mjg59

142 ms·

1651.
by mjg59 15y ago
The point of secure boot is that it protects the environment before the operating system starts. If the operating system you're installing is untrusted then you've lost regardless.
1652.
by mjg59 15y ago
The drivers for any hardware used in the UEFI environment (so graphics, input, storage, potentially network) have the ability to compromise your system, so they have to be trusted as well. For hardware that's built into your machine, that's
1653.
by mjg59 15y ago
The ability to disable it is in the spec, but it's not required by the spec. Equally, the ability to override security decisions on a case by case basis is in the spec, but the Microsoft certification requirements forbid it.
1654.
by mjg59 15y ago
Being part of the Windows logo program means getting access to some Microsoft marketing budget. The incentive is the financial benefit, not the sticker itself.
1655.
by mjg59 15y ago
It's easy to write a signing tool, but you'd still need to have the private half of an appropriate key to do anything useful with it.
1656.
by mjg59 15y ago
I'm told that at least one vendor will be providing some systems that don't allow you to disable the requirement.
1657.
by mjg59 15y ago
It's completely supported by Linux, but you need appropriate font coverage.
1658.
by mjg59 15y ago
Yes, but it's ABI incompatible with 32-bit or full 64-bit. https://sites.google.com/site/x32abi/ is an implementation.
1659.
by mjg59 15y ago
int 19 should just execute code in the BIOS that triggers a reboot. Setting CS and jumping is re-entering the BIOS at the same entry point as at power-on. The BIOS should then reinit all the hardware.
1660.
by mjg59 15y ago
Most operating systems fail on various bits of hardware. Windows uses the ACPI vector, then tries the keyboard controller, then the ACPI vector again, then the keyboard controller again, and then just stops.
1661.
by mjg59 15y ago
Method 7 is available for 32-bit systems, and actually pretty reliable. But going from 64-bit to 16-bit just to reboot is more pain than anyone really wanted to go through.
1662.
by mjg59 15y ago
Reality is that in areas of poor standardisation, vendors will test against Windows and ship it if it works. You could argue for a cross-vendor compliance testing suite, but if the behaviour of Windows varied from that then people would sti