Secure Boot complaint filed against Microsoft


Recommended Posts

I still haven't seen an example.

I had a friend bring me his All in one with Windows 8

Acer Aspire AZS600-UR15

and wanted me to install Windows 7 on it- there was no option to turn off the check.

Windows 7 would pretend like it would install then at the point of installing boot loader - Fail- even when I placed a fresh drive int the machine.

It would not let it write to the boot sector.

I looked and there was nothing -- the only options were - to control boot order- check for extra hard drives and turn to compatibility mode.

I had to end up restoring the Windows 8.

No this has nothing to do with LINUX not being good but Microsoft forcing Windows 8 on you....

I mean let me take Linux out of the equation for you.

Windows 8 runs like a snail or you just don't like it and you decide you want to buy and install Windows 7 instead

Whoops Not GOING TO ALLOW IT...

. you can't because the only OS your computer thinks is a Valid install is Windows 8.

And in some of the OEM's there is no bios option to remove or disable this check.

The easy way to edit this is allow the OEM's to have a bios that can be downloaded to allow people to turn it off.

What this boils down to is Allow the user the choice.

What a non argument!

A non-techie user will be content with latest Windows.

A techie user on the other hand should know better.

You have the choice either buy from a large company or build it yourself and install whatever you want on it.

What a non argument!

A non-techie user will be content with latest Windows.

A techie user on the other hand should know better.

You have the choice either buy from a large company or build it yourself and install whatever you want on it.

So a user should be content with a system that lags? then? And they want to run a lower OS? - Priceless-

And upgrade of processor is not a valid option since it is a cpu/gpu built into an all in one .

Or you should be stuck with something they don't like then?

Probably because theoretically, They are knocking at the door and microsoft is behind the locked door giggling while Linux users scratch their heads.

it's abuse of a monopoly by locking out the competition from even experimenting with alternatives.

Acer- Emachine - Gateway to name a few... There is no option to disable it at all-- it is missing.

Microsoft REQUIRES that all x86/x86-64 machines have the option to turn off Secure Boot...

I had a friend bring me his All in one with Windows 8

Acer Aspire AZS600-UR15

and wanted me to install Windows 7 on it- there was no option to turn off the check.

Windows 7 would pretend like it would install then at the point of installing boot loader - Fail- even when I placed a fresh drive int the machine.

It would not let it write to the boot sector.

I looked and there was nothing -- the only options were - to control boot order- check for extra hard drives and turn to compatibility mode.

I had to end up restoring the Windows 8.

Secure Boot was obviously disabled.

It shouldn't even let you boot from a DVD if Secure Boot is enabled.

Compatibility mode? Perhaps they're calling it that? By the way, Secure Boot doesn't prevent the writing of the boot sector, I don't think. I think it only prevents booting from a boot sector that doesn't have a valid certificate stored in the UEFI. I think. So if malware overwrites it, you will be blocked from booting... and will have to run the recovery DVD to re-write the boot sector.

Hello,

Can you please list the brands and models of computers that vendors have shipped that have Windows 8 preloaded and no option to disable UEFI Secure Boot in their firmware? Please note that by computer, I mean an IA-32 instruction set compatible CPU such as those made by AMD or Intel, and not tablet devices with ARM CPUs that run Windows RT. Thank you.

Regards,

Aryeh Goretsky

No this has nothing to do with LINUX not being good but Microsoft forcing Windows 8 on you....

I mean let me take Linux out of the equation for you.

Windows 8 runs like a snail or you just don't like it and you decide you want to buy and install Windows 7 instead

Whoops Not GOING TO ALLOW IT...

. you can't because the only OS your computer thinks is a Valid install is Windows 8.

And in some of the OEM's there is no bios option to remove or disable this check.

The easy way to edit this is allow the OEM's to have a bios that can be downloaded to allow people to turn it off.

What this boils down to is Allow the user the choice.

I mean what if people buy a PC with Windows 8 and decide they don't like it at all... and they want to install the following.

Windows 7

Linux

Hackintosh

But their computer won't allow them to do this.

This is as they are trying to show is the same option as Microsoft locking people into having IE installed by default.

The other thing to look at is -- people say "BUY a Linux Computer" well that limits the choices and those choices are not very strong computers.

Other than -

https://www.system76.com

But still there are not a lot of options- They don't even offer any AMD chip-sets.

Some of these people don't mind paying for a computer with Windows but also like the CHOICE to have a dual boot as well.

