News for hackers. Stuff that matters.
Re:Dell shipping laptop with rogue self-signed root CA by 01Michael10 on Monday November 23, 2015 @12:32PM (#10615815)
One should always do a clean install of Windows with a OEM disc when buy a new PC. You can avoid a lot of issues that way...
Re:Dell shipping laptop with rogue self-signed root CA by gootdude on Monday November 23, 2015 @12:36PM (#10615841)
Lenovo uses Microsoft Windows Platform Binary Table to install bloatware, which gets around any kind of clean install/reset.

Clean install for Windows means nothing when you have shady vendors utilizing this mechanism.

Re:Dell shipping laptop with rogue self-signed root CA by mikeash on Monday November 23, 2015 @01:02PM (#10616028)
I would change that last part to say "means nothing when you have shady OS makers building this mechanism."

I mean, come on, Microsoft, what were you thinking? Vendors gonna vend, so you had to know how this "feature" was going to be used.

Re:Dell shipping laptop with rogue self-signed root CA by gootdude on Monday November 23, 2015 @01:34PM (#10616267)
Microsoft created the feature so you'd actually have driver support when doing the reset. I'm sure we all love resetting a touch screen only machine to find out it has no touch support for the install.
Re:Dell shipping laptop with rogue self-signed root CA by mikeash on Monday November 23, 2015 @03:24PM (#10617061)
Perhaps this would encourage vendors to actually follow standards for their input devices so they didn't require custom drivers. Win-win!
Re:Dell shipping laptop with rogue self-signed root CA by thescriptkiddie on Monday November 23, 2015 @02:54PM (#10616858)
They could have just put the drivers on the CD like every linux distro ever.
Re:Dell shipping laptop with rogue self-signed root CA by r00fus on Monday November 23, 2015 @04:11PM (#10617330)
You mean the CD recovery image disk which would ostensibly have all the same bloat/spyware as the PC itself?
Re:Dell shipping laptop with rogue self-signed root CA by thescriptkiddie on Monday November 23, 2015 @05:44PM (#10617899)
No, I mean the official Windows CD (technically two DVD set now). New Windows versions are shipping frequently enough now that it would actually be possible.
Re:Dell shipping laptop with rogue self-signed root CA by j_h_s on Monday November 23, 2015 @05:57PM (#10617958)
Microsoft could maintain specific install mediums for each device, including the drivers necessary, but without allowing vendors to load crapware
Re:Dell shipping laptop with rogue self-signed root CA by _lce0 on Monday November 23, 2015 @01:02PM (#10616023)
What about installing an intermediate linux system?

Like

  1. start with window pre-installed
  2. install any linux distro, fully overwriting the OEM
  3. re-install windows, from microsoft 
I'd say just stop at step 2 ;) but I can understand that not everybody can do this (eg: work computer) but want a clean OS.

will this method work to remove such bloatware?

Re:Dell shipping laptop with rogue self-signed root CA by morcheeba on Monday November 23, 2015 @01:09PM (#10616080)
This won't work because the firmware will write a file to your hard drive with the bloatware. It's scary that firmware will modify my filesystem - lots of damage could happen here.

Also, instead of step 2, it would make more sense to boot linux on a usb stick and use dd to erase the hard drive -- this is more complete than installing another OS... but still useless if the firmware is working against you.

Re:Dell shipping laptop with rogue self-signed root CA by lmz on Monday November 23, 2015 @02:27PM (#10616662)
In this case Windows will write to your filesystem, not the firmware. Of course there is nothing stopping a firmware from writing to the disk before it loads any OS, but that is true with any OS not just Windows.
Re:Dell shipping laptop with rogue self-signed root CA by mikeash on Monday November 23, 2015 @01:03PM (#10616033)
It won't work unless you manage to flash the UEFI firmware.
Re:Dell shipping laptop with rogue self-signed root CA by wlesieutre on Monday November 23, 2015 @12:34PM (#10615831)
Re:Dell shipping laptop with rogue self-signed root CA by astrodust on Monday November 23, 2015 @12:45PM (#10615910)
So buy it twice to get a good copy?

Microsoft really needs to reel in the bad behaviour on the part of the OEMs.

Re:Dell shipping laptop with rogue self-signed root CA by wlesieutre on Monday November 23, 2015 @02:46PM (#10616794)
No no, sorry. Signature edition is buying the computer itself, not rebuying the OS. They're computers from Dell/Toshiba/Acer/etc. sold directly by Microsoft without any garbageware. Saves you the hassle of having to do a clean install after you buy it.
Re:Dell shipping laptop with rogue self-signed root CA by astrodust on Monday November 23, 2015 @03:32PM (#10617100)
Do you have a link that explains what this is? The previous one dumped me on some random Microsoft Store page.
Re:Dell shipping laptop with rogue self-signed root CA by wlesieutre on Monday November 23, 2015 @04:15PM (#10617359)
Hm, link works for me. Maybe MS is doing a location based redirect or something? Try google cache: http://webcache.googleusercontent.com/search?q=cache%3Ahttp%...
Re:Dell shipping laptop with rogue self-signed root CA by scholia on Monday November 23, 2015 @05:11PM (#10617704)
The US government launched a massive anti-trust case against Microsoft to enable OEMs to do whatever they wanted.

