Feeds

FSF takes Win 8 Secure Boot fight to OEMs

Punters urged to bombard PC makers

Secure remote control for conventional and virtual desktops

PC makers are being lobbied to install Windows 8 on machines in a way that will afford users the freedom to boot Linux or any other operating system.

The Free Software Foundation (FSF) is urging PC users to sign a statement demanding that OEMs which implement Windows 8's UEFI Secure Boot do so in a way that allows individuals to disable it, or that the PC makers provide a "sure-fire way" to install and run an operating system of the user's choice.

The statement says that giving this choice will protect users' rights and security.

The FSF has also hinted at a boycott on buying Windows 8 PCs. "We commit that we will neither purchase nor recommend computers that strip users of this critical freedom, and we will actively urge people in our communities to avoid such jailed systems," the FSF concludes.

Windows 8's Secure Boot was branded "Restricted Boot" by the FSF because "it would be a disastrous restriction on computer users and not a security feature at all".

The FSF's website became suddenly unavailable Tuesday morning due to "technical problems" once word of the campaign began to spread.

Secure Boot is a planned feature of Windows 8 intended to thwart a type of hack that targets the boot path; the idea is to ensure only signed "good code" will boot up.

Microsoft's system implements the Unified Extensible Firmware Interface (UEFI) firmware specification, only the system in Windows 8 would mean any Windows 8 PC that ships with only OEM and Microsoft keys will not boot a generic build of Linux.

The red flag was raised by Red Hat employee and tech blogger Matthew Garrett here and Professor Ross Anderson of Cambridge University here. Anderson said Secure Boot might violate EU competition law.

Microsoft, meanwhile, has shifted responsibility for Secure Boot to the PC manufacturers. In a blog response to the alarm, Microsoft ecosystem team member Tony Mangefeste wrote: "OEMs are free to choose how to enable this support and can further customize the parameters as described above in an effort to deliver unique value propositions to their customers."

However, it seems OEMs are not free to choose how to enable Secure Boot.

All About Microsoft's Mary-Jo Foley reports that at Microsoft's Build conference in California last month, Microsoft said support for UEFI Secure Boot is a Windows 8 certification requirement.

Meanwhile, on the Windows 8 blog in response to concern about UEFI, Mangefeste went on to claim: "At the end of the day, the customer is in control of their PC."

Responding to Mangefeste, Garrett called the rebuttal "entirely factually accurate", adding "but it's also misleading" – because the PC marker and Microsoft would maintain control over the keys needed to permit trusted code to boot on PCs.

"The truth is that Microsoft's move removes control from the end user and places it in the hands of Microsoft and the hardware vendors," Garrett wrote in response to Mangefeste here. ®

Choosing a cloud hosting partner with confidence

More from The Register

next story
4K-ing excellent TV is on its way ... in its own sweet time, natch
For decades Hollywood actually binned its 4K files. Doh!
Oi, Tim Cook. Apple Watch. I DARE you to tell me, IN PERSON, that it's secure
State attorney demands Apple CEO bows the knee to him
Apple's big bang: iPhone 6, ANOTHER iPhone 6 Plus and WATCH OUT
Let's >sigh< see what Cupertino has been up to for the past year
Huawei ditches new Windows Phone mobe plans, blames poor sales
Giganto mobe firm slams door shut on Microsoft. OH DEAR
Phones 4u website DIES as wounded mobe retailer struggles to stay above water
Founder blames 'ruthless network partners' for implosion
Get your Indian Landfill Android One handsets - they're only SIXTY QUID
Cheap and deafening mobes for the subcontinental masses
Apple's SNEAKY plan: COPY ANDROID. Hello iPhone 6, Watch
Sizes, prices and all – but not for the wrist-o-puter
A SCORCHIO fatboy SSD: Samsung SSD850 PRO 3D V-NAND
4Gb/s speeds on a consumer drive, anyone?
prev story

Whitepapers

Providing a secure and efficient Helpdesk
A single remote control platform for user support is be key to providing an efficient helpdesk. Retain full control over the way in which screen and keystroke data is transmitted.
WIN a very cool portable ZX Spectrum
Win a one-off portable Spectrum built by legendary hardware hacker Ben Heck
Storage capacity and performance optimization at Mizuno USA
Mizuno USA turn to Tegile storage technology to solve both their SAN and backup issues.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Security and trust: The backbone of doing business over the internet
Explores the current state of website security and the contributions Symantec is making to help organizations protect critical data and build trust with customers.