News for hackers. Stuff that matters.
Re:MacBook Pro 13" Touch Bar 2018 Teardown by solarkraft on Monday July 16, 2018 @06:41PM (#17545803)
> Given this MacBook's non-removable storage, Apple must have a new recovery method. Any ideas?

None?

Re:MacBook Pro 13" Touch Bar 2018 Teardown by samcat116 on Monday July 16, 2018 @10:13PM (#17546795)
I work at an Apple certified repair center. Theres a tool called the "Customer data transfer tool" that connects to a certain port on a logic board thats hard wired directly into the SSD. On the other side is a USB C cable that is connected to the machine with a new logic board. This will work even if the rest of the logic board is dead, as the SSD circuitry is isolated.

You can read more about it here: https://9to5mac.com/2016/11/24/apple-special-cdm-tool-macboo...

Re:MacBook Pro 13" Touch Bar 2018 Teardown by stavrus on Monday July 16, 2018 @11:38PM (#17547114)
Unfortunately this doesn't apply for warranty repairs directly through Apple, as Apple won't bother using this port. They'll just tell you you're SoL and happily remind you of their iCloud services for backups. I had this happen to me on my 2016 TB MBP where the logic board had issues detecting the power level of the battery and wouldn't boot. I knew of the port, and asked them to use it, but their response was that the warranty would only cover like-for-like repairs and that I was responsible for backing up the data. Fair enough, except that Time Machine can and will lie to you about whether it actually backed up the data on your machine. Which is exactly what happened with my machine when I got it back and attempted a restore. Thankfully I had a separate non-Time Machine back up that I could use to bring my data back, but it wasn't fun manually restoring my OS profile and settings. I even managed to get a CS rep to confirm with me over the phone that I was not the only person to have had this happen to them.

Apologies for ranting here; I just hope I can save another person from this BS if they attempt to rely on this port. Through the entire process no Apple rep would confirm the existence of the tool so they made it seem like I was forced to use them for the warranty repair with total data loss.

If I may ask, samcat116, what's the normal procedure for handling warranty repairs at a certified repair center like the one you work at? Is it just labor cost, with parts billed to Apple? And does that include the copying of the data off the SSDs? I'm imagining for warranty repairs the easiest way to handle them is to just swap the logic boards out like Apple does and not bother doing actual diagnosing at the board level like https://www.youtube.com/user/rossmanngroup since the customer isn't paying for parts?

Re:MacBook Pro 13" Touch Bar 2018 Teardown by ac29 on Monday July 16, 2018 @11:21PM (#17547051)
The article explicitly says that port is gone.
Re:MacBook Pro 13" Touch Bar 2018 Teardown by dguaraglia on Monday July 16, 2018 @06:50PM (#17545845)
"Recovery" meaning what?

When I went to the Genius Bar because my laptop had WiFi issues, they didn't boot from the internal hard drive, they booted from an external unit that seemed to do way more than just function as a USB-external-HD.

If they mean "self-service" recovery, then I don't know that a soldered hard drive is any different from a removable one. It either works or it doesn't, if it does you can recover from a recovery partition... if it doesn't then you can't recover no matter what.

Re:MacBook Pro 13" Touch Bar 2018 Teardown by JohnTHaller on Monday July 16, 2018 @09:26PM (#17546598)
Well, if your computer dies, you take the hard drive out and plug it into something else to get your files off of it. Here, your data goes with your computer, it seems.

And, if you work with confidential information, just about any issue would make these machines disposable (even within warranty) if your organization is unable to remove the drive containing said confidential information before sending the unit in for repair.

Re:MacBook Pro 13" Touch Bar 2018 Teardown by jdietrich on Tuesday July 17, 2018 @08:00AM (#17549054)
If you work with confidential information, you should be using strong full-disk encryption. Forget about sending your device for repair - what happens if a device is lost or stolen?
Re:MacBook Pro 13" Touch Bar 2018 Teardown by JohnTHaller on Tuesday July 17, 2018 @12:21PM (#17550805)
They are using full-disk encryption. But most organizations also have policy that requires removal of the encrypted disk before sending a device offsite for repairs.
Re:MacBook Pro 13" Touch Bar 2018 Teardown by sjm-lbm on Monday July 16, 2018 @06:56PM (#17545882)
IIRC, on the 2016 MBP revision, they included a port to be used for data recovery by authorized repair centers.

They appear to have removed that port for this revision.

Re:MacBook Pro 13" Touch Bar 2018 Teardown by jonknee on Monday July 16, 2018 @07:18PM (#17546003)
It's encrypted using the T2 chip (with a key that can't be extracted) so I'm not sure what value getting a copy of the SSD would be. The 2016 MBP did not have this encryption.
Re:MacBook Pro 13" Touch Bar 2018 Teardown by userbinator on Monday July 16, 2018 @08:27PM (#17546331)
with a key that can't be extracted

I'm pretty sure it can, just that the methods are (currently) beyond the reach of DIYers.

Besides, there's probably easier ways... like tapping into the decrypted data. Like any classic DRM scheme, if you have the key and the algorithm, you can get the content. That does not make it easy, but it can certainly be done with enough effort.

Re:MacBook Pro 13" Touch Bar 2018 Teardown by jonknee on Monday July 16, 2018 @08:34PM (#17546362)
> I'm pretty sure it can, just that the methods are (currently) beyond the reach of DIYers.

That would be very huge news worth many millions of dollars as it's the critical piece of iOS device security.

Re:MacBook Pro 13" Touch Bar 2018 Teardown by TillE on Monday July 16, 2018 @10:07PM (#17546765)
Haven't people extracted keys from TPM chips with electron microscopes? I don't know if the T2 is fundamentally different in some way which would render it immune to such analysis.
Re:MacBook Pro 13" Touch Bar 2018 Teardown by selectodude on Monday July 16, 2018 @10:49PM (#17546917)
>Haven't people extracted keys from TPM chips with electron microscopes?

Once, with one brand, in 2010. And it took 9 months.

Re:MacBook Pro 13" Touch Bar 2018 Teardown by solarkraft on Wednesday July 18, 2018 @02:45AM (#17555962)
That sounds like much to me, with a 2018 mindset. Is it not pretty easy to read out a chip nowadays, even at low double digit nanometer levels?
Re:MacBook Pro 13" Touch Bar 2018 Teardown by userbinator on Monday July 16, 2018 @11:20PM (#17547049)
Something "worth many millions of dollars" will most certainly be kept very quiet by the repair industry, since it can provide recurring revenue (until someone else discovers and reports it to Apple) to an otherwise extremely repair-hostile ecosystem. Bug bounties are a one-time deal that otherwise gives no advantage to the reporter, but unlocking services are not. These people are certainly not looking for a pat on the back from Apple or wanting to make its devices more difficult to repair.
Re:MacBook Pro 13" Touch Bar 2018 Teardown by jonknee on Tuesday July 17, 2018 @01:24AM (#17547500)
Forget the repair industry, this would be NSA level interest. No one is going to repair your computer using the zero day of all zero days.
Re:MacBook Pro 13" Touch Bar 2018 Teardown by aneidon on Monday July 16, 2018 @11:55PM (#17547184)
You really think the repair industry is the one sitting on that vuln?
Re:MacBook Pro 13" Touch Bar 2018 Teardown by monocasa on Monday July 16, 2018 @06:45PM (#17545825)
Buy a new laptop?
Re:MacBook Pro 13" Touch Bar 2018 Teardown by tomelders on Monday July 16, 2018 @06:44PM (#17545812)
The T2 chip?