7 ms·
The overview document makes for an interesting read. Definitely worth referencing next time someone on HN or elsewhere claims Apple's trying to lock down their
by macintux 4y ago
The overview document makes for an interesting read. Definitely worth referencing next time someone on HN or elsewhere claims Apple's trying to lock down their computers to running macOS only.
https://github.com/AsahiLinux/docs/wiki/Introduction-to-Apple-Silicon https://github.com/AsahiLinux/docs/wiki/Introduction-to-Appl...
- reaperducer 4y agoImportant bit: Apple gives users explicit permission to run their own OS in their EULA.
- jaimex2 4y agoIts not like it would matter if they didn't. It's your hardware.
- ChuckNorris89 4y agoTell that to Nintendo.
- Forgeties79 4y agoIt’s baffling how outright hostile Nintendo sometimes can be to its most devoted fans. And it’s not even new - they’ve gotten away with it since the moment they stepped into video games.
- MBCook 4y agoIt’s not baffling at all. That’s what kept them alive. In Japan the Famicom was open, and it got flooded with junk like the Atari 2600 did. This threatened the same problems as Atari ran into. The Famicom Disk System relied on a strange copyright check on the physical disks to make them harder to pirate. It worked better than nothing, but not perfectly. The NES came out after the disk system but before the first mapper chips (which Nintendo controlled tightly for a few years) in 1985. By that time they had been through the problems in Japan and seeing what happened in America with the Atari crash Nintendo, rightly, knew they couldn’t let it happen again in America. They needed to show their console wouldn’t be full of complete trash, so they used the lockout chip to ensure all publishers had to through them. It’s a big part of why they were successful and able to reinvigorate the US market. It worked until the chip was cracked later in the console’s lifecycle. But by then the threat passed, the NES was safely ensconced. They’ve never forgotten that lesson. (No comment on fans)
- musictubes 4y agoAll the best games for the 2600 were by third parties. There were very few good Atari games and none of them came close to the quality of the best third party games. Pretty sure it was Atari's own horrible ET game that sank them, not other companies.
- philistine 4y agoPretty sure doesn’t cut it. You’re wrong. It wasn’t as easy as OP make it out to be, that the glut of third-party games killed the 2600, but it wasn’t Atari’s own games who cratered the price of a 2600 title and took the whole console market down.
- Forgeties79 4y agoE.T. was just one more line item on a massive list of reasons for why the video game industry imploded on itself with Atari standing pretty much dead center of the blast zone.
- Forgeties79 4y ago> Nintendo, rightly, knew they couldn’t let it happen again in America. They needed to show their console wouldn’t be full of complete trash, so they used the lockout chip to ensure all publishers had to through them. It wasn’t just about protecting the brand, it was also every bit about collecting money at every single step of the production pipeline. They were able to not only have some better QC, but they were able to literally tell developers “no, you cannot make your game for anyone else. If you do, you’re not allowed to make it for the Nintendo, and that sucks for you because we have ~80% of the market.“ They did it so they could enforce what was functionally a monopoly on the games industry. Sega went to great lengths to undo Nintendo‘s grasp, and ultimately they weren’t even successful - they got a notable carve out of the market but it was still Nintendo’s industry. It took Sony going on a revenge tour (touting their CD format and wildly generous/unsustainable licensing deals) after Nintendo backstabbed them to finally dethrone Nintendo and end the norm that was their walled garden/top down control of the console games world.
- est31 4y agoOn a technical level, you can't install third party OSs without accepting the EULA first. Whether such acceptance has legal meaning, I don't know, and it probably depends on jurisdiction.
- sgjohnson 4y ago> On a technical level, you can't install third party OSs without accepting the EULA first. You absolutely can (no EULA when booting into recovery partition), and I’m also fairly sure that acceptance would be legally void, as it only applies to the software. The hardware you own, it’s not licensed to you. And thanks to the first sale doctrine, there’s nothing stopping someone from starting to sell M1/M2 MacBooks running Asahi commercially.
