Recommended Posts

The new Microsoft Windows 8 systems that come preinstalled on a new computer have a special feature - a feature no other PC has ever had. By default they are locked down so you cannot dual boot Windows 8 with another operating system such as Linux or even older versions of Windows such as Windows XP and Windows 7.

Dual booting is a popular thing to do for many PC users because it allows them the ability to use the right applications they need to get the job done if those applications are not found on Windows 8 alone. Dual booting is also used in companies that require workers use multiple operating system platforms or home users and students to try out and learn about other operating systems. Many of these operating systems are faster than Windows and have other features Windows does not have, as well as there are things Windows does better than these operating systems like AAA Gaming.

The reason Windows 8 will not dual boot is because Microsoft has insisted that their PC manufacturer partners like HP and Dell ship with a new type of bios called UEFI (Unified Extensible Firmware Interface) and it's feature called Secure Boot enabled. Secure Boot acts as a protection feature that is supposed to ensure your system doesn't have any malware at the time of shipping. It works by checking keys in the operating system against hard coded keys in the UEFI. As these keys are signed by Microsoft, the system will not allow any other operating system to boot assuring you have a clean copy of Windows 8. This has never been done before in the PC market and for good reason - PC Manufacturers don't have problems with systems getting malware before they ship.

PC's that ship with Windows are cheaper because Microsoft buys a portion of the hardware in exchange for HP offering Windows in the computer. The rep told me all the PC manufacturers and Microsoft have this same agreement. I wanted to know why there was no mention of UEFI in the HP documentation or why the tech support could not help me. The HP rep told me many times during our phone conversation that because they are paid by Microsoft, they adhere to Microsoft's wishes and not make it easy on people to learn about disabling Secure Boot so you can dual boot - something that is required by the manufacturers from Microsoft's own documentation called Windows 8 Hardware Certification Requirements for Client and Server Systems.

more

I also like trudging up articles about things we knew a year ago for fresh FUD!

Did you know that every time you connect to the internet you're assigned an identifier called an 'IP address' than can associate your online activity with your internet account? More at 11!

The HP rep told me many times during our phone conversation that because they are paid by Microsoft, they adhere to Microsoft's wishes and not make it easy on people to learn about disabling Secure Boot so you can dual boot.

Yeah I do not know about this. - I am always skeptical when I see quotes like this. It is too easy to change / alter or just straight fabricate this information in an attempt to make a story spin in a specific direction.

Even IF this was quoted, I am sure this person is not authorized or have the capacity to discuss the terms and agreements.

Microsoft buys a portion of the hardware? Microsoft pays HP to use windows? :woot:

im sorry but your info is incorrect. HP pays Microsoft for a license to use their software(Windows). Microsofts license requires certain features (SecureBoot) to be enabled if that device wants to have Windows 8 certification . Windows 8 certification means that the hardware and software meet certain standard. Anyone can sell non certified PCs,but most retailers and stores will not allow or sell non certified windows PCs.

Interesting:

  • UEFI allows firmware to implement a security policy
  • Secure boot is a UEFI protocol not a Windows 8 feature
  • UEFI secure boot is part of Windows 8 secured boot architecture
  • Windows 8 utilizes secure boot to ensure that the pre-OS environment is secure
  • Secure boot doesn?t ?lock out? operating system loaders, but is a policy that allows firmware to validate authenticity of components
  • OEMs have the ability to customize their firmware to meet the needs of their customers by customizing the level of certificate and policy management on their platform
  • Microsoft does not mandate or control the settings on PC firmware that control or enable secured boot from any operating system other than Windows

http://www.eightforums.com/tutorials/17058-secure-boot-enable-disable-uefi.html

Interesting:

  • UEFI allows firmware to implement a security policy
  • Secure boot is a UEFI protocol not a Windows 8 feature
  • UEFI secure boot is part of Windows 8 secured boot architecture
  • Windows 8 utilizes secure boot to ensure that the pre-OS environment is secure
  • Secure boot doesn?t ?lock out? operating system loaders, but is a policy that allows firmware to validate authenticity of components
  • OEMs have the ability to customize their firmware to meet the needs of their customers by customizing the level of certificate and policy management on their platform
  • Microsoft does not mandate or control the settings on PC firmware that control or enable secured boot from any operating system other than Windows

http://www.eightforu...sable-uefi.html

Wait I am confused, are you correcting yourself?

