Re:Apple's new iPhone security setting keeps thieves out of ...
by FireBeyond on Wednesday December 13, 2023 @05:59PM
(#38635425)
Hah, no.
It's mind-bogglingly easy to bypass MDM/DEP on even a T2-enabled/Apple Silicon MacBook.
Like three minutes, and not overly complex. Without spelling it out here, null route three DNS entries, install macOS Monterey, edit /etc/hosts similarly, and then upgrade to Sonoma. You can even remove the null routing after (it's only needed to bypass network calls in the installer).
Nothing broken, no errors, 100% DEP-escaped.
I suspect that the only thing you can't do at that point is reset to the OOB experience for selling it.
It's mind-bogglingly easy to bypass MDM/DEP on even a T2-enabled/Apple Silicon MacBook.
Like three minutes, and not overly complex. Without spelling it out here, null route three DNS entries, install macOS Monterey, edit /etc/hosts similarly, and then upgrade to Sonoma. You can even remove the null routing after (it's only needed to bypass network calls in the installer).
Nothing broken, no errors, 100% DEP-escaped.
I suspect that the only thing you can't do at that point is reset to the OOB experience for selling it.