Live data from Hacker News

Torvalds clarifies Linux's Windows 8 Secure Boot position

zdnet.com

61–70 of 147 posts

Re: Torvalds clarifies Linux's Windows 8 Secure Boot position

#61
post #24

Earlier quoted context omitted.

As rplnt as said: > but apparently it's beneficial for them economically to only sell Windows machines Maybe in Vietnam it happens just the opposite. It's easy to sell a computer _without_ Windows that with it. I don't get why the companies cannot sell "empty" laptops without OS installed, thought.

>Maybe in Vietnam it happens just the opposite. It's easy to sell a computer _without_ Windows that with it That is because most of the PCs end up being installed with pirated Windows by the local tech guru.

>That is because most of the PCs end up being installed with pirated Windows by the local tech guru.

My Vietnamese friend had to explain that the staff in the shop expected to earn $5 installing the pirated windows on it... They where not best pleased that I intended to do it myself (with a licensed copy obviously!)

Re: Torvalds clarifies Linux's Windows 8 Secure Boot position

#62

Earlier quoted context omitted.

I think the issue is: to buy a Lenovo machine is to buy Windows. There is no other option but to have to pay for Windows with your machine. One can't just buy a laptop with nothing on it. This can be seen as unfair to the customer in many countries and therefore, illegal.

Can I buy a Toyota car without the Michelin tires they bundle and get a discount? I want to install my custom tires and have no need for the tires they bundle.

If they put a mechanism to specifically total the car if you try to use any other brand, I'd say they would be getting sued before you can say "anti-trust".

Re: Torvalds clarifies Linux's Windows 8 Secure Boot position

#63
post #11

The thing about secure boot is that it is a GOOD idea done very badly indeed. What was needed was for a trusted neutral party(or two) to be the owner of the root key, and for that organisation to hand out child keys (e.g. Microsoft, Open Source Initiative, Apple, etc) who could in turn generate child keys (all of which could be revoked). Essentially we need the "internet model" of key exchanges for this too. I cannot…

The real use for secure boot is within a single company/organization where you want to control exactly what runs on the computers you own. That's an argument for secure boot to be switched off by default, and for the companies that want it to manage their own keys. Although Microsoft will now point at me and say "but, but we need to prevent boot sector viruses!" it's telling that no other operating system except Wind…

>it's telling that no other operating system except Windows commonly suffers from this problem.

There is nothing whatsoever stopping Linux bootkits technically. Please stop spreading FUD.

Re: Torvalds clarifies Linux's Windows 8 Secure Boot position

#64
post #62

Earlier quoted context omitted.

Can I buy a Toyota car without the Michelin tires they bundle and get a discount? I want to install my custom tires and have no need for the tires they bundle.

If they put a mechanism to specifically total the car if you try to use any other brand, I'd say they would be getting sued before you can say "anti-trust".

Trying to boot Linux does not "total" the computer.

Turn it off , and you can boot whatever you want.

The analogy is sorely broken.

Re: Torvalds clarifies Linux's Windows 8 Secure Boot position

#65
post #7

I always thought that the secure boot is a very, very, very bad idea. In fact the whole UEFI in general I think it is a clusterfuck of mishmashed random ideas, some good, many bad. What I intend to do personally, is attempt to don't use secure boot. And this all might explain the e-mail I got from Lenovo 10 minutes ago... I asked them for a non-Windows machine. They replied saying that they from now on only manufactu…

In Brazil or anywhere, can you buy a car with the default sound system ripped out and get a refund for it? What about without the default tires, seats or even the engine?

I'm as much in favor of car analogies as the next person, but I don't think yours really fits the situation.

It might fit if speeder was trying to buy a laptop without RAM or a hard drive so he could put in his own, but my reading of your comment is that you're talking about having a physical part of the product removed and wanting a refund. What speeder is asking for seems more like asking Lenovo to offer an option to order a car with an upgraded the sound system, tires, seats, or engine. This is something many auto makers offer.

It seems that Lenovo, in this case, has decided that the market for cars with steel wheels is too small, and is selling cars without that option. You can only get alloy wheels on your Lenovo car.

Re: Torvalds clarifies Linux's Windows 8 Secure Boot position

#66
post #62

Earlier quoted context omitted.

If they put a mechanism to specifically total the car if you try to use any other brand, I'd say they would be getting sued before you can say "anti-trust".

Trying to boot Linux does not "total" the computer. Turn it off , and you can boot whatever you want. The analogy is sorely broken.

Trying to install it can total the computer, esp. if you are unaware of the relatively new locking measures.

Re: Torvalds clarifies Linux's Windows 8 Secure Boot position

#67

Linus posted a NSFW rant about it a few days ago. The story mysteriously went off the HN front page and subsequent submissions of the story went [dead]. http://news.ycombinator.com/item?id=5279531 Rankings graph showing a deep dive. http://hnrankings.info/5279531/ Part of Linus' email: >Guys, this is not a dick-sucking contest. If you want to parse PE binaries, go right ahead. >If Red Hat wants to deep-throat Microso…

MS astroturfers? (they've pretty much ruined /. by now, wouldn't be surprised if they took control of HN too)

Re: Torvalds clarifies Linux's Windows 8 Secure Boot position

#68

Linus posted a NSFW rant about it a few days ago. The story mysteriously went off the HN front page and subsequent submissions of the story went [dead]. http://news.ycombinator.com/item?id=5279531 Rankings graph showing a deep dive. http://hnrankings.info/5279531/ Part of Linus' email: >Guys, this is not a dick-sucking contest. If you want to parse PE binaries, go right ahead. >If Red Hat wants to deep-throat Microso…

HN dislikes anything that shows that real people have real emotions. Humour, anger and whatnot have no place here.

Re: Torvalds clarifies Linux's Windows 8 Secure Boot position

#69
post #34
post #21

Earlier quoted context omitted.

> it's telling that no other operating system except Windows commonly suffers from this problem. This is an honest question, as this area isn't my specialty, but could this be for the same reason that people used to perpetuate the myth that Macs don't get viruses? Attackers simply target the platform with the largest market share.

Linux servers are far more common than Windows servers, and servers usually have loads of bandwidth making them especially valuable targets for spammers and fraudsters.

But Linux servers require root access (or physical access, which frequently amounts to the same thing) to modify the bootloader. If you've already got root, then you don't really need to install a bootkit - you may as well just install a modified kernel or kernel module rootkit.

Re: Torvalds clarifies Linux's Windows 8 Secure Boot position

#70
post #20

Earlier quoted context omitted.

It is possible with disabled secure boot. Windows 8 doesn't need Secure Boot or even UEFI to work. It's only about the "Certified" sticker. And theoretically, Grub (or something) can have the key signed.

(Asking out of ignorance...) Signed by whom? Who are the trusted CAs for secure boot? Can you import an arbitrary certificate as trusted?

Microsoft is the trusted CA.
Post reply on HN