:Why it's accepted by ilsaloving · · Score: 1

      but if it can be disabled, why are Linux distros worried at all?

      To be honest, I really don't know. The likelyhood that someone will go form Windows 8 to Linux, but both not know what to do nor know someone who does, seems to me to be vanishingly small.

      The Microsoft Surface is interesting. The biggest problem in the Windows ecosystem, in my mind, has been mediocrity. You get a new machine that is debatably well engineered, and so full of crapware that the first thing you have to do before you can even use the damn thing is reinstall the OS from scratch. That's the biggest reason why I moved to OSX. I simply got tired of the bullshit. I wanted a machine that will reliably turn on and work.

      The Surface is the Microsoft equivalent of that Apple machine. It's produced by Microsoft, with a reportedly exquisite attention to detail that you do not find in most other machines, and it's a clean OS install with no crap. To me this is extremely promising. Microsoft is taking a big risk, but I think it's a risk they MUST take. It's a shot across the bow of all their supposed partners that says, "See? This is what we think a Win8 tablet should be like. Do something as good as this."

      AFAIK tablet devices WILL be locked down (at least the ARM base ones, maybe not the x86 ones), so I don't know if it will be possible to put a linux distro on them. But yes, the stuff happening right now is extremely interesting and I look forward to seeing how things progress.

  105. Re:No one cares by Johann+Lau · · Score: 1

    3rd post, and you still only moan about strawmen. What a fascinating surprise!

    "There is zero evidence that future PCs are going to be Microsoft locked."

    You simply ignore this:

    "Their tactics match their Nazi goal."

    They do. There's your "evidence" - it involves homework, sure. So? Do the homework. And you know what, "nazi" is simply shorter than "totalitarian", and that in turn is from THEIR internal memos and public statements, it's not an exaggeration at all.

    If you had the capacity or the will to get the point, you already would have. But you'd play with strawmen. Which, incidentally, doesn't insult me at all, it's just boring.

    I meant the "fuck you", and why not. If that pisses you off so much, what the fuck, did we meet? If not, what is it to you? Can you not accept having met with disapproval from a perfect stranger, that you have to project and flaunder about with unintentional irony such as "whatever makes you feel better"? This is just sad, and it's not even about Microsoft, more about the kind of dumb fucking person who would stand up for them.

    As for "who started the insults":

    just another paranoid, scaremongering tactic being employed by the Linux fanboys.

    I'm none of the above, yet I am literate and have an attention span and whatnot. You're either a shill or a useful idiot -- so you preemptively insult anyone, and that is where you're stuck at. Bluffs and barking. Pitiful.

    Thanks for the demonstration though, keep it up. Lest we forget.

  106. Re:yes and no by jbolden · · Score: 1

    I hope you see the connection between still being on XP and Apple being in 1/2 the meetings. What's happened is IT is refusing to upgrade in a timely manner so end users are upgrading themselves.

    However it seems clear to me the that the desktop as a common way of doing computing, is on the way out. It had a good run. I just hope kids in 10 years have a way to experiment with building and modifying their own computing power like I did.

    No they won't. The golden age of kids modifying the computers was the late 70s when they were hobbyist systems. Even Linux today is too complex for kids to change. The computer languages for systems are less fun, though web languages and scripting languages work well.

  107. Re:yes and no by jbolden · · Score: 2

    Apple doesn't lock other OSes from Apple hardware. They in fact write a multi OS bootloader (Bootcamp) and give it away free to make it easy for people to install other OSes. They work with VMWare and Parallels for people who want to run OSes in VMs.

    None of what you are saying is true.

  108. I'm not that worried by cheros · · Score: 1

    The issue why UEFI dies will be the same as with most DRM scams, sorry, schemes: maintenance. It only needs to get in the way once or twice in $BIG_CORPORATION and you'll see the hardware fly out of the boardroom window.

    UEFI is again an approach to help one organisation solve a problem it only has itself.

    What happened to DRM protection of documents (which I saw so enthusiastically presented by Microsoft to some military clients)? Gone. *WAY* too hard to implement versus a raft of other container based methods which were not only simpler to set up, but also easier to audit and to understand for decision makers.

    So, as per topic, I'm not worried. Time is your best friend here - just let it fail, and fail again. And bring every failure loudly in the news. Eventually this will be as distant a problem as the Clipper chip..

    --
    Insert .sig here. Send no money now. Owner may sue, contents will settle. Batteries not included.
    1. Re:I'm not that worried by Jiro · · Score: 1

      DRM protection of documents didn't last because the only thing Microsoft has to gain from DRM protection of documents is to have a new feature to sell to the customer. If the customer doesn't want it, Microsoft gains no benefit from forcing it.

      UEFI secure boot is different because Microsoft has something to gain from it even if no customer wants it. It is a scam in the sense that the stated goal of "security" is fake, but as a way to stop Linux, it's very real.

      And if it gets in the way in a big corporation, what's the corporation going to do? Tell Microsoft that they won't buy Windows any more until Microsoft changes it? That's not going to work.

    2. Re:I'm not that worried by cheros · · Score: 1

      I once worked for Microsoft's no 2 customer in the world. Trust me, when they say they're unhappy, Balmer will quietly fix it.. I also know that the way they work is not dissimilar to other organisations, so I personally see that pressure bigger than will be visible in the press.

      You see, there is another tiny little problem: older versions. Vista has demonstrated to Microsoft it needs to be VERY careful or it will face the same problem. Given that Win 8 has a totally different UI which would require yet another round of end user training, a new structure which means techs need to be brought up to speed and create new corporate builds and now on top of that UEFI which is a v1 and thus not exposed to life in the real world I suspect Microsoft has just added a barrier too much for widespread adoption.

      As for the home market, with Steam suddenly making gaming on Linux commercially viable (which will still take some time to get right, but it's a good step) there will be more cal for machines that run Linux. And run "older" versions of Windows for the above companies.

      As MS has tied people to UEFI and has told a bunch of OEMs that they won't be part of the Surface party, guess what they will be doing?

      If I had shares in MS I would *seriously* start to think about flushing that last bit before it sinks. Because I honestly don't see a way up with all these problems. Or rather, I do. Just not for Microsoft..

