Recommended Posts

The new Microsoft Windows 8 systems that come preinstalled on a new computer have a special feature - a feature no other PC has ever had. By default they are locked down so you cannot dual boot Windows 8 with another operating system such as Linux or even older versions of Windows such as Windows XP and Windows 7.

Dual booting is a popular thing to do for many PC users because it allows them the ability to use the right applications they need to get the job done if those applications are not found on Windows 8 alone. Dual booting is also used in companies that require workers use multiple operating system platforms or home users and students to try out and learn about other operating systems. Many of these operating systems are faster than Windows and have other features Windows does not have, as well as there are things Windows does better than these operating systems like AAA Gaming.

The reason Windows 8 will not dual boot is because Microsoft has insisted that their PC manufacturer partners like HP and Dell ship with a new type of bios called UEFI (Unified Extensible Firmware Interface) and it's feature called Secure Boot enabled. Secure Boot acts as a protection feature that is supposed to ensure your system doesn't have any malware at the time of shipping. It works by checking keys in the operating system against hard coded keys in the UEFI. As these keys are signed by Microsoft, the system will not allow any other operating system to boot assuring you have a clean copy of Windows 8. This has never been done before in the PC market and for good reason - PC Manufacturers don't have problems with systems getting malware before they ship.

PC's that ship with Windows are cheaper because Microsoft buys a portion of the hardware in exchange for HP offering Windows in the computer. The rep told me all the PC manufacturers and Microsoft have this same agreement. I wanted to know why there was no mention of UEFI in the HP documentation or why the tech support could not help me. The HP rep told me many times during our phone conversation that because they are paid by Microsoft, they adhere to Microsoft's wishes and not make it easy on people to learn about disabling Secure Boot so you can dual boot - something that is required by the manufacturers from Microsoft's own documentation called Windows 8 Hardware Certification Requirements for Client and Server Systems.

more

I also like trudging up articles about things we knew a year ago for fresh FUD!

Did you know that every time you connect to the internet you're assigned an identifier called an 'IP address' than can associate your online activity with your internet account? More at 11!

The HP rep told me many times during our phone conversation that because they are paid by Microsoft, they adhere to Microsoft's wishes and not make it easy on people to learn about disabling Secure Boot so you can dual boot.

Yeah I do not know about this. - I am always skeptical when I see quotes like this. It is too easy to change / alter or just straight fabricate this information in an attempt to make a story spin in a specific direction.

Even IF this was quoted, I am sure this person is not authorized or have the capacity to discuss the terms and agreements.

Microsoft buys a portion of the hardware? Microsoft pays HP to use windows? :woot:

im sorry but your info is incorrect. HP pays Microsoft for a license to use their software(Windows). Microsofts license requires certain features (SecureBoot) to be enabled if that device wants to have Windows 8 certification . Windows 8 certification means that the hardware and software meet certain standard. Anyone can sell non certified PCs,but most retailers and stores will not allow or sell non certified windows PCs.

Interesting:

  • UEFI allows firmware to implement a security policy
  • Secure boot is a UEFI protocol not a Windows 8 feature
  • UEFI secure boot is part of Windows 8 secured boot architecture
  • Windows 8 utilizes secure boot to ensure that the pre-OS environment is secure
  • Secure boot doesn?t ?lock out? operating system loaders, but is a policy that allows firmware to validate authenticity of components
  • OEMs have the ability to customize their firmware to meet the needs of their customers by customizing the level of certificate and policy management on their platform
  • Microsoft does not mandate or control the settings on PC firmware that control or enable secured boot from any operating system other than Windows

http://www.eightforums.com/tutorials/17058-secure-boot-enable-disable-uefi.html

Interesting:

  • UEFI allows firmware to implement a security policy
  • Secure boot is a UEFI protocol not a Windows 8 feature
  • UEFI secure boot is part of Windows 8 secured boot architecture
  • Windows 8 utilizes secure boot to ensure that the pre-OS environment is secure
  • Secure boot doesn?t ?lock out? operating system loaders, but is a policy that allows firmware to validate authenticity of components
  • OEMs have the ability to customize their firmware to meet the needs of their customers by customizing the level of certificate and policy management on their platform
  • Microsoft does not mandate or control the settings on PC firmware that control or enable secured boot from any operating system other than Windows

http://www.eightforu...sable-uefi.html

Wait I am confused, are you correcting yourself?

