236K views · Mar 25, 2024 · 59:23 · 2 HN recommenders · 6 mentions · discussed 2024–2026
Cathode Ray Dude covers two bizarre HP 'Quick Start' features: QuickLook, an offline email client built on EFI firmware, and Daystarter, which hijacks the Windows boot process. It includes an explanation of EFI applications and why HP built these things.
Why Hacker News points people here: Cited as a deep, entertaining look at firmware-level software and vendors abusing pre-boot access.
“a brief history of quick boot operating systems and UEFI”HN comment, 2024
“a brief history of quick boot operating systems and UEFI”
Brief history of quick boot operating systems and UEFI.
I think this might be the video you're talking about, in case anyone is also interested in a brief history of quick boot operating systems and UEFI: this video
“Multiple examples from the excellent Cathode Ray Dude”
Examples of BIOS writers abusing firmware access.
> Hopefully the BIOS writers do not abuse this Unfortunately, they have. Multiple examples from the excellent Cathode Ray Dude: link this video
“also goes into some even weirder stuff they did”
Covers HP QuickLook, an email client built into firmware, and weirder stunts.
This instantly made me think of a recent video by the Cathode Ray Dude, talking about HP's 'email client' (read: Outlook Plugin) "QuickLook" which was a shipped product implemented this way: this video (also goes into some even weirder stuff they did). This does the hard bit of networking that QuickLook skipped though.
Cited as a footnote for a 'Bob needs a bonus' feature.
"Public API" doesn't mean you can't change the API, nor does it limit how quickly extensions or new versions can be added to that API. It just means you have to actually inform people of what you're changing and when. If a client application refuses to implement functionality, that's on them, not the original developer. If I want the new feature, I'll switch. These days however, new features nowadays are usually things I don't want. Not strictly outright anti-features, but usually completely pointless "Bob needs a bonus[0]" changes that lets a middle manager put something good in their promo packet. The whole reason why people want compatible file formats and third-party clients is specifically so we can dictate to the originator of those formats and protocols how and how fast they can iterate on their products and limit how bad they can deliberately make them to increase profits. [0] this video
“HPs Daystarter, which uses ring -1 to hijack the windows boot process”
Shows HP Daystarter using ring -1 to hijack Windows boot.
I found out about these through CRD's video about the horrors of HPs Daystarter, which uses ring -1 to hijack the windows boot process and display its own stuff instead of the boot screen. ( this video )
“the offline email client HP built on EFI”
Covers HP's offline email client built on EFI.
That would be amazing. This reminds me of the offline email client HP built on EFI. Cathode Ray Dude - this video