      --
      Insert .sig here. Send no money now. Owner may sue, contents will settle. Batteries not included.
    3. Re:I'm not that worried by Jiro · · Score: 1

      Most of the problems with Windows are either 1) real problems even by Microsoft standards, but problems that Microsoft puts low on the priority scale, or 2) problems that happen because marketing decides to put something stupid into Windows. If a big company asks for one of those to be fixed, Microsoft will fix it.

      But UEFI is nearly unique. It fits into neither of these categories; it's something that Microsoft broke on purpose to help extend its monopoly. The fact that Microsoft is willing to fix bugs and override marketing for big companies doesn't mean they will undo UEFI; UEFI is in a complete other category of things wrong with Windows and there's little precedent for it.

  109. Thin edge of the wedge. by Anonymous Coward · · Score: 0

    That's so cute you actually believe this style of lockdown won't spread.
    Or become even more mandatory for more situations with less options the longer it's allowed to exist.

    Stupid. But cute.

    1. Re:Thin edge of the wedge. by amliebsch · · Score: 1

      The point is that there is nothing that will be preventing you from doing whatever you want to the hardware you bought: hack it, wipe it, blend it, nobody will stop you. What you are actually complaining about is that the hardware you bought isn't exactly the hardware you want. But, it's a lot harder to blame other people for the poor purchasing decision you made.

      --
      If you don't know where you are going, you will wind up somewhere else.
  110. Re:Restrict Government PC Purchases to Open Hardwa by stretch0611 · · Score: 1

    I'm sorry, I meant mostly the United States. We unfortunately have too much Democracy to the highest bidder.

    Actually in Europe, the EU courts are more likely than the US to actually stop an a potential problem like this secure bootloader.

    --
    Looking for a job?
    Want your resume written professionally?
    DON'T USE TUNAREZ!!!
  111. Monopoly Power by Anonymous Coward · · Score: 0

    Most of the dialogue I've read on this topic seems to miss the point.

    While this may represent a sincere (I doubt it) attempt to provide more security it looks more like MS is using it's monopoly to lock out competition and lock in it's current customer base.

    Why do people simply accept this?

  112. Re:yes and no by JabrTheHut · · Score: 1

    DOS32 came out in the mid 90s. In the 80s, PCs were 16 bit. And they remained 16 bit until the mid 90s, because the OS was 16-bit and ran 286, 386 and 486 chips in 16-bit mode. I don't recall a single 32-bit desktop in the 80s. And I was using Lots 1-2-3 in the mid 80s.

    --
    Work like no one is watching. Dance like you've never been hurt. Make love like you don't need the money.
  113. Re:No one cares by neokushan · · Score: 1

    Windows 8 can boot just fine without UEFI secure mode, it's the UEFI secure mode itself that prevents stuff from booting, not the OS (Although it may also have its own internal checks for the "chain of trust" for various reasons).

    --
    +1 IDisagreeSoHeMustBeATrollOrAnAstroturferOrAShill
  114. It's mine, mine, mine! by Anonymous Coward · · Score: 0

    > Why is everyone so quick to accept the corpse of TCPA in new clothes?

    A: Despair.

    Just picture the tablet market increasing (say, fivefold) and the desktop falling, say, to half its size. I'd say these are even modest predictions (though the desktop market might not fall that much). On the whole, the OS market share would very different from what it's now.

    People will be wanting iOS and Android devices -- including notebooks. Linux market share could not fall that much (because tech savvy persons wantthings that Android won't give them), so whatever share it has now could be increased, say, sevenfold.

    It's "death by a thousand cuts" -- well, actually only 3 to 5 competitors -- and a scenario identical to what happened to browsers is about to turn Windoze into a new Internet Explorer regarding loss of market. How long will M$ Office last when people try Libreoffice and see how good it is?

    It will be like Gimp and PS: some people will be eager to post the paid one is much better than the free alternative -- meanwhile hordes of users will use the FOSS one and won't buy the other.

    Now, losing a partner like M$ brings a lot of stress to computer makers: what to use if not Windoze? Would people buy an unknown OS? If Linux, then which one?

    Parenthesis: I think Canonical is positioned to have a great jump in usage, if they play the right cards -- and we won't be able to blame anyone but us for their success. We failed to recognize the needs of those who hate computers and need a moronic system. At the same time, Canonical is assuming an incredible high risk for abandoning the traditional Linux user base (UI tweaking nerds). But what sense exists in competing with the hundreds of distros dedicated to these latter?

    Going back to my line of reasoning, such stress and M$ possible despair when they face their ultimate demise would make them join forces and try to eliminate all traces of the already minimal amount capitalism in the industry, effectively closing themselves with the market in an armadillo fashion (as if thinking "it's too inhospitable out there... and the market is mine, all mine").

    A cornered animal is always most dangerous.

  115. Re:yes and no by jbolden · · Score: 1

    Lotus started playing around with expanded memory with 1-2-3 version 2.0 which ran on the XT. When the 286s came out with the capability for using expanded memory to emulate extended memory (cheaper hardware, better performance) this became popular. At the time of Windows 3.0 Lotus was focused on extending their DOS product. As far as when you could run 32 bit DOS apps, I can find the hard dates. But I was using DOS32 around Nov 88. DOS5 supported all sorts of 32 bit extensions and that was June '89. DRDOS was earlier had all sorts of additional support for DOS32 was May '88. So I think we are talking 87-89 not mid 90s.

    I don't know what you mean by DOS32 in the mid 1990s unless you mean the NT version that was emulated.

  116. Re:yes and no by jbolden · · Score: 1

    I found a lower bound. March 13, 1988 there is an article in the NYTimes about the upcoming Lotus 1-2-3 3.0. So at this point we are down to somewhere between March and May of 1988 when DOS32 came into use.

  117. Re:yes and no by JabrTheHut · · Score: 1

    I remember expanded memory, but that was released in the late 1980s. And the expanded vs extended memory battle and the himem rubbish was early 90s. You couldn't expand XT memory past 1MB. Well, there were add-on cards etc but they were rubbish and hardly mainstream. The 286 was the first PC with more than 1MB of RAM, and you needed MS-DOS 4 to use expanded or extended memory. Or at least you did with clones.

