ZDNet Seems to Say Secure Boot Still Sucks for Open Source
Subject: General Tech, Systems | January 1, 2013 - 05:01 AM | Scott Michaud
Tagged: Secure Boot, uefi
Steven J Vaughan-Nichols of ZDNet published an update on the status of Secure Boot. Fans of Linux and other open-source operating systems have been outspoken against potential attempts by Microsoft to hinder the installation of free software. While the fear is not unfounded, the situation does not feel to be a house of cards in terms of severity.
Even without an immediate doomsday, there still is room for improvement.
The largest complaint is with Windows RT. If a manufacturer makes a device for Windows RT it will pretty much not run any other operating system. Vice versa, if an OEM does not load Windows RT on their device that PC will never have it. Windows on ARM is about as closed of a platform as you can get.
On the actual topic of Secure Boot, distributions of Linux have been able to sign properly as trusted. Unlike the downstream Fedora 18, Ubuntu 12.10, and others: the Linux Foundation is still awaiting a signed bootloader.
Other distributions will need to disable the boot encryption which many thought would forever be the only way to precede. While not worse than what we have been used to without Secure Boot, disabling boot encryption leaves Linux at a disadvantage for preventing rootkits. Somewhat ironic, we are stuck between the fear of being locked out of our device by a single entity and the fear of malice intentions not being locked out.