Dell Firmware v1.00 (UEFI 2.7)... anyone else have?

Dell Firmware v1.00 (UEFI 2.7)... anyone else have?

[Eric J Bowman]

[-- Attachment #1: Type: text/plain, Size: 1262 bytes --]

I thought I had things more-or-less figured out until I got my new Dell on July 3rd. GUI boot manager with file browser allows one to choose precisely which partition to boot, but you'll get lots of "vmlinuz | initrd | loader.lua | etc. is not a valid .efi file" which is annoyingly also the error message for "file not found".



The even larger problem with my 27" touchscreen Inspiron, is I got the one with nvidia dgpu w/ 2GB GDDR6 and 16GB DDR4; whereas the AMD dgpu systems share 16GB DDR5 at the same price point.



But, if I know Dell, even if you don't get an AIO you'll still have a default UEFI configuation with touchscreen enabled [1]. And the boot problems are well before the gfx driver anyway; there are only a handful of things on netboot.xyz which will boot on this firmware *and* get the gfx driver right.



Zorin loads one called "NV177/Mesa Intel (RPL-U)" because both the built-in monitor and the HDMI-out are Intel chips displaying the Nvidia's output.



But, unlike my AMD CPU box w/ AMI UEFI 2.8, which also lacks CSM, Dell has chosen not to include a single line of legacy support code. Wondering if anyone else has this new firmware.



-Eric



[1] https://www.usenix.org/system/files/sec20-christensen.pdf

[-- Attachment #2: Type: text/html, Size: 1777 bytes --]

Re: [discuss] Dell Firmware v1.00 (UEFI 2.7)... anyone else have?

[Eric J Bowman]

[-- Attachment #1: Type: text/plain, Size: 2203 bytes --]

This 2GB download [1] includes OmniTribblix0m34lx.iso and a bonus lx. The installer launches protected-mode on all my hardware including iMacs. The resulting installation will boot across all my hardware. This includes the new Dell, except for gfx driver. I'm still working on the other repacks, please let me know how it goes. This is my first crack at IPFS.



-Eric


[1] https://ipfs.io/ipfs/QmSMyTpgUZsDgpZDUSzsvZ72UTGtCBBhcHUFjxrTMV3f2y?filename=omnitrib%2Bzephix-repack.iso







---- On Thu, 18 Jul 2024 15:01:32 -0700 Eric J Bowman via illumos-discuss <discuss@lists.illumos.org> wrote ---



I thought I had things more-or-less figured out until I got my new Dell on July 3rd. GUI boot manager with file browser allows one to choose precisely which partition to boot, but you'll get lots of "vmlinuz | initrd | loader.lua | etc. is not a valid .efi file" which is annoyingly also the error message for "file not found".



The even larger problem with my 27" touchscreen Inspiron, is I got the one with nvidia dgpu w/ 2GB GDDR6 and 16GB DDR4; whereas the AMD dgpu systems share 16GB DDR5 at the same price point.



But, if I know Dell, even if you don't get an AIO you'll still have a default UEFI configuation with touchscreen enabled [1]. And the boot problems are well before the gfx driver anyway; there are only a handful of things on netboot.xyz which will boot on this firmware *and* get the gfx driver right.



Zorin loads one called "NV177/Mesa Intel (RPL-U)" because both the built-in monitor and the HDMI-out are Intel chips displaying the Nvidia's output.



But, unlike my AMD CPU box w/ AMI UEFI 2.8, which also lacks CSM, Dell has chosen not to include a single line of legacy support code. Wondering if anyone else has this new firmware.



-Eric



[1] https://www.usenix.org/system/files/sec20-christensen.pdf






https://illumos.topicbox.com/latest / illumos-discuss / see https://illumos.topicbox.com/groups/discuss + https://illumos.topicbox.com/groups/discuss/members + https://illumos.topicbox.com/groups/discuss/subscription https://illumos.topicbox.com/groups/discuss/T31b1065c3e307d4f-Ma042dfbd3559765d7fca0fda

[-- Attachment #2: Type: text/html, Size: 4298 bytes --]

Re: [discuss] Dell Firmware v1.00 (UEFI 2.7)... anyone else have?

[Eric J Bowman]

[-- Attachment #1: Type: text/plain, Size: 2649 bytes --]

So, I spent several hours figuring I don't know what I'm doing w/ IPFS, only to then tune in and discover global internet outage, so I probably wound up fixing things that weren't actually broken, so now they are lol.



I'll try again some other day once the Internet's back up.



-Eric






---- On Thu, 18 Jul 2024 19:57:01 -0700 Eric J Bowman via illumos-discuss <discuss@lists.illumos.org> wrote ---



This 2GB download [1] includes OmniTribblix0m34lx.iso and a bonus lx. The installer launches protected-mode on all my hardware including iMacs. The resulting installation will boot across all my hardware. This includes the new Dell, except for gfx driver. I'm still working on the other repacks, please let me know how it goes. This is my first crack at IPFS.



-Eric



[1] https://ipfs.io/ipfs/QmSMyTpgUZsDgpZDUSzsvZ72UTGtCBBhcHUFjxrTMV3f2y?filename=omnitrib%2Bzephix-repack.iso







---- On Thu, 18 Jul 2024 15:01:32 -0700 Eric J Bowman via illumos-discuss <mailto:discuss@lists.illumos.org> wrote ---











https://illumos.topicbox.com/latest / illumos-discuss / see https://illumos.topicbox.com/groups/discuss + https://illumos.topicbox.com/groups/discuss/members + https://illumos.topicbox.com/groups/discuss/subscription https://illumos.topicbox.com/groups/discuss/T31b1065c3e307d4f-M04d5abd43c26f262fe4b58a3


I thought I had things more-or-less figured out until I got my new Dell on July 3rd. GUI boot manager with file browser allows one to choose precisely which partition to boot, but you'll get lots of "vmlinuz | initrd | loader.lua | etc. is not a valid .efi file" which is annoyingly also the error message for "file not found".



The even larger problem with my 27" touchscreen Inspiron, is I got the one with nvidia dgpu w/ 2GB GDDR6 and 16GB DDR4; whereas the AMD dgpu systems share 16GB DDR5 at the same price point.



But, if I know Dell, even if you don't get an AIO you'll still have a default UEFI configuation with touchscreen enabled [1]. And the boot problems are well before the gfx driver anyway; there are only a handful of things on netboot.xyz which will boot on this firmware *and* get the gfx driver right.



Zorin loads one called "NV177/Mesa Intel (RPL-U)" because both the built-in monitor and the HDMI-out are Intel chips displaying the Nvidia's output.



But, unlike my AMD CPU box w/ AMI UEFI 2.8, which also lacks CSM, Dell has chosen not to include a single line of legacy support code. Wondering if anyone else has this new firmware.



-Eric



[1] https://www.usenix.org/system/files/sec20-christensen.pdf

[-- Attachment #2: Type: text/html, Size: 5216 bytes --]

Re: [discuss] Dell Firmware v1.00 (UEFI 2.7)... anyone else have?

