Recommended Posts

The new Microsoft Windows 8 systems that come preinstalled on a new computer have a special feature - a feature no other PC has ever had. By default they are locked down so you cannot dual boot Windows 8 with another operating system such as Linux or even older versions of Windows such as Windows XP and Windows 7.

Dual booting is a popular thing to do for many PC users because it allows them the ability to use the right applications they need to get the job done if those applications are not found on Windows 8 alone. Dual booting is also used in companies that require workers use multiple operating system platforms or home users and students to try out and learn about other operating systems. Many of these operating systems are faster than Windows and have other features Windows does not have, as well as there are things Windows does better than these operating systems like AAA Gaming.

The reason Windows 8 will not dual boot is because Microsoft has insisted that their PC manufacturer partners like HP and Dell ship with a new type of bios called UEFI (Unified Extensible Firmware Interface) and it's feature called Secure Boot enabled. Secure Boot acts as a protection feature that is supposed to ensure your system doesn't have any malware at the time of shipping. It works by checking keys in the operating system against hard coded keys in the UEFI. As these keys are signed by Microsoft, the system will not allow any other operating system to boot assuring you have a clean copy of Windows 8. This has never been done before in the PC market and for good reason - PC Manufacturers don't have problems with systems getting malware before they ship.

PC's that ship with Windows are cheaper because Microsoft buys a portion of the hardware in exchange for HP offering Windows in the computer. The rep told me all the PC manufacturers and Microsoft have this same agreement. I wanted to know why there was no mention of UEFI in the HP documentation or why the tech support could not help me. The HP rep told me many times during our phone conversation that because they are paid by Microsoft, they adhere to Microsoft's wishes and not make it easy on people to learn about disabling Secure Boot so you can dual boot - something that is required by the manufacturers from Microsoft's own documentation called Windows 8 Hardware Certification Requirements for Client and Server Systems.

more

I also like trudging up articles about things we knew a year ago for fresh FUD!

Did you know that every time you connect to the internet you're assigned an identifier called an 'IP address' than can associate your online activity with your internet account? More at 11!

The HP rep told me many times during our phone conversation that because they are paid by Microsoft, they adhere to Microsoft's wishes and not make it easy on people to learn about disabling Secure Boot so you can dual boot.

Yeah I do not know about this. - I am always skeptical when I see quotes like this. It is too easy to change / alter or just straight fabricate this information in an attempt to make a story spin in a specific direction.

Even IF this was quoted, I am sure this person is not authorized or have the capacity to discuss the terms and agreements.

Microsoft buys a portion of the hardware? Microsoft pays HP to use windows? :woot:

im sorry but your info is incorrect. HP pays Microsoft for a license to use their software(Windows). Microsofts license requires certain features (SecureBoot) to be enabled if that device wants to have Windows 8 certification . Windows 8 certification means that the hardware and software meet certain standard. Anyone can sell non certified PCs,but most retailers and stores will not allow or sell non certified windows PCs.

Interesting:

  • UEFI allows firmware to implement a security policy
  • Secure boot is a UEFI protocol not a Windows 8 feature
  • UEFI secure boot is part of Windows 8 secured boot architecture
  • Windows 8 utilizes secure boot to ensure that the pre-OS environment is secure
  • Secure boot doesn?t ?lock out? operating system loaders, but is a policy that allows firmware to validate authenticity of components
  • OEMs have the ability to customize their firmware to meet the needs of their customers by customizing the level of certificate and policy management on their platform
  • Microsoft does not mandate or control the settings on PC firmware that control or enable secured boot from any operating system other than Windows

http://www.eightforums.com/tutorials/17058-secure-boot-enable-disable-uefi.html

Interesting:

  • UEFI allows firmware to implement a security policy
  • Secure boot is a UEFI protocol not a Windows 8 feature
  • UEFI secure boot is part of Windows 8 secured boot architecture
  • Windows 8 utilizes secure boot to ensure that the pre-OS environment is secure
  • Secure boot doesn?t ?lock out? operating system loaders, but is a policy that allows firmware to validate authenticity of components
  • OEMs have the ability to customize their firmware to meet the needs of their customers by customizing the level of certificate and policy management on their platform
  • Microsoft does not mandate or control the settings on PC firmware that control or enable secured boot from any operating system other than Windows

http://www.eightforu...sable-uefi.html

Wait I am confused, are you correcting yourself?

I'm thinking it's more in the realm of preventing bootloader activation cracks and rootkits that inject themselves into the bootloader. I'm pretty sure part of the spec is that manufacturers must place an option in the BIOS to disable secure boot.

So explain how people are booting Ubuntu on surface pros

Microsoft signed a shim bootloader for Linux.This is basically a generic prebootloader that allows to run a secondary bootloader which can be specific to each Linux distribution. The shim bootloaders is generic because Microsoft cant keep signing every new version of bootloaders for Linux guys. Therefore since this is a trusted binary, its able to run and then boot Linux with secureboot enabled.

