SoylentNews is people
SoylentNews
from the ministry-of-freedom-it-department-(minifree-dept) dept.
Apparently, Lenovos newest laptops lock down the BIOS to vendor-signed versions. This is a problem since BIOS nowadays gets more and more powerful, sometimes with network-acccess etc., so basically it forces the user to boot a proprietary OS with full HW- and network access before potentially booting an open source system. However, the problem might be bigger than Lenovo making some bad decisions, since Lenovo only made a misguided choice between freedom and security, but they didn't implement any new features. Intel provides the combination of "boot guard" feature together with verified boot.
The idea behind it is not too bad: To have a trusted system, you need a chain of trust, starting with the boot loader. If every subsequent piece of software is verified before being started, the system could be considered to be in a safe state. The verification can be done by signed code. Now, there are three ways to handle this. Either the system doesn't use TPM at all. This might leave the system vulnerable if an attacker can flash his own BIOS. Or the system enables verified boot , which means a BIOS not signed with vendor key is simply not booted, the system doesn't start. Or the system offers measured boot . This means, the system would boot, but be marked as not trusted by the vendor; however, it could still be verified against some other key provided by the hardware-owner. (For details, please read the linked article.)
The article I linked states that it is Intel's mistake to even provide the "verified boot" feature. I'm not sure I fully agree, as Intel apparently would support the measured boot approach as well, and it was Lenovos decision to not use that option. However, as a consumer I could not imagine any advantage "verified boot" offers over "measured boot", so I'd be happy if Intel would scrap this anti-feature. A lock is only your friend as long as you own the key; a door is only your friend if you are allowed to change the lock (key).
BTW: Could we rename the topic "Security" to "Freedom and Security"? Usually these topics are always linked.
(Score: 2) by Reziac on Wednesday March 04 2015, @06:25PM
Totally agree on that. I greatly appreciate both durable and "works all the fucking time without demanding to be treated like a special snowflake". I've bashed my head against parts that were seconds and wouldn't play nice with the standard driver supposedly for that very chip... Gateway systems had spasms of being wretched for this, where if you couldn't get the Gateway-tweaked driver, you were SOL.
Had any experience with Toughbooks? not that I plan to (ow$ow$ow) buy one but just curious.
And there is no Alkibiades to come back and save us from ourselves.
(Score: 2) by Hairyfeet on Sunday March 08 2015, @01:52AM
Had a US Army customer that had one, he abused the shit out of it and the thing survived Iraq so I'd say that's a pretty good endorsement. But from what I've seen unless you are gonna be putting it into conditions like going to thrid world hellholes? they are really overkill.
Hell that little $350 EEE is on its sixth year of being shoved under my truck seat and the thing is still purring like a kitten so I'd say as long as you use some common sense, put it in a sleeve or case so it don't get the screen scratched, don't sit on it (you'd be surprised how many laptops I've stripped because somebody forgot a laptop on the backseat and little Billy plopped their ass on it) and don't leave it running in the bag? Pretty much any of the Asus line will do ya well. If you want me to recommend one the AMD quad APU lappies, those babies multitask like crazy and do full 1080P over HDMI as smooth as butter, even with BluRay content. Picked up a couple for customers, one of which is working on it all day and plugging it into his widescreen TV when he gets home and using it as an HTPC, he is nothing but happy.
ACs are never seen so don't bother. Always ready to show SJWs for the racists they are.
(Score: 2) by Reziac on Sunday March 08 2015, @02:16AM
I've seen used Toughbooks for around $500. Dunno what their real condition is but something to consider if I ever decided to splurge (haha) considering I don't really need latest and greatest. I've dragged home a few castoff laptops for free, but fact is I don't have enough use for one to justify investing in something better. I just don't haul the computer around with me much . If I were to go crazy and buy a nice new one, yeah, I'd have to seriously look at Asus.
And there is no Alkibiades to come back and save us from ourselves.
(Score: 2) by Hairyfeet on Sunday March 08 2015, @07:20AM
Try keeping an eye out on Cowboom [cowboom.com], you can find some great used and refurb deals there.
ACs are never seen so don't bother. Always ready to show SJWs for the racists they are.
(Score: 2) by Reziac on Sunday March 08 2015, @07:32AM
Hadn't heard of Cowboom, thanks for the tip! Looks like a pretty good selection, too.
And there is no Alkibiades to come back and save us from ourselves.
(Score: 3, Informative) by Hairyfeet on Sunday March 08 2015, @10:44PM
You ever been to Best Buy? Know how they offer to give you a trade in on your working laptop toward the latest and greatest? Ever wonder where those laptops go? Well here ya go, Best Buy set up Cowboom so the local stores don't have cheap used competing with the new hotness. That is why you see them from all over the country, its different BB locations. They hand 'em to Geek Squad who checks the hardware and does a wipe and reinstall and then they slap 'em on there. If you keep an eye out? You can get INSANE deals there, I picked up a couple of Intel Atom netbooks there for $80 a pop, I got 'em and they were like new and worked great.
You might also want to take a gander at those Acer portables if you want a thin and light, they had several models with AMD C and E series APUs that had pretty decent performance and could hold 4GB of RAM, picked up a couple for customers and they are still using them to this day, you can even use them as HTPCs as long as you stick with 720P.
ACs are never seen so don't bother. Always ready to show SJWs for the racists they are.
(Score: 2) by Reziac on Monday March 09 2015, @12:53AM
Didn't know that! Might as well take advantage, Worst Buy being so bloody expensive. Will definitely pass the info along as I do run into folks looking for that cheaper laptop. Gotta know your prices (some of their camera/camcorder listings are no bargain) but hells bells, sub-$200 is more my price for a 'new' laptop.
