TE
TechEcho
Home24h TopNewestBestAskShowJobs
GitHubTwitter
Home

TechEcho

A tech news platform built with Next.js, providing global tech news and discussions.

GitHubTwitter

Home

HomeNewestBestAskShowJobs

Resources

HackerNews APIOriginal HackerNewsNext.js

© 2025 TechEcho. All rights reserved.

Windows 8 OEM specs may block Linux booting

275 pointsby ramenover 13 years ago

34 comments

dparkover 13 years ago
Unless I'm misunderstanding something, this is silly FUD. Microsoft isnt stupid enough (or evil enough, despite what some like to believe) to attempt to force PC oems to effectively block all OSes except Windows. They know this wouldn't work, and there'd be no point in trying to force it.<p>Supporting hardened boot is not the same as <i>requiring</i> it. Microsoft already utilizes this for BitLocker. You can still install Linux on a machine that supports hardened booting and signed images. You just can't enable hardened boot unless you use signed images.
评论 #3020747 未加载
评论 #3021095 未加载
sciurusover 13 years ago
Here is a direct link to Matthew Garret's blog post so that you can skip itworld's paraphrasing.<p><a href="http://mjg59.dreamwidth.org/5552.html" rel="nofollow">http://mjg59.dreamwidth.org/5552.html</a>
评论 #3020622 未加载
评论 #3020582 未加载
ghshephardover 13 years ago
The first paragraph is just silly:<p>"After years of trying to cut off Linux growth as a desktop platform on x86 and x64 PCs, Microsoft may have actually figured out a way to stop Linux deployments on client PCs dead in their tracks."<p>I'm quite certain Microsoft has (A) not put any significant effort into cutting off growth as a desktop platform, and (B) If they had, they were almost completely successful, and characterizing it as "trying" implies that they had limited success.
评论 #3020645 未加载
jrockwayover 13 years ago
I doubt any major vendor will do this. First off, they don't want to be locked into selling Microsoft-only machines. If they can't pretend Linux is an option, Microsoft can charge them $1000 for a Windows license and there's nothing they can do about it. If they have Linux hanging over Microsoft's head, though, they'll get better pricing on Windows. (Think this won't happen? It already did with XP on netbooks. When Microsoft realized that everyone was happy to get $100 off the price of their laptop to run Firefox under Linux instead of under Windows, they had no choice but to make it nearly free.)<p>If that doesn't work, the need for booting non-standard Windows images will save us. I've never worked for any company that ran a stock Windows install -- everyone rolls their own. If new machines won't boot this image, guess what, that new machine is bought from some vendor that doesn't do this to them. And the only reason most people use Windows at home is because they use Windows at work. If big companies started migrating away from Windows, Microsoft could be in serious trouble. (Yup, Microsoft Word is much nicer than LibreOffice Writer or AbiWord. But you don't know that if you've never used it. Or, you don't care, because you're writing a memo, not a book. And that's $600 Microsoft loses right there.)<p>Next, we're forgetting the all-important server market. Nobody uses Windows as a server OS, so all those servers are going to have to be able to run Grub. Since servers are what make the OEMs money (they actually need that quad core chip, you don't), keeping users of that market happy will be the hardware companies' biggest concern. If Intel chips stop booting Linux, guess what, AMD is the new king of the market.<p>Finally, many of these companies are in markets other than consumer computers, and they won't want to alienate their other partners. If, say, Samsung says "our hardware will only run Windows", then they won't be manufacturing Android phones or Chromebooks anymore. And that's a big deal, because they won't be manufacturing iPhones either, and that means they're out of the mobile market. (Have you ever seen anyone without MVP certification anywhere near a Windows Phone? I didn't think so.)<p>Basically, Windows is important, but not so important that anyone would want to be the first to go Windows-only in hardware. Hardware companies want to provide nice computers at a nice price. End users mostly want to browse the web. This puts Microsoft in a position to do exactly what the market wants, not what it thinks it can bear. When you're at the top, the only place to go is down. And that is where Microsoft is going.