If it weren't for the fact that 90% of PC users are uneducated and unwilling to learn about what they bought/use (but also cannot live without it these days) we wouldn't need "Secure Boot".

I got fed up of helping people with viruses and trojans taking up hours of my time (mostly for free) that I just prefer they go to someone else or even pay for a professional to help them now.

I got fed up of helping people with viruses and trojans taking up hours of my time (mostly for free) that I just prefer they go to someone else or even pay for a professional to help them now.

Only people I help for free now is family, and if I am doing work for a charity. I told my one sis if she ever installed Limewire again (she kept installing it after I kept telling her not to) that I will not longer help her and she will have to pay to get the system fixed next time.

companies can put all the protection they want on a system...if hte user is uneducated and do not know what they are doing, no amount of protection will help. I would figure with computers being so common and wide spread that more people would be smarter.

  • Like 2

Only people I help for free now is family, and if I am doing work for a charity. I told my one sis if she ever installed Limewire again (she kept installing it after I kept telling her not to) that I will not longer help her and she will have to pay to get the system fixed next time.

companies can put all the protection they want on a system...if hte user is uneducated and do not know what they are doing, no amount of protection will help. I would figure with computers being so common and wide spread that more people would be smarter.

Screw that...I stopped helping out my family because it was pointless. The only ones I still help are my parents...you cannot say no to Mom and Dad :)

Simple, create a limited profile, define in GPO what applications she can use after you downloaded and configured the software she needs. and there yah go. I do that for my family to keep the lappie nice and clean and keep me sane!

There is no conspiracy, how hard is it to go to the bios to turn this off? Anyone who is going to be dual booting and such are already going to know about this or things like this to get around it. So why make a big deal over this?

  • Like 2

Thought Microsoft Security Essentials when released would cut down on Family infecting there PC's with junk, but I find that i'm still helping family remove Trojans and junk off there PC's pretty regularly, gotten to the point only help Mom these days, rest I recommend to local small PC shop, as too much time cleaning there PCs

Most of Family though removed MSE when they saw it failed certification tests...So I guess up to them now what they use.

