4 ms·
Mods: Title could be amended to mention that this is about imaging solutions for new Macs with Secure boot.
by josteink 8y ago
Mods: Title could be amended to mention that this is about imaging solutions for new Macs with Secure boot.
- lucb1e 8y agoAgree, but maybe the word provisioning is better. I initially interpreted the title as being about booting other OSes from Apple hardware, or perhaps a vuln in their secure boot firmware, but not about provisioning Apple hardware by booting from USB or something.
- brazzledazzle 8y agoThe security implications and what you do and don’t get out of it from a security perspective are discussed. Like you can drop a launchdaemon on it and that’s not evaluated as part of the system’s integrity. Only the boot process (for now).
- saagarjha 8y agoHow would you drop a Launch Daemon on the device if FileVault is enabled (as it is by default on all new Macs)?
- brazzledazzle 8y agoYou couldn’t disable it and reenable it?
- saagarjha 8y agoYou'd need the disk password to do that.
- brazzledazzle 8y agoI think there’s a misunderstanding here. He’s talking about modification of the Mac between Apple and the customer. I thought you were saying it’s pre-encrypted, my fault for misunderstanding.