5 ms·
Because if you can do it, any rootkit will be able to do it too.
by xgbi 5y ago
Because if you can do it, any rootkit will be able to do it too.
- yehaaa 5y agoBut you disable SIP while booted in recover mode. Somehow Apple needs to do this anytime the system is updated.
- Wowfunhappy 5y agoNo it can't. You'd have to disable SIP temporarily in the first place, and a rootkit can't boot a recovery environment while SIP is engaged. And then on Apple Silicon Macs, entering 1TR is tied to the physical action of holding down the power button.