I often find the FSF to be a bit alarmist, but this is a very real concern:<div><br></div><div><a href="http://www.fsf.org/campaigns/secure-boot-vs-restricted-boot/">http://www.fsf.org/campaigns/secure-boot-vs-restricted-boot/</a></div>
<div><br></div><div><span class="Apple-style-span" style="font-family: arial, helvetica, clean, sans-serif; font-size: 14px; line-height: 17px; background-color: rgb(255, 255, 255); "><h2 class="documentFirstHeading" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0.25em; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; font-size: 21px; font-weight: bold; border-bottom-width: 1px; border-bottom-style: none; border-bottom-color: rgb(140, 172, 187); color: black; font-family: 'Lucida Grande', Verdana, Lucida, Helvetica, Arial, sans-serif; border-top-style: none; border-right-style: none; border-left-style: none; border-width: initial; border-color: initial; ">
<span class="" id="parent-fieldname-title">Will your computer's "Secure Boot" turn out to be "Restricted Boot"?</span></h2><div class="documentByLine" id="plone-document-byline" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0.5em; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; font-size: 13px; color: rgb(118, 121, 124); ">
<span class="documentAuthor">by <a href="http://www.fsf.org/author/mattl">Matt Lee</a> </span><span class="documentModified">— <span>last modified </span>October 17, 2011 14:54</span></div><p class="documentDescription" style="margin-top: 0em; margin-right: 0em; margin-bottom: 0.5em; margin-left: 0em; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; line-height: 1.5em; font-weight: bold; display: block; ">
<span class="" id="parent-fieldname-description"></span></p><div class="" id="parent-fieldname-text" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; ">
<p style="margin-top: 0px; margin-right: 0px; margin-bottom: 0.75em; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; line-height: 1.5em; "><strong style="font-style: inherit; font-weight: bold; "><a href="http://www.fsf.org/campaigns/secure-boot-vs-restricted-boot/statement" style="text-decoration: none; border-bottom-width: 1px; border-bottom-color: rgb(204, 204, 204); border-bottom-style: solid; ">Please sign our statement to show your support!</a></strong></p>
<p style="margin-top: 0px; margin-right: 0px; margin-bottom: 0.75em; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; line-height: 1.5em; ">Microsoft has announced that if computer makers wish to distribute machines with the Windows 8 compatibility logo, they will have to implement a measure called "Secure Boot." However, it is currently up for grabs whether this technology will live up to its name, or will instead earn the name Restricted Boot.</p>
<p style="margin-top: 0px; margin-right: 0px; margin-bottom: 0.75em; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; line-height: 1.5em; ">When done correctly, "Secure Boot" is designed to protect against malware by preventing computers from loading unauthorized binary programs when booting. In practice, this means that computers implementing it won't boot unauthorized operating systems -- including initially authorized systems that have been modified without being re-approved.</p>
<p style="margin-top: 0px; margin-right: 0px; margin-bottom: 0.75em; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; line-height: 1.5em; ">This could be a feature deserving of the name, as long as the <em style="font-style: italic; ">user</em> is able to authorize the programs she wants to use, so she can run free software written and modified by herself or people she trusts. However, we are concerned that Microsoft and hardware manufacturers will implement these boot restrictions in a way that will prevent users from booting anything other than Windows. In this case, a better name for the technology might be Restricted Boot, since such a requirement would be a disastrous restriction on computer users and not a security feature at all.</p>
<div>... <a href="http://www.fsf.org/campaigns/secure-boot-vs-restricted-boot/">read more</a></div></div></span><div><br></div>-- <br>Matthew Nuzum<br>newz2000 on freenode, skype, linkedin and twitter<br><br><p>
</p><p><span>♫</span> You're never fully dressed without a smile! <span>♫</span></p><p></p><br>
</div>