    MS-DOS 5.0 was released in 1991. DOS32 was released in 1996. Were you really using them 2+ years before their commercial release?

    --
    Work like no one is watching. Dance like you've never been hurt. Make love like you don't need the money.
  118. Re:yes and no by mcgrew · · Score: 1

    Home computer sales were a bubble. People bought them for the internet, and once you have one most people don't need another for years. Now everyone who wanted one has one. But desktop computers aren't likely to go away in the office.

  119. Re:yes and no by mcgrew · · Score: 1

    Long ago, towards the end of the last century, desktop computers were BYOD and Visicalc was the killer app.

    Visicalc died a quarter century ago.

    the desktop computer is precariously balanced on the edge of its extinction event

    Office workers need big screens and good keyboards. The desktop's death has been greatly exaggerated; it's not going away any time soon. You sound like one of those guys in the '90s who said desktops would be the death of mainframes. Guess what? They're still for sale and used by the same companies who have always had them.

  120. Re:yes and no by mcgrew · · Score: 1

    Long ago, towards the end of the last century, desktop computers were BYOD and Visicalc was the killer app.

    Visicalc ran under CP/M. IBM was the reason for MS's dominance, because "nobody ever got fired for buying IBM." Lotus ran on Macs as well as IBMs.

  121. Re:Approach no. 4 File complaint to D.O.J. by Anonymous Coward · · Score: 0

    Apple is a hardware company, Microsoft isn't. (yet but in the process of becoming one) and also Apple is not a convicted monopoly.

  122. This will kill Truecrypt booting also by Anonymous Coward · · Score: 0

    Will this kill Truecrypt encrypted boot drives?

    Most likely YES:

  123. Re:yes and no by johnw · · Score: 1

    IBM was the reason for MS's dominance, because "nobody ever got fired for buying IBM"

    Doesn't follow at all. You'll notice I said "MS-DOS" and not "MS". There was a choice of three different operating systems to run on the IBM PC at launch, so you could have run any of them and still been buying IBM. What gave MS-DOS the edge was that early adopters wanted to run Lotus 1-2-3. MS-DOS was so badly written that Lotus had to work around it, particularly for driving the screen, which led to the position that it was difficult to use anything else.

  124. Re:yes and no by jbolden · · Score: 1

    You are getting confused here.

    XT: expanded memory. This was a card. These sorts of cards existed for CP/M systems. You didn't need DOS 4 the applications were responsible for mapping the card's memory into memory. The first standardized card, that is card with OS support for expanded memory was April 1985.

    286: extended memory. You could run in 286 mode and use up to 16 megs. Also DOS would allow 286 mode programs. But you could also use extended memory in place of expanded. http://en.wikipedia.org/wiki/Qemm. This worked fine on DOS 3.31 and possibly earlier versions. I know Microsoft introduced their own EMS drivers with DOS 4.01 but I didn't use those so I have no idea how they worked.

    DOS Protected Mode Interface. the 0.9 version was included in DOS from 1990 on (and of course you could get it via. FidoNET or other BBSes) and heavily used prior. This standardized Protected mode programs but Lotus didn't follow the standards.

    The later version that was used inside Windows 3.0 made this even more popular, though it was a DOS function.

    DRDOS 5 and MSDOS5 -- allowed real mode DOS applications to load some drivers into hi memory area using a virtualized memory map. Really really cool, really really useful. Nothing to do with protected mode and 32 bit DOS apps.

    DOS32 I'm not sure what you mean by this. I think we are using the word to mean two different things since what I'm talking about would have been pointless by 1996.

  125. Re:He's right you know... by Sigg3.net · · Score: 1

    Mod parent up!
    I install a new GNU/Linux every week in virtualbox or on physical systems. The fully installed system, containing office suit and everything, is usually up and going in 15-30 minutes. The other week my brother asked me to reinstall his win7 machines. Having loaded the OEM images (which took hours), the install itself took around 45 min - 1 hour.

    I slipped my brother a Ubuntu 12.04 disk I had laying around. In case of trouble, boot that baby up and rid yourself of a world of hurt.

    Personally, I use #! Linux, OpenSUSE 12.1, Fedora 17 and Salix OS; whereas my GF can't be pried away from her Ubuntu laptop. I've started showing OpenSUSE to clients, and they say: "I really don't care as long as it lets me do what I want." Apart from CAD users, everyone has been satisfied with a Linux install feat. LibreOffice.

  126. Re:yes and no by jedidiah · · Score: 1

    > I don't recall a single 32-bit desktop in the 80s.

    All of the MC68000 based machines were 32 bit.

    Intel lagged behind other vendors in this respect and their parts were cheaper as a result. That's why the 8088 was in the first PC. DOS was designed that original IBM PC and the OS inherited some of the limitations of the hardware.

    That hampered MS-DOS and Windows despite Intel gear catching up to the Motorola stuff.

    The resulting hacks and manual memory management still had to be used on MS-DOS into the mid 90s when Win95 took over.

    --
    A Pirate and a Puritan look the same on a balance sheet.
  127. Re:yes and no by IntlHarvester · · Score: 1

    This arrangement lasted into the NT era. First real IT job I ever had was in a huge corp which managed PCs on the department level. You could walk around and see one group of people on DOS/Novell, the next group on Macs, the next running X11 Unix apps on Windows, and even some NT 3.5 and Citrix. Total chaos.

    Of course, the whole reason I was there was to assist with the IT standardization effort.

    --
    Business. Numbers. Money. People. Computer World.
  128. Re:yes and no by jedidiah · · Score: 1

    > weren't they the ones that locked everyone's OSes out of their hardware

    Nope. Linux has been able to run on every 32-bit microprocessor architecture Apple has ever had. I have one x86Mac still running Ubuntu myself.

    --
    A Pirate and a Puritan look the same on a balance sheet.
  129. Re:He's right you know... by jedidiah · · Score: 1

    Clued in enough and motivated enough to want to set a machine to a static IP yet too stupid and too lazy to figure out how to do this in whatever OS they happen to have?

    That's a nice paradox.

    Most people just get intimitdated with the idea of creating a network share using the explorer gui in XP or Win7. Never mind anything really interesting.