I mean would you want a computer where you can't even choose which OS you want on it?

I can't see this going anywhere, Microsoft aren't locking anybody out, the Linux guys can sign their own releases (Or they can do what Red Hat tried to do, and patch the kernel to read the signed binary MS provides), or they can simply turn it off (I can't even enable it on my PC since my GFX card isn't up to spec, Windows 8 doesn't have an issue with it)

...

Compatibility mode? Perhaps they're calling it that? By the way, Secure Boot doesn't prevent the writing of the boot sector, I don't think. I think it only prevents booting from a boot sector that doesn't have a valid certificate stored in the UEFI. I think. So if malware overwrites it, you will be blocked from booting... and will have to run the recovery DVD to re-write the boot sector.

"Compatibility Mode" (Or Compatibility Support Module) is the UEFI name for "BIOS", great isn't it? Turning that option on causes it to boot the the classic BIOS method and disables any nice functionality UEFI provides (like Secure Boot)

Microsoft forcing Windows 8 on you....

You do know that Microsoft REQUIRES that secure boot can be disabled, right? Microsoft isn't doing ****. You're a god damn idiot. Stop blabbering bull****.

I had a friend bring me his All in one with Windows 8

Acer Aspire AZS600-UR15

ZCyb479.png

Funny... I was able to find it in the manual.

https://mega.co.nz/#!VkFRXaAT!LLt1iRqH54ssGoLDI_tvIggvWulOt87OZUTc7T7DWOU

  • Like 2

I can't see this going anywhere, Microsoft aren't locking anybody out, the Linux guys can sign their own releases (Or they can do what Red Hat tried to do, and patch the kernel to read the signed binary MS provides), or they can simply turn it off (I can't even enable it on my PC since my GFX card isn't up to spec, Windows 8 doesn't have an issue with it)

"Compatibility Mode" (Or Compatibility Support Module) is the UEFI name for "BIOS", great isn't it? Turning that option on causes it to boot the the classic BIOS method and disables any nice functionality UEFI provides (like Secure Boot)

Actually that option listed turned the SATA drive as an ATA drive when choosing Compatibility mode.

It would boot the Windows 7 DVD but when it went to write to the Drive that was when it failed.

There was no listed option to turn it off.. the bios options were sparse.

You do know that Microsoft REQUIRES that secure boot can be disabled, right? Microsoft isn't doing ****. You're a god damn idiot. Stop blabbering bull****.

ZCyb479.png

Funny... I was able to find it in the manual.

https://mega.co.nz/#...t87OZUTc7T7DWOU

Seriously There was no Authentication Tab when I was in it-- and I just called the guy and he booted to the bios and it is not there.

There was no listed option to turn it off.. the bios options were sparse.

I don't know, seems like it's pretty obvious to me:

ZCyb479.png

Funny... I was able to find it in the manual.

Seriously There was no Authentication Tab when I was in it-- and I just called the guy and he booted to the bios and it is not there.

Fine, but Microsoft does require that you have the ability to disable it. Your dispute isn't with Microsoft, but with Acer. This isn't an instance of Microsoft being anti-competitive or intentionally locking others out.

I don't know, seems like it's pretty obvious to me:

What bios revision did the screen come from

Fine, but Microsoft does require that you have the ability to disable it. Your dispute isn't with Microsoft, but with Acer. This isn't an instance of Microsoft being anti-competitive or intentionally locking others out.

What bios revision?

the one who need the secure boot most is the corporates environtment,

however current 'secure boot' implementation is less desired

as the fact that key was handled by Microsoft & hardware vendor, and NOT by hardware owner.

If hardware owner can create its own unique keys,

they can sign the OS files with it,

and the computer can only works if it run using said 'apporved' OS,

this is the ideal way of using Secure Boot in corporate environtment.

While in current situation, suppose corporate using secure boot Windows 8,

but employess managed to install some other OS,

because the fact that OS signed with the SAME Key as used by the W8,

the secure boot protocols will accept and run that OS.

From Corporate's security point of view thats are not desireable,

and thus doesn't achieve alleged security that suppose to be delieverd by 'Secure Boot'.

Sure you can disable the Secure Boot,

but can you specify/modify the key? NO. Only hardware vendor can do that.

And if the current Secure Boot's Keys are compromised just like how PlayStation 3's keys was compromised,

that means all existing secure boot can be compromised as the key management was handled by MS & hardware vendor.

...

