Matthew Garrett Has a Fix To Prevent Bricked UEFI Linux Laptops 74
hypnosec writes "UEFI guru Matthew Garrett, who cleared the Linux kernel in Samsung laptop bricking issues, has come to rescue beleaguered users by offering a survival guide enabling them to avoid similar issues. According to Garrett, storage space constraints in UEFI storage variables is the reason Samsung laptops end up bricking themselves. Garrett said that if the storage space utilized by the UEFI firmware is more than 50 percent full, the laptop will refuse to start and ends up being bricked. To prevent this from happening, he has provided a Kernel patch."
more than 50 per cent full = fail is bad (Score:5, Insightful)
more than 50 per cent full = fail is bad and Samsung needs to come out with a bios update to fix that.
Re:more than 50 per cent full = fail is bad (Score:4, Funny)
Remember, if Apple hasn't done anything wrong, you can take something somebody else did, and pretend they did it even worse! That's how evil Apple is!
Re: (Score:3)
I can't help but notice a complete and utter lack of anything resembling facts in your post.
Re: (Score:2)
Remember, if Apple hasn't done anything wrong, you can take something somebody else did, and pretend they did it even worse! That's how evil Apple is!
How dare Apple flame my comments like that!
Re: (Score:1)
Get back in the cattle truck, Apple apologist!
Re:more than 50 per cent full = fail is bad (Score:5, Insightful)
Re:more than 50 per cent full = fail is bad (Score:5, Insightful)
It was probably very well intentioned - to avoid the UEFI partition becoming full and causing errors.
Are you not seeing the insanity of avoiding errors caused by being 100% full by bricking the device at 50% full?
More broadly, for what possible reason would Samsung handle UEFI storage in such a fucked-up way? How many decades now have we had computers with some sort of mass-storage device that had to be treated sanely?
Life imitates art (Score:2)
Are you not seeing the insanity of avoiding errors caused by being 100% full by bricking the device at 50% full?
Reactor explosion timer destroyed. Reactor Explosion Uncertainty Emergency Preemption Protocol activated. This facility will self-destruct in two minutes.
Re: (Score:3)
Re:more than 50 per cent full = fail is bad (Score:4, Interesting)
Something like this should never have gotten through testing. Samsung must have tested using only a single OS or a closely related family (ie, Windows) - and that is no way to test if a piece of code is going to behave under all circumstances.
Re:more than 50 per cent full = fail is bad (Score:5, Informative)
Re: (Score:2)
Something like this should never have gotten through testing. Samsung must have tested using only a single OS or a closely related family (ie, Windows) - and that is no way to test if a piece of code is going to behave under all circumstances.
Something like this should never have gotten through design. "Oh, I'm sure nothing will actually try to store nearly as much data in the nonvolatile storage region as the system offers to store, it'll be fine!" is Not a valid plan. Obviously, any finite storage device cannot fulfill arbitrary storage demands; but that's why you have a graceful way of saying 'sorry, no more space', rather than silently accepting the attempt and then falling over dead.
Re: (Score:2)
We've put error logging in our products, and had an upper limit on how much data it could write, then started a circular buffer, then beat the hell out of it to make sure it ran fine.
So, too, for basically any data storage. This was just sloppy on somebody's part.
Re: (Score:2)
You obviously aren't working on a product that is sold with no margin.
Re: (Score:2)
Unfortunately you've already got +5 insightful so I can't mod you +1 funny. Unless you weren't trying to be funny, in which case I'd mod you +1 ironic.
(Hint to people who don't get it: UEFI is a replacement to BIOS. There's no such thing as a 'BIOS' with UEFI.)
Re: (Score:2)
You have got way too much time on your hands.
Re:problem fixed? (Score:4, Informative)
No the bricked laptops are still bricked. This just stops more laptops from falling to the same bug.
