Comment Feed for Channel 9 - Delivering a secure and fast boot experience with UEFI

Re: Delivering a secure and fast boot experience with UEFI

Craig S — Fri, 16 Sep 2011 23:32:28 GMT

This was by far one of the most informative sessions I have seen during this build conference, including the Windows Server 8 sessions. Thanks for such a great presentation!

posted by Craig S

Re: Delivering a secure and fast boot experience with UEFI

David Skoll — Tue, 20 Sep 2011 19:14:17 GMT

AKA how to make sure new computers cannot boot Linux.

I'm sure MSFT is drooling at this prospect. "If you can't beat them,... cheat!"

posted by David Skoll

Re: Delivering a secure and fast boot experience with UEFI

Anonymous — Wed, 21 Sep 2011 13:49:40 GMT

How do I boot Linux, BSD, Solaris, Plan 9, Haiku, DOS or any other operating system?

posted by Anonymous

Re: Delivering a secure and fast boot experience with UEFI

Leonardo — Wed, 21 Sep 2011 14:26:13 GMT

So now no one can boot a non-MS operating system? That's your idea of innovation? Or it's fear from competitors? Force everyone to use that crappy Windows 8 interface with severe mistakes in UI design?

You are simply ridiculous. Like Win Phone 7 (does WP7 already passed Bada market share? Oh, no, not yet). Honestly, I hope that Google just continues to beat you in competition like today. At least, they use their own capacity to compete on the market, not cheap shots like this.

posted by Leonardo

Re: Delivering a secure and fast boot experience with UEFI

Goncalves — Wed, 21 Sep 2011 15:16:20 GMT

I will NEVER buy a computer with locked boot.

posted by Goncalves

Re: Delivering a secure and fast boot experience with UEFI

aywnheqk — Wed, 21 Sep 2011 19:38:22 GMT

I have to join Goncalves and boycott UEFI based hardware, it's just another way for a company to try to lock hardware manufacturers to sell just one and only operating system (personally I have to say that OS isn't worth the money, they should be paying people to use it, not the other way around).

posted by aywnheqk

Re: Delivering a secure and fast boot experience with UEFI

Thomas — Wed, 21 Sep 2011 21:58:13 GMT

I really enjoyed the session as well as the ask the experts round table. Arie was very informative ...

posted by Thomas

Re: Delivering a secure and fast boot experience with UEFI

Tiao — Thu, 22 Sep 2011 03:33:57 GMT

He say like "our trusted location servers will not fail".

I´m just thinking when for some reason the Active Directory gets mad/crashes(and it´s not dificult due to the amount of Windows administrators that don´t think about HA/Security/Redundancy) and all the "Trusted Location" became a "swamp of screams"....

What will be the next step. Lock the user brain to just one computer?

posted by Tiao

Re: Delivering a secure and fast boot experience with UEFI

rich norris — Thu, 22 Sep 2011 10:07:18 GMT

In a way , I am glad that microsoft dont like linux, as long as they are against it, they wont have much input into how it is constructed, which is a good thing as if they do "get involved" where do we go then to get away from gates?
I know there are a lot of distributions but some of them run on the same base.
For my part I will continue to dual boot untill something replaces Cubase or they port it to ubuntu (wishfull thinking ??), also linux is still very much like 98 insofar as if you want to run certain audio interfaces (tascam us144) you have to become command line comfortable.

posted by rich norris

Re: Delivering a secure and fast boot experience with UEFI

David Skoll — Thu, 22 Sep 2011 14:40:20 GMT

NOTE TO HARDWARE VENDORS:

I am in charge of buying hardware at my (small) company. We buy several tens of thousands of dollars of PC hardware per year... not a lot in the big scheme of things, but a lot for a small company.

We will UNDER NO CIRCUMSTANCES purchase any hardware that does not allow us to install Linux. So those hardware vendors who want to be Windows 8 compliant, think very carefully. If you don't provide a way to disable bootloader verification or allow end-users to insert their own verification keys, you will not get our business.