[Peter Tribble]

[-- Attachment #1: Type: text/plain, Size: 2689 bytes --]

So I have to ask: what changes have been made? Is the source to those
published to have a look at?

Regards,

On Fri, Jul 19, 2024 at 3:57 AM Eric J Bowman via illumos-discuss <
discuss@lists.illumos.org> wrote:

> This 2GB download [1] includes OmniTribblix0m34lx.iso and a bonus lx. The
> installer launches protected-mode on all my hardware including iMacs. The
> resulting installation will boot across all my hardware. This includes the
> new Dell, except for gfx driver. I'm still working on the other repacks,
> please let me know how it goes. This is my first crack at IPFS.
>
> -Eric
>
> [1]
> https://ipfs.io/ipfs/QmSMyTpgUZsDgpZDUSzsvZ72UTGtCBBhcHUFjxrTMV3f2y?filename=omnitrib%2Bzephix-repack.iso
>
>
>
> ---- On Thu, 18 Jul 2024 15:01:32 -0700 *Eric J Bowman via
> illumos-discuss <discuss@lists.illumos.org <discuss@lists.illumos.org>>*
> wrote ---
>
> I thought I had things more-or-less figured out until I got my new Dell on
> July 3rd. GUI boot manager with file browser allows one to choose precisely
> which partition to boot, but you'll get lots of "vmlinuz | initrd |
> loader.lua | etc. is not a valid .efi file" which is annoyingly also the
> error message for "file not found".
>
> The even larger problem with my 27" touchscreen Inspiron, is I got the one
> with nvidia dgpu w/ 2GB GDDR6 and 16GB DDR4; whereas the AMD dgpu systems
> share 16GB DDR5 at the same price point.
>
> But, if I know Dell, even if you don't get an AIO you'll still have a
> default UEFI configuation with touchscreen enabled [1]. And the boot
> problems are well before the gfx driver anyway; there are only a handful of
> things on netboot.xyz which will boot on this firmware *and* get the gfx
> driver right.
>
> Zorin loads one called "NV177/Mesa Intel (RPL-U)" because both the
> built-in monitor and the HDMI-out are Intel chips displaying the Nvidia's
> output.
>
> But, unlike my AMD CPU box w/ AMI UEFI 2.8, which also lacks CSM, Dell has
> chosen not to include a single line of legacy support code. Wondering if
> anyone else has this new firmware.
>
> -Eric
>
> [1] https://www.usenix.org/system/files/sec20-christensen.pdf
>
>
>
>
> *illumos <https://illumos.topicbox.com/latest>* / illumos-discuss / see
> discussions <https://illumos.topicbox.com/groups/discuss> + participants
> <https://illumos.topicbox.com/groups/discuss/members> + delivery options
> <https://illumos.topicbox.com/groups/discuss/subscription> Permalink
> <https://illumos.topicbox.com/groups/discuss/T31b1065c3e307d4f-M04d5abd43c26f262fe4b58a3>
>


-- 
-Peter Tribble
http://www.petertribble.co.uk/ - http://ptribble.blogspot.com/

[-- Attachment #2: Type: text/html, Size: 5024 bytes --]

Re: [discuss] Dell Firmware v1.00 (UEFI 2.7)... anyone else have?

[Eric J Bowman]

[-- Attachment #1: Type: text/plain, Size: 3261 bytes --]

I changed nothing. I merely separated the .iso from the overlapped partitioning (not allowed in UEFI unless PMBR), created a 36MiB FAT32 ESP, installed rEFInd Plus, and configured it as an installer which launches on all my firmware, and results in a clean install. Without CSM firmware (or some code from it), pretty much nobody's distro.iso (regardless of kernel) works out-of-the-box on my newer systems, or my Intel iMac and iMac Pro. This work has taken 3 months, plus a week for the firmware fontset I made from Sun Gallant. But it's just configuration, not coding.



-Eric








---- On Fri, 19 Jul 2024 05:42:38 -0700 Peter Tribble <peter.tribble@gmail.com> wrote ---



So I have to ask: what changes have been made? Is the source to those

published to have a look at?


Regards,


On Fri, Jul 19, 2024 at 3:57 AM Eric J Bowman via illumos-discuss <mailto:discuss@lists.illumos.org> wrote:

This 2GB download [1] includes OmniTribblix0m34lx.iso and a bonus lx. The installer launches protected-mode on all my hardware including iMacs. The resulting installation will boot across all my hardware. This includes the new Dell, except for gfx driver. I'm still working on the other repacks, please let me know how it goes. This is my first crack at IPFS.



-Eric



[1] https://ipfs.io/ipfs/QmSMyTpgUZsDgpZDUSzsvZ72UTGtCBBhcHUFjxrTMV3f2y?filename=omnitrib%2Bzephix-repack.iso







---- On Thu, 18 Jul 2024 15:01:32 -0700 Eric J Bowman via illumos-discuss <mailto:discuss@lists.illumos.org> wrote ---



I thought I had things more-or-less figured out until I got my new Dell on July 3rd. GUI boot manager with file browser allows one to choose precisely which partition to boot, but you'll get lots of "vmlinuz | initrd | loader.lua | etc. is not a valid .efi file" which is annoyingly also the error message for "file not found".



The even larger problem with my 27" touchscreen Inspiron, is I got the one with nvidia dgpu w/ 2GB GDDR6 and 16GB DDR4; whereas the AMD dgpu systems share 16GB DDR5 at the same price point.



But, if I know Dell, even if you don't get an AIO you'll still have a default UEFI configuation with touchscreen enabled [1]. And the boot problems are well before the gfx driver anyway; there are only a handful of things on http://netboot.xyz which will boot on this firmware *and* get the gfx driver right.



Zorin loads one called "NV177/Mesa Intel (RPL-U)" because both the built-in monitor and the HDMI-out are Intel chips displaying the Nvidia's output.



But, unlike my AMD CPU box w/ AMI UEFI 2.8, which also lacks CSM, Dell has chosen not to include a single line of legacy support code. Wondering if anyone else has this new firmware.



-Eric



[1] https://www.usenix.org/system/files/sec20-christensen.pdf


















-- 
-Peter Tribble
http://www.petertribble.co.uk/ - http://ptribble.blogspot.com/
https://illumos.topicbox.com/latest / illumos-discuss / see https://illumos.topicbox.com/groups/discuss + https://illumos.topicbox.com/groups/discuss/members + https://illumos.topicbox.com/groups/discuss/subscription https://illumos.topicbox.com/groups/discuss/T31b1065c3e307d4f-M36b0ef95ed2d2c34af7429d5

[-- Attachment #2: Type: text/html, Size: 6380 bytes --]

Re: [discuss] Dell Firmware v1.00 (UEFI 2.7)... anyone else have?