    --
    A Pirate and a Puritan look the same on a balance sheet.
  130. Re:yes and no by cpu6502 · · Score: 1

    >>>Desktop computers when they first appeared were indeed a kind of BYOD, although obviously people didn't actually carry them around with them.

    Well then it's not really "your" device is it? In the 80s (not end of the century as you first falsely-claimed), the PCs were purchased-and-owned by the company. Just like typewriters & telephones were purchased-and-owned by the company.

    And yes I remember that time. Secretaries, accountants, engineers didn't go out, buy Wangs or Apples or PCs, and then carry them in via their car. The office bought and supplied and owned them. So it was NOT bring "your" own device.

    You are providing false history.
    And insulting people who disagree.
    Troll.

    --
    My AC stalker: " I personally agree with your posts most of the time, but that won't keep me from modding you troll"
  131. Re:He's right you know... by jedidiah · · Score: 1

    > Ever install Vista or Win7?

    Yes I have. Tracking down drivers is a royal pain in the ass.

    There is also no mechanism to re-install my apps either.

    You have picked the wrong forum to try and bullshit people.

    --
    A Pirate and a Puritan look the same on a balance sheet.
  132. Re:He's right you know... by jedidiah · · Score: 1

    It's almost as if some of us right here in this very forum have stated for years that each PC is it's own unique snowflake being a random collection of spare parts.

    --
    A Pirate and a Puritan look the same on a balance sheet.
  133. Re:yes and no by cavreader · · Score: 1

    Large to medium size companies using the Windows platform are notoriously slow in approving system wide platform changes. OS changes are the worst. A diligent company will insist on testing all of their existing apps under the new OS but if you have a lot of apps this takes a considerable amount of time and money and you usually end up creating something that has no more functionality than the system it is replacing. Executive types who authorize these big changes are scared to death of being blamed when stuff stops working, budget bloat, and moving time lines. The main point is that a well administered windows platform (Linux as well) works just fine. However, companies using the MS ecosystem have spent tons of money and time over the years to build their systems. They also need an overwhelming reason to scrap that work for something else and licensing fees are not enough to force the issue. I architect and develop applications for both the MS and the Linux platforms and if the MS developers adhere to some basic coding standards, design patterns, and beat practices it beats Linux hands down. Linux developer support tends to be piecemeal and all the different flavors complicate matters even more. People can despise MS for all sorts of reasons but their developer support and development tool sets are really good. This helps them attract developers which in turn means the developers build their applications on the MS platform which then translates into more sales for the MS OS and other products. The original VB might have been technically inferior but from a business point of view but it was a brilliant way to increase OS an OS product sales. It opened up the development space for novice and even experienced developers unable handle C++ or any other low level programing language.

    I remember building desktop apps and COM/DCOM objects in C++ where you had to code your own dialogs using the prepacked class libraries provided in Borland C++ or MS C++. And before that it command line vi for Unix development without a developer UI in sight. I constantly run across developers today that could not even attempt that type of programming. Now you just drag controls around, set properties, and code the event handlers and let the underlying run time take care of the details.

  134. Re:yes and no by cavreader · · Score: 1

    Its a forum post not a fucking published thesis so deal with it or don't bother reading it. Form over content is always the refuge of nitpicking complainers who would rather complain about formatting than address the actual content of the post.

  135. Re:yes and no by JabrTheHut · · Score: 1

    I get what you're saying now, but it doesn't quite gel with what you said before:

    MS-DOS 5 came out in 1991, not in 1989. And it was 32 bit like I'm 7 feet tall. (i.e. not quite.) The only 32-bit DOSes I ever saw was Novell's, after they bought DR-DOS, and while that was a 32-bit operating system we crippled it by running windows 3.0 and 3.1 on it. It had a protected mode and could cope with a network stack, and that was 1991, maybe 1990. But everything ran in 16-bit mode on top of it because it ran in Windows, and that was 16-bit. Oh, and DOS32, which came out around the time of Windows 95, mid-90s, but wasn't much use by then. It was actually called DOS32. It wasn't an MS product.

    If Lotus bet the farm on 32-bit apps, they did it in the 1990s. There was no PC in the 1980s that ran a 32-bit operating system.

    --
    Work like no one is watching. Dance like you've never been hurt. Make love like you don't need the money.
  136. Re:yes and no by johnw · · Score: 1

    Well then it's not really "your" device is it? In the 80s (not end of the century as you first falsely-claimed),

    Please learn to read the thread - I made no claim about any centuries.

    the PCs were purchased-and-owned by the company. Just like typewriters & telephones were purchased-and-owned by the company.

    And yes I remember that time. Secretaries, accountants, engineers didn't go out, buy Wangs or Apples or PCs, and then carry them in via their car. The office bought and supplied and owned them. So it was NOT bring "your" own device.

    Clearly you don't remember it that well. People really did go out and buy such things and bring them in in their cars. And even if your contention were correct (as it was in some cases), it was still very much a case of BYOD.

    You may be surprised to learn that many of today's "your own" devices are bought and paid for by employers - just the same as last time round.

    Whether the item is actually the property of the company or the personal property of the individual isn't really relevant. In both cases, the individual suddenly has ownership of the device (in the sense of control). Hence the wisdom in noticing the similarity.

    Gratuitous and silly insults snipped.

  137. What if you build your own Linux computers? by Anonymous Coward · · Score: 0

    What I have not seen is any indication of whether UEFI is going to be built into motherboards from companies like Gigabyte - do you HAVE to use it? Will people like me who build Linux computers be able to find motherboards without UEFI? This is the crux of the matter, whether we will be able to build general-purpose computers or not from this point on.

  138. Re:yes and no by TheRaven64 · · Score: 1

    I don't recall a single 32-bit desktop in the 80s

    Clearly you were not in the UK. Acorn's line of desktop computers from the Archimedes in 1987 onwards were 32-bit, with ARM CPUs.

    --
    I am TheRaven on Soylent News
  139. It will not solve the real problem, but ... by zapyon · · Score: 1

    I am quite confident that someone somewhere on this planet will find a way around UEFI make machines rootable in any case. Hopefully.

