Take a look at Alex Ionescu's "Ninja's and Harry Potter" talk from NoSuchCon this year [1]. He specifically mentions he could access the FileVault key

Take a look at Alex Ionescu's "Ninja's and Harry Potter" talk from NoSuchCon this year [1]. He specifically mentions he could access the FileVault key of a machine by having physical access, and discovered two secret keys (KPPW and KPST) one of which is enabled when the input buffer is "SpecialisRevelio" [2]. It's a very interesting deck to read through. [1] http://www.nosuchcon.org/talks/D1_02_Alex_Ninjas_and_Harry_Potter.pdf http://www.nosuchcon.org/talks/D1_02_Alex_Ninjas_and_Harry_P... [2] http://harrypotter.wikia.com/wiki/Specialis_Revelio http://harrypotter.wikia.com/wiki/Specialis_Revelio