[Eric J Bowman]

[-- Attachment #1: Type: text/plain, Size: 3724 bytes --]

I also included log files from 3 of my systems, perusing them will reveal wild differences in how graphics mode is determined and set. Have you ever had an installer.iso boot up looking "squished" instead of using the proper aspect ratio? It's perhaps the main argument in favor of using a software boot manager, before launching an installer's bootloader. You'll see lots of Mac-specific stuff in the refind.config, much of which interestingly also applies to FreeBSD "for some reason." ;-)



Once I'm past this little obstacle, I have several other distro repacks pretty much ready to go, just want to finish the bold, italic, and bold-italic gallant faces, only have demi as yet. I also have a 32GB quintuple-boot demo in the works, which features:



Bodhi

Mandrake

GhostBSD

Redox OS



And of course OmniTribblix. All boot bare metal, one at a time. All work simultaneously b/c illumos zones, as I used XFS for Linux, like my first Solaris Containers which pre-dated ZFS were using XFS because I had IRIX systems.


-Eric






---- On Fri, 19 Jul 2024 05:42:38 -0700 Peter Tribble <peter.tribble@gmail.com> wrote ---



So I have to ask: what changes have been made? Is the source to those

published to have a look at?


Regards,


On Fri, Jul 19, 2024 at 3:57 AM Eric J Bowman via illumos-discuss <mailto:discuss@lists.illumos.org> wrote:

This 2GB download [1] includes OmniTribblix0m34lx.iso and a bonus lx. The installer launches protected-mode on all my hardware including iMacs. The resulting installation will boot across all my hardware. This includes the new Dell, except for gfx driver. I'm still working on the other repacks, please let me know how it goes. This is my first crack at IPFS.



-Eric



[1] https://ipfs.io/ipfs/QmSMyTpgUZsDgpZDUSzsvZ72UTGtCBBhcHUFjxrTMV3f2y?filename=omnitrib%2Bzephix-repack.iso







---- On Thu, 18 Jul 2024 15:01:32 -0700 Eric J Bowman via illumos-discuss <mailto:discuss@lists.illumos.org> wrote ---



I thought I had things more-or-less figured out until I got my new Dell on July 3rd. GUI boot manager with file browser allows one to choose precisely which partition to boot, but you'll get lots of "vmlinuz | initrd | loader.lua | etc. is not a valid .efi file" which is annoyingly also the error message for "file not found".



The even larger problem with my 27" touchscreen Inspiron, is I got the one with nvidia dgpu w/ 2GB GDDR6 and 16GB DDR4; whereas the AMD dgpu systems share 16GB DDR5 at the same price point.



But, if I know Dell, even if you don't get an AIO you'll still have a default UEFI configuation with touchscreen enabled [1]. And the boot problems are well before the gfx driver anyway; there are only a handful of things on http://netboot.xyz which will boot on this firmware *and* get the gfx driver right.



Zorin loads one called "NV177/Mesa Intel (RPL-U)" because both the built-in monitor and the HDMI-out are Intel chips displaying the Nvidia's output.



But, unlike my AMD CPU box w/ AMI UEFI 2.8, which also lacks CSM, Dell has chosen not to include a single line of legacy support code. Wondering if anyone else has this new firmware.



-Eric



[1] https://www.usenix.org/system/files/sec20-christensen.pdf


















-- 
-Peter Tribble
http://www.petertribble.co.uk/ - http://ptribble.blogspot.com/
https://illumos.topicbox.com/latest / illumos-discuss / see https://illumos.topicbox.com/groups/discuss + https://illumos.topicbox.com/groups/discuss/members + https://illumos.topicbox.com/groups/discuss/subscription https://illumos.topicbox.com/groups/discuss/T31b1065c3e307d4f-M36b0ef95ed2d2c34af7429d5

[-- Attachment #2: Type: text/html, Size: 6929 bytes --]

Re: [discuss] Dell Firmware v1.00 (UEFI 2.7)... anyone else have?

[Eric J Bowman]

[-- Attachment #1: Type: text/plain, Size: 4277 bytes --]

And, there is only one out of several iso9660.efi drivers out there which works with illumos, it's what, 40Kb? Old. New ones are around 15Kb and work with everything but illumos. There is one other that works with illumos but only if the firmware has CSM present. Refind uses that driver to go into /boot on the .iso partition, there is no bootloader in the ESP.



-Eric







---- On Fri, 19 Jul 2024 06:40:21 -0700 Eric J Bowman via illumos-discuss <discuss@lists.illumos.org> wrote ---



I also included log files from 3 of my systems, perusing them will reveal wild differences in how graphics mode is determined and set. Have you ever had an installer.iso boot up looking "squished" instead of using the proper aspect ratio? It's perhaps the main argument in favor of using a software boot manager, before launching an installer's bootloader. You'll see lots of Mac-specific stuff in the refind.config, much of which interestingly also applies to FreeBSD "for some reason." ;-)



Once I'm past this little obstacle, I have several other distro repacks pretty much ready to go, just want to finish the bold, italic, and bold-italic gallant faces, only have demi as yet. I also have a 32GB quintuple-boot demo in the works, which features:



Bodhi

Mandrake

GhostBSD

Redox OS



And of course OmniTribblix. All boot bare metal, one at a time. All work simultaneously b/c illumos zones, as I used XFS for Linux, like my first Solaris Containers which pre-dated ZFS were using XFS because I had IRIX systems.



-Eric







---- On Fri, 19 Jul 2024 05:42:38 -0700 Peter Tribble <mailto:peter.tribble@gmail.com> wrote ---



So I have to ask: what changes have been made? Is the source to those

published to have a look at?




Regards,




On Fri, Jul 19, 2024 at 3:57 AM Eric J Bowman via illumos-discuss <mailto:discuss@lists.illumos.org> wrote:



This 2GB download [1] includes OmniTribblix0m34lx.iso and a bonus lx. The installer launches protected-mode on all my hardware including iMacs. The resulting installation will boot across all my hardware. This includes the new Dell, except for gfx driver. I'm still working on the other repacks, please let me know how it goes. This is my first crack at IPFS.



-Eric



[1] https://ipfs.io/ipfs/QmSMyTpgUZsDgpZDUSzsvZ72UTGtCBBhcHUFjxrTMV3f2y?filename=omnitrib%2Bzephix-repack.iso







---- On Thu, 18 Jul 2024 15:01:32 -0700 Eric J Bowman via illumos-discuss <mailto:discuss@lists.illumos.org> wrote ---



I thought I had things more-or-less figured out until I got my new Dell on July 3rd. GUI boot manager with file browser allows one to choose precisely which partition to boot, but you'll get lots of "vmlinuz | initrd | loader.lua | etc. is not a valid .efi file" which is annoyingly also the error message for "file not found".



The even larger problem with my 27" touchscreen Inspiron, is I got the one with nvidia dgpu w/ 2GB GDDR6 and 16GB DDR4; whereas the AMD dgpu systems share 16GB DDR5 at the same price point.



But, if I know Dell, even if you don't get an AIO you'll still have a default UEFI configuation with touchscreen enabled [1]. And the boot problems are well before the gfx driver anyway; there are only a handful of things on http://netboot.xyz which will boot on this firmware *and* get the gfx driver right.



Zorin loads one called "NV177/Mesa Intel (RPL-U)" because both the built-in monitor and the HDMI-out are Intel chips displaying the Nvidia's output.



But, unlike my AMD CPU box w/ AMI UEFI 2.8, which also lacks CSM, Dell has chosen not to include a single line of legacy support code. Wondering if anyone else has this new firmware.