- est31 4y agoI base this upon what I read in OP. From OP: > You do have to click through Apple's EULA in order to use the machines at all. > Owner control is asserted on first boot (you become machine owner by going through the macOS setup flow and creating the first admin user). > The SEP maintains a database of machine owner users. The first such user is created when the user goes through the macOS boot flow on first startup from a factory-fresh state (or after a full DFU wipe). Subsequent machine owners can only be created by authenticating with an existing owner's credentials. > Permissive Security allows for ~all security features to be disabled, and third-party kernels to be installed. No phoning home is required. Downgrading to Permissive Security requires booting in 1TR paired to the specific OS involved, and authenticating using machine owner credentials. It seems to me that you can boot into the recovery partition but in order to be able to boot Linux, you need to authenticate using machine owner credentials, which you only get if you go through setup of the OS, for which you need to accept the EULA. However, on the good news front, OP also writes that no internet access is required for any of these steps.
- owow123 4y ago"On a technical level..." Sorry, what? Does buying a device from Apple contractually oblige me to turn on the phone and agree to the EULA on "first run"? What about second hand markets? What if I was smart / tooled up enough to replace the Iphone flash storage with my own OS (without running "first run")? At what "technical level" would what your saying make any sense? Because it seems far more like a "contractual condition of purchase" (I appear to have made that term up) issue vs a "technical" issue to me.
- userbinator 4y agoIndeed, the fact that it even has to do so is the important bit, and reflects the attitude of such companies (and to a certain extent, the government) today.
- VogonPoetry 4y agoBooting Apple Silicon has strong cryptographic protections for all of the boot components. An alternate view on the EULA is that it is a legal statement that nobody can get into trouble with any DCMA stupidity if they want to boot their own OS. Contrast this with the Playstation 2 debacle, where you were only allowed to boot Sony's Official Linux. Which they then attempted to disable / withdraw when it was used to attack other parts of the Playstation copy protection system. Apple has also provided a way for ARM Linux VMs to use Rosetta2 for Intel binaries. So they are clearly aware of the wants, needs and usefulness of running other OSs. The cynical might say this was only done to support some internal project that uses Docker, but why put in the effort to make it available to everyone? The current situation does not preclude providing assistance in the future - Apple still hasn't finished replacing all of the Intel products.
- amelius 4y agoYeah but they don't provide the documentation to reliably run said OS, so good luck with that.
- Teknoman117 4y agoThere is a huge difference between not physically locking people out of running custom software and legitimately being able to claim you support other operating systems. Requiring that a community exist that is willing to spend many years of collective time reverse engineering your products when you could have just released documentation is still a massive middle finger to everyone. The problem with these 100% vertically integrated stacks is that every hardware release could be completely different and it'll take years to catch up with just that release. In the intervening time more hardware generations were released - It's been 18 months since the M1 release. Asahi doesn't have 3D acceleration, video encode/decode acceleration, or support for many of the things that make Apple Silicon any good (i.e. the fixed function / low power consumption hardware for the majority of user tasks). At this rate it's going to be years before it's "done" and we already have a successor generation of hardware. I'll leave you with a quote from the Asahi docs > Development for an undocumented platform is a treadmill of work. Every new feature requires reverse engineering the relevant hardware, writing drivers, testing those drivers, then getting them upstreamed. Even after a driver is upstreamed, maintenance and optimisation is sometimes required, for example if Apple introduce a breaking change to any firmware we are required to interface with. For developers the work is never really done It's the same reason we don't have third-party images for most Android phones that are anything beyond tweaks of existing Android images.
- iseanstevens 4y agoIt’s been 18 months on an entirely new platform and a small team of (BRILLIANT) people did such a good job discovering and porting to undocumented hardware that it worked on the M2 hardware essentially before it started shipping. I don’t think Apple is trying to get in their way. Also… developing for documented hardware is also an endless treadmill of work as it evolves/new products are released. It just has much less uncertainty. I 100% agree it would be awesome if Apple released full documentation. Broadcom too. Probably others. (All IMHO)
- Teknoman117 4y ago> small team of (BRILLIANT) people I wasn't trying to take anything away from them at all. It's astounding what they're accomplishing but the fact that it's necessary for this situation to exist at all is what I'm mainly commenting about.
- dang 4y agoDiscussed (a bit) here: AsahiLinux's Introduction to Apple Silicon - https://news.ycombinator.com/item?id=30699794 https://news.ycombinator.com/item?id=30699794 - March 2022 (5 comments) Edit: I think it makes sense for us to change the URL from https://github.com/AsahiLinux/docs/wiki/Apple-Silicon-Subsystems https://github.com/AsahiLinux/docs/wiki/Apple-Silicon-Subsys... to this. Lists of other pages tend not to make good HN submissions—as HN itself is already a list of pages, it's too much indirection. It's better to submit the most interesting element of the list. If there's a more interesting page than the overview one, we can change the above URL again.
