Secure Boot Feature in BIOS: Understanding its Role in Windows 8, UEFI, and Diagnostic Tools

Question

Hello! Recently, I came across this article about the secure boot feature: So I have to understand that computers with pre-installed windows 8 have this function? Will the computer that we buy without the system also have this function in bios (exactly in UEFI), or it will not be there anymore?...

Anonymous · Accepted Answer

UEFI itself is neutral and is essentially a good alternative to the classic BIOS. As of today, however, it raises many doubts - it is an operating system in itself and enables, among others, : - remote viewing of any installed operating system, on the terms similar to remote desktop - ie max surveillance, but officially it is a feature to be implemented in company computers (officially). I know at least 1 company in Poland that already uses this. - the ability to block programs that are not digitally signed - supposed to prevent viruses like loader / bootloader, but it's like 10 years too late - such viruses are long extinct / are rare - but such a solution allows you to effectively eliminate e.g. mhdd, PartedMagic or Linux. Motherboards sold as separate parts will have / have the ability to disable UEFI / SecureBoot - the problem is actually with all computers sold with the system installed. See you There was no case yet that it was not possible to disable SecureBoot on the PC platform - but IMO is only a matter of time and in a few years at least the laptops will contain the appropriate locks. The good thing is that hackers are awake - I give 2-3 years before UEFI security cracking programs appear (there are already ways to modify the keybase) - then, however, every Linux user will be a criminal, because breaking security is punishable - so far only in USA and Canada, but after signing ACTA v2.0 in Poland and the EU it will be the same - because you will not buy a computer, only the right to use it - and this is not funny. Prices of old computers (without UEFI) will increase 10x in the meantime :) To sum up: UEFI + SecureBoot is an example that shows that whether something is good or bad depends on whose hands it goes ...

bmserwis · Accepted Answer

There are already effective methods to bypass UEFI and install malware into the bootloader. Paradoxically, UEFI facilitates the creation of bootkits, in the case of traditional BIOS, it was necessary to have a very good knowledge of both the structure itself and the Assembler language. It is much simpler with UEFI. Firstly, as above, it can be broken, secondly, the laws of the market, no one will decide to do it, knowing that users will bypass security equipment, having a choice of also free from them.

kasiunia7777 · Answer

So if we assemble the computer ourselves, the so-called Folder, it will certainly be able to turn off this security? or if we buy a laptop without a system, it can also be turned off?
If this is the case, then somehow this security does not bother me because I will just turn it off, but I wonder how the services will work if it will not turn off in some equipment because it is often necessary to start the computer from a disc or pendrive and turn on the diagnostic program.

Is this the case of these protections? girl bought a laptop with windows 8 and couldn't boot the gparted tile:
https://www.elektroda.pl/rtvforum/topic2410527.html

Karaczan · Answer

It looks like it did, it had SecureBoot turned on. Fortunately, as you can see, it was possible to turn it off.

Secure Boot Feature in BIOS: Understanding its Role in Windows 8, UEFI, and Diagnostic Tools

Post #1

Post #2

Post #3

Post #4

Post #5

Didn't find an answer? Ask Artificial Intelligence