    But still: while I understand the financial/business implications I do not understand why RedHat and Ubuntu caved in so easily and are playing the evil game together with MS instead of being vocal on the real issues behind UEFI, namely; that it doesn't make the machines "secure" regarding malware but rather "secure" against "tampering" by the machines' owners!

    Linux cannot wait for a decade (or how long did those MS monopoly trials go last time?). This time MS may succeed in strangling the competition for good; they have probably found the only way you can fight an open source OS: by locking down the hardware against it.

    --
    I like my spaghetti with source.
  140. Re:Approach no. 5 - Get the vendor to do it by Anonymous Coward · · Score: 0

    Hmmn, does this mean that Dell is open to making deals to install, say, a SuSE system with the official SuSE key? If they can program a disk imager, perhaps they are also capable of programming a rom burner?

    --dave

  141. Re:Approach no. 4 File complaint to D.O.J. by Spiked_Three · · Score: 1

    please ... know anything about court? Apple and Microsoft are in the computer business. Microsoft WAS a monopoly that used its market position to ... well hell, I lived through those times and I never saw anything they did any worse than anyone else, but they got convicted of it anyhow. Then along comes Apple. Locks up their software to only run on their hardware, locks up their software so that it can only be sold if Apple makes a profit on it. Creatively herds the ignorant into generating the most profit from less than a 10% market share in the PC market, while locking up the obviously emerging PC replacement market, the tablet. Can you name one thing that Microsoft does that hurts the market more than Apple?

    Microsoft could be found guilty of bad Balmer, that's about it. Apple brought on this locked tight reality, get used to it. While Apple may not be a convicted monopoly, I'm pretty sure it is now recognized as currently the world's most evil company.

    --
    slashdot troll = you make a compelling argument I do not like the implications of.
  142. Re:Approach no. 4 File complaint to D.O.J. by Anonymous Coward · · Score: 0

    "On their iOS devices, iTunes allows you to put any BIOS image in you want."

    Proof of this ridiculous statement? Apple doesn't even let you install apps on iOS without their approval. Shut your fanboy mouth.

  143. Re:yes and no by jbolden · · Score: 1

    I still use vi type Unix tools for most of my programming. I agree with you on Visual Basic it was brilliant. It was a massive failure on Microsoft's part not to transition Visual Basic to Visual Basic .NET more smoothly. C# is brilliant far better than the Java it is designed to replace. The .NET compiler is the most sophisticated compiler I know of. F# is a fascinating project in bring Objective Camel to .NET and allowing it to use a standard IDE. LINQ is mainstreaming a huge innovation. I really wish that Microsoft still saw themselves as a languages company they were huge innovators. They should be out in front in offering exciting languages and IDEs for mobile and tablets. So no argument on any of your assessment of Microsoft's tools.

    That being said I think "I architect and develop applications for both the MS and the Linux platforms and if the MS developers adhere to some basic coding standards, design patterns, and beat practices it beats Linux hands down." I don't think that's true at all. Microsoft has nice tools for developers. Unix is an operating system whose architecture from top to bottom is to make development comfortable. An OS written by developers for developers. Just thinking about power of the /proc filesystem for doing status monitoring. Hands down it is easier to develop for Unixes than for Windows, it isn't remotely close. It can't be Windows is organized for end user computing not for developers.

    I'll give you a simple example that bit me hard. Try and get Windows to send a specific set of bits out of the ethernet cable. In other-words a program that generates a binary objects and sends it to the ethernet card unmodified. Mind you I'm not saying write a program that will create an TCP packet with an arbitrary data blob, I'm saying I want control of the entire packet. To do that in Windows you actually have to write your own driver and you can't do it with the standard driver for that card in place. To do it in Unix if the data was in file X "cat X > /dev/en0". Every single time I've tried to write software for Windows I get bit by developer hostile it really is. So no, I don't think it is accurate to say that Windows is a developer platform. It is rather hard to program for Windows, but Microsoft provides excellent tools to support you in writing productivity software. If you rewrote your comments above to "productivity software" sure I'd agree. But software in general, no.

    -----

    Now I agree that OS shifts are a disastrous money sink for most companies. But Windows 7 does offer a virtualized Windows XP. This is not a hard transition if they manage things well. This is doable and they certainly should not be allowing things to get to the point where desktop transitions are this traumatic. That is a failure of corporate America and corporate IT.

  144. Re:yes and no by Anonymous Coward · · Score: 0

    Mobile devices are also more likely to get broken, lost, or stolen, and cell phones come with an almost guaranteed 2 year expiration date with many providers offering even shorter refreshes.

  145. Re:yes and no by jbolden · · Score: 1

    I agree the operating systems wren't 32-bit. That didn't stop applications from being 32-bit. The 32-bit app through itself into a 32 bit mode and then passed control back to DOS in real mode to handle OS functionality. That in fact was how Windows worked. You didn't need 32 bit OSes to run 32 bit apps because everything was single tasking. DOS / Microsoft released a special always on app for printing, so the print spooler could operate in real mode while the rest of the system was in 32 bit mode.

    As far as running 32 bit mode and Windows you used Desqview for that. You loaded DOS with QEMM. Then you ran DESQView which was your multitasker / task-switcher and could run 32 bit software. Inside of Desqview you ran Windows 3.0 or 3.1.

    Anyway Windows was not 16 bit after Windows 286 (windows 2.0) There were 4 modes on the 386 / Windows-386 (Windows 2.1)
    real mode
    protected mode (16 bit)
    32 bit mode (386 enhanced)
    virtual real mode (multiple real modes, multi tasking real mode applications). ( http://en.wikipedia.org/wiki/Virtual_8086_mode ).

    I understand you never ran DOS apps that used more that 640k other than windows itself. But think about how Windows itself worked. Lotus 1-2-3 could do the same thing.

  146. Re:Approach no. 4 File complaint to D.O.J. by Anonymous Coward · · Score: 0

    Not monopolistic, but definately anti-competetive.

  147. Re:Approach no. 4 File complaint to D.O.J. by jbolden · · Score: 4, Informative

    First off, learn manners.

