Live data from Hacker News

Machines shipping with Windows 10 may see OEMs enforcing Secure Boot

linuxveda.com

1–10 of 80 posts

Re: Machines shipping with Windows 10 may see OEMs enforcing Secure Boot

#3
I don't really understand the concern here. Microsoft is simply saying it's optional for its hardware partners to display the option to toggle it. I could see plenty of enterprise systems wanting to not allow users to change this setting. Microsoft isn't trying to block anything here.

If you want to use linux simply vote with your dollar and go to the vendors that will let you install it (I imagine most will). That or use a linux distro that is actually compatible with secure boot.

Re: Machines shipping with Windows 10 may see OEMs enforcing Secure Boot

#4

I don't really understand the concern here. Microsoft is simply saying it's optional for its hardware partners to display the option to toggle it. I could see plenty of enterprise systems wanting to not allow users to change this setting. Microsoft isn't trying to block anything here. If you want to use linux simply vote with your dollar and go to the vendors that will let you install it (I imagine most will). That o…

The problem was IIRC that you need something signed with MS key to be able to boot whatever. If you are able to set your own keys - then there is almost no problem (still usb flashes and so on will be harder to boot)

Re: Machines shipping with Windows 10 may see OEMs enforcing Secure Boot

#7

Ubuntu, Redhat, and other distros are compatible with secure boot. I understand the concern, but the flip side is that if secure boot makes my future Ubuntu laptops more secure that could be a good thing. Linux is here to stay. Relax.

What if I prefer Debian over Ubuntu? Can I be upset then? I'm sure this will be possible to hack around, but we shouldn't have to hack our own computers to use them. A simple option to disable secure boot would solve all the problems. The vendors know this, so I'm curious why they would chose to not provide the option. Is there some belief that by even having the option, the system would be inherently more insecure?

I'm sure that some vendors will provide an option, so this will just likely be an extra thing to research before buying a new system.

Re: Machines shipping with Windows 10 may see OEMs enforcing Secure Boot

#8

Ubuntu, Redhat, and other distros are compatible with secure boot. I understand the concern, but the flip side is that if secure boot makes my future Ubuntu laptops more secure that could be a good thing. Linux is here to stay. Relax.

I don't use Ubuntu and Redhat. Once they decided to follow a windows model with systemd and the "break everything on purpose" style of writing software, they were no longer useful. So what about the massive variety of other distributions that didn't - or cannot in the case of Free Software - sign up for the restrictions inherent in being "compatible with secure boot"?

More importantly, why limit this to linux? It would be a lot harder to develop a new OS - just like Linus did - when you have to deal with secure boot.

Re: Machines shipping with Windows 10 may see OEMs enforcing Secure Boot

#9

I don't really understand the concern here. Microsoft is simply saying it's optional for its hardware partners to display the option to toggle it. I could see plenty of enterprise systems wanting to not allow users to change this setting. Microsoft isn't trying to block anything here. If you want to use linux simply vote with your dollar and go to the vendors that will let you install it (I imagine most will). That o…

The problem was IIRC that you need something signed with MS key to be able to boot whatever. If you are able to set your own keys - then there is almost no problem (still usb flashes and so on will be harder to boot)

> If you are able to set your own keys - then there is almost no problem

Doesn't this make the feature useless from a security standpoint? If you're able to create your own keys then malware could create its own keys. Maybe if manufacturers could do it that would be handy.

Re: Machines shipping with Windows 10 may see OEMs enforcing Secure Boot

#10
If Microsoft’s stance on this issue is not reversed it’s possible we will see a spike in sales by manufacturers such as System76 and ZaReason who ship computers running Linux out of the box without any signs of Secure Boot at all.

So... not a problem. If there is a market for non-Secure Boot machines, they will be produced.

Post reply on HN