I'm thinking it's more in the realm of preventing bootloader activation cracks and rootkits that inject themselves into the bootloader. I'm pretty sure part of the spec is that manufacturers must place an option in the BIOS to disable secure boot.

So explain how people are booting Ubuntu on surface pros

Microsoft signed a shim bootloader for Linux.This is basically a generic prebootloader that allows to run a secondary bootloader which can be specific to each Linux distribution. The shim bootloaders is generic because Microsoft cant keep signing every new version of bootloaders for Linux guys. Therefore since this is a trusted binary, its able to run and then boot Linux with secureboot enabled.

If it weren't for the fact that 90% of PC users are uneducated and unwilling to learn about what they bought/use (but also cannot live without it these days) we wouldn't need "Secure Boot".

I got fed up of helping people with viruses and trojans taking up hours of my time (mostly for free) that I just prefer they go to someone else or even pay for a professional to help them now.

I got fed up of helping people with viruses and trojans taking up hours of my time (mostly for free) that I just prefer they go to someone else or even pay for a professional to help them now.

Only people I help for free now is family, and if I am doing work for a charity. I told my one sis if she ever installed Limewire again (she kept installing it after I kept telling her not to) that I will not longer help her and she will have to pay to get the system fixed next time.

companies can put all the protection they want on a system...if hte user is uneducated and do not know what they are doing, no amount of protection will help. I would figure with computers being so common and wide spread that more people would be smarter.

  • Like 2

Only people I help for free now is family, and if I am doing work for a charity. I told my one sis if she ever installed Limewire again (she kept installing it after I kept telling her not to) that I will not longer help her and she will have to pay to get the system fixed next time.

companies can put all the protection they want on a system...if hte user is uneducated and do not know what they are doing, no amount of protection will help. I would figure with computers being so common and wide spread that more people would be smarter.

Screw that...I stopped helping out my family because it was pointless. The only ones I still help are my parents...you cannot say no to Mom and Dad :)

Simple, create a limited profile, define in GPO what applications she can use after you downloaded and configured the software she needs. and there yah go. I do that for my family to keep the lappie nice and clean and keep me sane!

There is no conspiracy, how hard is it to go to the bios to turn this off? Anyone who is going to be dual booting and such are already going to know about this or things like this to get around it. So why make a big deal over this?

  • Like 2

Thought Microsoft Security Essentials when released would cut down on Family infecting there PC's with junk, but I find that i'm still helping family remove Trojans and junk off there PC's pretty regularly, gotten to the point only help Mom these days, rest I recommend to local small PC shop, as too much time cleaning there PCs

Most of Family though removed MSE when they saw it failed certification tests...So I guess up to them now what they use.