    Now for lurkers:

    start iTunes on your Mac and hold home- and on/off-button on the iphone. connect mac and iphone and keep holding the buttons on the iphone.
    the iphone boots in restore-mode, itunes opens up the restore dialog. release the two buttos on the iphone.
    hold option-key on the mac and then press "restore" in iTunes. Dialog pops up asking for the firmware to use then point to the new file and you are set.

    _________

    And of course Apple lets you install apps on iOS without their approval. They don't let you distribute them widely without their approval. But you can install anything you want using iTunes.

  148. Re:yes and no by kermidge · · Score: 1

    Right, the 68000 was 32-bit internal, 16-bit to the bus, if I recall from my Atari ST. One even had a choice of operating systems and programming languages - you could boot an OS off floppy, bypassing the ROM OS. The 68k offered a fairly congenial environment for lots of stuff.

    Ok, just looked it up - http://en.wikipedia.org/wiki/Motorola_68000 introduced in late '79.

  149. Re:Option #X: Buy Win8 laptop, return it the next by amliebsch · · Score: 1

    If enough manufacturers are seeing this reason for return and losing money because of it, you can be sure they'll start charging restock fees.

    FTFY.

    --
    If you don't know where you are going, you will wind up somewhere else.
  150. UEFI Secure Boot is a NON ISSUE by Anonymous Coward · · Score: 0

    So ok, you all can sit here repeating all this hype forever without bothering to read the spec to get the facts, exactly like everyone else, INCLUDING RedHat, Canonical, GNU and everyone else is doing...

    Or you could read the facts here: http://www.uefi.org/

    In Chapter 27 of the specification you will find all the info you need about
    how to clear the 'Platform Key', enter into and use 'Setup Mode', the Shell, etc
    in order to install your own 'Platform Key', which is the highest key in Secure Boot.
    You are 100% BOSS, no one else.

    http://www.uefi.org/specs/download/UEFI_2_3_1_Errata_B.pdf
    https://www.tianocore.org/

    With the exception of ARM firmware, all of this is noise.

  151. Re:yes and no by cavreader · · Score: 1

    I primarily develop in the .NET environment however my projects need to be able to interface with hardware such as PLC's, PBXs, and control systems requiring OS level functionality.

  152. Re:yes and no by Unknown+Lamer · · Score: 1

    Hell, I have a dual AthlonMP rig (got it when I graduated high school... about ten years ago) that I just popped a sata card into and a pair of new disks to breathe a few more months life into it as a media and backup server. XBMC's a bit slow (but that's the Radeon 9100's fault, heh) but otherwise... and I used that as my daily workstation (driving a nice 1920x1200 monitor and doing some heavy SBCL hacking) until a couple of years ago. Basically Firefox needing a gig of ram to display "Hello World" is what drove me into using my laptop more...

    The limiting factor for using perfectly adequate old hardware now are those pesky acronyms: PATA, PCI, AGP, DDR{266,333} ...

    --

    HAL 7000, fewer features than the HAL 9000, but just as homicidal!
  153. Re:He's right you know... by eneville · · Score: 0

    TL;DR: Windows took twice as much time to install, cost me 200 times as much money, and provided about 10% of the software.

    Don't forget, Windows is also less helpful when it comes to debugging, where's the useful stuff like strace/ltrace?

  154. Re:He's right you know... by shutdown+-p+now · · Score: 1

    First question: Does it have all your device drivers?

    Actually yes, it most likely will. Most importantly, it will generally have enough to fire up networking, and then it'll automatically download the rest of them via Windows Update. I've been running Win7 for three years, on a PC I've assembled myself the way I want (and upgraded a couple times since then), and the only driver I had to manually install in all that time was the one for a wireless printer.

  155. Re:yes and no by jbolden · · Score: 1

    OK for a PBX I'd assume you would be getting the advantages of Unixes. It is really difficult to use non IP communication protocols on Windows.

  156. Freedom by Anonymous Coward · · Score: 0

    Freedom is by far important than an irrational, annoying, and stupid feature.

    They (Microsoft, Red Hat, Canonical and others) make money from stupid people who are part of the whole and SICK society.

  157. simples... by Anonymous Coward · · Score: 0

    Why is everyone so quick to accept the corpse of TCPA in new clothes?

    Because they've the memory span of a stunned herring, thats why. As is said, those who know no history are doomed to repeat it.

  158. Re:Approach no. 4 File complaint to D.O.J. by Anonymous Coward · · Score: 0

    Your argument is just stupid! Apple makes the hardware which is tied to their O.S., so does IBM, Cisco, and Sun{O}. Now Microsoft by its near monopoly has required other computer manufactures to install back-doors in the firmware to allow its O.S. unfettered access to the machine. And this will be why their will be millions of complaints to the D.O.J. about Microsoft abuse of their monopoly.

  159. oh oh by Anonymous Coward · · Score: 0

    this means i'll have to buy serverhardware if i want to run linux?
    it is fantastic how u need antispyware, antivirus antitrojan and now even some
    antiMBR HARDWARE to get a windows secure (with any kind of user)?
    if the computer doesn't allow the "secure boot windows" to be disabled, this
    must be tantamount to a computer monopoly!

  160. I would not buy any machine with secure boot by spoony1971 · · Score: 1

    Now, it is right time to dump Microsoft.

  161. Re:Approach no. 4 File complaint to D.O.J. by preaction · · Score: 1

    All that work sounds exactly like what UEFI is going to do to install linux on x86.

  162. Re:yes and no by Kalriath · · Score: 1

    Sigh. He said the end of last century, which is the 90s. If he'd actually said "in the 80s", then I would have agreed.

    --
    For a site about things like basic rights, Slashdot users sure do like to censor "dissent".
  163. Re:Approach no. 4 File complaint to D.O.J. by jbolden · · Score: 1

    Something like that. Yeah. But Linux people will get the hang of that pretty quickly.

  164. Re:yes and no by DarwinSurvivor · · Score: 1

    Regarding #1, I think that carriers giving you a free (price built into your plan) phone every 2 years has more to do with it than phones "breaking".

  165. Re:yes and no by jbolden · · Score: 1

    Absolutely the large subsidy definitely helps. Americans are completely unaware how much they are spending on phones. But breakage matters. If it were just subsidy \we'd expect a number around 24 mo not 11.5 mo.