-Eric



[1] https://www.usenix.org/system/files/sec20-christensen.pdf





















-- 

-Peter Tribble
http://www.petertribble.co.uk/ - http://ptribble.blogspot.com/






https://illumos.topicbox.com/latest / illumos-discuss / see https://illumos.topicbox.com/groups/discuss + https://illumos.topicbox.com/groups/discuss/members + https://illumos.topicbox.com/groups/discuss/subscription https://illumos.topicbox.com/groups/discuss/T31b1065c3e307d4f-Me2ce02f4b7c60527889fedf1

[-- Attachment #2: Type: text/html, Size: 8136 bytes --]

Re: [discuss] Dell Firmware v1.00 (UEFI 2.7)... anyone else have?

[Eric J Bowman]

[-- Attachment #1: Type: text/plain, Size: 1041 bytes --]

I thought the joke was on me, for taking my first crack at IPFS amidst a global Internet rolling brownout, but what I thought were my mistakes, are actually a real-time view of the global situation on a map GUI that initially saw tens of thousands of peers per hour, and 16 hours later is between 12-300, maybe 400 peers. Australia, Japan, etc. come and go all together, whereas US outages are more regionalized.



Kinda like using the whataburger app to figure out where the power's on in Texas.



[2] https://4everland.io/ipfs/QmSMyTpgUZsDgpZDUSzsvZ72UTGtCBBhcHUFjxrTMV3f2y?filename=omnitrib%2Bzephix-repack.iso

[3] https://4everland.io/ipfs/QmSMyTpgUZsDgpZDUSzsvZ72UTGtCBBhcHUFjxrTMV3f2y?filename=omnitrib%2Bzephix-repack.iso



The reason for the bump, for links, is because it turns out this is probably the best time to be learning IPFS for the first time. Please click 'em all.



Thanks in advance,

Eric​







https://illumos.topicbox.com/groups/discuss/T31b1065c3e307d4f-Ma042dfbd3559765d7fca0fda

[-- Attachment #2: Type: text/html, Size: 4280 bytes --]

Re: [discuss] Dell Firmware v1.00 (UEFI 2.7)... anyone else have?

[Eric J Bowman]

[-- Attachment #1: Type: text/plain, Size: 1792 bytes --]

I've been able to use IPFS to finally figure out the routing of both of my ISP's. I wrote about our regional routing and 911 difficulties this summer, last month on ietf-http-wg. Longmont CO and Des Moines, IA. I note that 911, LEO, and courts are simultaneously down all over the country.



-Eric








---- On Fri, 19 Jul 2024 08:55:17 -0700 Eric J Bowman via illumos-discuss <discuss@lists.illumos.org> wrote ---



I thought the joke was on me, for taking my first crack at IPFS amidst a global Internet rolling brownout, but what I thought were my mistakes, are actually a real-time view of the global situation on a map GUI that initially saw tens of thousands of peers per hour, and 16 hours later is between 12-300, maybe 400 peers. Australia, Japan, etc. come and go all together, whereas US outages are more regionalized.



Kinda like using the whataburger app to figure out where the power's on in Texas.



[2] https://4everland.io/ipfs/QmSMyTpgUZsDgpZDUSzsvZ72UTGtCBBhcHUFjxrTMV3f2y?filename=omnitrib%2Bzephix-repack.iso

[3] https://4everland.io/ipfs/QmSMyTpgUZsDgpZDUSzsvZ72UTGtCBBhcHUFjxrTMV3f2y?filename=omnitrib%2Bzephix-repack.iso



The reason for the bump, for links, is because it turns out this is probably the best time to be learning IPFS for the first time. Please click 'em all.



Thanks in advance,

Eric​







https://illumos.topicbox.com/groups/discuss/T31b1065c3e307d4f-Ma042dfbd3559765d7fca0fda



https://illumos.topicbox.com/latest / illumos-discuss / see https://illumos.topicbox.com/groups/discuss + https://illumos.topicbox.com/groups/discuss/members + https://illumos.topicbox.com/groups/discuss/subscription https://illumos.topicbox.com/groups/discuss/T31b1065c3e307d4f-Ma758eb2afba0dd54393d26b1

[-- Attachment #2: Type: text/html, Size: 5175 bytes --]

Re: [discuss] Dell Firmware v1.00 (UEFI 2.7)... anyone else have?

[Eric J Bowman]

[-- Attachment #1: Type: text/plain, Size: 3299 bytes --]

Optical boot is also different on my UEFI 2.7 and 2.8 boxes, in that earlier firmware calls my optical drive a Pioneer, but now the boot option is listed as "UEFI Initio INIC-3609" and seems to net-boot from CDROM, if you have a bootloader under /boot on the .iso and don't have an /EFI in your filesystem. Except for SmartOS, illumos distros need to be separated from the overlapped partitions before burning to optical, at which point they will generally work unless OmniOS or XStreamOS.



If you burn my smartos-repack.iso to optical, new firmware will give you the choice of booting from its ESP or its .iso partition, and either way will work. Hipster and Tribblix, same thing but not with the distro.iso with Solaris Boot at the "edge" instead of a MBR. You do not need "Joliet" or anything else to identify your disk as bootable, if it's in the CDROM drive and has /boot/bootloader.efi, regardless of OS. All that sort of thing is deprecated, as is MBR partitioning.



You may notice my iso9660 partitions are all of the "MBR" type. This is now a semaphore to indicate bootable, so you can ignore the pointer to the well-known location of a Windows bootloader, the pointer's deprecated. Booting a distro.iso from anything but an optical drive, won't work unless the partition type is MBR. Rufus and Ventoy don't work on the Dell, as they use MBR partitioning scheme, only GPT is allowed now (GPT defines PMBR).



Walked down to my local small-town pharmacy yesterday and paid cash (POS down of course) for a stack of blank CD-R's and had a 90's flashback.



-Eric





---- On Thu, 18 Jul 2024 15:01:32 -0700 Eric J Bowman via illumos-discuss <discuss@lists.illumos.org> wrote ---



I thought I had things more-or-less figured out until I got my new Dell on July 3rd. GUI boot manager with file browser allows one to choose precisely which partition to boot, but you'll get lots of "vmlinuz | initrd | loader.lua | etc. is not a valid .efi file" which is annoyingly also the error message for "file not found".



The even larger problem with my 27" touchscreen Inspiron, is I got the one with nvidia dgpu w/ 2GB GDDR6 and 16GB DDR4; whereas the AMD dgpu systems share 16GB DDR5 at the same price point.



But, if I know Dell, even if you don't get an AIO you'll still have a default UEFI configuation with touchscreen enabled [1]. And the boot problems are well before the gfx driver anyway; there are only a handful of things on netboot.xyz which will boot on this firmware *and* get the gfx driver right.



Zorin loads one called "NV177/Mesa Intel (RPL-U)" because both the built-in monitor and the HDMI-out are Intel chips displaying the Nvidia's output.



But, unlike my AMD CPU box w/ AMI UEFI 2.8, which also lacks CSM, Dell has chosen not to include a single line of legacy support code. Wondering if anyone else has this new firmware.



