5 ms·
Things got quite close by now: mandatory driver signing in 64bit Windows Vista & 7. You need to select extra boot option to be able to load unsigned driver. Lik
by dexen 15y ago
Things got quite close by now: mandatory driver signing in 64bit Windows Vista & 7. You need to select extra boot option to be able to load unsigned driver. Like the venerable ext2fsd: driver for ext2 & ext3 FS [1]. It won't work for Joe the Average User.
Terrorists win, game over.
[1] http://www.ext2fsd.com/ http://www.ext2fsd.com/
EDIT:
it's a clever move, limititing that requirement only to 64bit Windows. No need for one-time big switchover; the balance towards 64bit will shift gradually over time and before people raise enough opposition it may be too late for independet driver development.
We already know security based on centralized Certification Authorities did not work well for securing HTTPS.
- ReadEvalPost 15y agoOnly allowing signed drivers to run in ring 0 by default makes a lot of sense though. The average user is way less likely to need ext2fsd and much more likely to install randommalwared.
- xpaulbettsx 15y agoFor what it's worth, this wasn't to stop free software drivers, it was a stick to force IHVs to ship drivers that didn't suck, since they could no longer ship drivers that didn't pass WHQL testing. The end result is a more stable system for consumers, but F/OSS got caught in the fallout. If you as a F/OSS driver dev really want to avoid signatures, sign your driver using the test cert and run the following command in your installer: bcdedit -set testsigning on