评论 #3020668 未加载
评论 #3020631 未加载
评论 #3021189 未加载
评论 #3021235 未加载
评论 #3020623 未加载
评论 #3022357 未加载
评论 #3021427 未加载
评论 #3020664 未加载
评论 #3020783 未加载
daekenover 13 years ago
This <i>could</i> block Linux from booting, but realistically speaking, does anyone believe that will happen? It seems very, very unlikely to me that you won't be able to disable signing restrictions at the firmware level.
评论 #3020530 未加载
评论 #3020545 未加载
评论 #3021636 未加载
rdlover 13 years ago
This is overblown. However, if this means secure boot hardware is even more widely available, it is a win -- if the keys are under control of the user or his organization, it is a huge security win.
yasonover 13 years ago
I've long thought that the only place where I allow Windows is in a virtual machine. This seems to hint in that direction: buy a machine that isn't broken (can boot Linux) and do your Windows duties under VirtualBox or something.
ablealover 13 years ago
LWN notice and discussion of "Garrett: UEFI secure booting" at <a href="http://lwn.net/Articles/459569/" rel="nofollow">http://lwn.net/Articles/459569/</a>
tree_of_itemover 13 years ago
To everyone saying "I doubt anyone will do this": wasn't the consensus also against Microsoft restricting application distribution to their app store?
评论 #3020802 未加载
krschultzover 13 years ago
It won't happen, and if it does happen, it won't matter.<p>Can you imagine the Anti-Trust problems this would create? Microsoft is still a big fat target for anti-trust lawsuits and this one is pretty blatant.<p>And if it does happen, while we're waiting for the Justice Department to end it I'm pretty sure the Linux hackers will find a way around it. When there is a will, there is a way.
sunycover 13 years ago
chromeos has similar thing, with a developer switch at back basically turns off the signature validation in firmware. what they should worry about is, which CA root to put in there.
tbrownawover 13 years ago
&#62; The two alternatives here are for Windows to be signed with a Microsoft key and for the public part of that key to be included with all systems, or<p>Does it have to be <i>directly</i> signed by that key, or does it work like the CA system that web browsers use?<p>&#62; A system that ships with only OEM and Microsoft keys will not boot a generic copy of Linux. [ from the blog post rather than the article ]<p>Which tells us that either systems will not ship with only those keys, or there will be a simple way to disable this ("Press F2 for setup"), or somebody will be getting sued on antitrust grounds (which maybe would be ignored again in the US, but not the rest of the world) and forced to provide a workaround.
TallGuyShortover 13 years ago
No one seems to have mentioned the impact this will have on Live systems. I'm frequently called on by Windows users to recover lost data on corrupted systems, which I do using a Live Linux distribution (especially when they have discarded their installation media &#38; access keys, and have no interest in investing money in continuing using Windows if I can give them a free alternative to getting online). How will I be able to do that for people with Windows 8 computers?<p>I'm sure I'll be able to find unsigned hardware for my personal use, but it's the interoperability that concerns me.
评论 #3023156 未加载
gizzlonover 13 years ago
The articles doesn't say, but this would require an TPM in the machine to be successful.. right?<p>Without a TPM how can the EFI be trusted? You just have to replace it as well as the boot loader and kernel.
wedesoftover 13 years ago
It certainly won't get easier to install a Linux dual-boot. It is already difficult enough as it is:<p>* Windows PCs without installation medium<p>* Windows installation with a full partitition table (four primary partitions)<p>* (intentionally?) corrupted partition tables<p>I.e. installing GNU/Linux requires you to resize partitions with a potentially corrupted NTFS file system and/or delete backup partitions. Alternatively the user uses a Windows image file as Linux file system (Wubi) which is slower and a more fragile solution.
jsz0over 13 years ago
Linux (on the desktop) is probably of little or no concern to Microsoft at this point. They've got bigger problems to worry about. If they want to focus on making computers sold with Windows offer the best possible experience it will benefit the most people. Possibly it will make things harder for Linux users but from Microsoft's perspective if the OEM is shipping Windows there's no reason to consider Linux as part of the equation.