Sure you can disable the Secure Boot,

but can you specify/modify the key? NO. Only hardware vendor can do that.

...

If it's any good you can, my motherboard lets me install/remove any keys (including the default MS keys)

the one who need the secure boot most is the corporates environtment,

however current 'secure boot' implementation is less desired

as the fact that key was handled by Microsoft & hardware vendor, and NOT by hardware owner.

If hardware owner can create its own unique keys,

they can sign the OS files with it,

and the computer can only works if it run using said 'apporved' OS,

this is the ideal way of using Secure Boot in corporate environtment.

While in current situation, suppose corporate using secure boot Windows 8,

but employess managed to install some other some other OS

because the fact that OS signed with the SAME Key as used by the W8,

the secure boot protocols will accept and run that OS.

From Corporate's security point of view thats are not desireable,

and thus doesn't achieve alleged security that suppose to be delieverd by 'Secure Boot'.

Sure you can disable the Secure Boot,

but can you specify/modify the key? NO. Only hardware vendor can do that.

And if the current Secure Boot's Keys are compromised just like how PlayStation 3's keys was compromised,

that means all existing secure boot can be compromised as the key management was handled by MS & hardware vendor.

Stopped reading at "keys handled by Microsoft".

No they are not. Verisign is handling Secure Boot keys. Microsoft bought they key like everyone else can do, they even offered keys for Linux distros for free for a while but since Linus is too stuck up on his own views it went all sour, this is nothing you can blame MS on.

  • Like 2

the one who need the secure boot most is the corporates environtment,

however current 'secure boot' implementation is less desired

as the fact that key was handled by Microsoft & hardware vendor, and NOT by hardware owner.

If hardware owner can create its own unique keys,

they can sign the OS files with it,

and the computer can only works if it run using said 'apporved' OS,

this is the ideal way of using Secure Boot in corporate environtment.

While in current situation, suppose corporate using secure boot Windows 8,

but employess managed to install some other some other OS

because the fact that OS signed with the SAME Key as used by the W8,

the secure boot protocols will accept and run that OS.

From Corporate's security point of view thats are not desireable,

and thus doesn't achieve alleged security that suppose to be delieverd by 'Secure Boot'.

Sure you can disable the Secure Boot,

but can you specify/modify the key? NO. Only hardware vendor can do that.

And if the current Secure Boot's Keys are compromised just like how PlayStation 3's keys was compromised,

that means all existing secure boot can be compromised as the key management was handled by MS & hardware vendor.

You can load your own signing keys in some implementations..

That is, however, the reason it's set up the way it is. It's beyond confusing for the average user. That's why Microsoft mandated that you be able to turn it off.

If you want secure boot that you hold the keys to, awesome. Find an OEM provider that allows you to, then find a way to sign the MS bootloader and you're in.. You are at best a borderline use case >.<

That explains it. His is 5/22/12 I guess I should email acer for a download of an updated bios.

Why would a computer that shipped with Windows 8... which was released in October 2012... ship with a BIOS revision from May 2012 instead of the more current version from August 2012? Interesting...

And if that's a revision from May 2012, and that was written before Windows 8 was released... why can't you boot Windows 7?

See? Microsoft isn't screwing with you. Acer is.

That explains it. His is 5/22/12 I guess I should email acer for a download of an updated bios.

BIOS updates should be listed on their site download sections as well. At least most OEM's have it this way.

Why would a computer that shipped with Windows 8... which was released in October 2012... ship with a BIOS revision from May 2012 instead of the more current version from August 2012? Interesting...

And if that's a revision from May 2012, and that was written before Windows 8 was released... why can't you boot Windows 7?

See? Microsoft isn't screwing with you. Acer is.

that one was oops a miss typed I am

on my phone.

8/22/12 was what it should have been whichit was September 2012 when he wanted me to put 7 on it... there were no updated bios on their site when I checked that month

If it's any good you can, my motherboard lets me install/remove any keys (including the default MS keys)

whats your motherboard type?

i would like to recommend it to some client,

as most Secure Boot capable motherboard i've seen, doesn't allow you to installing your own keys easily,

some said that user can change the key during Firmware Updates,

which mean the key must be specified somewhere in the firmware binaries!

Stopped reading at "keys handled by Microsoft".