-Eric



[1] https://www.usenix.org/system/files/sec20-christensen.pdf





https://illumos.topicbox.com/latest / illumos-discuss / see https://illumos.topicbox.com/groups/discuss + https://illumos.topicbox.com/groups/discuss/members + https://illumos.topicbox.com/groups/discuss/subscription https://illumos.topicbox.com/groups/discuss/T31b1065c3e307d4f-Ma042dfbd3559765d7fca0fda

[-- Attachment #2: Type: text/html, Size: 4643 bytes --]

Re: [discuss] Dell Firmware v1.00 (UEFI 2.7)... anyone else have?

[Gary]

[-- Attachment #1: Type: text/plain, Size: 323 bytes --]

On Fri, Jul 19, 2024 at 8:56 AM Eric J Bowman wrote:

>
> Kinda like using the whataburger app to figure out where the power's on in
> Texas.
>

It’s not impossible but unlikely that there would be that many Windows
hosts with an enterprise endpoint protection tool (CrowdStrike) sharing
files globally.

>

[-- Attachment #2: Type: text/html, Size: 1155 bytes --]

Re: [discuss] Dell Firmware v1.00 (UEFI 2.7)... anyone else have?

[Eric J Bowman]

[-- Attachment #1: Type: text/plain, Size: 2088 bytes --]

True, that. But, I've been experiencing rolling regional Internet brownouts since Memorial Day, and there's a ripple effect going across the world that's hard to get information on, and I do have a theory I shared last month on ietf-http-wg. Perhaps I'm guilty of a little confirmation bias. But I didn't mean to suggest what I'm seeing is crowdstrike related, because I think it's more to do with the Azure problem that started before crowdstrike.



This coincided with me having just posted a 2GB file to IPFS, and just as I was getting an astonishing number of connections coming in for 256Kb chunks, everything kinda just stopped. Sometimes I see traffic coming through and ramping up, only to drop after a few minutes. Like a wet dog shaking off the water, only to have another bucket dumped on it.



So yeah, I'm flying blind here because I'm simultaneously experiencing ongoing regional failures that affect both my ISP's, despite one peers in Colorado and the other in Iowa; the Azure thing making it worse because (I suspect) of how Edge Runtime works; and around here the ATMs are still down as are most POS systems. When I do have an hour or so where IPFS is showing thousands of peers, I can see entire portions of the world coming online and off. East Asia and Australia/NZ drop when I lose Vancouver, for instance.



-Eric







---- On Sun, 21 Jul 2024 06:37:44 -0700 Gary <gdriggs@gmail.com> wrote ---



On Fri, Jul 19, 2024 at 8:56 AM Eric J Bowman wrote:



Kinda like using the whataburger app to figure out where the power's on in Texas.






It’s not impossible but unlikely that there would be that many Windows hosts with an enterprise endpoint protection tool (CrowdStrike) sharing files globally.








https://illumos.topicbox.com/latest / illumos-discuss / see https://illumos.topicbox.com/groups/discuss + https://illumos.topicbox.com/groups/discuss/members + https://illumos.topicbox.com/groups/discuss/subscription https://illumos.topicbox.com/groups/discuss/T31b1065c3e307d4f-Mc72bc1142ed70e205533f635

[-- Attachment #2: Type: text/html, Size: 4124 bytes --]

Re: [discuss] Dell Firmware v1.00 (UEFI 2.7)... anyone else have?

[Eric J Bowman]

[-- Attachment #1: Type: text/plain, Size: 2334 bytes --]

I think my issues today are Brightspeed related, which I'd never even heard of.



-Eric







---- On Sun, 21 Jul 2024 07:04:55 -0700 Eric J Bowman via illumos-discuss <discuss@lists.illumos.org> wrote ---



True, that. But, I've been experiencing rolling regional Internet brownouts since Memorial Day, and there's a ripple effect going across the world that's hard to get information on, and I do have a theory I shared last month on ietf-http-wg. Perhaps I'm guilty of a little confirmation bias. But I didn't mean to suggest what I'm seeing is crowdstrike related, because I think it's more to do with the Azure problem that started before crowdstrike.



This coincided with me having just posted a 2GB file to IPFS, and just as I was getting an astonishing number of connections coming in for 256Kb chunks, everything kinda just stopped. Sometimes I see traffic coming through and ramping up, only to drop after a few minutes. Like a wet dog shaking off the water, only to have another bucket dumped on it.



So yeah, I'm flying blind here because I'm simultaneously experiencing ongoing regional failures that affect both my ISP's, despite one peers in Colorado and the other in Iowa; the Azure thing making it worse because (I suspect) of how Edge Runtime works; and around here the ATMs are still down as are most POS systems. When I do have an hour or so where IPFS is showing thousands of peers, I can see entire portions of the world coming online and off. East Asia and Australia/NZ drop when I lose Vancouver, for instance.



-Eric







---- On Sun, 21 Jul 2024 06:37:44 -0700 Gary <mailto:gdriggs@gmail.com> wrote ---



On Fri, Jul 19, 2024 at 8:56 AM Eric J Bowman wrote:



Kinda like using the whataburger app to figure out where the power's on in Texas.






It’s not impossible but unlikely that there would be that many Windows hosts with an enterprise endpoint protection tool (CrowdStrike) sharing files globally.














https://illumos.topicbox.com/latest / illumos-discuss / see https://illumos.topicbox.com/groups/discuss + https://illumos.topicbox.com/groups/discuss/members + https://illumos.topicbox.com/groups/discuss/subscription https://illumos.topicbox.com/groups/discuss/T31b1065c3e307d4f-M829e471d8f7009552097c2f9

[-- Attachment #2: Type: text/html, Size: 4930 bytes --]

Re: [discuss] Dell Firmware v1.00 (UEFI 2.7)... anyone else have?

[Eric J Bowman]

[-- Attachment #1: Type: text/plain, Size: 935 bytes --]

It's curious when I lose Vancouver, that the traffic isn't failing over to, for example, Panama where I have a server that's up when Vancouver (where I used to have a server) goes down.



-Eric







---- On Sun, 21 Jul 2024 06:37:44 -0700 Gary <gdriggs@gmail.com> wrote ---



On Fri, Jul 19, 2024 at 8:56 AM Eric J Bowman wrote:



Kinda like using the whataburger app to figure out where the power's on in Texas.






It’s not impossible but unlikely that there would be that many Windows hosts with an enterprise endpoint protection tool (CrowdStrike) sharing files globally.








https://illumos.topicbox.com/latest / illumos-discuss / see https://illumos.topicbox.com/groups/discuss + https://illumos.topicbox.com/groups/discuss/members + https://illumos.topicbox.com/groups/discuss/subscription https://illumos.topicbox.com/groups/discuss/T31b1065c3e307d4f-Mc72bc1142ed70e205533f635

[-- Attachment #2: Type: text/html, Size: 2927 bytes --]

Re: [discuss] Dell Firmware v1.00 (UEFI 2.7)... anyone else have?