That's great, but can they be fixed once bricked? (Score:3)
n/t
It depends on the cpu and the manufacturing.... (Score:3, Interesting)
procedure. Some ARM chips have bootstrap code that will talk to a usb device (i.e. looks like a serial port, sort of), and there is a program that lets you load the initial software no matter what's in flash. That usb port might just be a header or a bunch of pads on the cpu.
With other devices you have to go into a jtag port, (i.e. a header or perhaps just solder pads) load a tiny program into ram, and use THAT to program the flash.
If they build them with empty flash, there has to be a way to do the initi
Re: (Score:3, Insightful)
If they can, they weren't bricked in the first place. That's what "bricked" means.
Re: (Score:2)
If they can, they weren't bricked in the first place. That's what "bricked" means.
Yay! Can we get into an argument as to what bricked means?
I have a friend with a reflow station, so I can replace busted chips. So *your* hardware isn't *truly* bricked. Etc.
Re: (Score:2)
Yay! Can we get into an argument as to what bricked means?
Yay! Let's make it a relative term. I've got a friend who's an idiot. For him, hitting the off switch "bricks" the phone, cause he can't figure out how to fix it from that state.
Re:Bad Unified Extensible Firmware Interface...or? (Score:5, Interesting)
---The UEF Interface seems to work just fine with Win OS and iOS. How is that a bios problem?
Samsungs implementation of UEFI is the problem, not the UEFI specification. No, it's not a 'bios' problem, UEFI replaced bios, but Samsung seems to have done something odd in their implementation of UEFI.
"---Gee wonder why the great mass migration to Linux hasn't happened?
Well sure, that has always been an issue. Linux apparently isn't important enough for companies to bother testing for it, which means it only works with contrived hacks, which means no one uses it, which means companies don't think it's important enough to bother testing for it.
Re: (Score:2)
No...Bad Unified Extensible Firmware Interface (Score:5, Informative)
The UEF Interface seems to work just fine with Win OS and iOS. How is that a bios problem?
http://www.pcworld.com/article/2027819/not-just-linux-windows-can-brick-samsung-laptops-too.html [pcworld.com] No bad on Windows too.
Please don't quote other peoples comments as fact, I suggest you check out the reply to it.
As for the Mass Migration to Linux, that happened with Android, which is set to become the most installed OS this year.
Re: (Score:1, Insightful)
As for the Mass Migration to Linux, that happened with Android, which is set to become the most installed OS this year.
No. You're making the classic zealot's mistake of moving the goalposts to a different game. The "Great Mass Migration to Linux" was referring to desktop and laptops PCs, not phones, tables, or other hardware. Also note that while Android runs on the Linux kernel, it doesn't readily run GNU/Linux software.
Re: (Score:2)
As for the Mass Migration to Linux, that happened with Android, which is set to become the most installed OS this year.
That means it must be time to remove the anti-trust restrictions on Microsoft and Windows, right?
Re:Bad Unified Extensible Firmware Interface...or? (Score:5, Informative)
It's been demonstrated that this bug can be elicited from Windows as well. And Windows expects to be able to write even more info than Linux was. Linux was just the first to expose the problem by trying to use UEFI variables to hold kernel panic info (Apple does something similar). IT didn't help that the UEFI driver itself caused the kernel panic, after which the kernel writes some debug log info to the UEFI to support later postmortem analysis.
Re: (Score:1)
---The UEF Interface seems to work just fine with Win OS and iOS. How is that a bios problem?
Perhaps a car analogy will help. Imagine there is a bridge that semi trucks hit when they try to go under, but a cars and pickups do not. Without more facts, one can't really say if the problem is that the trucks are too tall or the bridge is too short. In this case, they investigated and discovered the bridge was built shorter than the bridge building rules require. The short-term fix is to post "no semi" signs and use less-tall trucks to get to the other side. The proper fix is to jack up the bridge.
