3 ms·
>MacOS handles security on a partition level rather than on a system chip level Really? https://en.wikipedia.org/wiki/Apple_T2 https://en.wikipedia.org/wiki/A
by nix23 5y ago
>MacOS handles security on a partition level rather than on a system chip level
Really?
https://en.wikipedia.org/wiki/Apple_T2 https://en.wikipedia.org/wiki/Apple_T2
>>Controllers for microphones, camera, ambient light sensors and Touch ID, decoupling the main operating system's access to those.
- gjsman-1000 5y agoThis is the M1, which does not quite work like the T2 does. The partition-level system means that you could have a Full Security MacOS install (with Secure Boot equivalent, System Integrity Protection, AMFI, etc. turned on), a Permissive Security MacOS install (no Secure Boot, SIP, or other measures, or some on and some off), and a Linux install all dual-booting on the same system. Unlike other architectures, there's no "this chip is in full security mode or no security mode," like unlocking the bootloader on Android, where the entire system is secure or insecure. On the M1, you can just have OS installs with different security.
- pram 5y agoVery interesting info, thanks! Do you know if all the partitions would be encrypted via hardware, like the T2 does? (by that I mean even a Linux partition)
- marcan_42 5y ago> Really? M1 macs are not T2 macs, nor does that have anything to do with the issue at hand. What the parent means is that it's not like Android where you "unlock your bootloader" and it's global and locks you out of certain features. The Apple Silicon secure boot mode is per OS install, so installing Linux does not taint your macOS security (i.e. you can still use iOS apps and watch Netflix in 4K on macOS).