5 ms·

If indeed some systems come locked down(secure boot) without an option to disable, couldn't Microsoft just make something like Apple's Bootcamp to boot alternat

If indeed some systems come locked down(secure boot) without an option to disable, couldn't Microsoft just make something like Apple's Bootcamp to boot alternative operating systems?

ajross 15y ago
Would have to be the system vendor, not Microsoft. Or rather, if MS could do it then the whole scheme is a sham, the authentication is supposed to be at the firmware level, not in the OS. UEFI is turning into a huge mess. I'd look to the Coreboot stuff being pushed/supported by AMD as a much better path to the future, and try to think of ways to club Intel's NIH-adled brain into getting on board.
- pyre 15y ago
  Not like it hasn't happened before. Intel thought that IA64 was that way toward 64-bit, but AMD came up with the x86_64 that we use now.
- joenathan 15y ago
  The firmware checks the OS for a signature - Couldn't MS make a tool that booted a signed bootloader or whatever pieces the firmware needs to authenticate and then passes the boot process off to the alternate OS...
  - aquayellow 15y ago
    Not just the bootloader, from what I understand, the whole OS needs to be signed : drivers in particular or anything else that could talk to the firmware. So, they need to be signed too. With OSes such as Linux, I don't even know if it's technically possible to do that from a license point of view.
    - drivebyacct2 15y ago
      No, it is just the bootloader (same way the Android phones work), though MS could craft their signed bootloader to also verify the NT kernel (which would make sense). The other problem is, in the original article that was published on this topic, that apparently the Linux/grub boot process will be changing so that the "kernel is part of the bootloader", so I think that adds to the complexity of the idea of signing either the bootloader or "the whole OS" (whatever that means anyway.
      - aquayellow 15y ago
        Yes, you are right. Actually, it's just the bootloader. So, technically Microsoft can come up with a bootloader (GPLed) that can boot Linux or modify the current one. My bad! Regarding the "kernel is part of the bootloader" idea, I think that was just an idea :) That's not happening anytime soon, although you can give Linux as a stage 2 payload directly to coreboot currently.
- aquayellow 15y ago
  And UEFI fans can still use it as a payload to coreboot! Although I am not sure why anyone would be a fan of UEFI. An extra layer of abstraction on top of BIOS ? Wait, why ?
- jstedfast 15y ago
  According to the article, both AMD and Intel are on board with the UEFI.

If indeed some systems come locked down(secure boot) without an option to disable, couldn't Microsoft just make something like Apple's Bootcamp to boot alternative operating systems?

ajross 15y ago

Would have to be the system vendor, not Microsoft. Or rather, if MS could do it then the whole scheme is a sham, the authentication is supposed to be at the firmware level, not in the OS. UEFI is turning into a huge mess. I'd look to the Coreboot stuff being pushed/supported by AMD as a much better path to the future, and try to think of ways to club Intel's NIH-adled brain into getting on board.

pyre 15y ago
Not like it hasn't happened before. Intel thought that IA64 was that way toward 64-bit, but AMD came up with the x86_64 that we use now.
joenathan 15y ago
The firmware checks the OS for a signature - Couldn't MS make a tool that booted a signed bootloader or whatever pieces the firmware needs to authenticate and then passes the boot process off to the alternate OS...
- aquayellow 15y ago
  Not just the bootloader, from what I understand, the whole OS needs to be signed : drivers in particular or anything else that could talk to the firmware. So, they need to be signed too. With OSes such as Linux, I don't even know if it's technically possible to do that from a license point of view.
  - drivebyacct2 15y ago
    No, it is just the bootloader (same way the Android phones work), though MS could craft their signed bootloader to also verify the NT kernel (which would make sense). The other problem is, in the original article that was published on this topic, that apparently the Linux/grub boot process will be changing so that the "kernel is part of the bootloader", so I think that adds to the complexity of the idea of signing either the bootloader or "the whole OS" (whatever that means anyway.
    - aquayellow 15y ago
      Yes, you are right. Actually, it's just the bootloader. So, technically Microsoft can come up with a bootloader (GPLed) that can boot Linux or modify the current one. My bad! Regarding the "kernel is part of the bootloader" idea, I think that was just an idea :) That's not happening anytime soon, although you can give Linux as a stage 2 payload directly to coreboot currently.
aquayellow 15y ago
And UEFI fans can still use it as a payload to coreboot! Although I am not sure why anyone would be a fan of UEFI. An extra layer of abstraction on top of BIOS ? Wait, why ?
jstedfast 15y ago
According to the article, both AMD and Intel are on board with the UEFI.