HackerTube

Quick Start, Episode 7: Crimes... And Felonies.

Cathode Ray Dude - CRDRecommended by 2 HN commenters across 2 months, 2024–2026
YouTube
documentary · intermediate · evergreen · 2024–2026 on HN

Cathode Ray Dude covers two bizarre HP 'Quick Start' features: QuickLook, an offline email client built on EFI firmware, and Daystarter, which hijacks the Windows boot process. It includes an explanation of EFI applications and why HP built these things.

Cited as a deep, entertaining look at firmware-level software and vendors abusing pre-boot access.

6 comments from Hacker News

@nhubbard2026-02 · in “I Ported Coreboot to the ThinkPad X270”

> Hopefully the BIOS writers do not abuse this Unfortunately, they have. Multiple examples from the excellent Cathode Ray Dude: link ▶ this video

Recommends View on HN
@jwoglom2024-04 · in “An IRC client in your motherboard”

I think this might be the video you're talking about, in case anyone is also interested in a brief history of quick boot operating systems and UEFI: ▶ this video

Recommends View on HN
@prettyStandard2024-10 · in “New iMac with M4”

That would be amazing. This reminds me of the offline email client HP built on EFI. Cathode Ray Dude - ▶ this video

@voidUpdate2024-08 · in “Negative Rings in Intel Architecture”

I found out about these through CRD's video about the horrors of HPs Daystarter, which uses ring -1 to hijack the windows boot process and display its own stuff instead of the boot screen. ( ▶ this video )

@kmeisthax2024-06 · in “Microsoft breached antitrust rules by bundling Teams and Office, EU says”

"Public API" doesn't mean you can't change the API, nor does it limit how quickly extensions or new versions can be added to that API. It just means you have to actually inform people of what you're changing and when. If a client application refuses to implement functionality, that's on them, not the original developer. If I want the new feature, I'll switch. These days however, new features nowadays are usually things I don't want. Not strictly outright anti-features, but usually completely pointless "Bob needs a bonus[0]" changes that lets a middle manager put something good in their promo packet. The whole reason why people want compatible file formats and third-party clients is specifically so we can dictate to the originator of those formats and protocols how and how fast they can iterate on their products and limit how bad they can deliberately make them to increase profits. [0] ▶ this video