News for hackers. Stuff that matters.

A comment on Is macOS’s new XProtect behavioural security preparing to go live?. Parent comment

Re:Is macOS’s new XProtect behavioural security preparing to... by watermelon0 on Monday September 04, 2023 @01:26PM (#37382700)
Do you have any evidence to support this?

macOS @ M1 boot process looks similar to that of iOS devices: https://support.apple.com/en-gb/guide/security/secac71d5623/...

Under the assumption that SIP is not disabled, and computer doesn't have any 3rd party kernel extensions installed (both of which are safe to assume for most people), it's close to impossible to inject something in the boot chain.

---

I think the best possible option might be to replace the keyboard with the one with a hardware keylogger, and record the actual password.

[ Parent | on HN ]
Re:Is macOS’s new XProtect behavioural security preparing to... by anthk on Monday September 04, 2023 @05:40PM (#37385372)
Yes, that option with the keyboard would be the easiest option. See? The point on encrypting your whole disk is not to avoid tampering, but to lock your machine in public places and be sure that no one can access your data upon placing that disk in another machine, or even trying to boot it.
[ Parent | on HN ]