  166. Re:yes and no by Anonymous Coward · · Score: 0

    Wrong. Vomiting walls of text shows you give a shit about anyone reading it.

    Ignoring form is the refuge of illiterate morons.

  167. Re:yes and no by Anonymous Coward · · Score: 0

    Frankly, it's not the "Windows" OS, it's the "Office" OS. Until a decent alternative to Office appears, people won't be switching. That application is Microsoft's true monopoly.

  168. Re:Approach no. 4 File complaint to D.O.J. by Anonymous Coward · · Score: 0

    Now Microsoft by its near monopoly has required other computer manufactures to install back-doors in the firmware to allow its O.S. unfettered access to the machine.

    Lol, no they haven't. there is no firmware backdoors or anything that microsoft is requiring of OEMs, as far as conspiracy theories go yours isn't even a very good one.

    And this will be why their will be millions of complaints to the D.O.J. about Microsoft abuse of their monopoly.

    no, no there won't.

  169. Re:Approach no. 4 File complaint to D.O.J. by Anonymous Coward · · Score: 0

    Except for an older version of the iPhone firmware, which is forbidden when iTunes phones back to apple to check if it is allowed to install it or not. At least on Windows...

  170. Re:Approach no. 4 File complaint to D.O.J. by jbolden · · Score: 1

    I don't know Windows as far as firmware. But I don't see anything about iTunes phoning home for Windows (though the procedure is somewhat different).

  171. Re:Flash the BIOS.. Muhaha do I have a surprise 4U by Anonymous Coward · · Score: 0

    there is a small 64k static ram and 64k rom built into the cpu chip which also houses the tpm.

    I only skimmed the rest of your probably irrelevant lunatic rant but this is simply wrong, people often think it is true, and they should be better informed. No x86 CPU on the market includes a TPM that I'm aware of. Not on the same die, not even as a second chip on the same package. If a TPM is present, it's a separate IC in its own package soldered to the motherboard, and it's usually attached to the south bridge chip. Traditionally TPMs connected to the LPC bus, a "Low Pin Count" bus developed to replace ISA for cheap, small, low bandwidth peripheral chips integrated onto the motherboard. (It is almost never brought out to a connector.) I don't know if 2012 chipsets still provide LPC, so it might've moved to PCI Express or something else these days.

    There's actually a pretty solid technological reason for putting it in a separate chip: TPM functionality requires some nonvolatile (and erasable) storage integrated into the TPM, and neither Intel nor AMD has ever dabbled with integrating flash memory (or other forms of NVM) into an advanced high performance logic process suitable for making mainstream x86 CPUs. In fact, integrating flash would cause a lot of technical problems, so they're not likely to try.

    Oh wait, I also spotted this gem just now:

    the dram interface on the cpu chip encrypts and decrypts 64 bit 32 bit 16 and 8 bit accesses to the dram with a symmetric key KMEM when reading or writing to the external dram. KMEM is random and cleared on reset on all components. This key KMEM is also known to other trusted bus masters through special bus cycles during extrom initializatiom. It is exchanged encrypted over the address data bus through special bus cycles. Components decrypt KMEM with a key KMEMTRANS burned into them with secure JTAG at initialization. the secure jtag programming requires knowledge of KFACTORY.

    Yeah, uh, no. Folks, this guy has no clue what he's talking about and is making shit up, either out of tinfoil paranoia or a desire to troll. None of this is real. (just google KMEMTRANS and KFACTORY, you'll get nothing)

  172. Re:ROFL at you by Anonymous Coward · · Score: 0

    Hey, I've got a question for you. How's electing a guy who doesn't give a shit about anything but megadollar corporations and is willing to be a complete puppet of the forces in the Republican party who frankly don't mind if you die in the street if you're not rich or white enough supposed to be an improvement over Obama? I mean, Obama is pretty far from perfect but fuck you if you think for a millisecond you can fool me into voting for Romney just because you shithead Republicans think Anything But Obama is a viable answer no matter how bad. That rich guy Republican really is just a greedy rich guy. Almost stereotypically so. Too bad Romney didn't pick up how to be a decent human being from his father...

    For that matter, fuck you if you think I'm voting Republican at all. I actually thought it was a good thing when W got "elected" over Gore in 2000. What a fool I was! For the forseeable future the only votes which I think are truly important are Democratic primary votes, because that's the only way to shape the future of the party which, though shitty in its own right, is at least somewhat willing to try to do the whole responsible governance thing. Sometimes. On tuesdays.

    Republicans these days, though? Nothing but a bunch of oligarchs and fucktarded "social conservative" Christian Taliban. The sort of assholes who actually think "hey wouldn't it be great if we threatened to not pay the United States' debts, debts we helped put into the budget in a previous vote, just so we can grandstand about UNAMURRICAN TAXES!!!!!".

  173. Re:No one cares by mathew7 · · Score: 1

    Actually the problem is real. And I'm not talking about MS, but BIOS (should I say firmware) vendors. I played with my Thinkpad Edge E120, and I found a problem: after installing Windows 8 (consumer preview...as I remember), I could no longer change the boot order from the setup screen. One-time boot choice does work, but I could not change the order for permanent usage.
    Also, as soon as I changed the order from linux, Win8 refused to load (even after returning the order to the original one).
    My thinkpad has no mention of disabling secure-boot. I don't even know if returning to BIOS-style booting would allow me to change the order.

    I've got nothing against secure-boot, but easy methods of self-signing need to be provided. The secure-boot should be "binaries that I trust", not "binaries that MS trusts". The latter is fine for most end-users, but those who do know what they do....should not be locked by vendors.

    So I would say boicott vendors to support secure-boot better.

    PS: no I don't know the API details. I did see articles stating bad reference implementation of UEFI. And I mean really bad (as in inability to follow the specification 100% to boot something).
    PPS: while this post may seem to be defending MS, I can guarantee that I want to dispose of it in my daily use. I even went so far as to virtualize a Win7 enviroment specifically for gaming (with AMD 5850 that is...... thank you Xen comunity + Intel VT-d).

  174. Re:yes and no by DarwinSurvivor · · Score: 1

    It's not really a subsidy when your subsidizing yourself...