[Eric J Bowman]

[-- Attachment #1: Type: text/plain, Size: 1603 bytes --]

I had a "host" called tenbears that my several global Solaris SPARC nodes all CNAMEd, but was never a host. It was the name of my BGP Anycast configuration. For 8 1/2 years, until I pulled the plug when Oracle pulled the rug, none of my premium webhosting clientele ever filed against my zero-nines SLA. 100% uptime. My knowledge is outdated and my skills are rusty, but this sort of global issue fascinates me and I wish things were like they were in the 90's as far as using traceroute is concerned.



-Eric







---- On Sun, 21 Jul 2024 07:18:04 -0700 Eric J Bowman via illumos-discuss <discuss@lists.illumos.org> wrote ---



It's curious when I lose Vancouver, that the traffic isn't failing over to, for example, Panama where I have a server that's up when Vancouver (where I used to have a server) goes down.



-Eric







---- On Sun, 21 Jul 2024 06:37:44 -0700 Gary <mailto:gdriggs@gmail.com> wrote ---



On Fri, Jul 19, 2024 at 8:56 AM Eric J Bowman wrote:



Kinda like using the whataburger app to figure out where the power's on in Texas.






It’s not impossible but unlikely that there would be that many Windows hosts with an enterprise endpoint protection tool (CrowdStrike) sharing files globally.














https://illumos.topicbox.com/latest / illumos-discuss / see https://illumos.topicbox.com/groups/discuss + https://illumos.topicbox.com/groups/discuss/members + https://illumos.topicbox.com/groups/discuss/subscription https://illumos.topicbox.com/groups/discuss/T31b1065c3e307d4f-Me01d6c6430ead0f02d16a6fd

[-- Attachment #2: Type: text/html, Size: 4150 bytes --]

Re: [discuss] Dell Firmware v1.00 (UEFI 2.7)... anyone else have?

[Eric J Bowman]

[-- Attachment #1: Type: text/plain, Size: 1953 bytes --]

Very interesting that the 911 reality of using the direct land-line # instead which I reported earlier this summer, is now the official advice to all residents of Alaska since Friday.



-Eric







---- On Sun, 21 Jul 2024 07:33:13 -0700 Eric J Bowman via illumos-discuss <discuss@lists.illumos.org> wrote ---



I had a "host" called tenbears that my several global Solaris SPARC nodes all CNAMEd, but was never a host. It was the name of my BGP Anycast configuration. For 8 1/2 years, until I pulled the plug when Oracle pulled the rug, none of my premium webhosting clientele ever filed against my zero-nines SLA. 100% uptime. My knowledge is outdated and my skills are rusty, but this sort of global issue fascinates me and I wish things were like they were in the 90's as far as using traceroute is concerned.



-Eric







---- On Sun, 21 Jul 2024 07:18:04 -0700 Eric J Bowman via illumos-discuss <mailto:discuss@lists.illumos.org> wrote ---



It's curious when I lose Vancouver, that the traffic isn't failing over to, for example, Panama where I have a server that's up when Vancouver (where I used to have a server) goes down.



-Eric







---- On Sun, 21 Jul 2024 06:37:44 -0700 Gary <mailto:gdriggs@gmail.com> wrote ---



On Fri, Jul 19, 2024 at 8:56 AM Eric J Bowman wrote:



Kinda like using the whataburger app to figure out where the power's on in Texas.






It’s not impossible but unlikely that there would be that many Windows hosts with an enterprise endpoint protection tool (CrowdStrike) sharing files globally.




















https://illumos.topicbox.com/latest / illumos-discuss / see https://illumos.topicbox.com/groups/discuss + https://illumos.topicbox.com/groups/discuss/members + https://illumos.topicbox.com/groups/discuss/subscription https://illumos.topicbox.com/groups/discuss/T31b1065c3e307d4f-M3ccd83f2952a9a8bbc086cd6

[-- Attachment #2: Type: text/html, Size: 5064 bytes --]

Re: [discuss] Dell Firmware v1.00 (UEFI 2.7)... anyone else have?

[Eric J Bowman]

[-- Attachment #1: Type: text/plain, Size: 2024 bytes --]

My webmail only works on HTTP/3 clients, since Friday. The level-1 guy I spoke to on the phone last month about our regional issues put it thusly, paraphrasing: if IP is up but TCP goes down, how do you bring TCP back up if your toolchain depends on TCP?



-Eric







---- On Sun, 21 Jul 2024 07:33:13 -0700 Eric J Bowman via illumos-discuss <discuss@lists.illumos.org> wrote ---



I had a "host" called tenbears that my several global Solaris SPARC nodes all CNAMEd, but was never a host. It was the name of my BGP Anycast configuration. For 8 1/2 years, until I pulled the plug when Oracle pulled the rug, none of my premium webhosting clientele ever filed against my zero-nines SLA. 100% uptime. My knowledge is outdated and my skills are rusty, but this sort of global issue fascinates me and I wish things were like they were in the 90's as far as using traceroute is concerned.



-Eric







---- On Sun, 21 Jul 2024 07:18:04 -0700 Eric J Bowman via illumos-discuss <mailto:discuss@lists.illumos.org> wrote ---



It's curious when I lose Vancouver, that the traffic isn't failing over to, for example, Panama where I have a server that's up when Vancouver (where I used to have a server) goes down.



-Eric







---- On Sun, 21 Jul 2024 06:37:44 -0700 Gary <mailto:gdriggs@gmail.com> wrote ---



On Fri, Jul 19, 2024 at 8:56 AM Eric J Bowman wrote:



Kinda like using the whataburger app to figure out where the power's on in Texas.






It’s not impossible but unlikely that there would be that many Windows hosts with an enterprise endpoint protection tool (CrowdStrike) sharing files globally.




















https://illumos.topicbox.com/latest / illumos-discuss / see https://illumos.topicbox.com/groups/discuss + https://illumos.topicbox.com/groups/discuss/members + https://illumos.topicbox.com/groups/discuss/subscription https://illumos.topicbox.com/groups/discuss/T31b1065c3e307d4f-M3ccd83f2952a9a8bbc086cd6

[-- Attachment #2: Type: text/html, Size: 5135 bytes --]

Re: [discuss] Dell Firmware v1.00 (UEFI 2.7)... anyone else have?

[Gary]

[-- Attachment #1: Type: text/plain, Size: 961 bytes --]

On Sun, Jul 21, 2024 at 7:44 AM Eric J Bowman  wrote:

> Very interesting that the 911 reality of using the direct land-line #
> instead which I reported earlier this summer, is now the official advice to
> all residents of Alaska since Friday.
>

First responders are most likely using CrowdStrike on their endpoints as
states, counties, & municipalities commonly deploy EPP. But they require
hands on keyboard unless they’ve previously deployed Intel vPro for remote
management for all their workstations. Bare metal severs typically have
some kind of DRAC/iLO/ILOM capability but vPro doesn’t require a dedicated
IP. It does, howver, require BIOS configuration & PKI so if you aren’t
using it already it’s a longer recovery process than what’s needes right
now.

So all those terminals on the wall at airports running Windows are going to
need someone to plug in a keyboard to get them back online.

Good times.