I encourage anyone else in this position to post here.

posted by David Skoll

Re: Delivering a secure and fast boot experience with UEFI

Dennis — Fri, 23 Sep 2011 10:27:05 GMT

IF this means that the device is not able to boot alternative OSes, don't kind on my money.

posted by Dennis

Re: Delivering a secure and fast boot experience with UEFI

Carlos — Fri, 23 Sep 2011 15:20:47 GMT

OMG... now the BIOS will need easy hard drive switch boot interface?

posted by Carlos

Re: Delivering a secure and fast boot experience with UEFI

JasonT — Sat, 24 Sep 2011 04:44:18 GMT

I am glad the support for other ugly OSes is removed. It always confuses and dirties the system's core. Win-Win for Windows!

posted by JasonT

Re: Delivering a secure and fast boot experience with UEFI

Johannes — Sat, 24 Sep 2011 09:14:43 GMT

You really shouldn't have shown the "foreign languge"-BOSD. Not only because it obviously has problems with unicode but also because the German in it is complete rubbish.

Finally swithiching to UEFI however is great. And those boot times are amazing!

posted by Johannes

Re: Delivering a secure and fast boot experience with UEFI

Ted — Mon, 26 Sep 2011 09:34:36 GMT

:( WTF I've just spend hundreds of dollar for this full windows 7 proffesion version and now this. I want half my money back since i barely had it for a year. This is ridiculous, one os after another within a year or two. I'm not spending another 200 to 300 hundred dollar just for another load of garbage that'll just get replace by another withing 2 to 3 years down the line.

posted by Ted

Re: Delivering a secure and fast boot experience with UEFI

Nigel — Wed, 28 Sep 2011 13:35:05 GMT

A PC locked to run Windows is a PC that my faculty will never purchase. Some (most) of our scientists need to run Linux. We prefer to standardise hardware platforms (rapid response swap in/out, image deployment etc.), so any machine that locks out Linux by design is a machine that won't get purchased for any purpose at all.

Personally I'd go further and add all other hardware manufactured by an offending manufacturer to the blacklist.

If you want lock-in, buy a Mac. Microsoft, if you do this, stop calling the platform a PC. It can't do a large class of things that a curent PC can, so it's a LoseBox or a PC-minus or something.

posted by Nigel

Re: Delivering a secure and fast boot experience with UEFI

kalgin — Wed, 28 Sep 2011 14:44:42 GMT

There will be an option to switch off UEFI on a hardware level and install Linux or any other OS you need. Windows 8 users will keep UEFI enabled and benefit from it, the rest will switch off UEFI and install their OS of choice.

posted by kalgin

Re: Delivering a secure and fast boot experience with UEFI

Vinicius Paluch — Thu, 29 Sep 2011 14:23:45 GMT

Greate security innovations will came with UEFI. Regular users will get more secure.

I´m sorry Linux guys. Have to certificate your OSs. Surelly hardware vendors will maintain versions with old fashioned BIOS for old fashioned OSs.. try to evolve insetead of complain.

posted by Vinicius Paluch

Re: Delivering a secure and fast boot experience with UEFI

Davide Bolcioni — Fri, 07 Oct 2011 21:08:45 GMT

If there is an option to install keys of the owner's choice, and remove default keys (Microsoft's key will become a prime target for mafias and rogue states), this is a minor but welcome security improvement. If not, it's a reason to spend your money somewhere else.

posted by Davide Bolcioni

Re: Delivering a secure and fast boot experience with UEFI

baker — Fri, 21 Oct 2011 14:29:45 GMT

But can't you disable secure boot? which means that linux and such OSs can be used on UEFI systems?

Thats what i heard from some other lecture in Build (or maybe i misunderstood!)

posted by baker

Re: Delivering a secure and fast boot experience with UEFI

Ferran Jorba — Sun, 23 Oct 2011 06:16:09 GMT

@Vinicius:

regular users will get more secure as son as they leave Windows. Now that all my family has moved to Linux (Debian, in our case) we've forgotten about viruses, spyware, and all those threads. We only buy computers that may run Debian. No UEFI at home.

Now, that's evolution, sir.

posted by Ferran Jorba

Re: Delivering a secure and fast boot experience with UEFI

Anon — Mon, 24 Oct 2011 13:40:28 GMT

Good. Garbage operating systems such as Linux should be locked out.

posted by Anon