3 ms·
I am not entirely sure they understand that System Integrity Protection and Secure Boot can be turned off.
by saagarjha 6mo ago
I am not entirely sure they understand that System Integrity Protection and Secure Boot can be turned off.
- deleted 6mo ago[deleted]
- btown 6mo agoMy understanding from the paper is that doing so should cause certain things in Apple's hardware security enclaves to break a signing chain, and a server-side MDM system integrated with Apple servers can detect this. But I'm not familiar with the underlying technology, so not sure if underlying assumptions are incorrect.
- saagarjha 6mo agoAFAIK that just ensures the SEP is present but perhaps they are signing the boot state now