And there is no Alkibiades to come back and save us from ourselves.
(Score: 2) by Hairyfeet on Monday March 09 2015, @02:37PM
As long as you know your CPUs? That site is great. Personally I'd never pay more than $120 for an Atom dual (and it'd have to be REAL nice for me to pay more than $100) , same goes for the Celeron, but you can find some nice Pentium duals and Athlon X2s on that site in the sub $200 range, even seen a few Phenom X4s and AMD A series but you have to jump on those pretty quick as they go fast. Good luck!
ACs are never seen so don't bother. Always ready to show SJWs for the racists they are.
(Score: 2) by Reziac on Monday March 09 2015, @02:53PM
Yeah, if I'm gonna buy a fresh one at all, it's gonna be a for-really Pentium -- I'll use a Celeron if it falls on my head but I don't chase 'em. Hadn't even thought about Atom, I suppose it'd be all right in a sub-notebook but not in a real usin' machine.
And there is no Alkibiades to come back and save us from ourselves.
(Score: 2) by Hairyfeet on Monday March 09 2015, @04:24PM
Actually the Atom duals (NOT the single with HT, the actual dual cores) do have a use or two...they make good HTPCs as long as you don't mind 720P, you have guests over frequently? Its nice to have a netbook you can just hand out if they need to get on the web, I even knew a guy that hooked one to a 4TB USB external and used it as a streaming media hub for his LAN.
But the ones you really should be on the look out for are the AMDs, and this isn't because I always favor AMD (which I do) but for the simple fact that they are damned near always paired with a MUCH better GPU than anything you'll get with a Pentium! Even the low end AMDs are usually paired with paired with a HD3200-HD7200 GPU and I've played Bioshock I on an HD3200 at 30FPS on low to medium so that should tell you how much horse they got. Even if you don't game the codecs AMD includes in their drivers will give you full hardware acceleration for most formats, with Intel anything below the second gen core i3 based you are lucky to get anything other than MPEG 2 & 4 and even then its REAL picky about it. My wife has a Pentium dual 2.3Ghz and compared to my wimpy E350 netbook I can do full 1080p over HDMI on most formats, she can't for anything other than MPEG 2.
So if you want my advice? Look for the AMD models, the superior GPU will give you more bang for the buck than the couple points of single threaded performance you get from Intel.
ACs are never seen so don't bother. Always ready to show SJWs for the racists they are.
(Score: 2) by Reziac on Monday March 09 2015, @05:40PM
Wouldn't be gaming on a laptop no matter what -- might install good old DOOM (cuz you can't have a day without dead hellspawn) but nothing else. If the display suffices for a nicely usable Windows screen and can do tolerably watchable video, and has a legible DOS screen font, that's good enough for anything I might drag around with me. Not going to be any time soon, but if one catches my eye I'll give you a shout and you can tell me if I'm crazy or not. :)
But I'd have to feel a need ... I don't drag around the Twinhead (my "new" laptop, haha) often enough as it is, and it's a 2002 model. 1GHz and 256mb (may not be upgradeable), with about a 10" screen and a dying battery, but if I do replace it, it's because the wiring to the screen is twitchy and everything has to be just right or the picture whites out. Well, it was free!!
Oh, didn't you point me at TinyXP? runs like the wind on the old Twinhead, but doesn't support a USB mouse, and I ***loathe*** touchpads... TinyXP also didn't support the wireless, and it's a DLink PCcard that's about as generic as it can get, even Puppy Linux sees it fine. But man does TinyXP run fast, holy shit!
Friend uses an Atom PC as a fileserver/media box, that's all it does and does it well enough. Right tool for the right mission, eh?
And there is no Alkibiades to come back and save us from ourselves.
(Score: 2) by Hairyfeet on Monday March 09 2015, @08:28PM
Yeah I'm the guy that pointed out TinyXP, BTW you might try Tiny 7 as that has more built in USB support so it might solve your problem.
But if you're not being mobile, why not a desktop? You can find an old P4 with screen and keyboard pretty cheap most places, yeah I know the P4 sucks balls, just wait a tick. What you do then is rip out that shitty P4 board for an AMD E350 or AMD Socket AM1, you can find the refurb E350 boards on Amazon for around $30 and that's a dual core with HD6310 GPU so its great for videos, and the socket AM1 APUs is the same ones used in the new PS4 and XB-1 so its got plenty of kick and you can buy the dual core AND the board for less than $50. Just slap in a RAM stick off of eBay or Amazon and voila! A desktop that will do anything you want and will last for quite awhile. Hell there are vids of guys playing Crysis 3 on the AM1 APUs so you KNOW they'll handle anything you can throw at 'em!
But yeah, grab a copy of Tiny 7 and give it a go, its nearly as fast as Tiny XP and its got better support for USB and wireless so you'll probably be able to get everything up and running, good luck!
ACs are never seen so don't bother. Always ready to show SJWs for the racists they are.
(Score: 2) by Reziac on Monday March 09 2015, @08:56PM
I got desktops comin' out my ears, only problem is they're all old enough to vote, haha. I have a couple newer boards (defined as maybe 6 or 7 years old) that I'll do something with when I get to it. Most of the gear is still boxed up from the Great Northward Migration.
I found Tiny7 too but I vaguely recall that the installer threw an error. Might have to pull another copy. There was a newer TinyXP but it had a decompression error. Torrents, bah... You'd think Microsoft itself would promote such stuff as a way of keeping older machines from migrating out of the fold.
And there is no Alkibiades to come back and save us from ourselves.