评论 #3020901 未加载
moontearover 13 years ago
"We will continue to support the legacy BIOS interface, but machines using the UEFI interface will have significantly richer capabilities."<p>== Will not block Linux or any other OS booting. Secondly anti-trust cases would kill MS if they would block any other OS, so they won't.<p><a href="http://blogs.msdn.com/b/b8/archive/2011/09/20/reengineering-the-windows-boot-experience.aspx" rel="nofollow">http://blogs.msdn.com/b/b8/archive/2011/09/20/reengineering-...</a>
bitopsover 13 years ago
Agree that its a non-issue. Linux is established, would be a really dumb move to block it like this.<p>In two weeks we'll have forgotten all about it.
评论 #3021045 未加载
评论 #3021014 未加载
christkvover 13 years ago
If this makes it into real hardware I expect the EU to reopen their case against Microsoft fairly quickly on anti-competitive grounds. There are to many governmental institutions and businesses dependent on linux for their day to day work for this to go unchallenged.
pauljaover 13 years ago
Thats one way to stop all the shops that slap XP on modern hardware, due to corporate IT policy.
mkupover 13 years ago
There was a time when Windows Logo was considered prestigious, respectable and trendy thing.<p>With such a practice Microsoft is quickly approaching a time when Windows Logo will be perceived like a hot-iron branding of robbers and other criminals in the medieval era.
karolisdover 13 years ago
Does this effect dual booting OS X? I doubt the side-effect of blocking Linux boots was anything but a coincidence. But could Microsoft be fearful of Hackintoshes becoming more popular and a increase of OS X running on non-Apple hardware?
评论 #3020548 未加载
评论 #3020648 未加载
dhimesover 13 years ago
If the UEFI could be made to handle multiple keys, and allow the owner to enter them into the firmware, then this could work. One more step in the setup but a more secure system overall.
braco_alvaover 13 years ago
But even if this was true, there is still ways around this right? I mean rEFIt does a pretty good job booting up Linux in Mac, so wouldn't this be possible in those PC's as well?
评论 #3020714 未加载
prayagover 13 years ago
I bought a Windows machine from Amazon. The reason that I wasn't able to install Linux was acceptable enough for Amazon to pay for return shipping.
评论 #3020630 未加载
RexRollmanover 13 years ago
Why is this being written like it is solely a "linux" problem? It seems to me that it effects every non-Windows operating system.
kvkover 13 years ago
The start of a Windows jailbreaking scene?
nagnatronover 13 years ago
I know I'm speaking through my reality distortion field, but who cares about this?
ivanbernatover 13 years ago
It looks to me like it's designed with tablets in mind, not desktops / laptops.
lhnnover 13 years ago
Wouldn't this draw anti-trust battles? Since complying with EFI signing is against the license of one of the only other major alternatives to Windows, this would not bode well for Microsoft.
评论 #3021489 未加载
评论 #3024673 未加载
评论 #3021177 未加载
dramaticus3over 13 years ago
Summary : Machines that have the "Windows 8" logo must have UEFI, which means the bootloader must be signed with a key that's in the BIOS. Additionally the OS can use the keys to check other signed code : device drivers etc.<p>My conclusion : A smart vendor will include a signed program that will manage said keys in the BIOS.
pointyhatover 13 years ago
Like I suspected, this entire thread has been turned by zealots into a Microsoft-bashing exercise.<p>I genuinely dispair for people who spend their entire time platform bashing and don't add something constructive to the discussion or tar and feather a side religiously. It paints a very bad picture of the "startup culture" amongst more established organisations.
guard-of-terraover 13 years ago
Does this also mean that you won't be able to boot Windows 8 on a PC you assembled yourself? Oh, they did not think of that.<p>One more reason to hate MS and want it die everywhere.
brokensystemover 13 years ago
I use ubuntu but surely my harddrive is full of malware (boot system compromised). Linux is for hacker playing with backdoors. I like free software and linux, but if I need a secure system, I should have to pay the prize of using windows 8.