I'm thinking it's more in the realm of preventing bootloader activation cracks and rootkits that inject themselves into the bootloader. I'm pretty sure part of the spec is that manufacturers must place an option in the BIOS to disable secure boot.

So explain how people are booting Ubuntu on surface pros

Microsoft signed a shim bootloader for Linux.This is basically a generic prebootloader that allows to run a secondary bootloader which can be specific to each Linux distribution. The shim bootloaders is generic because Microsoft cant keep signing every new version of bootloaders for Linux guys. Therefore since this is a trusted binary, its able to run and then boot Linux with secureboot enabled.

If it weren't for the fact that 90% of PC users are uneducated and unwilling to learn about what they bought/use (but also cannot live without it these days) we wouldn't need "Secure Boot".

I got fed up of helping people with viruses and trojans taking up hours of my time (mostly for free) that I just prefer they go to someone else or even pay for a professional to help them now.

I got fed up of helping people with viruses and trojans taking up hours of my time (mostly for free) that I just prefer they go to someone else or even pay for a professional to help them now.

Only people I help for free now is family, and if I am doing work for a charity. I told my one sis if she ever installed Limewire again (she kept installing it after I kept telling her not to) that I will not longer help her and she will have to pay to get the system fixed next time.

companies can put all the protection they want on a system...if hte user is uneducated and do not know what they are doing, no amount of protection will help. I would figure with computers being so common and wide spread that more people would be smarter.

  • Like 2

Only people I help for free now is family, and if I am doing work for a charity. I told my one sis if she ever installed Limewire again (she kept installing it after I kept telling her not to) that I will not longer help her and she will have to pay to get the system fixed next time.

companies can put all the protection they want on a system...if hte user is uneducated and do not know what they are doing, no amount of protection will help. I would figure with computers being so common and wide spread that more people would be smarter.

Screw that...I stopped helping out my family because it was pointless. The only ones I still help are my parents...you cannot say no to Mom and Dad :)

Simple, create a limited profile, define in GPO what applications she can use after you downloaded and configured the software she needs. and there yah go. I do that for my family to keep the lappie nice and clean and keep me sane!

There is no conspiracy, how hard is it to go to the bios to turn this off? Anyone who is going to be dual booting and such are already going to know about this or things like this to get around it. So why make a big deal over this?

  • Like 2

Thought Microsoft Security Essentials when released would cut down on Family infecting there PC's with junk, but I find that i'm still helping family remove Trojans and junk off there PC's pretty regularly, gotten to the point only help Mom these days, rest I recommend to local small PC shop, as too much time cleaning there PCs

Most of Family though removed MSE when they saw it failed certification tests...So I guess up to them now what they use.

