Secure Boot in the Era of the T2

Re:Secure Boot in the Era of the T2 by nneonneo on Thursday November 22, 2018 @12:15AM (#18508011)

The likely problem is a lack of driver support for using the T2 as an SSD controller. I don’t think, based on Apple’s white paper, that they did anything to explicitly block Linux from accessing the internal SSD - it just needs to go through the T2 for that.

Hopefully someone is working on the necessary driver support - these laptops are still very new so maybe nobody has gotten around to it yet.

[ Parent | on HN ]

Re:Secure Boot in the Era of the T2 by michaelmrose on Thursday November 22, 2018 @03:03AM (#18508572)

Apple is actively blocking unsigned software from accessing the internal storage as a security measure and providing no means to add allowed keys. Its possible there is a defect in this security that could be exploited but it would be explicitly a bug and would be liable to be patched in the next version of the software. You have completely misread the situation. This is apple taking over your machine while still expecting you to pay for it.

[ Parent | on HN ]

Re:Secure Boot in the Era of the T2 by yeloboy on Thursday November 22, 2018 @03:37AM (#18508700)

Not if you disable secure boot. Imo they're probably right about Linux not being able to talk to T2. We'll see about that, I guess.

[ Parent | on HN ]

Re:Secure Boot in the Era of the T2 by saagarjha on Thursday November 22, 2018 @12:44AM (#18508115)

Yes, the issue is that Linux doesn’t know how to talk to the SSD, not Apple stopping Linux from accessing the SSD.

[ Parent | on HN ]