4 ms·
On the computers (i.e. mac mini, macbook, iMac) Apple ships an unlocked bootloader and we can just install our own bare metal code very early on using their off
by svenpeter 5y ago
On the computers (i.e. mac mini, macbook, iMac) Apple ships an unlocked bootloader and we can just install our own bare metal code very early on using their official tools.
On the iPad Pro that bootloader is locked down and running Linux on there is unfortunately very unlikely to ever be possible.
- londons_explore 5y agoBut all that's needed is a bootloader exploit...
- svenpeter 5y agowhich is not impossible but very unlikely.
- Wowfunhappy 5y agoChkm8 was the first of its kind since the early days of iOS. It's not impossible but we'd have to get very lucky.
- sudosysgen 5y agoIt would be possible, though very difficult, to turn the OS into a staging bootloader, and load another OS bare-metal from there. Still insanely difficult though.
- svenpeter 5y agoUsually, once you can run code in kernel mode it’s just a matter of bringing the hardware back to a sane state. Unfortunately, “just” running code in kernel mode is incredibly hard on the iPad. There’s e.g. a hardware mitigation that turns a memory region to read-only and also only allows kernel code to run from this region. This mitigation is locked down and cannot be disabled once XNU is running on the iPad (http://siguza.github.io/KTRR/ http://siguza.github.io/KTRR/). On top of that page tables are also protected by a “kernel within the kernel” (https://blog.svenpeter.dev/posts/m1_sprr_gxf https://blog.svenpeter.dev/posts/m1_sprr_gxf) Getting past all that is going to be very hard if not impossible.
- azalemeth 5y agoI thought the first-generation iPad pro was checkra1n-compatible? Isn't checkm8 a bootloader exploit?
- somebody_amzn 5y agoYes the first gen iPad Pro can, and the second generation one too. The target user base for Linux on those might be too small though.