-Gary

>

[-- Attachment #2: Type: text/html, Size: 1861 bytes --]

Re: [discuss] Dell Firmware v1.00 (UEFI 2.7)... anyone else have?

[Eric J Bowman]

[-- Attachment #1: Type: text/plain, Size: 1586 bytes --]

Yeah, I'm sure I don't need to try calling crowdstrike for assistance to know what everyone's been listening to for over a day, who has...



...about how very important your call is to us.



-Eric








---- On Sun, 21 Jul 2024 10:20:46 -0700 Gary <gdriggs@gmail.com> wrote ---



On Sun, Jul 21, 2024 at 7:44 AM Eric J Bowman  wrote:

Very interesting that the 911 reality of using the direct land-line # instead which I reported earlier this summer, is now the official advice to all residents of Alaska since Friday.






First responders are most likely using CrowdStrike on their endpoints as states, counties, & municipalities commonly deploy EPP. But they require hands on keyboard unless they’ve previously deployed Intel vPro for remote management for all their workstations. Bare metal severs typically have some kind of DRAC/iLO/ILOM capability but vPro doesn’t require a dedicated IP. It does, howver, require BIOS configuration & PKI so if you aren’t using it already it’s a longer recovery process than what’s needes right now.



So all those terminals on the wall at airports running Windows are going to need someone to plug in a keyboard to get them back online.



Good times.



-Gary








https://illumos.topicbox.com/latest / illumos-discuss / see https://illumos.topicbox.com/groups/discuss + https://illumos.topicbox.com/groups/discuss/members + https://illumos.topicbox.com/groups/discuss/subscription https://illumos.topicbox.com/groups/discuss/T31b1065c3e307d4f-Mba967bc489ebbd3888d469ea

[-- Attachment #2: Type: text/html, Size: 3686 bytes --]

Re: [discuss] Dell Firmware v1.00 (UEFI 2.7)... anyone else have?

[Eric J Bowman]

[-- Attachment #1: Type: text/plain, Size: 2632 bytes --]

Microsoft got hit with another problem this week, even before the Azure and then Crowdstrike problems, which isn't getting enough attention imho. Seems that "disabled" and unpatched IE 11 on everyone's Windows can be resurrected to wreak zombie havoc on the system.



You know that old saying, "Nobody ever got fired for buying Microsoft?" Maybe it's time to change that.



MSHTML + VBscript was never architecturally sound, and has always been inherently insecure. Still is. My new motto for the past few months has been, only the code that's used by the system should even be on the system. If you don't have an integrated touchscreen, go ahead and remove the firmware driver for it, it's just bloat and yeah, unused HID driver sounds like attack surface to me. Kinda like keeping IE 11 around "disabled" yet deleting Opera against my wishes as a "security risk".


-Eric







---- On Sun, 21 Jul 2024 11:05:04 -0700 Eric J Bowman via illumos-discuss <discuss@lists.illumos.org> wrote ---



Yeah, I'm sure I don't need to try calling crowdstrike for assistance to know what everyone's been listening to for over a day, who has...



...about how very important your call is to us.



-Eric









---- On Sun, 21 Jul 2024 10:20:46 -0700 Gary <mailto:gdriggs@gmail.com> wrote ---



On Sun, Jul 21, 2024 at 7:44 AM Eric J Bowman  wrote:



Very interesting that the 911 reality of using the direct land-line # instead which I reported earlier this summer, is now the official advice to all residents of Alaska since Friday.






First responders are most likely using CrowdStrike on their endpoints as states, counties, & municipalities commonly deploy EPP. But they require hands on keyboard unless they’ve previously deployed Intel vPro for remote management for all their workstations. Bare metal severs typically have some kind of DRAC/iLO/ILOM capability but vPro doesn’t require a dedicated IP. It does, howver, require BIOS configuration & PKI so if you aren’t using it already it’s a longer recovery process than what’s needes right now.



So all those terminals on the wall at airports running Windows are going to need someone to plug in a keyboard to get them back online.



Good times.



-Gary














https://illumos.topicbox.com/latest / illumos-discuss / see https://illumos.topicbox.com/groups/discuss + https://illumos.topicbox.com/groups/discuss/members + https://illumos.topicbox.com/groups/discuss/subscription https://illumos.topicbox.com/groups/discuss/T31b1065c3e307d4f-Mee3c41b0c78afb3f975fe509

[-- Attachment #2: Type: text/html, Size: 5348 bytes --]

Re: [discuss] Dell Firmware v1.00 (UEFI 2.7)... anyone else have?

[Eric J Bowman]

[-- Attachment #1: Type: text/plain, Size: 2901 bytes --]

Sounds like a video game. Once you've escaped the Boot Loop Of Death, you need to go zombie hunting.



-Eric







---- On Sun, 21 Jul 2024 14:48:37 -0700 Eric J Bowman via illumos-discuss <discuss@lists.illumos.org> wrote ---



Microsoft got hit with another problem this week, even before the Azure and then Crowdstrike problems, which isn't getting enough attention imho. Seems that "disabled" and unpatched IE 11 on everyone's Windows can be resurrected to wreak zombie havoc on the system.



You know that old saying, "Nobody ever got fired for buying Microsoft?" Maybe it's time to change that.



MSHTML + VBscript was never architecturally sound, and has always been inherently insecure. Still is. My new motto for the past few months has been, only the code that's used by the system should even be on the system. If you don't have an integrated touchscreen, go ahead and remove the firmware driver for it, it's just bloat and yeah, unused HID driver sounds like attack surface to me. Kinda like keeping IE 11 around "disabled" yet deleting Opera against my wishes as a "security risk".



-Eric







---- On Sun, 21 Jul 2024 11:05:04 -0700 Eric J Bowman via illumos-discuss <mailto:discuss@lists.illumos.org> wrote ---



Yeah, I'm sure I don't need to try calling crowdstrike for assistance to know what everyone's been listening to for over a day, who has...



...about how very important your call is to us.



-Eric









---- On Sun, 21 Jul 2024 10:20:46 -0700 Gary <mailto:gdriggs@gmail.com> wrote ---



On Sun, Jul 21, 2024 at 7:44 AM Eric J Bowman  wrote:



Very interesting that the 911 reality of using the direct land-line # instead which I reported earlier this summer, is now the official advice to all residents of Alaska since Friday.






First responders are most likely using CrowdStrike on their endpoints as states, counties, & municipalities commonly deploy EPP. But they require hands on keyboard unless they’ve previously deployed Intel vPro for remote management for all their workstations. Bare metal severs typically have some kind of DRAC/iLO/ILOM capability but vPro doesn’t require a dedicated IP. It does, howver, require BIOS configuration & PKI so if you aren’t using it already it’s a longer recovery process than what’s needes right now.



So all those terminals on the wall at airports running Windows are going to need someone to plug in a keyboard to get them back online.



Good times.



-Gary




















https://illumos.topicbox.com/latest / illumos-discuss / see https://illumos.topicbox.com/groups/discuss + https://illumos.topicbox.com/groups/discuss/members + https://illumos.topicbox.com/groups/discuss/subscription https://illumos.topicbox.com/groups/discuss/T31b1065c3e307d4f-M3362eabd4bf94b93f86eb2c4

[-- Attachment #2: Type: text/html, Size: 6187 bytes --]

Re: [discuss] Dell Firmware v1.00 (UEFI 2.7)... anyone else have?