Re: (Score:3)
Re:When you go Linux.... (Score:5, Informative)
You can sometimes on many "bricked" devices like linksys router bricks after borking a dd-wrt install
and on the samsung laptops as well by playing with the jtag
http://en.wikipedia.org/wiki/Joint_Test_Action_Group [wikipedia.org]
most stuff has jtag support and in some cases you can use the jtag header to unbrick a device.
I've unbricked an old WRT54GL after a screwup I did on an older dd-wrt install few years ago using jtag.
it's not something a normal user would be able to do or have confidence in doing, so yea in most cases the normal user will never unbrick.
Re: (Score:2)
I never knew that thats what JTAG stood for. Sounds much cooler than "debugging interface", more like its a team of crack hackers who spend their friday nights chilling with the DevGru (Seal Team 6) guys.
Re: (Score:2)
The name is a contrast to the Divided Test Action Group, which collapsed because of internecine squabbling that led to layoffs, punch ups in the parking lot and eventually drive by shootings.
Brian Damage, their former CTO, is currently serving fourteen life sentences in a SuperMax prison for a flame thrower revenge attack on the Floor 6.
If it's bricked... (Score:2, Interesting)
Just sue on the small claims court.
You pay like 35 pounds to issue the legal challenge, and you almost automatically win because the problem is due to a defective product.
Samsung on the other hand will have to show as represented by some lawyer, and has to pay everything.
If it doesn't show, they will get a decision by default, which is almost the same...
Why do you think companies do replace items like that instead of flatly refusing?
Because they can't afford the bad publicity and the continuously court audi
Re: (Score:2)
They largely do this because few people go through the hassle of using small claims court in the first place. It's a bit more complicated than just paying a nominal fee, though that depends on your country's laws, but it's usually worth it.
KISS (Score:3)
Re: (Score:2)
> The fix is in the wrong place.
Yes, of course, but only Samsung can put it in the right place. At least this is a workaround for people who already made the mistake of buying one of these pieces of junk.
Re: (Score:2)
Re: (Score:2)
Re: (Score:2)
Re: (Score:2)
Re: (Score:3)
It's more accurately a work-around. It's certainly in the wrong place and ultimately not "the right thing", but has the advantage that it doesn't depend on a potentially unwilling or unable party to at least get it to not brick. As such, it may be 'the best we can do without Samsung' and as such, it's useful.
It also adds a bit of shame factor. See that Samsung? Some guy sitting in his office can make your hardware work better (with Linux) than your own engineers. How sad is that?!
If that doesn't make someon
Re: (Score:2)
If that doesn't make someone at Samsung beet red in the face and desperate to release a properly corrective patch, they deserve to lose in the market.
Maybe it does, but that still doesn't mean that a fix will be coming. It's not as if developing the fix was expensive, but you've got to consider all the overhead: meetings, heavy testing procedures, etc.
Re: (Score:2)
Meetings perhaps, but clearly there's not much in the way of testing procedures if a big ugly bug like that got out. Even if there is a lot of testing and this was an anomaly, what';s the patch going to do, double dog brick the laptop?
Re: (Score:2)
Case in point: a large Luxembourgish bank [www.bcee.lu] encountered such an issue in their homebanking product (login impossible with some of the Luxtrust smartcard products). The broken version was put online beginning of June 2012 and customers were complaining already within days afterwards. Before the end of Une, it was known (by customers) what the problem was (
Why do people trust Samsung software? (Score:1)
Seriously. Anything they can write code for will be buggy, insecure and crap.
English for Slashdot editors (Score:4, Funny)
According to Garrett, storage space constraints in UEFI storage variables is the reason Samsung laptops end up bricking themselves.
Is? Is?
Re: (Score:1)
According to Garrett, storage space constraints in UEFI storage variables is the reason Samsung laptops end up bricking themselves.
Is? Is?
I think your one of them Gramer-Nazi's who is always wanting to correct other people's posting.
Just sit on you're hands for one's!
Re: (Score:2)
OpenBoot, like BIOS, was replaced by EFI years ago. The PC windows world is JUST now picking up on the EFI bandwagon that everyone else has been on for years.