This topic is now closed to further replies.
  • Posts

    • foobar2000 2.25.10 by Razvan Serea foobar2000 is an advanced freeware audio player for the Windows platform. It features the simplest, most minimalistic interface you'll ever see in this kind of program. Other features include full unicode support, ReplayGain support and native support for several popular audio formats. foobar2000 features: Supported audio formats: MP3, MP4, AAC, CD Audio, WMA, Vorbis, FLAC, WavPack, WAV, AIFF, Musepack, Speex, AU, SND... and more with additional components. Gapless playback. Full unicode support. Easily customizable user interface layout. Advanced tagging capabilities. Support for ripping Audio CDs as well as transcoding all supported audio formats using the Converter component. Full ReplayGain support. Customizable keyboard shortcuts. Open component architecture allowing third-party developers to extend functionality of the player foobar2000 2.25.10 changelog: Improved implementation of built-in UPnP Media Renderer, implemented gapless playback compatible with popular UPnP control apps. Enabled discovery of OpenHome UPnP devices as output devices. Enabled TLS v1.3 encryption for HTTPS connections. Fixed Ogg/Opus files with single chapter not showing correct track numbers. Fixed Direct2D visualizations getting stuck after GPU driver reinitialization. Updated 7-Zip library to 26.01. Updated UnRAR library to 7.2.6. Download: foobar2000 64-bit | 7.3 MB (Freeware) Download: foobar2000 32-bit | 6.4 MB Links: Home Page | foobar2000 for Mac | Screenshot Get alerted to all of our Software updates on Twitter at @NeowinSoftware
    • Pick up Babbel Language Learning lifetime subscription at 47% off with code by Steven Parker Learn all 14 languages and access more than 10,000 hours of high-quality language education online. Today's highlighted deal comes via our Apps + Software section of the Neowin Deals store, where you can pick up a lifetime subscription to Babbel Language Learning at 47% off. Note: Available to U.S. customers & NEW users only. Learn Spanish, French, Italian, German, and many more languages with Babbel, the #1 top-grossing language-learning app in the world. Developed by over 100 expert linguists, Babbel is helping millions of people speak a new language quickly and with confidence. After just one month, you will be able to speak confidently about practical topics, such as transportation, dining, shopping, directions, making friends and socializing and much more! Get lifetime access to learn all 14 languages Practice with 10-15 minute bite-sized lessons that fit conveniently into your schedule Cover a wide range of useful real-life topics, from travel to family, business, food & more Use speech recognition technology to keep your pronunciation on point Learn at a variety of skill levels, from beginner to advanced Get personalized review sessions to reinforce what you learn so it really sticks Study whenever & wherever you want and your progress will be synchronized across your devices Use offline mode to access courses, lessons & review items when not on Wi-Fi—just download them beforehand Languages Available: Spanish (Spain), German, Italian, French, Portuguese, Swedish, Turkish, Dutch, Polish, Indonesian, Norwegian, Danish, Russian, Spanish (Latin America) Good to know Length of access: lifetime Valid for New Users in the USA Only Redemption deadline: redeem your code within 30 days of purchase Please note redemption is required via Web Browser. Access to the mobile app will be available after redemption has been completed via web browser Max number of devices: Unlimited Access options: desktop & mobile Number of languages: 14 (all current languages) Updates included Babbel Language Learning: Lifetime Subscription (All Languages) normally costs $299, but you can pick it up for just $159 for a limited time - that represents a saving of $140. For a full description, specs, and license info, click the link below. Deal Price $159.00 with code LEARN (was $299) NOTE: For NEW users in the US only. Support queries If you have queries or need support for any of the Neowin Deals, please use the contact form here. Neowin Deals are managed and sold by StackCommerce who represent Neowin on an affiliate basis. Why we post these deals We post these because we earn commission on each sale so as not to rely solely on advertising, which many of our readers block. It all helps toward paying staff reporters, servers and hosting costs. So for those that keep moaning and complaining, be thankful we're still online for you to even do that. Other ways to support Neowin Whitelist Neowin by not blocking our ads Create a free member account to see fewer ads Make a donation to support our day to day running costs Subscribe to Neowin - for $14 a year, or $28 a year for an ad-free experience Disclosure: Neowin benefits from revenue of each sale made through our branded deals site powered by StackCommerce.
    • AltSendme 0.4.2 is out.
    • Simple answer is yes, you will still get the Windows updates and as long as browser is up to date, you will be good. Only thing secure boot does is protect you against boot level threats and make it harder to install other OS's. I've been looking into this pretty thoroughly lately myself as wifes computer has secure boot disabled plus my other, older computers that run Linux, don't have secure boot enabled. Have seen all kinds of questions about this on the Linux Mint and MX Linux forums. Just don't suddenly enable secure boot now.
    • How many other companies will follow Ford's lead? Or, have they already gotten lazy and become enslaved to AI--and now can't figure out how to get out of that mess.
  • Recent Achievements

    • Week One Done
      flexorcist earned a badge
      Week One Done
    • One Month Later
      Woland13 earned a badge
      One Month Later
    • Week One Done
      Woland13 earned a badge
      Week One Done
    • One Year In
      bernmeister earned a badge
      One Year In
    • Week One Done
      Scoobystu earned a badge
      Week One Done
  • Popular Contributors

    1. 1
      +primortal
      493
    2. 2
      +Edouard
      225
    3. 3
      PsYcHoKiLLa
      148
    4. 4
      Steven P.
      75
    5. 5
      FloatingFatMan
      71
  • Tell a friend

    Love Neowin? Tell a friend!