[Eric J Bowman]

[-- Attachment #1: Type: text/plain, Size: 3211 bytes --]

LA County Superior Court neglected to slay the Boss ZombIE after having successfully escaped the Boot Loop Of Death.



Happening everywhere.


-Eric








---- On Sun, 21 Jul 2024 15:20:47 -0700 Eric J Bowman via illumos-discuss <discuss@lists.illumos.org> wrote ---



Sounds like a video game. Once you've escaped the Boot Loop Of Death, you need to go zombie hunting.



-Eric







---- On Sun, 21 Jul 2024 14:48:37 -0700 Eric J Bowman via illumos-discuss <mailto:discuss@lists.illumos.org> wrote ---



Microsoft got hit with another problem this week, even before the Azure and then Crowdstrike problems, which isn't getting enough attention imho. Seems that "disabled" and unpatched IE 11 on everyone's Windows can be resurrected to wreak zombie havoc on the system.



You know that old saying, "Nobody ever got fired for buying Microsoft?" Maybe it's time to change that.



MSHTML + VBscript was never architecturally sound, and has always been inherently insecure. Still is. My new motto for the past few months has been, only the code that's used by the system should even be on the system. If you don't have an integrated touchscreen, go ahead and remove the firmware driver for it, it's just bloat and yeah, unused HID driver sounds like attack surface to me. Kinda like keeping IE 11 around "disabled" yet deleting Opera against my wishes as a "security risk".



-Eric







---- On Sun, 21 Jul 2024 11:05:04 -0700 Eric J Bowman via illumos-discuss <mailto:discuss@lists.illumos.org> wrote ---



Yeah, I'm sure I don't need to try calling crowdstrike for assistance to know what everyone's been listening to for over a day, who has...



...about how very important your call is to us.



-Eric









---- On Sun, 21 Jul 2024 10:20:46 -0700 Gary <mailto:gdriggs@gmail.com> wrote ---



On Sun, Jul 21, 2024 at 7:44 AM Eric J Bowman  wrote:



Very interesting that the 911 reality of using the direct land-line # instead which I reported earlier this summer, is now the official advice to all residents of Alaska since Friday.






First responders are most likely using CrowdStrike on their endpoints as states, counties, & municipalities commonly deploy EPP. But they require hands on keyboard unless they’ve previously deployed Intel vPro for remote management for all their workstations. Bare metal severs typically have some kind of DRAC/iLO/ILOM capability but vPro doesn’t require a dedicated IP. It does, howver, require BIOS configuration & PKI so if you aren’t using it already it’s a longer recovery process than what’s needes right now.



So all those terminals on the wall at airports running Windows are going to need someone to plug in a keyboard to get them back online.



Good times.



-Gary

























https://illumos.topicbox.com/latest / illumos-discuss / see https://illumos.topicbox.com/groups/discuss + https://illumos.topicbox.com/groups/discuss/members + https://illumos.topicbox.com/groups/discuss/subscription https://illumos.topicbox.com/groups/discuss/T31b1065c3e307d4f-M90411c0c035fd58355aeb5cd

[-- Attachment #2: Type: text/html, Size: 7080 bytes --]

Re: [discuss] Dell Firmware v1.00 (UEFI 2.7)... anyone else have?

[Eric J Bowman]

[-- Attachment #1: Type: text/plain, Size: 3878 bytes --]

I traded my smartcard lanyard for a bolo tie and put on a white Stetson. But my favorite hat looks like one Charlie Bronson wore in a Frank Sinatra movie, and with it on...



The whole planet's recovering from a problem caused by anti-malware software and will be rebooting without it. What vuln would you target? Even if my Win 10 hadn't been crashed since March, this wouldn't have affected me, but IE 11 is still on most of these systems, and all the black hats know it and smell blood.



-Eric







---- On Mon, 22 Jul 2024 13:49:07 -0700 Eric J Bowman via illumos-discuss <discuss@lists.illumos.org> wrote ---



LA County Superior Court neglected to slay the Boss ZombIE after having successfully escaped the Boot Loop Of Death.



Happening everywhere.



-Eric









---- On Sun, 21 Jul 2024 15:20:47 -0700 Eric J Bowman via illumos-discuss <mailto:discuss@lists.illumos.org> wrote ---



Sounds like a video game. Once you've escaped the Boot Loop Of Death, you need to go zombie hunting.



-Eric







---- On Sun, 21 Jul 2024 14:48:37 -0700 Eric J Bowman via illumos-discuss <mailto:discuss@lists.illumos.org> wrote ---



Microsoft got hit with another problem this week, even before the Azure and then Crowdstrike problems, which isn't getting enough attention imho. Seems that "disabled" and unpatched IE 11 on everyone's Windows can be resurrected to wreak zombie havoc on the system.



You know that old saying, "Nobody ever got fired for buying Microsoft?" Maybe it's time to change that.



MSHTML + VBscript was never architecturally sound, and has always been inherently insecure. Still is. My new motto for the past few months has been, only the code that's used by the system should even be on the system. If you don't have an integrated touchscreen, go ahead and remove the firmware driver for it, it's just bloat and yeah, unused HID driver sounds like attack surface to me. Kinda like keeping IE 11 around "disabled" yet deleting Opera against my wishes as a "security risk".



-Eric







---- On Sun, 21 Jul 2024 11:05:04 -0700 Eric J Bowman via illumos-discuss <mailto:discuss@lists.illumos.org> wrote ---



Yeah, I'm sure I don't need to try calling crowdstrike for assistance to know what everyone's been listening to for over a day, who has...



...about how very important your call is to us.



-Eric









---- On Sun, 21 Jul 2024 10:20:46 -0700 Gary <mailto:gdriggs@gmail.com> wrote ---



On Sun, Jul 21, 2024 at 7:44 AM Eric J Bowman  wrote:



Very interesting that the 911 reality of using the direct land-line # instead which I reported earlier this summer, is now the official advice to all residents of Alaska since Friday.






First responders are most likely using CrowdStrike on their endpoints as states, counties, & municipalities commonly deploy EPP. But they require hands on keyboard unless they’ve previously deployed Intel vPro for remote management for all their workstations. Bare metal severs typically have some kind of DRAC/iLO/ILOM capability but vPro doesn’t require a dedicated IP. It does, howver, require BIOS configuration & PKI so if you aren’t using it already it’s a longer recovery process than what’s needes right now.



So all those terminals on the wall at airports running Windows are going to need someone to plug in a keyboard to get them back online.



Good times.



-Gary
































https://illumos.topicbox.com/latest / illumos-discuss / see https://illumos.topicbox.com/groups/discuss + https://illumos.topicbox.com/groups/discuss/members + https://illumos.topicbox.com/groups/discuss/subscription https://illumos.topicbox.com/groups/discuss/T31b1065c3e307d4f-M1e6237d43966ca32f37c6baf

[-- Attachment #2: Type: text/html, Size: 8351 bytes --]