rickmark here: Sorry no, that's inaccurate. The T2 provides MacEFI.im4 to the In... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		penwellr on Oct 13, 2020 \| parent \| context \| favorite \| on: Plug’nPwn – Connect to Jailbreak rickmark here: Sorry no, that's inaccurate. The T2 provides MacEFI.im4 to the Intel processor by emulating a flash controller over eSPI. So by modifying this file, and removing signature checks you can run any payload you like (see the EFI replacement video)

MuffinFlavored on Oct 13, 2020 [–]

So there is some kind of signature defeat involved, correct?

h0m3us3r on Oct 14, 2020 | [–]

Yes, sigchecks had to be patched out of the kernel. And yes, it does not persist T2 reboot, but T2 only reboots if you hold power button for 5 sec. MacOS "reboot" does _not_ reboot T2.

Consider applying for YC's Summer 2026 batch! Applications are open till May 4
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact