[arch-general] Campaign against Secure Boot

[Ralf Mardorf]

On Mon, 2012-06-25 at 10:39 -0500, Leonid Isaev wrote:
> On Mon, 25 Jun 2012 10:35:16 +0200
> Thomas Bächler <thomas at archlinux.org> wrote:
> 
> > Am 23.06.2012 04:09, schrieb Manolo Martínez:
> > > Is Arch going to sign [this
> > > petition](http://www.fsf.org/campaigns/secure-boot-vs-restricted-boot/statement)?
> > > I, for one humble user, would like it (us, whatever) to.
> > > 
> > > Manolo
> > 
> > While I won't answer your question, I have this to say:
> > 
> > For a non-ARM PC to be certified for Windows 8, the EFI firmware MUST
> > support Setup Mode. As this is a "MUST" requirement, everyone will
> > fulfill it, as they really do want the Windows 8 logo (if anyone wants
> > to look up the source for this, go ahead, I am too lazy right now).
> > 
> > If I understand it right, in Setup Mode, you can either boot any
> > non-signed operating system, or you can import your own keys into the
> > firmware, so that you can sign your own bootloaders. For me, this is
> > enough to not care about Secure Boot.
> > 
> 
> Right. Or you can buy a key from Microsoft like Fedora is planning to
> http://lwn.net/Articles/500231/. It's good that people are thinking about
> this problem, but so far solutions have been quite ugly from a technical
> standpoint.

On a discussion at Debian users mailing list I started with "who cares,
it doesn't have impact to us free OS users, as long as we don't plan to
install Windoof 8 too", but I changed my opinion to "let's nuke down
Microsoft, the most worse case scenario will happen". This is the
pathetic overstated version, but it's near to what many people feel
during this discussion. And I'm only speaking for Intel/AMD mobos ;). We
already know, that UEFI can't be disabled for every hardware :(.