News for hackers. Stuff that matters.

A comment on Uncorrectable freedom and security issues on x86 platforms (2016). Parent comment

Re:Uncorrectable freedom and security issues on x86 platform... by pjc50 on Friday March 03, 2017 @06:59PM (#13788108)
> now requires FOSS users to purchase a license from Microsoft to boot FOSS

This isn't actually true, is it?

[ Parent | on HN ]
Re:Uncorrectable freedom and security issues on x86 platform... by cyphar on Friday March 03, 2017 @10:24PM (#13789009)
They charge a fee to get a certificate that you can use to submit binaries to be signed with the Microsoft signing service. If you're a user of a distribution you won't have this problem, because distributions have already paid and have a hack "shim" which effectively enrols the distribution's own keys into the trustdb. But if you wanted to make your own distribution you would have to pay.
[ Parent | on HN ]
Re:Uncorrectable freedom and security issues on x86 platform... by jwilk on Saturday March 04, 2017 @04:38AM (#13790138)
Nope. It should be normally possible to disable Secure Boot.

In fact, many distributions don't support Secure Boot at all.

[ Parent | on HN ]
Re:Uncorrectable freedom and security issues on x86 platform... by cyphar on Saturday March 04, 2017 @10:16PM (#13794383)
> Nope. It should be normally possible to disable Secure Boot.

This is only true on x86. On arm, Microsoft's requirements state that it should not be possible for users to disable Secure Boot.

[ Parent | on HN ]
Re:Uncorrectable freedom and security issues on x86 platform... by jwilk on Monday March 06, 2017 @02:39PM (#13805398)
But is there any interesting ARM hardware that is certified for Windows? (Honest question, I have no idea.)
[ Parent | on HN ]
Re:Uncorrectable freedom and security issues on x86 platform... by cyphar on Monday March 06, 2017 @07:07PM (#13807273)
For Windows RT, looks like there wasn't that many certified devices.[1]

[1]: https://en.wikipedia.org/wiki/Windows_RT#Devices

[ Parent | on HN ]