- flyinghamster 4y agoI'm a lot less worried about Apple closing off alternate operating systems than I am about not being able to replace the SSD when it inevitably dies. I'd dearly love a Mac Studio, but not if it's guaranteed to become an expensive paperweight for lack of serviceability. I routinely keep computers 10+ years, and unless Apple's SSD can last that long without babying it to a ridiculous degree, it's a non-starter. As someone who grew up with an Apple II+, this "no user serviceable parts inside" mentality has infuriated me about Apple since 1984, so this is nothing new. I've long wanted to love Apple products, but that footgun just has to come out. But I'll give Apple a great deal of credit that they have (even if unofficially) helped rather than hindered the Asahi project. Make a Mac that uses off-the-shelf SSDs at the very least (RAM is a second rant), and I'd be in "shut up and take my money" mode.
- OleksiiA 4y agoSome kind of workaround for this might be an external bootable SSD, with 40 Gbp/s theoretical bandwidth there should be no limitation from that side at least. Just create a bootable SSD before this machine's SSD dies
- philistine 4y agoArm Macs require the internal hard drive to boot. It loads its booting sequence from the drive, even if it is set to default to an external drive for its OS.
- pram 4y agoThe Studio actually has removable NAND cards though, like the Mac Pro.
- flyinghamster 4y agoThat's good to hear, at least, and it made me look deeper. It's not your standard SSD, but it is replaceable, with caveats. In particular, don't expect your SSD to boot in someone else's Mac unless you wipe it. Still, this a much more palatable proposition than soldered-in storage. Just be sure you get the RAM you need, because there's no upgrading it. https://arstechnica.com/gadgets/2022/03/explaining-the-mac-studios-removable-ssds-and-why-you-cant-just-swap-them-out/ https://arstechnica.com/gadgets/2022/03/explaining-the-mac-s...
- bitwize 4y agoApple is playing coy. Their stance is probably something like "Macs are designed to run macOS... but yeah, this is our general purpose computer line and we can't afford the PR hit we'd get by locking them down. Yet."
- macintux 4y agoWere that their attitude they’d be doing less to make it possible today.
- eyelidlessness 4y agoThis is bonkers paranoid. Don’t ask me, reference the article linked above by one of the most prominent Linux distros on aarch64 Macs. The author is clearly qualified when clearly stating that the stance is not this nefarious.
- musictubes 4y agoYou can't have a good development machine that is locked down. As long as Apple wants people to write software they will have to have at least one open platform.
- School-Cotton 4y agoThat’s just not true. Tons of people use a Mac as a software development machine and virtually zero of them install a non-macOS operating system. All it has to do is run Docker and people will continue developing Linux software on it. That said I don’t think Apple is planning on locking down macs, simply because they have never done so (at least not in the modern era), whereas they have always done so with i-devices. Sure there’s always a chance they could change one practice or the other but there’s no good reason to believe they will.
- philistine 4y agoNot only a PR hit. We now have legislation that will force Apple to open up their iPhone. Your cynical take that Apple is waiting to do it is a mistake; they’re losing control of the iPhone as we speak because they locked it down too much.
- novok 4y agoThis is pretty impressive and a great improvement over the current x86 status quo as far as freedom and security goes. All that is left is a way to stop the phone home when you need to do a DFU restore if you set up the 'restore server' first as an owner when you first set up the device. I think corporations and other large organizations would find that end to end assurance useful. Also would be part of removing the dependence from apple to do activation locks and MDM for corps and nerds who want full ownership over their devices. Or some sort of offline DFU restore mode for people who need the ability to do airgapped / isolated updates and wipes. But I also see how that can be leveraged in bad ways by some governments and thieves, so looking at the system balance they chose where a very small lynchpin moment requires phone home is and understandable compromise, even though I don't agree with it fully.. I wonder if the phone home could be done behind VPNs and such, or does it block that?
