Jailbreak tool supports Apple's Mac security chip 'T2', enabling intrusion into Touch Bar etc.



'

Checkra1n ', a jailbreak tool for Apple products, now supports jailbreak of ' bridgeOS ' installed in 'T2', a security chip for Mac in version 0.11.0 beta. This allows for things like SSH access to the Touch Bar.

Hackers jailbreak Apple's T2 security chip powered by bridgeOS --Report Cyber Crime
https://reportcybercrime.com/hackers-jailbreak-apples-t2-security-chip-powered-by-bridgeos/



The T2 chip is included in all Macs released after 2020, with SSD encryption, secure boot, and features that physically disable microphone eavesdropping.

MacBook with T2 chip turned out to have 'the strongest ever' microphone eavesdropping prevention mechanism-GIGAZINE



However, an unfixable vulnerability has already been found in the 'Secure Enclave' processor, which is responsible for encryption and secure boot on the T2 chip, and theoretically it is possible to extract encrypted data. The security of the T2 chip was not an iron wall.

Unrepairable vulnerabilities found in the 'Secure Enclave' chip that secures Apple devices --GIGAZINE



This time, jailbreak by checkra1n is possible with the T series chip dedicated OS 'bridgeOS' prepared separately from macOS, and it is possible to intervene in the boot process of the T2 chip or invade the Touch Bar by jailbreak. You will be able to do it. are participating in the development of Checkra1n Qwertyoruiop says, has posted a state in which carried out an SSH connection to the Touch Bar in March 2020 to Twitter.



Also, if 'Cydia Substrate', which is the operating base of various tools on jailbroken devices, supports bridgeOS, there is a possibility that jailbreak tools for Touch Bar will be provided in the future. The latest version of checkra1n can be downloaded from the following URL.

checkra1n
https://checkra.in/

in Software,   Hardware,   Security, Posted by darkhorse_log