Apple's T2 custom secure boot chip is not only insecure – it cannot be fixed without replacing the silicon

Apple's T2 custom secure boot chip is not only insecure – it cannot be fixed without replacing the silicon

Apple's T2 security chip is insecure and cannot be fixed, a group of security researchers report.


Over the past three years, a handful of hackers have delved into the inner workings of the custom silicon, fitted inside recent Macs, and found that they can use an exploit developed for iPhone jailbreaking, checkm8, in conjunction with a memory controller vulnerability known as blackbird, to compromise the T2 on macOS computers.


The primary researchers involved – @h0m3us3r, @mcmrarm, @aunali1 and Rick Mark (@su_rickmark) – expanded on the work @axi0mX did to create checkm8 and adapted it to target the T2, in conjunction with a group that built checkm8 into their
Support the originator by clicking the read the rest link below.