- webmobdev 4y agoWe should all be grateful for the time and passion the Asahi Linux (AL) team of hackers have invested in documenting (ugh, the most boring job!) and reverse-engineering the Apple Silicon Macs to port Linux to it. If you do plan to buy an Apple Silcon Mac M1 / M2 though, I'd suggest you rather hold off that and instead donate some money to the Asahi Linux team here - https://asahilinux.org/support/ https://asahilinux.org/support/ instead. Despite the progress made by the AL team, the simple fact remains that these Apple Mac M1/M2 platforms can only run crippled versions of other OS, and macOS still remains the only usable OS on it. More donations to the AL team can fix this faster, and not buying these Macs will also put pressure on Apple to further delay locking down these systems more and / or (one can dream!) even force them to release more hardware literature to provide bare minimum support for alternate OS development. Donating even a small sum to AL would be money well spent compared to giving your money to a trillion dollar company that isn't bothered to support system developers. Note that the opaque and closed nature of the Apple Silicon platform (unlike AMD / Intel or other ARM CPUs that support a plethora of OSes and allow their development) hugely constrain our consumer rights, right to repair and computing freedom. > Definitely worth referencing next time someone on HN or elsewhere claims Apple's trying to lock down their computers to running macOS only. I do say this often here vocally that with Apple Silicon Apple does plan to lock down the Mac platform in the future. The key point though is that it will happen only once the Apple Silicon Mac platforms reach a critical level of adoption. Technically, it is trivial now for them to lock the bootloader and completely lock down every mac with a firmware update. But commercially it is not yet a viable move for them as the backlash to such a move would generate a lot of bad PR that would hurt the sale and adoption of the ARM Macs. Apple learnt that lesson when they introduced the Mac Minis with soldered RAM and SSDs - it was the worse selling Mac Mini model, and they were forced to step back, slowdown and reintroduce another model with removable RAMs. The pattern of how Apple has been increasingly locking down the Mac platform is evident: 1. The first few Intel Mac Minis allowed you some level of customisation of both the hardware (change RAM or HDD / SSD) and software (install other full featured OS). 2. Then came the Mac Minis with soldered RAM and SSD. You could no longer customise the hardware. Software was still customisable and you could still install other OSes. (Recall that Apple even offered free drivers for another OS, i.e. Windows). 3. The current generation of M1 Mini now doesn't allow you to customise both the hardware (everything is soldered) and the software. Technically you can install other OSes, but the reality is that currently only crippled versions of Linux and xBSD is available and practically the only full-featured OS that can run on it is still macOS. With the Apple Silicon ARM chips in the Mac, Apple is now only ONE step away from locking the bootloaders of Apple Silicon Macs any time to make it a completely closed platform like the iPhones / iPads. It has been evident that Apple has been planning this for years. It's the old - https://en.wikipedia.org/wiki/Boiling_frog https://en.wikipedia.org/wiki/Boiling_frog - trick to lull its users into not realising how their rights are slowly being encroached, while Apple marketing comes up with new ways to sell you the idea that locking down the system is for your own good. These are very clear indicators of how Apple has been working slowly to lockdown the Mac platform like their ios platforms. The reason for this is simple - BigTech are increasingly moving towards selling everything as a service. Services - https://news.ycombinator.com/item?id=32269915 https://news.ycombinator.com/item?id=32269915 - are more profitable because it means they create recurring income (even after the device is sold) which means more profits. And Apple's successful business model for this, that earns them billions of dollars, is the closed-platform modelof the iPhones / iPads (which ofcourse, are also powered by the same Apple Silicon but with locked bootloaders). Such closed system also help in planned obsolescence that increase sale.
- GeekyBear 4y ago> Definitely worth referencing next time someone on HN or elsewhere claims Apple's trying to lock down their computers to running macOS only. The Asahai Linux lead Has addressed this directly today. >Okay, it's been over a year, and it's time to end the nonsense speculation. I have heard from several Apple employees that: 1. The boot method we use is for 3rd-party OSes, and Apple only use it to test that it works, because 2. It is policy that it works. Apple didn't "leave the door open" for 3rd party OSes. Apple explicitly engineered 3rd party OS support in, and it is a hard policy requirement that it continue to work. Publicly documented feature; Openly improved over time; Multiple employees confirm it's for us, not for Apple; Multiple employees confirm it's staying by policy. https://twitter.com/marcan42/status/1554395176025849856 https://twitter.com/marcan42/status/1554395176025849856