Gyrrakavian wrote:Dave wrote:Correct... I was alluding to a certain set of policies, being pushed by a certain high-tech company engaged in classic capitalistic commerce.
That's simultaneously a relief but also worrisome. Care to spell it out for those of us who don't really bother with the news?
I was alluding to the privacy issues which have been reported for Microsoft Windows 10. By default, Windows 10 uploads a good deal of "telemetry" information about your system and its use to Microsoft's servers. What's more, Microsoft's privacy policy for 10 has language like:
We will access, disclose and preserve personal data, including your content (such as the content of your emails, other private communications or files in private folders), when we have a good faith belief that doing so is necessary to protect our customers or enforce the terms governing the use of the services.
Many people feel that agreeing to those terms-of-service is the equivalent of signing a very large blank check. It gives Microsoft permission to invade and disclose your own data, at its own discretion, based on a "good-faith belief". Those are things that the police here in the U.S. can't do without a search warrant that requires a judge's signature and a rather stronger standard of evidence ("upon probable cause, supported by Oath or affirmation").
http://www.techrepublic.com/article/win ... -yourself/
I've seen reports that some of the recent "Microsoft Update" hotfixes to older Windows versions (7 and 8) have included modifications which add some of the same "automatic 'telemetry' uploading of information about system use" features to the older operating systems. This was (I understand) done without an explicit "opt-in" being required of the system owners... the changes were included alongside legitimate security-related updates to the operating system.
As to the "glass which can't be used to drink beer" analogy I used: to run Windows 10 at all, your computer has to have a "UEFI" BIOS and boot system which implements "Secure Boot". This is a technology in which the boot BIOS requires that the operating system bootloader have a "digital signature" on it, to show who wrote it and prove that it hasn't been tampered with. The bootloader can then do an additional signature check to decide whether the operating system is "legitimate", and can refuse to boot the OS if it so chooses. Windows 10 will not run on a system with the older PC BIOS and its "open" boot architecture.
The holder of the "key" used to sign the bootloader" is Microsoft. If your bootloader hasn't been signed by Microsoft, and if you don't have an alternative way of adding an "authorized signer" public key to your UEFI BIOS or turning off Secure Boot, you can't boot other operating systems.
When Microsoft started endorsing and requiring Secure Boot with Windiws 8 a few years ago, there was a big outcry. Microsoft agreed to require PC makers using Secure Boot to provide an "off" switch to disable Secure Boot.
Microsoft has now indicated that they're planning to eliminate that requirement. Hardware which is advertised as "Designed for Windows 10" will
not have to have a "disable" switch for Secure Boot. Manufacturers which choose this option will be selling computers which will be unable to run anything which doesn't have a bootloader signed by Microsoft.
http://www.pcworld.com/article/2901262/ ... linux.html
It's not quite that dire, since Microsoft did agree to sign a generic Linux bootloader using the Microsoft key, so that even locked-down Secure Boot systems will boot Linux distros that use this bootloader. Whether Microsoft will continue to extend this olive branch, in the future, is anyone's guess.
So, if you're planning to buy a new PC, and you think you might ever want to run something other than Microsoft's latest Windows offering on it, make sure it allows you to turn off Secure Boot!