  175. Re:yes and no by jbolden · · Score: 1

    Why not? In a democracy subsidies are things the people do to themselves (collectively) to change behavior. This is just an example where they are doing it to themselves in some sense individually. The same behavior change is occurring.

    And before you object this is different note two things:

    a) The price of your plan doesn't change based on the cost of the subsidy. The person with a 32g iPhone 4s getting a $18 / mo subsidy pays the same rate as the person with a free Android getting a $12 / mo subsidy.

    b) The price of your plan doesn't change even when the two years is up, i.e. the subsidy goes to $0.

    c) The cash value of early termination frequently doesn't track the subsidy all that well. For example with Verizon the initial cash termination fee is $350 even though often Verizon is into your phone for more than that, conversely in the last two months it is $110 and then $0 and that $110 drop is usually more than the entire bill for that month.

  176. Re:Flash the BIOS.. Muhaha do I have a surprise 4U by Anonymous Coward · · Score: 0

    That post is obviously talking about ARM, not x86 and there are ARM processors with embedded TPM. And while it may still be made up (I don't know) this type of information is usually only available in the proprietary documentation, so you're not going to get it from a simple google search.

  177. Re:Approach no. 4 File complaint to D.O.J. by Anonymous Coward · · Score: 0

    Yeah, you can restore any IPSW as long as it is signed by Apple... so no custom BIOS images!

  178. Re:Approach no. 4 File complaint to D.O.J. by hazydave · · Score: 1

    Actually, that's kind of the trick that lets Microsoft treat ARM differently. Despite the major competition (Apple) not being on x86 PCs at the time Microsoft was judged to be a monopoly, the judge limited all or most of the restrictions on Microsoft to x86 PCs. So they have to play "nice" on the x86 market. That means still supporting the PC as something more or less open (sure, locked-down UEFI BIOS by default, but they _allow_ OEMs to offer a disable function).

    On ARM, it's a different story. The OS only goes to the OEM, not to the end user. Period. No way to disable secure boot. Hidden APIs out the wazoo (everyone but Microsoft is required to only use WinRT API calls on ARM; Microsoft gets to use all of Win32 as well). Bundled web browser (IE) with no possible replacement (3rd party web browsers are either built on top of IE components, or they don't fully function -- you can't write a working Javascript JIT, apparently, in WinRT-only). And it's anyone guess if any Windows RT/Windows 8 Phone devices will be upgradeable to Windows 9... probably not, based on recent historical behavior.

    All of this happens just dandy without even considering Apple. Now, of course, even without considering Apple, Microsoft may still be seen as abusing monopoly powers. They got called on the web browser thing -- the crime of using monopoly powers in one market (x86 PCs) to conquer another (web browsers), but it was only after-the-fact... they had all but killed Netscape before anything was done about it. I assume they're looking at that same issue being alive as they take on the ARM/mobile market.

    Of course, it might well be reasonable to believe that there's no important distinction between "x86" and "ARM" as far as markets are considered.... particularly since ARM netbooks and maybe even desktops are pretty inevitable, in time (which may be "right this moment", though not yet on a meaningful scale). But THAT would more than likely end Microsoft's judgement as a monopoly, given Apple's strong presence on the tablet and both Google and Apple on the smartphone. So that's not a risk to MS in pushing the full evil lever as they move into mobile (ok, move again into mobile, but this time they're serious about it, not just trying to kill off guys like Palm).

    They're also doing the full Apple on software sales for ARM -- you can only buy ARM software through the Don't-Call-Me-Zune store. True of desktop Windows RT apps, too, but the "legacy" stuff (eg, the only actual reason for using Windows) remains as before, direct sales, developer/retailer to user.

    It would be awfully nice for Linux to jump on this power grab. But the problem is simple... there is no "Linux", in the way there's an Apple, a Microsoft, an Amazon, a Google, etc. You need someone like Google to actually establish a common Linux platform... which, of course, they have: Android, the world's most popular Linux Distro. Google might stand a chance pushing for the desktop/laptop, but it's not clear they'd see any reason to do that. The TPTB in Linux are too established in their various distro wars, rallying against close source, or whatever, to ever establish a unified front that's attractive to Windows/Apple/Android scale application development.

    --
    -Dave Haynie
  179. Re:Approach no. 4 File complaint to D.O.J. by hazydave · · Score: 1

    You can hurt the market all you want, as long as you're small enough to not to any serious damage. Apple at 10% (US.... 5% globally) certainly isn't large enough to cause industry-wide problems, at least in the PC market. They have a large but not commanding piece of the smartphone market, and a very large piece of the "big smartphone without a voice modem" market... if that's really a different thing, the tablet.

    They don't have a recognized monopoly on anything, so they run under a different set of rules. Doesn't mean they never will be judged a monopoly, but it does take awhile for legal watchdogs to recognize the emergence of new markets. And some wisdom to decide if they're actually the same, or different, markets. Does the use of an ARM processor versus an x86 really make the iPad NOT a personal computer, but something totally different? If so, maybe Apple's closer to a monopoly than they were, but still not large enough to have full on monopoly powers. If ARM vs. x86 doesn't matter, then Apple's only managed to perhaps un-monopoly Microsoft.

    And of course, that's precisely what Microsoft is banking on, in the ARM market. They're very aware that the various restrictions and monopoly pronouncements all mention "x86".... that's how the judges ruled it. So they have the "be evil" lever set to Apple mode, and beyond, when it comes to ARM products. And it's hard to imagine they won't get away with it.... though there's that whole issue of actually selling any they still have to deal with.

    --
    -Dave Haynie
  180. Re:Approach no. 4 File complaint to D.O.J. by Anonymous Coward · · Score: 0

    Yeah that Apple processor and video card are awesome...

    Oh wait, they use off the shelf components like Dell, HP, Acer, Toshiba, etc, etc,etc

    Apple is an OEM with their own OS, NOT a hardware company.

    Learn the difference between putting a system together and designing the parts.

  181. Re:Approach no. 4 File complaint to D.O.J. by Anonymous Coward · · Score: 0

    "Apple makes the hardware which is tied to their O.S"

    Bullshit!

    Intel, Nvidia , etc make the hardware that Apple uses to run its OS.