This topic is now closed to further replies.
  • Posts

    • Microsoft Edge 149.0.4022.80 by Razvan Serea Microsoft Edge is a super fast and secure web browser from Microsoft. It works on almost any device, including PCs, iPhones and Androids. It keeps you safe online, protects your privacy, and lets you browse the web quickly. You can even use it on all your devices and keep your browsing history and favorites synced up. Built on the same technology as Chrome, Microsoft Edge has additional built-in features like Startup boost and Sleeping tabs, which boost your browsing experience with world class performance and speed that are optimized to work best with Windows. Microsoft Edge security and privacy features such as Microsoft Defender SmartScreen, Password Monitor, InPrivate search, and Kids Mode help keep you and your loved ones protected and secure online. Microsoft Edge has features to keep both you and your family protected. Enable content filters and access activity reports with your Microsoft Family Safety account and experience a kid-friendly web with Kids Mode. The new Microsoft Edge is now compatible with your favorite extensions, so it’s easy to personalize your browsing experience. Microsoft Edge 149.0.4022.80 changelog: Fixes Fixed an issue that prevented QR code generation from working. Feature updates Intune MAM Protected Downloads. The protected downloads feature for Intune MAM will now save downloaded files to the Documents > Microsoft Edge > Downloads folder in OneDrive. Extensions monitoring in the Edge management service. The Microsoft Edge management service now allows admins to gain visibility into extensions installed across their managed users. From the extensions monitoring page, admins can see which extensions have been installed as well as manage user requests for blocked extensions. For more information, see Microsoft Edge Extensions Monitoring. Validate Edge builds early with enterprise preview. Enterprise preview provides a simpler way for admins to flight pre-release Edge builds to their users. To reduce friction and bolster usage, users will receive pre-release builds directly inside of their Stable Edge application. Admins can allow users to easily opt-out of the preview experience, using built-in rollback to switch between their pre-release and stable channels with ease. Microsoft 365 admin center users can configure the feature, view their flighting population, and receive personalized recommendations all in one place. For more information, see Get started with Enterprise Preview in Microsoft Edge. Download: Microsoft Edge (64-bit) | 193.0 MB (Freeware) Download: Microsoft Edge (32-bit) | 170.0 MB Download: Microsoft Edge (ARM64) | 188.0 MB View: Microsoft Edge Website | Release History Get alerted to all of our Software updates on Twitter at @NeowinSoftware
    • The machines are starting to fight back any way they can.
    • No news articles about the Arch Linux repo being majorly infected with malware?!?
    • Waymo recalls self-driving software after cars enter closed freeway work zones by Paul Hill Waymo, the self-driving car maker owned by Alphabet – the parent company of Google –, has recalled some of its fifth-generation Automated Driving Systems (ADS). It did so after some of its cars drove through closed construction zones. According to the National Highway Traffic Safety Administration (NHTSA), the affected vehicles were capable of driving through a closed freeway construction zone and continuing to drive at speed. The listing on the NHTSA website says that Waymo is currently developing a solution to fix this issue, but in the meantime, freeway driving is being restricted. Waymo will update its ADS software so that vehicles can detect when they can avoid entering construction zones. According to the Safety Recall Report, on April 20, 2026, Waymo’s Field Safety Committee began meetings reviewing an event from April 11, 2026, and five events from April 19, 2026, where Waymo’s autonomous vehicles didn’t recognize and drove past ramp closure signs into the pre-planned freeway construction zones. This took place in Phoenix, Arizona. Separately, on May 18, 2026, seven Waymo vehicles entered freeway lanes with active construction in the San Francisco Bay Area by driving between cones that were placed to show the lane was closed. On the back of both of these events, Waymo restricted freeway driving until it could address the issue. In June, Waymo’s Safety Board reviewed the issue and additional information related to ADS performances around construction zones; then, as a result, it decided to conduct a recall. This development is not good for Waymo as it adds to a growing list of technical hiccups its cars have experienced. Ultimately, it will lead to more scrutiny from lawmakers around the world who will be more cautious about letting autonomous vehicles on their roads without tighter regulation. For readers in areas where Waymo operates, does this news make you more wary about stepping into one of these vehicles?
    • I'm still on Windows 10 22H2 because I didn't want to deal with all the issues in Windows 11, so I waited almost a week before installing the latest Patch Tuesday update (KB5094127), I went ahead and did it, and it was a huge mistake—ever since then, my File Explorer has seen a performance drop of about 30% when transferring large files... Once again, Microsoft has outdone itself! This update cannot be uninstalled, either through the Control Panel (via Settings) or by accessing Advanced Startup Options. The only possible alternative would be to use system restore points, but I’d have to reinstall all app and driver updates (and there’s no guarantee it would work). Or there’s the “nuclear option” of a in-place repair without losing files or apps, but even then, all my customizations would be lost! Microsoft just can’t help but mess everything up! Way to go, Microsoft! But I still don’t want your c****y Windows 11!
  • Recent Achievements

    • Week One Done
      Eurosoft10 earned a badge
      Week One Done
    • One Month Later
      Eurosoft10 earned a badge
      One Month Later
    • One Year In
      Skeet Campbell earned a badge
      One Year In
    • One Month Later
      Sharbel earned a badge
      One Month Later
    • First Post
      BizSAR earned a badge
      First Post
  • Popular Contributors

    1. 1
      +primortal
      599
    2. 2
      +Edouard
      190
    3. 3
      PsYcHoKiLLa
      79
    4. 4
      Michael Scrip
      77
    5. 5
      Steven P.
      70
  • Tell a friend

    Love Neowin? Tell a friend!