Ticket #5680 (reopened defect)
G1G1 laptops are shipping with "security" enabled
|Reported by:||gnu||Owned by:||jg|
|Priority:||high||Milestone:||8.2.0 (was Update.2)|
|Keywords:||firmware, security, G1G1||Cc:||wmb@…, mstone, krstic, holt|
|Action Needed:||never set||Verified:||no|
|Deployments affected:||Blocked By:|
There is no reason to have DRM enabled in the manufacturing tags of G1G1 laptops, yet they are apparently being shipped this way. This requires each recipient to request a development key before they can run unapproved open-source software on their laptop.
For example, in #4286, Mako stated: "...the anti-theft system will not be deployed for the G1G1 laptops...".
One of the standard problems with DRM is that it creeps from the places where it's wanted, into places that don't want it or where the owner actively dislikes it. TiVo owners periodically report that some TV shows are marked as "don't save", despite the avowed intent of that feature to be latent and disabled (til later!); see
OLPC's firmware "security" was pitched as an "anti-theft" solution, ONLY for countries that require a machine stolen from the schools to become a brick. But here it is on laptops bought for individuals, who neither asked for nor require "protection" from themselves! OLPC's DRM can be disabled, which makes this non-fatal, but OLPC users should not have to jump through that hoop.
My G1G1 laptops will probably be shipped in late January, and I hope not to receive DRM'd units. I bought these laptops with the expectation and assurance that they were at least as open as white-box PC clones that will boot whatever software you throw at them. If this bug is caused by a bad manufacturing tag setting at the factory, the fix should be rolled into ongoing production.