This topic is now closed to further replies.
  • Posts

    • A different thing with Russia. When you say is it better, depends on things. It is better that we don't have the E.U making rules and laws that have nothing to do with them. Is the trading part better? No, that is really mucked up, but then we knew that was going to happen and we would have make agreements, like we do with other parts of the world. Freedom of movement is certainly better, but could be improved, we still need more control over our borders. do you live in the U.K?
    • So what am I quoting from them? I never listened to what Farage or his cronies said. I wanted the U.K to leave the E.u years before the referendum and it had nothing to do with Farage and his cronies. So what country do you live in? Did we work much better together? We were always at logger heads with the E.U because we disagreed with them so much. Maggie was always on at them. I would have thought the E.U was glad to get rid of us as we stopped the integration or made it a two tier. Now without us they can integrate more. I would not have voted out if it was just a trading block and we can still work together on somethings.
    • MPC-BE 1.9.0 by Razvan Serea Media Player Classic - BE is a free and open source audio and video player for Windows. Media Player Classic - BE is based on the original "Media Player Classic" project (Gabest) and "Media Player Classic Home Cinema" project (Casimir666), contains additional features and bug fixes. The BE mod (Black Edition Mod) is a skinned version of Media Player Classic Home Cinema, much better looking than the plain old MPC. MPC-BE 1.9.0 changelog: Splitters Fixed crashes in some situations. AudioSplitter Added support for the RF64 format. Fixed reading of channel layout for some WavPack files. Added support for ID3 tags for Wave64 files. Unknown Wave64 chunks are now ignored. AviSplitter Added support for 'y408' video. Improved support for 'HEVC' video. FLVSplitter Added support for VVC video. MP4Splitter Improved handling of corrupted files. MatroskaSplitter Expanded support for V_UNCOMPRESSED video codecs. Fixed support for frame rotation (ProjectionPoseRoll). Improved support for "V_MS/VFW/FOURCC / HEVC". MpcDvdVideoDecoder Fixed conversion to YUY2. Fixed display of menus for some DVD-Videos. RoQVideoDecoder Output in NV12 and YV12 formats is allowed. Full range is used. MPC Video Decoder RGB32 format will be output as a top-down bitmap by default. Added support for the "IID_MediaSideDataDOVIMetadataV2" interface. Removed support for the deprecated "IID_MediaSideDataDOVIMetadata" interface. Fixed retrieving the name of the video adapter when using NVDEC. Fixed crashes in some situations. MPC Video Converter Added support for AYUV video format. MpcAudioRenderer Improved input format validation. Optimized retrieval of supported formats for exclusive mode. Added the "Keep audio device active when paused" setting. Fixed crashes and freezes in various situations. Subtitles Added the ability to open the properties of an external subtitle renderer in the "Subtitles" settings panel. Fixed external subtitle connections for VSFilter. Fixed a crash when rendering PGS/SUP subtitles when using AVX2. YouTube Improved support for yt-dlp. The built-in YouTube parser is no longer used. Player The HTTP read strategy has been changed. If the playlist contains one entry, more key combinations can be used to control the player (jump through chapters, adjust volume). Improved support for reading ASX playlists. The translation of the MediaInfo report for Chinese, Korean and Japanese has been removed. Added blocking of 32-bit filter "PICVideo Lossless JPEG Decompressor" (pvljpg20.dll), because it crashes. Added blocking of the system filter "AVI Decompressor", which will eliminate the crash of VFW codecs. Fixed a rare crash when using the "/slave" key. Fixed a crash when getting a list of fonts for OSD. Added the ability to load an external audio file using hotkeys. Fixed opening a network path starting with \?\UNC. The "Determine duration when adding" playlist setting now works for YouTube video URLs. The "Online media services" settings panel has been redesigned. Added a "Merge files using FFmpeg" option to the file saving dialog. This option is activated when playing multiple streams obtained using yt-dlp. Added loading of local .dpl playlists ("DAUMPLAYLIST"). Fixed a hang when the user closes the player during the URL opening process. Various interface fixes. Installer Updated MPC Video Renderer 0.10.5. Updated MPC Script Source 0.2.17. Added MPC Image Source 0.3.6. Translations Updated Japanese translation (by tsubasanouta). Updated Chinese (Traditional) and Dutch translation (by beter). Updated Romanian translation (by Andrei Miloiu). Updated Hungarian translation (by mickey). Updated Turkish translation (by cmhrky). Updated German translation (by Klaus1189). Updated Chinese (Simplified) translation (by wushantao). Updated Italian translation (by mapi68). Updated Korean translation (by Hackjjang). Updated Chinese (Traditional) (by udfbe). Updated libraries dav1d 1.5.3-6-g04b69f9; ffmpeg n8.2-dev-1857-g4653e68aab; libpng git-v1.6.55-9-g7d52a8087; Little-CMS git-lcms2.18-26-gf739cda; MediaInfo git-v26.05-38-g702c9b7fd; ZenLib git-v0.4.41-91-g073f297; zlib 1.3.2. Download: MPC-BE 64-bit | Portable MPC-BE 64-bit | ~20.0 MB (Open Source) Download: MPC-BE 32-bit | Portable MPC-BE 32-bit Link: Media Player Classic - BE Home Page Get alerted to all of our Software updates on Twitter at @NeowinSoftware
    • Apple reportedly looks to blacklisted Chinese memory chips as RAM prices climb by Karthik Mudaliar Image via Apple Apple is reportedly trying to get a clearance from the Trump administration to buy memory from ChangXin Memory Technologies (CXMT) to get some relief from soaring DRAM prices. As per a report by the Financial Times, Apple approached the Commerce Department more than a month ago and also spoke to other officials and allies in Washington. For starters, CXMT is a company that's already been placed on the Pentagon's list of Chinese military companies. The Chinese company is the country's top DRAM maker. For Apple, the timing is certainly awkward but not surprising. Tim Cook had recently warned that Apple would have to raise prices because AI companies are buying up large amounts of memory for data centers, and just like that, Apple raised MacBook and iPad prices. Micron also recently revealed that customers have committed billions of dollars to secure memory supply years in advance, which shows us how aggressive securing infrastructure has become. This gives suppliers such as Samsung, SK Hynix, and Micron more leverage, while pushing hardware makers to look for alternatives. CXMT is one of those alternatives, but not the simplest one. Apple has spent many years trying to diversify parts of its supply chain away from China, especially for final assembly, while still depending heavily on Chinese manufacturing and suppliers. Even domestic brands from China are moving towards CXMT and YMTC instead of relying on Samsung, Micron, and SK Hynix. For Apple, though, it would invite more scrutiny than local Chinese companies. For now, this is more like a lobbying effort rather than a confirmed supply deal. There's no official statement from either of the parties. What is clearer, though, is the pressure behind such a request. AI demand has certainly made hardware a bottleneck, and companies are trying everything they can to bring things back to normal, even if that means making politically sensitive choices. Source: Financial Times
    • I did test it a month or so back, but ... the results I expect to be on the first page are not there.
  • Recent Achievements

    • Week One Done
      flexorcist earned a badge
      Week One Done
    • One Month Later
      Woland13 earned a badge
      One Month Later
    • Week One Done
      Woland13 earned a badge
      Week One Done
    • One Year In
      bernmeister earned a badge
      One Year In
    • Week One Done
      Scoobystu earned a badge
      Week One Done
  • Popular Contributors

    1. 1
      +primortal
      487
    2. 2
      +Edouard
      221
    3. 3
      PsYcHoKiLLa
      147
    4. 4
      Steven P.
      74
    5. 5
      FloatingFatMan
      70
  • Tell a friend

    Love Neowin? Tell a friend!