It cost Microsoft many billions of dollars, almost had the company broken up, and put them under close Department of Justice supervision for a decade. I don't think Microsoft will risk anything like that again....

Re:Dell shipping laptop with rogue self-signed root CA by Tloewald on Monday November 23, 2015 @05:38PM (#10617871)
Microsoft didn't get sued for trying to make installing Windows easier. It got sued for making changes in Windows designed to damage competitors (specifically Netscape, Sun, Borland, and Apple) and publicly and repeatedly lying about it.
Re:Dell shipping laptop with rogue self-signed root CA by scholia on Monday November 23, 2015 @07:38PM (#10618374)
The heart of the case was whether OEMs could install Netscape and/or remove IE. One direct result was that Microsoft could not insist on its preferred installation of Windows.

Microsoft was also prevented from charging the major OEMs different prices, which was its main way of rewarding OEMs for doing installations the way Microsoft wanted.

Re:Dell shipping laptop with rogue self-signed root CA by Tloewald on Monday November 23, 2015 @07:45PM (#10618408)
This is true -- but again Microsoft got caught lying about how IE's functionality was "intrinsic" to Windows (which was why it prevented IE from being uninstalled). It was also forcing PC manufacturers to pay a royalty for every PC sold, whether or not it was bundled with DOS or Windows (which damaged rivals like Digital Research -- the company Microsoft essentially stole DOS from, but that's another story).
Re:Dell shipping laptop with rogue self-signed root CA by scholia on Monday November 23, 2015 @08:35PM (#10618608)
> how IE's functionality was "intrinsic" to Windows

Microsoft had been forced to sign a consent decree in 1995, which prevented it from tying new products to the OS but specifically allowed it to add new features to the OS. It therefore didn't have much choice about its arguments, though (like every other OS supplier) it obviously wanted to include a browser. Equally obviously, delivering a free browser as part of the OS was good for consumers, which is why Microsoft won the browser bundling case on appeal.

Microsoft had also componentized the browser so that different functions could be used by other programs, which to some extent, did make it part of the OS. (Much of the anti-trust case argument on that topic was phenomenally stupid.)

>It was also forcing PC manufacturers to pay a royalty for every PC sold, whether or not it was bundled with DOS or Windows

Don't think so. That was a deal offered to some OEMs, but as far as I know, it was never forced on anybody. In any case, the US Justice Department banned the idea in 1994. I tend to think 21+ years is a bit of long time to hold a grudge about something that was killed before it took off.

> Digital Research -- the company Microsoft essentially stole DOS from, but that's another story

Well, DR screwed up massively by refusing to sign a deal with IBM, then by charging too much for DR DOS, and then Apple screwed it in a court case over the UI in DR GEM. Either way, DR was dead long before the Microsoft anti-trust suit.

Re:Dell shipping laptop with rogue self-signed root CA by Tloewald on Wednesday November 25, 2015 @12:54AM (#10625576)
> "it was never forced on anybody"

Depends on what you mean by "forced", right? If a PC manufacturer's choice is between not selling PCs with Windows pre-installed and having to pay a per-PC license for Windows whether Windows is installed or not, then effectively it's forced. And this was likely in play for years, but covered by commercial in confidence.

> DR screwed up massively by refusing to sign a deal with IBM

Sure but that's a different issue entirely.

As a result of the litigation over 86-DOS/QDOS (which MS licensed from Seattle Computer Products) Seattle Computer Products, DR-DOS, IBM, and Microsoft ended up with the right to ship DOS. Microsoft acquired SCP's license for chump change via a dubious legal maneuver whereby it was forced to sell its license to MS rather than to anyone else for whatever they wanted to pay (I forget the detail, it's documented in one of the Gates biographies). DR and IBM continued to sell technically superior versions of DOS, but IBM's was bundled with IBM-branded hardware and DR was crippled by Microsoft's licensing contracts which became particularly effective once Windows 3.x came out.

> 21+ years is a bit of long time to hold a grudge

This is only the tip of the iceberg of things MS's anti-competitive behaviors. Probably its most pernicious behavior was "dumping" on rivals (cross-subsidizing products such as Access until rivals went out of business) and actively sabotaging third party software (e.g. -- allegedly -- deliberately breaking Lotus 1-2-3 on DOS 2.x and -- well-documented -- breaking Borland compilers in the Windows 95 betas (which might well have continued into the release version had it not been caught red-handed).

Re:Dell shipping laptop with rogue self-signed root CA by r00fus on Monday November 23, 2015 @04:50PM (#10617584)
At this point, the price "advantage" for Windows PCs vs. a Mac is tenuous at best... especially since a lot of folks buy on some "30% off this week" deal with Dell/Lenovo/etc.
Re:Dell shipping laptop with rogue self-signed root CA by prodmerc on Monday November 23, 2015 @01:20PM (#10616164)
Yeah, so that may not be possible.

I have a HP laptop with a Windows 7 license key under the battery and I can only install Windows 7 from HP recovery disks.

Of course, I opted to say "fuck you" and torrented a Win7 installation disk and activator, but that is not an option most of the time.