No they are not. Verisign is handling Secure Boot keys. Microsoft bought they key like everyone else can do, they even offered keys for Linux distros for free for a while but since Linus is too stuck up on his own views it went all sour, this is nothing you can blame MS on.

yes, but doesn't change the fact that almost (all?) windows 8 in existance are signed by the very same key, which pose pending problem of key compromise i mentioned above.

And, the corporates actually want to sign the OS they use with their own unique keys,

as that would give them control on what OS allowed to be used in their environtment,

and less likely affected whenever the world-wide Windows-8 Secure Boot keys compromise happens.

but:

then find a way to sign the MS bootloader and you're in..
signing MS OS's component using your own unique keys...,

i read the report that some one did try and of course the Windows 8 was complaining afterward (which is a good thing from OS security's POV btw),

Thats however, unable to achieves what the corporates want.

You can load your own signing keys in some implementations..

That is, however, the reason it's set up the way it is.

It's beyond confusing for the average user. That's why Microsoft mandated that you be able to turn it off.

If you want secure boot that you hold the keys to, awesome. Find an OEM provider that allows you to.

yes, by firmwire updates some OEM did offering that, but it also mean OEM will know the half about the unique key,

some corps would like if if none of the outsider would know about their keys.

And currently, only open-sourced OS (linux flavor for example) components than can easly signed, not Windows 8.

so why Coprs not switch to Linux?

well, due the fact that Corporation still need windows, and OS migration are costly & painful process.

Hello,

Can you please list the brands and models of computers that vendors have shipped that have Windows 8 preloaded and no option to disable UEFI Secure Boot in their firmware? Please note that by computer, I mean an IA-32 instruction set compatible CPU such as those made by AMD or Intel, and not tablet devices with ARM CPUs that run Windows RT. Thank you.

Regards,

Aryeh Goretsky

I think we figured it out...bios needs flahing... his was for august 2012 ... which did not have that as an option... the october bios says that was added.. but when I checked in september there were no bios updates ... which I then gave it back to him.... so there is a fix....problem is on acer

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • GitHub removes manual model selection from Copilot free and student plans by Karthik Mudaliar GitHub is removing the ability to manually select an AI model from its Copilot Free and Student plans, making its automatic routing system the default and only way to choose a model. This means users on these tiers will no longer be able to deliberately select a particular OpenAI, Anthropic, Google, or Microsoft model for a task. In its announcement, GitHub said Copilot Auto will dynamically choose what it considers the best model for each request. Free and Student accounts will retain access to models from multiple families, although the available selection will continue to depend on the restrictions attached to each plan. GitHub did not identify a fixed pool of models that Auto will always use, and its documentation warns that model availability can change over time. GitHub describes Auto as more than a random fallback system. On supported surfaces, its task-optimization technology evaluates the complexity of a request alongside real-time information about model health and availability. Straightforward prompts can be routed to faster and less expensive models, while more demanding coding tasks may be sent to higher-cost reasoning models. The company says this approach should reduce rate limiting, latency, and failed requests. Auto generally selects one model along natural prompt-caching boundaries rather than repeatedly switching models during a session, as GitHub found that mid-session changes increased costs without producing sufficient improvements in output quality. Users can still check which model generated a response. In Copilot Chat, the information appears when hovering over an answer, while Copilot CLI and the Copilot cloud agent display the selected model alongside their output. Auto is available in Copilot Chat, Copilot CLI, and the cloud agent, with the exact implementation and release status varying between supported development environments. The latest restriction follows several months of adjustments to Copilot’s individual plans. GitHub temporarily halted new Pro, Pro+, and Student subscriptions in April as it sought to manage demand and service reliability. It later introduced token-based billing and began gradually reopening individual-plan registrations on June 17. Alongside the picker change, GitHub is retiring the “Preview” label from Microsoft-developed models. It argues that the label is no longer necessary because Auto handles model routing and models are continuously updated behind the scenes.
    • Look up 'inflation' kid. Ask an AI for the numbers between both games.
    • Google reportedly set to lose two key Gemini and DeepMind researchers to Anthropic by Karthik Mudaliar Google is reportedly preparing to lose two more prominent artificial intelligence researchers, with Gemini contributors Jonas Adler and Alexander Pritzel planning to join rival AI developer Anthropic. According to a report from Bloomberg, both researchers are viewed internally as important contributors to Google’s flagship Gemini model family. Adler worked on Google’s AI coding efforts, while Pritzel was involved in the process used to train AI systems. Neither company has publicly confirmed the moves. The report also does not say when the researchers will formally leave Google or what positions they will hold at Anthropic. Training a large AI model requires decisions covering its architecture, data preparation, distributed computing infrastructure, and post-training methods that shape how the finished system behaves. Researchers with experience operating at the scale of Gemini are consequently difficult to replace quickly. Both Adler and Pritzel have previously contributed to Google DeepMind’s scientific research as well. They are listed among the authors of the company’s work on expanding AlphaFold protein-structure predictions across entire proteomes, alongside AlphaFold researchers including John Jumper. The reported departures arrive shortly after another important change within Google’s Gemini organization. Gemini co-lead Noam Shazeer is leaving Google for OpenAI, after returning to the search company in 2024 through its deal with Character.AI. Shazeer is particularly well known as one of the authors of the Transformer paper, whose architecture became the foundation for most modern large language models. Anthropic, meanwhile, has been recruiting recognizable figures from other leading laboratories. OpenAI co-founder and former Tesla AI director Andrej Karpathy joined Anthropic’s pre-training team in May. His move, followed by the reported recruitment of several Google researchers, suggests Anthropic is strengthening the research teams responsible for the core capabilities of future Claude models rather than concentrating solely on product and enterprise sales. The competition is complicated by the companies’ extensive commercial relationships. Anthropic competes directly with Google’s Gemini models, but it also relies on Google as an infrastructure partner. In April, Anthropic announced an expanded agreement with Google and Broadcom covering multiple gigawatts of next-generation Tensor Processing Unit capacity. TPUs are Google-designed accelerators used to train and run large AI models. via Bloomberg
    • This article makes my head hurt. Lots of confusing words
    • Google adds built-in computer control to Gemini 3.5 flash by Karthik Mudaliar Google has added Computer Use as a built-in tool in Gemini 3.5 Flash, giving developers a single model that can reason about a task and operate graphical interfaces across browsers, mobile devices, and desktop environments. The feature is available through the Gemini API and Google’s Gemini Enterprise Agent Platform, although it remains a preview feature for now. Computer Use enables an AI agent to examine screenshots and return actions such as mouse clicks, scrolling, and keyboard input. A developer’s application must execute those actions, capture the resulting screen, and send it back to Gemini, creating a continuous loop until the task is completed. Google says the integration can be used for activities including repetitive form filling, application testing, research across multiple websites, and longer enterprise workflows. Gemini 3.5 Flash can work with browser, mobile, and desktop environments, whereas Google’s earlier standalone Computer Use model was primarily positioned around browser interaction. The main change is consolidation. Computer control was previously offered through the separate Gemini 2.5 Computer Use preview model. As Neowin reported when that model was introduced, it was designed to interpret a visual interface and generate actions without requiring a website-specific API. Google later brought Computer Use to preview versions of Gemini 3 Pro and Gemini 3 Flash in January 2026. The latest release now incorporates the tool into the stable Gemini 3.5 Flash model rather than requiring developers to select a specialized model solely for interface automation. Gemini 3.5 Flash itself was announced in May as Google’s latest fast model for coding and multi-step agent workflows. It supports a one-million-token input context window and up to 65,000 output tokens, along with adjustable thinking levels that let developers trade additional reasoning for lower latency and cost. Google also added that Gemini 3.5 Flash received targeted adversarial training for computer-use scenarios. The company is also offering safeguards that can require user confirmation before sensitive or irreversible actions and automatically stop a workflow when suspected prompt injection is detected. Its developer documentation describes configurable protections for areas such as financial transactions and changes to sensitive records. Google isn't the first to bring Computer Use to its platform. Anthropic has made computer control available through Claude, while OpenAI has continued improving computer-use performance in its recent models. Microsoft has also applied the concept to business workflows, including a Computer Use capability for the Researcher agent in Microsoft 365 Copilot.
  • Recent Achievements

    • Dedicated
      Scoobystu earned a badge
      Dedicated
    • First Post
      Tom Schmidt earned a badge
      First Post
    • One Month Later
      D0nn13 earned a badge
      One Month Later
    • Rookie
      +ChiefOfNeo went up a rank
      Rookie
    • One Year In
      Tom Schmidt earned a badge
      One Year In
  • Popular Contributors

    1. 1
      +primortal
      463
    2. 2
      +Edouard
      177
    3. 3
      PsYcHoKiLLa
      124
    4. 4
      Michael Scrip
      79
    5. 5
      Xenon
      76
  • Tell a friend

    Love Neowin? Tell a friend!